executing program 2: 04:12:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x13) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:27 executing program 0: 04:12:27 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:27 executing program 2: [ 1262.522002][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.529898][T17925] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:27 executing program 2: [ 1262.609375][T17925] device bridge0 left promiscuous mode 04:12:27 executing program 2: 04:12:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1}) 04:12:27 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f0212fe01b2a4a280930a06000003004306910080fe0b000f0035020000140000001900154002000001d40000dc1338d54400009b84136ef75afb83de44110016000d0005000000060cec4faba7d4", 0x55}], 0x1, 0x0, 0x0, 0xfe03000000000000}, 0x0) 04:12:27 executing program 2: [ 1263.278869][T17937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.286038][T17937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.293495][T17937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.300717][T17937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.336842][T17937] device bridge0 entered promiscuous mode [ 1263.347458][T17948] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 1263.366080][T17948] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 1263.375619][T17948] IPv6: NLM_F_CREATE should be specified when creating new route 04:12:28 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x0, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:28 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:28 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x1}) 04:12:28 executing program 2: 04:12:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setresgid(r1, r2, r3) fadvise64(r0, 0x0, 0x6, 0x4) ppoll(&(0x7f00000001c0)=[{r0, 0x18}], 0x20000000000002c2, 0x0, 0x0, 0x2ce) [ 1263.384474][T17948] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 1263.448078][T17948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1263.455406][T17948] IPv6: NLM_F_CREATE should be set when creating new route [ 1263.462713][T17948] IPv6: NLM_F_CREATE should be set when creating new route 04:12:28 executing program 2: 04:12:28 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10200, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) [ 1263.495103][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.503037][T17969] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:28 executing program 0: [ 1263.573929][T17969] device bridge0 left promiscuous mode 04:12:28 executing program 2: 04:12:28 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:28 executing program 0: 04:12:28 executing program 2: 04:12:29 executing program 0: 04:12:29 executing program 2: 04:12:29 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1264.275299][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.282496][T18015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.290575][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.297693][T18015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.313664][T18015] device bridge0 entered promiscuous mode 04:12:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x0, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:29 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x1}) 04:12:29 executing program 0: 04:12:29 executing program 2: 04:12:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)="65d20fb093b3638dc296c314f20387b42d07362d284f9ae1d39c2be18aa8736413b9b2d264eea2c79bd1400197ca0ca2443364959d7316497d528dad1e39d060ad1b50ac58798078b8edc276d2f22d8b5e80eb6651926a1fb4d54acc9fa85df6ca392ae39854a8065c43075e06a5971401ad244f1f9030573220164b3e2c3fb43e2ab23af5c72f45b81316755578eef1ff0f216b697d38c4649c76f7640d1e7c421a60938d9e952d87bdd2e208bdfea9409a1c3a484107c6de7a13dde2cbf58eecb233585236a7bb31c64abb7d7c") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:29 executing program 2: [ 1264.525385][T18112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.533937][T18112] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:29 executing program 0: [ 1264.577098][T18112] device bridge0 left promiscuous mode 04:12:29 executing program 0: 04:12:29 executing program 2: 04:12:29 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:29 executing program 2: 04:12:29 executing program 0: [ 1265.294726][T18120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.301958][T18120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.309402][T18120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.316519][T18120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.331363][T18120] device bridge0 entered promiscuous mode 04:12:30 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:30 executing program 2: 04:12:30 executing program 0: 04:12:30 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:30 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x600, 0x0, 0x0, 0x1}) 04:12:30 executing program 0: 04:12:30 executing program 2: [ 1265.475489][T18153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.483724][T18153] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:30 executing program 2: 04:12:30 executing program 0: [ 1265.549298][T18153] device bridge0 left promiscuous mode 04:12:30 executing program 2: 04:12:30 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:31 executing program 0: 04:12:31 executing program 2: 04:12:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1266.232835][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.240167][T18166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.247568][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.254795][T18166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.263943][T18166] device bridge0 entered promiscuous mode 04:12:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x1200, 0x0, 0x0, 0x1}) 04:12:31 executing program 2: 04:12:31 executing program 0: 04:12:31 executing program 2: [ 1266.477070][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.485041][T18204] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:31 executing program 0: [ 1266.522934][T18204] device bridge0 left promiscuous mode 04:12:31 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:31 executing program 2: 04:12:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:32 executing program 0: 04:12:32 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x3f00, 0x0, 0x0, 0x1}) 04:12:32 executing program 2: [ 1267.198863][T18208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.206068][T18208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.213513][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.220654][T18208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.228342][T18208] device bridge0 entered promiscuous mode [ 1267.235111][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:12:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x200000, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000004c0)=""/103) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x49, "0d1145b4119c152c09e256129f0cb565ee88ae3fcf7e8940a70db46c007be13e9c7576f021efd50682657b64f4dc5343d0c8e76e81148f715a270e5e66ef1405cca39108f0acf8af20"}, &(0x7f0000000200)=0x51) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x40}, &(0x7f0000000280)=0x8) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x14900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x4901) 04:12:32 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:32 executing program 0: 04:12:32 executing program 2: [ 1267.389725][T18235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.397833][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.424362][T18235] device bridge0 left promiscuous mode 04:12:32 executing program 2: 04:12:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x121840, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xfffffffffffff000, 0x4}, 'port1\x00', 0x94, 0x40040, 0x7, 0x4, 0x4, 0xaf, 0x4, 0x0, 0x2, 0x4}) 04:12:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x5}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8, 0x1}, 0x1}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xfffffffffffffffa) ioctl(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x0, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 1268.186630][T18247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.193850][T18247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.201322][T18247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.208462][T18247] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:33 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:33 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:33 executing program 2: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000000200001f01000000fc0081c9130001000000000050000000586700a28663b3", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 04:12:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:12:33 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x1000000, 0x0, 0x0, 0x1}) [ 1268.257065][T18247] device bridge0 entered promiscuous mode 04:12:33 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1268.460441][T18388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.468474][T18388] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0xa080, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000001440)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1268.532153][T18388] device bridge0 left promiscuous mode 04:12:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:12:33 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:12:33 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 1269.398662][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.405762][T18402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.413306][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.420430][T18402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.478010][T18402] device bridge0 entered promiscuous mode 04:12:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:34 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:34 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x1}) 04:12:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3f, 0x40) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:34 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1269.693673][T18550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.701131][T18550] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:34 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1269.757184][T18550] device bridge0 left promiscuous mode 04:12:34 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:35 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x6000000, 0x0, 0x0, 0x1}) 04:12:35 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:35 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1270.564689][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.572067][T18579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.579550][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.586745][T18579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.649102][T18579] device bridge0 entered promiscuous mode 04:12:35 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:35 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1270.781881][T18662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.789285][T18662] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:35 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x12000000, 0x0, 0x0, 0x1}) [ 1270.953352][T18664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.960702][T18664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.968243][T18664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.975551][T18664] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:35 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1271.029399][T18664] device bridge0 entered promiscuous mode 04:12:36 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:36 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1271.408544][T18700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.416758][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.456615][T18700] device bridge0 left promiscuous mode 04:12:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1271.733170][T18702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.742113][T18702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.750047][T18702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.757425][T18702] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:36 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x3f000000, 0x0, 0x0, 0x1}) [ 1271.777997][T18702] device bridge0 entered promiscuous mode 04:12:36 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:36 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x0, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1271.953911][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.962681][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.975011][T18815] device bridge0 left promiscuous mode 04:12:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1272.234033][T18818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.241725][T18818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.249297][T18818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.256950][T18818] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:37 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x7ffffffffffff, 0x0, 0x0, 0x1}) 04:12:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffc}], 0x1, 0x0, 0x0, 0xffffffffffffff02) [ 1272.332886][T18818] device bridge0 entered promiscuous mode 04:12:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:37 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1272.582457][T18953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.590705][T18953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.624737][T18953] device bridge0 left promiscuous mode 04:12:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1272.878448][T18956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.886220][T18956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.893783][T18956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.901763][T18956] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1272.953535][T18956] device bridge0 entered promiscuous mode 04:12:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x0, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1273.094158][T18984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.102560][T18984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.126429][T18984] device bridge0 left promiscuous mode 04:12:38 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x100000000000000, 0x0, 0x0, 0x1}) 04:12:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:38 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) 04:12:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1273.679874][T18986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.688165][T18986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.695559][T18986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.702756][T18986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.812409][T18986] device bridge0 entered promiscuous mode 04:12:38 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:38 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x200000000000000, 0x0, 0x0, 0x1}) [ 1274.070806][T19103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.079377][T19103] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:39 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1274.141340][T19103] device bridge0 left promiscuous mode 04:12:39 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:39 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1274.527420][T19106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.535322][T19106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.542948][T19106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.550274][T19106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.669614][T19106] device bridge0 entered promiscuous mode 04:12:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x0, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000440)=""/4096) 04:12:39 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:39 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:39 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:39 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x600000000000000, 0x0, 0x0, 0x1}) [ 1274.984159][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.992695][T19285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.030353][T19285] device bridge0 left promiscuous mode 04:12:40 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:40 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:40 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = getpgrp(0xffffffffffffffff) setpriority(0x0, r1, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ppoll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x1}, {r0, 0x50c0}, {r0, 0x4}, {r0, 0x200}, {r0, 0x400}, {r0}, {r0, 0x300}, {r0, 0x400}], 0x29, 0x0, 0x0, 0xfffffecf) [ 1275.753435][T19298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.760610][T19298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.768395][T19298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.776285][T19298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.793031][T19298] device bridge0 entered promiscuous mode [ 1275.803138][ T2361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:12:40 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = getpgrp(0xffffffffffffffff) setpriority(0x0, r1, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:40 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getgroups(0x4, &(0x7f00000002c0)=[0x0, 0x0, 0xee01, 0x0]) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000400150000fb02000300", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="040003000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000500000000002000000000000000"], 0x4c, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:40 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1276.007042][T19437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.015763][T19437] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x0, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1276.085090][T19437] device bridge0 left promiscuous mode 04:12:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:41 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x1200000000000000, 0x0, 0x0, 0x1}) 04:12:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = getpgrp(0xffffffffffffffff) setpriority(0x0, r1, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:41 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x3f00000000000000, 0x0, 0x0, 0x1}) 04:12:41 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1276.895615][T19443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.902847][T19443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.910324][T19443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.917423][T19443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.015671][T19443] device bridge0 entered promiscuous mode [ 1277.055002][T19451] bridge0: port 2(bridge_slave_1) entered disabled state 04:12:42 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDADDIO(r0, 0x4b34, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200000000f) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) [ 1277.062305][T19451] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1277.117177][T19451] device bridge0 left promiscuous mode 04:12:42 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x0, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x41, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x45c003) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffec6) [ 1277.436685][T19535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.443937][T19535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.451393][T19535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.458526][T19535] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) setpriority(0x0, 0x0, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)=0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0xffffffb9) 04:12:42 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0xffffffffffff0700, 0x0, 0x0, 0x1}) [ 1277.490647][T19535] device bridge0 entered promiscuous mode 04:12:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x540, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/dev/ptmx\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'nr0\x00', {0x2, 0x4e21, @rand_addr=0x7}}) io_uring_enter(r1, 0x1000, 0x5, 0x0, &(0x7f0000000100)={0x5}, 0x8) [ 1277.640769][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.648899][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.661137][T19600] device bridge0 left promiscuous mode 04:12:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) setpriority(0x0, 0x0, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:42 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) setpriority(0x0, 0x0, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:42 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1}) [ 1278.140625][T19603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.147868][T19603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.155304][T19603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.164027][T19603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.187925][T19603] device bridge0 entered promiscuous mode [ 1278.211447][T19724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.219595][T19724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.259201][T19724] device bridge0 left promiscuous mode 04:12:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:43 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:43 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0xa, &(0x7f0000000080)=[{0xfffffffffffffffb, 0x100}, {0x86e}, {0x4cb0, 0x1}, {0x4, 0x1ff}, {0x1000, 0x8}, {0x8, 0x1}, {0x7, 0x4}, {0x4, 0x3fa5}, {0x6b, 0x1}, {0x4, 0x3}]}) 04:12:43 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:43 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:43 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x1}) [ 1278.799252][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.806471][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.814074][T19730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.821245][T19730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.831971][T19730] device bridge0 entered promiscuous mode [ 1278.957210][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.965223][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.010893][T19755] device bridge0 left promiscuous mode 04:12:44 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1279.378495][T19761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.385808][T19761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.393304][T19761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.400437][T19761] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:44 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(0x0, 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:44 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x12, 0x0, 0x1}) [ 1279.425198][T19761] device bridge0 entered promiscuous mode 04:12:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x0, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2656a26b72363a11) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000001) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 04:12:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1279.627239][T20014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.635272][T20014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.705894][T20014] device bridge0 left promiscuous mode 04:12:44 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:44 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(0x0, 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:45 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(0x0, 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:45 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x600, 0x0, 0x1}) [ 1280.429555][T20048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.436980][T20048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.444453][T20048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.451793][T20048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.490767][T20048] device bridge0 entered promiscuous mode 04:12:45 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x0, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:45 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1280.603407][T20049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.611136][T20049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.637873][T20049] device bridge0 left promiscuous mode 04:12:45 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x4, 0x3, 0x0, 0x0, 0x9}, 0xcd6, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x7, 0x6, 0x8}) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/130, 0x82}], 0x3, &(0x7f0000000440)=""/112, 0x70}, 0x1) 04:12:45 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10040, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)=0x1) [ 1280.998262][T20090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.005992][T20090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.013935][T20090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.021381][T20090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.067927][T20090] device bridge0 entered promiscuous mode 04:12:46 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x1200, 0x0, 0x1}) 04:12:46 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0x0, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x0, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1281.307888][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.316804][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.406266][T20237] device bridge0 left promiscuous mode 04:12:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:46 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x3f00, 0x0, 0x1}) 04:12:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1281.772126][T20244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.779583][T20244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.787183][T20244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.794516][T20244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.821546][T20244] device bridge0 entered promiscuous mode [ 1281.846896][T20368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.856101][T20368] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:46 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x0, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000100)="2ee480cf7805b14e4b12a2d25cead99dda", 0x11) 04:12:46 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1281.925980][T20368] device bridge0 left promiscuous mode 04:12:47 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(0x0, 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:47 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x1000000, 0x0, 0x1}) [ 1282.418088][T20372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.425511][T20372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.433142][T20372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.440460][T20372] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:47 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(0x0, 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1282.480975][T20372] device bridge0 entered promiscuous mode 04:12:47 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:47 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1282.736550][T20494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.744700][T20494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.763483][T20494] device bridge0 left promiscuous mode 04:12:47 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(0x0, 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='pagemap\x00') ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0x5, 0xffffffffffffff81, 0xba98}, 'syz1\x00', 0x9}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r2, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000fd0016ec130cb6a2edb58d6255f1f852266dc7fcdb9261e7ed61df97ddcb14f2316750e104ac7ac408ed51b5dbc402c0932ee55c4b035edab61104f1fb89f09a8e10960b91ec31988d6d47f8d3b2b520839ceaa008472fbb3e53ad755a6d9f504599cf36b95b5544c9fee440761994e40bd02a3a95346e2b03245cccf73206134d91b84ed38819c287c226f13749c0bba8dd3438a6c8b396550ca9ae99833323f9778c4c7a9ef5a33085dce89f8c5013ebe961d53ffb516645d1d9f718ec001679f4e1b42133a765fdf44d6413a76aa50f66062dfa8c5d221a3abe3bcdefb21ff2988354ad5f9b0eafe8d4649e35ad41cea83460ed43e2dd86dfa54d7e7768e45fc834e28a192d7a90d220107c3a56cfc62cabbbc7661b53cfdee767"], 0x103) 04:12:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1283.210074][T20499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.217731][T20499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.225174][T20499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.233986][T20499] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:48 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x0, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:48 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1283.292517][T20499] device bridge0 entered promiscuous mode 04:12:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x2001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x240000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2739cf6, 0x100000000, 0x20, 0x6, 0x7ff, 0x18000000000000, 0xfffffffffffffffc, {0x0, @in6={{0xa, 0x4e23, 0xff, @mcast1, 0x401}}, 0x40, 0x2, 0x7fff, 0x9, 0x6}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0xa4, 0x200, 0x5, 0x0, 0x5, 0x80, 0x3, r2}, 0x20) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 04:12:48 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2000000, 0x0, 0x1}) 04:12:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:48 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1283.437554][T20571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.445666][T20571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.476404][T20571] device bridge0 left promiscuous mode 04:12:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="84926ff8"], 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) ppoll(&(0x7f0000000040)=[{r0}], 0x40, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x9) 04:12:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x0, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:48 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x2a}, 0x100}}, 0x24) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040), 0x20000000000000cf, 0x0, 0x0, 0xb) 04:12:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x0, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1284.264913][T20578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.272560][T20578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.280749][T20578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.288142][T20578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.296072][T20578] device bridge0 entered promiscuous mode 04:12:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 04:12:49 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x6000000, 0x0, 0x1}) 04:12:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1284.452748][T20596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.460877][T20596] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1284.514228][T20596] device bridge0 left promiscuous mode 04:12:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1284.848462][T20599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.855770][T20599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.863381][T20599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.870620][T20599] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:49 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(0x0, 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:49 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:49 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x12000000, 0x0, 0x1}) [ 1284.928469][T20599] device bridge0 entered promiscuous mode [ 1285.065278][T20628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.075480][T20628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.116692][T20628] device bridge0 left promiscuous mode [ 1285.468406][T20633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.475806][T20633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.483298][T20633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.490668][T20633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.513050][T20633] device bridge0 entered promiscuous mode 04:12:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x0, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:50 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = dup(r0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:50 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x3f000000, 0x0, 0x1}) 04:12:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1285.674354][T20684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.682454][T20684] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:50 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0x0, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:50 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1285.743741][T20684] device bridge0 left promiscuous mode 04:12:50 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:51 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x7ffffffffffff, 0x0, 0x1}) 04:12:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1286.564204][T20693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.571556][T20693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.579138][T20693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.586372][T20693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.657982][T20693] device bridge0 entered promiscuous mode [ 1286.674654][T20701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.682092][T20701] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x0, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:12:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1286.716711][T20701] device bridge0 left promiscuous mode 04:12:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000ac0)) 04:12:51 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x100000000000000, 0x0, 0x1}) 04:12:51 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000ac0)) [ 1286.944341][T20705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.951901][T20705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1286.960075][T20705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.967861][T20705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.051615][T20705] device bridge0 entered promiscuous mode [ 1287.072921][T20745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.083998][T20745] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x0, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1287.145118][T20745] device bridge0 left promiscuous mode 04:12:52 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f0000000ac0)) 04:12:52 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x904000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x284, r2, 0x704, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e1e}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcb6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe53}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffe}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe55b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffea54}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000004c0)=0xfffffffffffffffa, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 04:12:52 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x200000000000000, 0x0, 0x1}) 04:12:52 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1287.769157][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.776697][T20749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.784609][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.792566][T20749] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:52 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x0, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:52 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 04:12:52 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1287.850198][T20749] device bridge0 entered promiscuous mode [ 1287.875541][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.884075][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.961615][T20763] device bridge0 left promiscuous mode 04:12:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1288.433210][T20764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.441687][T20764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.449227][T20764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.456369][T20764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.472090][T20764] device bridge0 entered promiscuous mode 04:12:53 executing program 0: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:53 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 04:12:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000100)={0x7fff, 0x3, 0x80, 0x100, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1288.485973][T20794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.493998][T20794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.513018][T20794] device bridge0 left promiscuous mode 04:12:53 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x8, 0x5, 0x5, 0x2c7b551b, 0x7ff, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) 04:12:53 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x600000000000000, 0x0, 0x1}) 04:12:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1288.965193][T20796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.972970][T20796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.980430][T20796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.988193][T20796] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:53 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x0, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:53 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:53 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) [ 1289.032012][T20796] device bridge0 entered promiscuous mode 04:12:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x0, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1289.177422][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.185871][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.213092][T20945] device bridge0 left promiscuous mode 04:12:54 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x1200000000000000, 0x0, 0x1}) 04:12:54 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 04:12:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0xfffffffffffffffa, 0xbcd}, {0xfffffffffffffffa, 0x101}, {0x800, 0x3}, {0x6, 0x5bb218dd}]}) 04:12:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x0, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1289.998450][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.005981][T20952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.014192][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.021352][T20952] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:55 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x0, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1290.061065][T20952] device bridge0 entered promiscuous mode 04:12:55 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x3f00000000000000, 0x0, 0x1}) [ 1290.188012][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.195221][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.215449][T20960] device bridge0 left promiscuous mode [ 1290.354447][T20962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.361711][T20962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.369328][T20962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.376424][T20962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.385294][T20962] device bridge0 entered promiscuous mode 04:12:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x0, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x0, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x80) ioctl$RTC_UIE_ON(r1, 0x7003) [ 1290.630680][T21082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.638731][T21082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.680114][T21082] device bridge0 left promiscuous mode 04:12:55 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0xffffffffffff0700, 0x0, 0x1}) [ 1291.038481][T21092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.045667][T21092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.053231][T21092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.060389][T21092] bridge0: port 1(bridge_slave_0) entered forwarding state 04:12:56 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x0, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1291.098678][T21092] device bridge0 entered promiscuous mode [ 1291.117080][T21097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.125194][T21097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.179373][T21097] device bridge0 left promiscuous mode 04:12:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000100)=[{r0}, {r0, 0x40a0}, {r0, 0x8000}, {r0, 0x3}, {r0, 0x28}], 0x5, 0x0, 0x0, 0x0) 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1291.580730][T21103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.587945][T21103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.595318][T21103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.602475][T21103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.686017][T21103] device bridge0 entered promiscuous mode [ 1291.721545][T21217] bridge0: port 2(bridge_slave_1) entered disabled state 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1291.729474][T21217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.755564][T21217] device bridge0 left promiscuous mode 04:12:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x0, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:12:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x0, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:57 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x0, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1292.255201][T21218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.262383][T21218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.269846][T21218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.276960][T21218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.285208][T21218] device bridge0 entered promiscuous mode 04:12:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x5, 0x6, 0x4, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x2, 0x8f6, 0x0, 0x0, "c071bcee"}, 0x3, 0x4, @offset=0x8, 0x4}) [ 1292.425531][T21243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.433799][T21243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.457199][T21243] device bridge0 left promiscuous mode 04:12:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:12:57 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:12:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1292.865945][T21248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.873161][T21248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.880590][T21248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.887722][T21248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.902984][T21248] device bridge0 entered promiscuous mode 04:12:57 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r0, 0x5452, 0x0) r1 = getpgrp(0xffffffffffffffff) setpriority(0x0, r1, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:57 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1293.021372][T21364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.029434][T21364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.045119][T21364] device bridge0 left promiscuous mode 04:12:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x0, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1293.335280][T21368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.342538][T21368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.350074][T21368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.357199][T21368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.367934][T21368] device bridge0 entered promiscuous mode 04:12:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1c2, 0x0, 0x0, 0x0) 04:12:58 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x0, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 04:12:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x0, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000100)={[], 0x100000001, 0x7f, 0x0, 0x0, 0x5, 0x3000, 0x3000, [], 0x5}) [ 1293.699583][T21506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.707967][T21506] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:58 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r0, 0x5452, 0x0) r1 = getpgrp(0xffffffffffffffff) setpriority(0x0, r1, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1293.757223][T21506] device bridge0 left promiscuous mode 04:12:58 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:12:58 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:12:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x0, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:59 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:12:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1294.468340][T21511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.475662][T21511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.483383][T21511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.490518][T21511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.562347][T21511] device bridge0 entered promiscuous mode [ 1294.573401][T21640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.581368][T21640] bridge0: port 1(bridge_slave_0) entered disabled state 04:12:59 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x0, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1294.624181][T21640] device bridge0 left promiscuous mode 04:12:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0xfffffffffffffffc) 04:12:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x0, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:12:59 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vcs\x00', 0x80040, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x6f14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840)='TIPC\x00') ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000001a00)={0x0, @reserved}) syz_open_dev$video4linux(&(0x7f0000001980)='/dev/v4l-subdev#\x00', 0x8001, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000001440)=""/171, 0xab}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000001500)=""/253, 0xfd}], 0x8, &(0x7f0000001680)=""/130, 0x82}, 0x10000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000001780)=0xfffffffffffffffb, 0x8) 04:12:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x91) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x8, 0x0, 0xfff, 0x40}, {0x80, 0x6, 0x3ff}, {0x400, 0x9, 0x0, 0x1}, {0x4, 0x2, 0x2, 0x4}, {0x1, 0x0, 0x5, 0xa6}, {0x1, 0x3, 0xc19, 0xdf}, {0x8, 0xfff, 0x7, 0x8}, {0x100000000, 0x6, 0x1, 0x81}, {0x2, 0x1, 0x8388, 0x1f}, {0x10001, 0xd803, 0x3f, 0x7}]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000001c0)={0x9, 0x0, 0x301b, 0xfff, 0x100000001, 0x0, 0xfffffffffffffff9, 0x1}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:00 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1295.243993][T21641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.251153][T21641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.258753][T21641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.265949][T21641] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:00 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) [ 1295.311548][T21641] device bridge0 entered promiscuous mode [ 1295.330971][T21657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.339543][T21657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.353068][T21657] device bridge0 left promiscuous mode 04:13:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 04:13:00 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1295.732332][T21661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.739908][T21661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.747379][T21661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.754545][T21661] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:00 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x0, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1295.788161][T21661] device bridge0 entered promiscuous mode [ 1295.812032][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1295.926593][T21797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.934588][T21797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.944773][T21797] device bridge0 left promiscuous mode 04:13:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/154, 0x9a}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001700)=[@mss={0x2, 0x9}, @window={0x3, 0xfff, 0x5}, @mss={0x2, 0x10001}, @timestamp, @mss={0x2, 0x7}, @sack_perm], 0x6) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:00 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140), 0x4) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:13:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8f0, 0x80000) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0xa64, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:01 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:13:01 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:01 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) 04:13:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) [ 1296.782733][T21798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.789965][T21798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.797370][T21798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.804544][T21798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.820331][T21798] device bridge0 entered promiscuous mode 04:13:01 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1296.840305][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:01 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:13:01 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1296.969517][T21931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.977602][T21931] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x105800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7f, 0x30, 0x5, 0xff}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r2, 0x1000, "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"}, &(0x7f0000000140)=0x1008) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1297.059355][T21931] device bridge0 left promiscuous mode 04:13:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 04:13:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000080), 0x2000002c, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200080, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4e21, @remote}}) 04:13:02 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) 04:13:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240), 0x13f, 0x7}}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000440)={0x9, 0xfffffffffffffffd, 0x4, 0x0, 0x0, [], [], [], 0x100}) 04:13:02 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1297.778483][T21932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.785771][T21932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.793243][T21932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.800455][T21932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.849072][T21932] device bridge0 entered promiscuous mode [ 1297.881360][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:02 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1298.008086][T22070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.016061][T22070] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1298.063375][T22070] device bridge0 left promiscuous mode 04:13:03 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x80000000, 0x3, 0x101, 0x7, 0x4, 0x7, 0x9, 0x8, 0x1, 0x9aac}) 04:13:03 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1298.847093][T22073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.854452][T22073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.861995][T22073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.869210][T22073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.903539][T22073] device bridge0 entered promiscuous mode [ 1298.928721][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:03 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:03 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:04 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1299.185592][T22202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.194313][T22202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.245893][T22202] device bridge0 left promiscuous mode 04:13:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) accept4(r1, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80, 0x80000) 04:13:04 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:13:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1300.018106][T22211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.025229][T22211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.032876][T22211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.040017][T22211] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:04 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1300.065444][T22211] device bridge0 entered promiscuous mode 04:13:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:05 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) fcntl$setsig(r0, 0xa, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x440802, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r2}) 04:13:05 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1300.381139][T22341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.389032][T22341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.399602][T22341] device bridge0 left promiscuous mode 04:13:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:05 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:13:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1301.108369][T22345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.115477][T22345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.122933][T22345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.130066][T22345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.167964][T22345] device bridge0 entered promiscuous mode 04:13:06 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:06 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) 04:13:06 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa02, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xdc07}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x200, 0x1, 0x4, r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1301.452896][T22480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.461144][T22480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.480162][T22480] device bridge0 left promiscuous mode 04:13:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'tunl0\x00', 0x23f}) r2 = socket(0x11, 0x5, 0x72c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x7fff}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x6}, &(0x7f0000000700)=0x3) socket(0x2, 0xa, 0x8) 04:13:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x6002, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 04:13:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:06 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) [ 1302.256697][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1302.281278][T22501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.289895][T22501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.297381][T22501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.304676][T22501] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:07 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1302.358272][T22501] device bridge0 entered promiscuous mode 04:13:07 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x1}) 04:13:07 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1302.522104][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:07 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1302.593433][T22618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.601630][T22618] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) r1 = socket(0x11, 0x8000800, 0x5) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x8afc, &(0x7f0000000240)=0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x814) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1302.648744][T22618] device bridge0 left promiscuous mode 04:13:07 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x1}) [ 1303.418764][T22622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.425951][T22622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.433403][T22622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.441240][T22622] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:08 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x0, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1303.468066][T22622] device bridge0 entered promiscuous mode [ 1303.481032][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:08 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:08 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0xfffffed8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) 04:13:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1303.634420][T22744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.642452][T22744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.669854][T22744] device bridge0 left promiscuous mode 04:13:08 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x1}) 04:13:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x600, 0x1}) [ 1304.441107][T22760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.448299][T22760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.455806][T22760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.462992][T22760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.471242][T22760] device bridge0 entered promiscuous mode [ 1304.478929][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:09 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x0, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1304.501001][ T2842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:13:09 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000000000450843, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:09 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1304.685525][T22972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.693855][T22972] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x0, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1304.784878][T22972] device bridge0 left promiscuous mode 04:13:10 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1200, 0x1}) [ 1305.479057][T22981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.486218][T22981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.493756][T22981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.500916][T22981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.523383][T22981] device bridge0 entered promiscuous mode 04:13:10 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x3f00, 0x1}) [ 1305.549758][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x2000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x6, 0x1, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0x400, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r2, 0x6744}}, 0x10) 04:13:10 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x0, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:10 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x18) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x0, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:10 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1305.875862][T23205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.883966][T23205] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) [ 1305.921537][T23205] device bridge0 left promiscuous mode 04:13:11 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1000000, 0x1}) [ 1306.627881][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1306.658398][T23214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.665508][T23214] bridge0: port 2(bridge_slave_1) entered forwarding state 04:13:11 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1306.672967][T23214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.680092][T23214] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x0, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x10000101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000540)={0x80000000, 0x100002, 'client0\x00', 0x1, "d41843899e17d9e1", "7078b91a950b10f7b5f154c25818d36b110000000000000000000000002f00", 0x111, 0x9}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xd3, "3646b1658c724ccd51b9a5947568828808cf871af600f287627ff296dde2b118b885388a332470bc271704c4497ee6ac84b8b263d6d547f4f38580fe57f9fc6c22b35f6df8e62cbd4478f97c27ace02049c75fb2a7dff73f84532502d87108b39603953d40191ae40a6b9b525886f0da47d87cff58dd879e625574b0a807d9ed264c69960cfe2b6cf69c465f33448c66470315fcfcb24ad4ff5b4dc3c4f0b0af0353d2fbbc5c8f114d6157f3669d85e341e45a58de83b74a21643dc0d93dc6b3f77224e6070a5f99b26615d66ca112d70bad35"}, &(0x7f0000000300)=0xdb) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000440)={r3, 0xc4, "ffabf6048fdaadbfcdca4f66d89a456b8dfdf05c08d43c5260f05906a80b0b44e805f3240788adcd2f5db60b7e43f98ca3ec401c2d935c9fba3f1caa41e425d7e41582cd5c0b53bc91c55dba18246c6658e2b926cb8ef79153859c2070e8627c4e6400d1b9a86673725da7697e4435ac63a6588a2ecb4b9670c6f26c0805951d25ff9b77c23525d9cf90f0bb090bf398ae279a96bd0159f09926809cd17e621036f35b0bba1ae6bedf07a0bfe9524ea440275572cfee6e0df0d871db1d2f70b9c956cd72"}, &(0x7f0000000340)=0xcc) connect$packet(r1, &(0x7f0000000180)={0x11, 0x1a, r2, 0x1, 0xafa0c27, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) [ 1306.801718][T23214] device bridge0 entered promiscuous mode 04:13:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x0, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1306.869244][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1306.932420][T23431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.939831][T23431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.948389][T23431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.955965][T23431] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:11 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1306.995508][T23431] device bridge0 entered promiscuous mode 04:13:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:12 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0xf) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x5) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockname$netlink(r0, &(0x7f0000000240), &(0x7f0000000280)=0xc) ppoll(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x416) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xcda2}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)="53cac9eada30a437dfd3045b2efe425049992e72f0318cc02d2c757c555f3b804bb72f0fda8652cfeaf0d653971024d95ab2a0294128e563eefadce490123394e955ce2edd3ef447f78f93b981a0aeb50c7a6d26896d9eb46b5060b852832b5c6670e6954d094c73301d416f4a138cf9d9be5920820833d80768fcf412b5e3f9118ac916e49930ac9c7cbcae93661a289ad783385e1c9f5c804e81aa22ed018027263ebc2719903d", 0xa8, r1}, 0x68) 04:13:12 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x2000000, 0x1}) [ 1307.182173][T23450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.190351][T23450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.214792][T23450] device bridge0 left promiscuous mode 04:13:12 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:13:12 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x6000000, 0x1}) [ 1307.879048][T23460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.886190][T23460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.893656][T23460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.900806][T23460] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x8100) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 04:13:12 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1307.985551][T23460] device bridge0 entered promiscuous mode 04:13:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x0, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1308.028475][T10597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.047492][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:13 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1308.166948][T23676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.178683][T23676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.202765][T23676] device bridge0 left promiscuous mode 04:13:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:13 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:13:13 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x12000000, 0x1}) 04:13:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) [ 1309.001031][T23678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.008251][T23678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.015652][T23678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.022799][T23678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.053574][T23678] device bridge0 entered promiscuous mode [ 1309.064433][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x0, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:14 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x3f000000, 0x1}) 04:13:14 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1309.194232][T23803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.202196][T23803] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0x0, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1309.242930][T23803] device bridge0 left promiscuous mode 04:13:14 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x7ffffffffffff, 0x1}) 04:13:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x34c, 0x800080000000000}]}, 0xc, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:14 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x100000000000000, 0x1}) [ 1310.134049][T23913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.141337][T23913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.183949][T23913] device bridge0 left promiscuous mode 04:13:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1310.442422][T23919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.449573][T23919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.456978][T23919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.464232][T23919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.473924][T23919] device bridge0 entered promiscuous mode [ 1310.496637][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:15 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:15 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x0, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:15 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x200000000000000, 0x1}) 04:13:15 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x80012) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1310.708584][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1310.785837][T24149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.794110][T24149] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:15 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1310.849147][T24149] device bridge0 left promiscuous mode [ 1310.891201][T24158] FAULT_INJECTION: forcing a failure. [ 1310.891201][T24158] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.940845][T24158] CPU: 1 PID: 24158 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1310.948867][T24158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.958947][T24158] Call Trace: [ 1310.962259][T24158] dump_stack+0x172/0x1f0 [ 1310.966609][T24158] should_fail.cold+0xa/0x15 [ 1310.971218][T24158] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1310.977036][T24158] ? ___might_sleep+0x163/0x280 [ 1310.981897][T24158] __should_failslab+0x121/0x190 [ 1310.986847][T24158] should_failslab+0x9/0x14 [ 1310.991366][T24158] __kmalloc+0x2dc/0x740 [ 1310.995634][T24158] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1311.001891][T24158] ? do_sys_poll+0x242/0xdc0 [ 1311.006603][T24158] do_sys_poll+0x242/0xdc0 [ 1311.011061][T24158] ? is_bpf_text_address+0xac/0x170 [ 1311.016269][T24158] ? compat_core_sys_select+0x760/0x760 [ 1311.021852][T24158] ? _parse_integer+0x139/0x190 [ 1311.026712][T24158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1311.032953][T24158] ? _kstrtoull+0x14c/0x200 [ 1311.037458][T24158] ? _parse_integer+0x190/0x190 [ 1311.042317][T24158] ? __lock_acquire+0x548/0x3fb0 [ 1311.047264][T24158] ? lock_downgrade+0x880/0x880 [ 1311.052219][T24158] ? get_pid_task+0xc9/0x190 [ 1311.056819][T24158] ? find_held_lock+0x35/0x130 [ 1311.061620][T24158] ? get_pid_task+0xc9/0x190 [ 1311.066238][T24158] ? __f_unlock_pos+0x19/0x20 [ 1311.070924][T24158] ? find_held_lock+0x35/0x130 [ 1311.075696][T24158] ? __f_unlock_pos+0x19/0x20 [ 1311.080388][T24158] ? lock_downgrade+0x880/0x880 [ 1311.085271][T24158] ? kasan_check_write+0x14/0x20 [ 1311.090218][T24158] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1311.095802][T24158] ? wait_for_completion+0x440/0x440 [ 1311.101146][T24158] __x64_sys_ppoll+0x28c/0x380 [ 1311.105924][T24158] ? __ia32_sys_poll+0x460/0x460 [ 1311.110876][T24158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1311.116376][T24158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1311.121866][T24158] ? do_syscall_64+0x26/0x610 [ 1311.126563][T24158] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.132655][T24158] ? do_syscall_64+0x26/0x610 [ 1311.137521][T24158] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1311.142836][T24158] ? trace_hardirqs_on+0x67/0x230 [ 1311.147876][T24158] do_syscall_64+0x103/0x610 [ 1311.152474][T24158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.158364][T24158] RIP: 0033:0x458da9 [ 1311.162265][T24158] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1311.181877][T24158] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1311.190301][T24158] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1311.198281][T24158] RDX: 0000000000000000 RSI: 2000000000000033 RDI: 0000000020000040 [ 1311.206259][T24158] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1311.214250][T24158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1311.222310][T24158] R13: 00000000004c56ca R14: 00000000004d9938 R15: 0000000000000004 04:13:16 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1311.560942][T24159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.568412][T24159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.575919][T24159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.583062][T24159] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:16 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1311.627864][T24159] device bridge0 entered promiscuous mode [ 1311.638615][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) signalfd(r0, &(0x7f0000000080)={0x7}, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, r2, 0x820, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x91}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc0000000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, [], 0x1d}, 0x10000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x1f6, 0x4) 04:13:16 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x600000000000000, 0x1}) 04:13:16 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1311.710510][T24275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.718476][T24275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.739829][T24275] device bridge0 left promiscuous mode 04:13:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000001200)="264a2ae980d0da964c0f05bf12000000c4a37bf0c5fe41e2e9c422e9aabb3c2302004a0fc7a4ea70db00230200c4235d79cd3ff30f38f6c5c4a13b5a97ead04d13c4a265aa104b8d26c4c24bf6b7d2bf7b5e660f615f1e642f64631bc421045f4607c421ddb7582b9fc4149fc4c4e37d397632bd26f2f045f602b164640f6f43a0660f6e6da6a9262e2e66450f7d64c6088f292001720bad0383397fd3ff3a65f20f7cd8efa1a12ad764d38f53efaf6766f2ab6626f04618acdf07000000c443a922c6fe660f79cec462b1f72ec300000000000fc4634148f700c4a1bd74055c540000a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc2675c442650739e5c4a1fe162be5a700000f3e666690d25c660f41767ff30f5ea5a9a50000fff5c463fd017c63ae0fda3131b83a00a2f16541d9f0fb766208cf") open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) [ 1312.281374][T24271] FAULT_INJECTION: forcing a failure. [ 1312.281374][T24271] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.314638][T24271] CPU: 0 PID: 24271 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1312.322850][T24271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.332906][T24271] Call Trace: [ 1312.336276][T24271] dump_stack+0x172/0x1f0 [ 1312.340620][T24271] should_fail.cold+0xa/0x15 [ 1312.345222][T24271] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1312.351051][T24271] ? ___might_sleep+0x163/0x280 [ 1312.355939][T24271] __should_failslab+0x121/0x190 [ 1312.360910][T24271] should_failslab+0x9/0x14 [ 1312.365423][T24271] kmem_cache_alloc+0x2b2/0x6f0 [ 1312.370286][T24271] ? kasan_check_write+0x14/0x20 [ 1312.375264][T24271] taskstats_exit+0x6c8/0xcf0 [ 1312.379956][T24271] ? taskstats_user_cmd+0xce0/0xce0 [ 1312.379975][T24271] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1312.379992][T24271] ? acct_collect+0x699/0x860 [ 1312.380011][T24271] do_exit+0x3d4/0x2fa0 [ 1312.390406][T24271] ? get_signal+0x331/0x1d50 [ 1312.390421][T24271] ? find_held_lock+0x35/0x130 [ 1312.390434][T24271] ? mm_update_next_owner+0x640/0x640 [ 1312.390452][T24271] ? kasan_check_write+0x14/0x20 [ 1312.390467][T24271] ? _raw_spin_unlock_irq+0x28/0x90 [ 1312.390478][T24271] ? get_signal+0x331/0x1d50 [ 1312.390489][T24271] ? _raw_spin_unlock_irq+0x28/0x90 [ 1312.390507][T24271] do_group_exit+0x135/0x370 [ 1312.390523][T24271] get_signal+0x399/0x1d50 [ 1312.390538][T24271] ? lock_downgrade+0x880/0x880 [ 1312.390562][T24271] do_signal+0x87/0x1940 [ 1312.452095][T24271] ? wait_for_completion+0x440/0x440 [ 1312.457406][T24271] ? setup_sigcontext+0x7d0/0x7d0 [ 1312.462448][T24271] ? __x64_sys_ppoll+0x21c/0x380 [ 1312.467402][T24271] ? __ia32_sys_poll+0x460/0x460 [ 1312.472390][T24271] ? exit_to_usermode_loop+0x43/0x2c0 [ 1312.477887][T24271] ? do_syscall_64+0x52d/0x610 [ 1312.482672][T24271] ? exit_to_usermode_loop+0x43/0x2c0 [ 1312.488062][T24271] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1312.493361][T24271] ? trace_hardirqs_on+0x67/0x230 [ 1312.498534][T24271] exit_to_usermode_loop+0x244/0x2c0 [ 1312.503845][T24271] do_syscall_64+0x52d/0x610 [ 1312.508442][T24271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1312.514334][T24271] RIP: 0033:0x458da9 [ 1312.518230][T24271] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1312.537859][T24271] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1312.546307][T24271] RAX: 0000000000000001 RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1312.554309][T24271] RDX: 0000000000000000 RSI: 2000000000000033 RDI: 0000000020000040 [ 1312.562291][T24271] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1312.570271][T24271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 04:13:17 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1200000000000000, 0x1}) 04:13:17 executing program 1: [ 1312.578429][T24271] R13: 00000000004c56ca R14: 00000000004d9938 R15: 0000000000000004 04:13:17 executing program 1: 04:13:17 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cf000007000000be05c6d8e68f94591fb20bf143d5e213076eb920dcbf5a831771b1f7456aa81e88a48ef61e5da0114d003b7f0f63700282a6d102101db735abe159d3a5da27057ddc33d577420d78f537b6a46d09593488ba469146a848065e9668ab247649814d603338647bbabda8b97cdca265a20fa673084c06cc4f63b340c8388e9a7f0612f4f3c676e8759a01ee9f29f3e284bb473365919c554130921574d3b6270f6d44820bd406e7257ee0293aca5c19448cf6bdac7be9b01005780f053006f10995f458f937553e7aeb1c8da23b"], &(0x7f00000001c0)=0xd7) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x800}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10004, 0x3, 0x7000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) 04:13:17 executing program 1: 04:13:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffda5) 04:13:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1312.960133][T24277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.967310][T24277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.974790][T24277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.981946][T24277] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:17 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}], 0x7fff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:17 executing program 1: 04:13:17 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x3f00000000000000, 0x1}) [ 1313.023156][T24277] device bridge0 entered promiscuous mode [ 1313.044642][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:18 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:18 executing program 1: [ 1313.169550][T24422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.178022][T24422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.214403][T24422] device bridge0 left promiscuous mode 04:13:18 executing program 1: 04:13:18 executing program 1: 04:13:18 executing program 1: 04:13:18 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffff0700, 0x1}) 04:13:18 executing program 1: 04:13:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000300)={@mcast1, 0x0}, &(0x7f0000000340)=0x14) r5 = accept$packet(0xffffffffffffff9c, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60002020}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x140, r2, 0x402, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x124, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x140}}, 0x4000) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x2}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1313.993145][T24427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.000320][T24427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.007892][T24427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.014988][T24427] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:19 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:19 executing program 1: 04:13:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffff000, 0x80) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x3, 0x1c000, 0x5}) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x7, 0x6, 0x4}) [ 1314.083190][T24427] device bridge0 entered promiscuous mode [ 1314.099205][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:19 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x90000, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) 04:13:19 executing program 1: 04:13:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000440)={0x9, {{0xa, 0x4e23, 0x7, @local, 0x2}}, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x54}}}, 0x108) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x1) 04:13:19 executing program 1: [ 1314.304631][T24467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.313857][T24467] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:19 executing program 1: [ 1314.355184][T24467] device bridge0 left promiscuous mode 04:13:19 executing program 1: 04:13:19 executing program 1: 04:13:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x1000000}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1314.907888][T24475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.914997][T24475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.922452][T24475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.929583][T24475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.985849][T24475] device bridge0 entered promiscuous mode [ 1314.993553][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}) 04:13:19 executing program 1: 04:13:19 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000200)={0x20, 0x100000001}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:19 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:20 executing program 1: [ 1315.118803][T24595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0xa4040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x2000) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1315.174384][T24598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.182488][T24598] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:20 executing program 1: 04:13:20 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1315.223039][T24598] device bridge0 left promiscuous mode 04:13:20 executing program 1: 04:13:20 executing program 1: 04:13:20 executing program 1: 04:13:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x2000000}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:20 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfff000}) 04:13:20 executing program 1: 04:13:20 executing program 1: [ 1315.998621][T24603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.005833][T24603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.013306][T24603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.020434][T24603] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:21 executing program 1: [ 1316.072530][T24603] device bridge0 entered promiscuous mode [ 1316.081642][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20402, 0x0) 04:13:21 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:21 executing program 1: [ 1316.238432][T24739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.246750][T24739] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:21 executing program 1: [ 1316.289930][T24739] device bridge0 left promiscuous mode 04:13:21 executing program 1: 04:13:21 executing program 1: 04:13:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x1000000000000}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:21 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) 04:13:21 executing program 1: 04:13:21 executing program 1: [ 1317.041227][T24746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.048502][T24746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.055856][T24746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.063016][T24746] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0x5}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xfffffffffffffffa) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) readlink(&(0x7f0000000880)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:13:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x101000, 0x8900, 0x1}) [ 1317.118181][T24746] device bridge0 entered promiscuous mode [ 1317.125761][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:22 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:22 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2}) [ 1317.320750][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1317.351510][T24924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.359741][T24924] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:22 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1317.392830][T24924] device bridge0 left promiscuous mode 04:13:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x100000000000000}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='numa_maps\x00J\a\x99\xa7s\xb2L\xa1\xafO\xd0\xce%\xf8\xf1\xf4\xb9\xa8\x17}\xc5\xe3\xc8\xbf})\xe5\xa4]\x10|AX`\x81\xfb7\xb8\xdb\xbd\xc0N\x1f0]OP,\xef\"\x9d\x00\x827\xd9Q\xbf\xcan\xa1\x9c\x84B\xfa\x18\xd0[\x01\x91Z8}\xb6\xd5T\xb4\x88B\x8c\x83\x1e\x13\xdd\xae\xb9\xa2\x9b\xa6\x15-\x12\xbf\x98f\xb4\xcfQ\x03%\x9e\x88\xd2/luan,TZ7\xf3\xa3)\x8dj\x13\x9f1\xce\b\xd4B\x96l\xad&\xae\xb2B\x15\x12\xbd\xcd\x12\xa0x\xfeY`\x93?\x80\xaf\xf7\xf7\xf1l\x12hm\xd2n\xfd\xdb^9\xd0\x80\x90\xa7\x9f\x1f\x1f\xb9\x1a~\x7fC\xd8,Eu~\x80g\"\xe7\xe1\xa82') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00p\x06e\xdd\xb9\xe9\xb5oH\xd9\xcf\x92\x97n\x13\xd6)\x02\x1d\xf8\xdc^\x81\x83\x99\xaa\xbf\xa9I\xc1\x8b\x06q_\x1a\xaa=\xc3\xec\xbb\xebr[\x86\xfb\a\xf7\x8e\xd3\xe8}\xe70i\x84_g\xb9\x8c\n\xd9\x895\xba\xf4\xf5I4q\xdd\xdf1 \xb2\\\x9c@\"^5\xae\x02t\x02\x7fz\xae\xa4:k\x04/2\xcb\fWt\x8d\x87F\xc69\x88\'\xcf/\x97U\xe9%\v\xa7<\t%-K\x81%\xa4\xa4\xb8\xd1Z\xc3i\n\xdeR\xa7e?p\xb4\xb9\xbbt\x19!\xc0\xd2\xe3\xdb\x9b@O>\xa7\x82\xb6\x02(\x8b1W;/\x82\xbf6\xe2\xd4\xfaM,\xe1kx\xa2\xf1:}IO\x80\v\xfb\xa1\x97\xa6\xaa\xdaU\x05\xe3g\xe5\t8Tr\xe9\xfc\xdcr\xad\x04\xc4\xc7\xa3\x904A&\xdf\xaf\x10\xf2\x0e\xc6\xaf\f\x9c\xcf\x8e\xcdQ5\xffs\xc4\x01\xe35\x11\xc1\x17C+\xab\xcf\xe2c\xb7`\xcb&\x84Z\x8b\xce\x9e\x9b\xb3a\x10\xf7~*\x84\x85L\x7f\xee\x18Vx\xcd>\xdcE\xf7\xbc\x13\xe0\x97\xd1_\x16\x0fU@\xe5\x8bn\x94\xea\xbd9G\xc8\xda\x9b\xab\x16\xb6\x16\x03\xba#6\x8c\xbbR\x81+\xbbu \xdcv\xc8\xd7\xec3\xd3\x01\xfd\xb546\xf5\xb4\xcf\x856\xea\xbf4)') sendfile(r1, r0, &(0x7f0000000000)=0x5d, 0x8) 04:13:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getdents64(r1, &(0x7f00000000c0)=""/134, 0x86) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:22 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6}) 04:13:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000140)) read(r0, &(0x7f00000002c0)=""/39, 0x27) 04:13:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 1318.289025][T24974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.296207][T24974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.303683][T24974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.311393][T24974] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:23 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:23 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1318.412432][T24974] device bridge0 entered promiscuous mode [ 1318.438021][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:23 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) [ 1318.521483][T25315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.529579][T25315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.559721][T25315] device bridge0 left promiscuous mode 04:13:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd, 0x200000000000000}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:23 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x12}) 04:13:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000140)) 04:13:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x10080) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) ppoll(&(0x7f0000000040)=[{r0, 0x402}], 0x1, 0x0, 0x0, 0x0) 04:13:24 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 04:13:24 executing program 1: r0 = getpid() r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) r2 = dup2(r1, r1) write$P9_RGETLOCK(r2, &(0x7f0000000100)={0xbb, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9d, '+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17'}}, 0xbb) write$binfmt_misc(r1, 0x0, 0x0) 04:13:24 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1319.424345][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1319.448434][T25320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.455558][T25320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.463057][T25320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.470375][T25320] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:24 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x600}) [ 1319.520252][T25320] device bridge0 entered promiscuous mode 04:13:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1319.564262][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x2) 04:13:24 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1319.709799][T25820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.718109][T25820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.759851][T25820] device bridge0 left promiscuous mode 04:13:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 04:13:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x24a, 0x20001) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000000c0)="d40f6c2d619b8be8e6f3ef9fe80d407e8fbe956e8b22078cbd4bc367e74cd395be29a0527a4c6547012af9b8952a84044ddf5a1701ff5d7f49b3ddfdd14e83fde117b378574831dd2df4f7607571dab9927a5ad85f83692fd57a9afc98ed5357aef8ba7be663ff7c5d", 0x69) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) 04:13:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x13) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0xeffdffff) 04:13:25 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1200}) [ 1320.518495][T25840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.525664][T25840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.533130][T25840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.540267][T25840] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:25 executing program 1: r0 = socket(0x44000000002, 0x3, 0x7f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) 04:13:25 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1320.596602][T25840] device bridge0 entered promiscuous mode [ 1320.621285][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x1000000) 04:13:25 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1320.795964][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1320.817545][T26207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.825576][T26207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.835908][T26207] device bridge0 left promiscuous mode 04:13:25 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:25 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000200), 0x0) 04:13:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5}, 0x2c) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8, 0x1}, 0x1}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, 0x0, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x410, 0x0, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:13:25 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f00}) 04:13:26 executing program 3: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) 04:13:26 executing program 3: socket$inet6(0xa, 0x0, 0x0) clone(0x3fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 04:13:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, 0x0) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:13:26 executing program 1: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") syz_execute_func(&(0x7f0000000000)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3008262e67660e50e94d00c9c9c4625dba40e5b5e5b5c4aba39ddf4507e50c420fae9972b57111c4a245461a") 04:13:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x2000000) [ 1321.673471][T26541] mmap: syz-executor.1 (26541): VmData 18407424 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1321.733748][T26240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.740957][T26240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.748408][T26240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.755494][T26240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.818049][T26240] device bridge0 entered promiscuous mode [ 1321.838501][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, 0x0) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:13:26 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 04:13:26 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000}) [ 1322.100486][T26569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.108464][T26569] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 1322.177917][T26569] device bridge0 left promiscuous mode 04:13:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, 0x0) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:13:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)='t\b\x00\x00\xf9\xff\x85nG\x13g\xa6\x05', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) getpgid(0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="485655c833b9b4fee5615b2355a21274d98c27c2cf1ba99d87d9805b1c5838723fbbe1cf7b14019fb6f3b044dd3ab8021c54dd58c875b89aefd526e4cc74ee9d13428f564d4e581b0edf3676a57bbf71af03ac3e6a8bb62be34a27579294eff6039f4f0688f3f0667bc162a8c132c5f8cfce9cab4feab5b745414253ca5fea8a9a150a7d54279bc2a4532ae3f31646aed4704c35207c0abed0b79b038d71096dd5f3933aea442e59a0770a1e024a5f60a9c2ae9760149870bfb8") fcntl$setownex(r2, 0xf, 0x0) sendfile(r1, r0, 0x0, 0x2000009) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:13:27 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5500000018007f1412fe01b2a4a280930a06000003004306910080fe0b000f0035020000140000001900154002000001d40000dc1338d54400009b84136ef75afb83de44110016000d0006000000060cec4faba7d4", 0x55}], 0x1, 0x0, 0x0, 0xfe03000000000000}, 0x0) 04:13:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 04:13:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x1000000000000) 04:13:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2000000}) [ 1322.889615][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1322.918243][T26580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.925489][T26580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.933020][T26580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.940177][T26580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.963509][T26580] device bridge0 entered promiscuous mode [ 1322.988023][T26710] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1323.025334][T26710] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 04:13:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:27 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1323.047975][T26710] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 04:13:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) [ 1323.134357][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:28 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1323.179412][T26814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.187416][T26814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.229993][T26814] device bridge0 left promiscuous mode 04:13:28 executing program 1: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000000)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3008262e67660e50e94d00c9c9c4625dba40e5b5e5b5c4aba39ddf4507e50c420fae9972b57111c4a245461a") 04:13:28 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6000000}) 04:13:28 executing program 1: socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0), 0x0) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") perf_event_open(&(0x7f000001d000)={0x0, 0xfeb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000000)="f3e100def9575c8ac2c2c9734e424a2664f0ff064a460f3008262e67660e50e94d00c9c9c4625dba40e5b5e5b5c4aba39ddf4507e50c420fae9972b57111c4a245461a") 04:13:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x100000000000000) 04:13:28 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockname(r0, 0x0, 0x0) [ 1324.058981][T26816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.066180][T26816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.073653][T26816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.080895][T26816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.098293][T26816] device bridge0 entered promiscuous mode [ 1324.105653][T26821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1324.115520][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:13:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) 04:13:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xff}, 0x13) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) dup3(r1, r0, 0x0) 04:13:29 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x12000000}) 04:13:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:29 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1324.275758][T27047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.283890][T27047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.298642][T27047] device bridge0 left promiscuous mode 04:13:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x5f5e0ff}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 04:13:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, 0x0) 04:13:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 04:13:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x200000000000000) 04:13:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, 0x0) 04:13:29 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, &(0x7f00000006c0)="69e56bb9c80268415f47a9571988c1d54a5a3fc42aa2b76c0895dd923634bd7b1b9eda833c2c764b8acd413dec74a2e0bd42bd3d679a13c212afc1413d65684da285bb87147324b827277bc1a78903e92953b38874cd68332271169b999429b59972f30f7e741daff831a2419b615773ec", 0x71, 0x0) write$binfmt_elf32(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x1ff, 0x1, 0xe2, 0x0, 0x3f, 0xa4ff, 0x64, 0x38, 0xe9, 0x0, 0x8, 0x20, 0x1, 0x1, 0x8000, 0x8000}, [{0x5, 0xb9b0, 0x1ff, 0xb67, 0x0, 0x8}], "ca07583227a74e5a378741792cca2a935bee5c7ddbf67cf1d88904a89c320a8a6daef18b0b5f9083fd413141521907f354300ca9072187651347342ed6e70b80106125d9c5a33520dbb83b868cb2adced410b7d0f72ab30a"}, 0xb0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x8) keyctl$assume_authority(0x10, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioprio_set$uid(0x0, 0x0, 0x2d) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)={0x0, @speck128}) request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 04:13:29 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f000000}) 04:13:29 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 04:13:30 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20000000009, 0x8002) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000140)) [ 1325.143418][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1325.166511][T27105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.173846][T27105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.181303][T27105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.188548][T27105] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:30 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1325.232252][T27105] device bridge0 entered promiscuous mode 04:13:30 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 1325.347051][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x7fff, 0x3) 04:13:30 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1325.416364][T27398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.424580][T27398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.450311][T27398] device bridge0 left promiscuous mode [ 1325.492868][T27403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:13:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 04:13:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x101000) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5) 04:13:30 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x7ffffffffffff}) 04:13:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000280)=0x4, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/177) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000180)=""/155, 0x9b, 0x10000, &(0x7f0000000240)={0x1a, 0x6, 0x7, 0x3ff, 0x7ff, 0x100000001, @random="f1c33f1f3920"}, 0x10) 04:13:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1326.260656][T27402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.267898][T27402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.275290][T27402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.282453][T27402] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000}) 04:13:31 executing program 1: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0x4a9e280) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 1326.323479][T27402] device bridge0 entered promiscuous mode [ 1326.352917][T27501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:31 executing program 3: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0x4a9e280) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:13:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:31 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1326.554033][T27846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.562278][T27846] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:31 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0x4a9e280) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1326.604003][T27846] device bridge0 left promiscuous mode 04:13:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:13:31 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x1000, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffa}], 0x2000000000000028, 0x0, 0x0, 0xffffffffffffff7f) 04:13:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x200000000000000}) [ 1327.039151][T13290] Bluetooth: hci0: sending frame failed (-49) 04:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x208000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x87, @rand_addr, 0x4e23, 0x0, 'lblc\x00', 0x0, 0x8, 0x42}, {@remote, 0x4e23, 0x7, 0x0, 0x1c0000, 0x101}}, 0x44) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x7, @mcast2, 0x51}, {0xa, 0x4e22, 0x0, @local}, 0x100000001, [0xfffffffffffff10e, 0x2, 0x1000, 0x4, 0x5ecf, 0x1, 0x8]}, 0x5c) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1327.354737][T27838] cgroup: fork rejected by pids controller in /syz3 04:13:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@add_del={0x2, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x10000012e}], 0x1) [ 1327.493992][T27929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1327.503855][T27918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.510988][T27918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.518397][T27918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.525474][T27918] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:32 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1327.558500][T27918] device bridge0 entered promiscuous mode 04:13:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:32 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x600000000000000}) [ 1327.714722][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:32 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="24000000240007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 04:13:32 executing program 2: r0 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f00000001c0)=0x60) fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "0196551719d0b01209bdb2c77938cca4"}, 0x11, 0x1) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x49, "7d80d8135026a31f10f0301303f5cbb2f524e6d3e13ae8ac6840c7c9290c11671fb62aec5a4fb0800fac3afc6cb9484bf84b9186cec06dc862aebedb955efed1a70962dcf050dc33f9"}, &(0x7f0000000100)=0x6d) socket$can_raw(0x1d, 0x3, 0x1) [ 1327.761882][T28667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.769979][T28667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.799152][T28667] device bridge0 left promiscuous mode [ 1328.350654][T28700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.357868][T28700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.365278][T28700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.372437][T28700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.404053][T28700] device bridge0 entered promiscuous mode [ 1329.048749][T12310] Bluetooth: hci0: command 0x1003 tx timeout [ 1329.055641][T28126] Bluetooth: hci0: sending frame failed (-49) [ 1331.128215][T32187] Bluetooth: hci0: command 0x1001 tx timeout [ 1331.134359][T28126] Bluetooth: hci0: sending frame failed (-49) [ 1333.218500][T12310] Bluetooth: hci0: command 0x1009 tx timeout 04:13:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = dup(r0) clone(0x200107, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) 04:13:42 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:42 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1200000000000000}) 04:13:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) dup2(r0, r1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x0) 04:13:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDMKTONE(r0, 0x4b30, 0xfffffffffffeffff) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x77ac, 0xb, 0x3}) 04:13:42 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1337.603136][T28813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.611247][T28813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.627523][T28813] device bridge0 left promiscuous mode 04:13:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000100), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000080)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0) 04:13:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) 04:13:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) 04:13:43 executing program 2: shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x101440, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0), 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4a) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000440)="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", 0x1000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) ptrace$peek(0x3, r3, &(0x7f0000000140)) ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x17) ppoll(&(0x7f0000000040)=[{r2, 0xfffffffffffffffd}], 0x1, 0x0, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) fcntl$setown(r1, 0x8, r4) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0x0, @multicast2, 0x4e20, 0x4, 'lc\x00', 0x10, 0x2, 0x3a}, 0x2c) 04:13:43 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x704, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:43 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f00000000000000}) 04:13:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1338.501511][T28820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.508831][T28820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.516226][T28820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.523397][T28820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.596822][T28820] device bridge0 entered promiscuous mode [ 1338.631474][T28834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:43 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319b") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:43 executing program 3: syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) socket$inet(0x2, 0x1, 0x5) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0) 04:13:43 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:43 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)) r2 = dup2(r1, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_execute_func(&(0x7f00000006c0)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/53, 0x35}], 0x1) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) fcntl$setstatus(r4, 0x4, 0x800) tkill(r3, 0x1001000000000015) [ 1338.778088][T29360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.786335][T29360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.799918][T29360] device bridge0 left promiscuous mode 04:13:43 executing program 3: pause() syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e1a5f97300660f3a8e16649c675100617b12e5c441dfd04b00c442019dcc0510d46f") syz_execute_func(0x0) syz_execute_func(&(0x7f0000000480)="c4e379614832074a2be91c5a980f053ef3aec4a37bf0c50141e2e922eb36660f380a20266fed80660f38463da1637963790666440f7f1544f0000000f2d2dec461dc57b1e67d0b2500610051fa0040dbe14965f3400faec4f080484f0cb93801bd050000424cbec5c54d0f2c718f56676beeee8f2870b63b30319ebb70fe276565f0430f40b267f34cb4baf281f999899999a8271e664105ba16f2aec481522a418042f72bfd660fdf536bd1049999e1430fae27c4a27921f9d8a1a12ad76448c431ba5f4066bdc4a2fd4116c4417ae64d746746540e333321b5f50bf44064d266413a010f0f30460b76d14152ef00ddea9ad0818194d8000f18a040a90000c4a17ae64295c481f5f54607ffd2c422b59aa9a7a400002e36646466264683b9080000000d643ef30f115e8d5200003d3d98b9009500272e2e0f0f82a4000000b636b2aad9c741afc104c0414c59c4c298f3170f001e0000000026dbe3ed6641800d0af8760a56f20f1dbe00100000c4637d1dbc52ca71000000c565970d22045c0b672667f20f0c7d9200800000004cf92f5c65c413002d08000000009b42a7a728f356564401a9bb000042c441574974ecd53131fbc4a2750831c44109f89700008020") 04:13:44 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xffffffffffff0700}) 04:13:44 executing program 1: pause() syz_execute_func(&(0x7f0000000bc0)="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") 04:13:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200002, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x8c0, 0x9) 04:13:44 executing program 1: pause() syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c366440f56c9660f3a16649c6700650f4ef0c441dfd04b000f11d49f67") r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') syz_execute_func(&(0x7f0000000100)="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") [ 1339.626120][T29404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.634206][T29404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.642037][T29404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.649196][T29404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.668021][T29404] device bridge0 entered promiscuous mode 04:13:44 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1339.676918][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1339.701385][T32388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:13:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000080)=[{r0, 0xfffffffffffffffc}], 0x1, 0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) 04:13:44 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x2}) 04:13:44 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1339.854395][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0xbe43) [ 1339.901879][T30004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.909941][T30004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.942718][T30004] device bridge0 left promiscuous mode 04:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x33, &(0x7f0000000040)={0x77359400}, 0x10) 04:13:44 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:45 executing program 3: pause() syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e1a5f97300660f3a8e16649c675100617b12e5c441dfd04b00c442019dcc0510d46f") syz_execute_func(0x0) syz_execute_func(&(0x7f0000000480)="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") 04:13:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/16]) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x3) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7bb, 0xe22, 0xffffffffffffbd80, 0x1, 0x15, 0x7fffffff, 0x4ec56459, 0x8, 0x12f, 0x100, 0x100, 0x8000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0xffffffffffffff3d, 0x5997}], 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000300)) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ppoll(&(0x7f0000000140)=[{r0, 0x92}, {r1, 0x2020}, {r1, 0x4}, {r1, 0x1}, {r1, 0x100}, {r0, 0x1094}, {r0, 0x200}, {r0, 0x1}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x35b}, 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000380)={0x1ff, 0x7fffffff, 0xfffffffffffffffd, 0xffff, 0x65}) syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x2, 0x2) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000280)={0xffff, 0xf929, 0x2, 0x2a8, 0x82e}) 04:13:45 executing program 1: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f00000000000000}) 04:13:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x100000001, 0x80) bind$ax25(r1, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x80, 0x80) getsockname$ax25(r2, &(0x7f0000000100)={{0x3, @bcast}, [@rose, @remote, @remote, @default, @null, @bcast, @bcast, @null]}, &(0x7f0000000000)=0x48) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x7ff}) ppoll(&(0x7f0000000040)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) 04:13:45 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x6}) 04:13:45 executing program 1: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f00000000000000}) [ 1340.793982][T30040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.801320][T30040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.808777][T30040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.815885][T30040] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:45 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1340.868141][T30040] device bridge0 entered promiscuous mode [ 1340.890186][T30271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:13:45 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd0") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:45 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:46 executing program 1: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3f00000000000000}) [ 1341.076615][T30630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.084796][T30630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.098889][T30630] device bridge0 left promiscuous mode 04:13:46 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x12}) 04:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x4800, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x101006, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xec}, 0x28, 0x0) write$binfmt_aout(r1, 0x0, 0x16e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000180)={@loopback, @rand_addr=0xa71}, 0x2) 04:13:46 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7ff, 0xffffffff}, {0x0, 0x6}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30009007300000005000000e63f000002000000017e3cb537ecbd652bff05a0f5b81be1f55cb69b01c8645b7edad71bac5619601f11369b06c3ed101baabb206607e26704c458a362cb14c512daa9b3c2c52a6893214b4c54842c225fdc1ffe6e99714716b711eda98acc0934b850ee2387b493f483adba22f44516b3b62dd183033140e9f6469412c33ae31d663312ff5c7bc6412a9866f2a1763b5ede2d6bc42ec286b070c39c483c7fc6abf27401cc62253c220e8bb2c31fe980dea13dc86145170ab68a21742993dfbf62ab152e6c19dc6921fbc66e100759db941a8829864aec928bab9d00060000009de7229d4857458e282ca2"], 0x1fb) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x190000000000000, 0x4, 0x6193ca31, 0x5493099d, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r2, 0x80000001}, &(0x7f0000000440)=0x8) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{}]}) 04:13:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x3c, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0xa0d8e31) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) r3 = dup2(r0, r0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r2, r3}}, 0x18) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @rose}, [@null, @netrom, @default, @netrom, @bcast, @netrom, @null]}, &(0x7f0000000100)=0x48, 0x800) 04:13:46 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x600}) 04:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="81bc2f8b30cdb057c3f912baa0814759") ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1342.118304][T30646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.127490][T30646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.138391][T30646] device bridge0 left promiscuous mode [ 1342.461435][T30647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.468690][T30647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.476185][T30647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.483363][T30647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.498153][T30647] device bridge0 entered promiscuous mode 04:13:47 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:47 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1342.505423][T30649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1342.521910][T30651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.529150][T30651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.536538][T30651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.543790][T30651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.557545][T30651] device bridge0 entered promiscuous mode 04:13:47 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:47 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1200}) 04:13:47 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1342.662065][T31286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.670212][T31286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.717288][T31286] device bridge0 left promiscuous mode 04:13:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:47 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f00000000c0)=[{r1, 0x80}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x801c0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x8, 0x4) [ 1343.040279][T31600] QAT: Invalid ioctl [ 1343.055593][T31600] QAT: Invalid ioctl 04:13:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f00000002c0)={0x2, 0x7, 0x8, 0x7}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000300)) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000003c0)=""/188) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, r3, 0x14, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4eb}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9d4d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x120}}, 0x8001) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x24}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x15}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x124, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffa0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5edf9ec4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf818}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:48 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x3f00}) 04:13:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) [ 1343.495455][T31293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.504010][T31293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.529111][T31293] device bridge0 left promiscuous mode 04:13:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0xc0200, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x276, 0xfffffffffffffff8}) 04:13:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x400004, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1344.020515][T31292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.027735][T31292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.035137][T31292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.042397][T31292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.057293][T31292] device bridge0 entered promiscuous mode 04:13:49 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:49 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000}) [ 1344.065843][T31297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.073004][T31297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.080447][T31297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.087548][T31297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.120283][T31297] device bridge0 entered promiscuous mode 04:13:49 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(0xffffffffffffffff, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:49 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1344.247550][T32131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.255564][T32131] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:49 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1344.359963][T32131] device bridge0 left promiscuous mode 04:13:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x2800) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000001c0)=""/229) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x4, 0x0, "175c7b23373f23fe903b48bcc0192d7665f2cc08e64fac2fa679ff0e37d67e9e140a291edb45480ddb697da693febe7a328d6d502f6e08dce08b37a8e88b22ae6a693ee3978f5eb9425edd71d2807b56"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000002c0)) 04:13:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='/dev/ptmx\x00', 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x22400, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @broadcast, 'vcan0\x00'}}, 0x1e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4b0080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:49 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000}) 04:13:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x4, 0x3, [{0x3, 0x0, 0x5}, {0xce}, {0x40, 0x0, 0x7}, {0x9, 0x0, 0x1000}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:50 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1345.264330][T32152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.272355][T32152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.282977][T32152] device bridge0 left promiscuous mode [ 1345.542204][T32184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.549358][T32184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.556755][T32184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.563909][T32184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.580782][T32184] device bridge0 entered promiscuous mode 04:13:50 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCSETXW(r0, 0x5435, &(0x7f00000000c0)={0x0, 0x10001, [0x7, 0x5, 0x1, 0x3f, 0x2]}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x18201) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1345.592692][T32203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.599913][T32203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.607286][T32203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.614427][T32203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.660375][T32203] device bridge0 entered promiscuous mode 04:13:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:50 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x6000000}) 04:13:50 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) [ 1345.707147][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.715446][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.758562][ T408] device bridge0 left promiscuous mode 04:13:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x0, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x480) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=@routing={0x88, 0x2, 0x2, 0x8, 0x0, [@mcast1]}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:51 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x20200) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000100)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x4, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) r4 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000004c0)={{0x1, r3, r4, r5, r6, 0x11, 0x7}, 0x4, 0x7c12, 0x9}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r7 = semget$private(0x0, 0x7, 0x80) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000080)=[0xfffffffffffffffb, 0xd67]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:51 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x12000000}) 04:13:51 executing program 2: r0 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "bc8afabc4092bf5e6d1c2a56aaec8c0cbf982e946f1de5b2712697e643596b8a30b785fa7c932dc8657ea66a7920afb11cb0589e81f61c6da09e26be95d02005ecef919e08808c251bdc234fb2c767d9ef669d905dd2422d257fa710f4bea285c5e42e6fbd9c8e609b83a48db1cbb5004945bd337bce04dcc4e8e9dacaffd2b274fa01a7d5e944ed5ec01da4caf9472dae4dacf277da714346cb750470366ff68dac3c6bf0d0cf81f0b9a84e00b83089363529822a8b988cf5d7ad89811081f19848017abfd6df6450cc"}, 0xce) r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4) personality(0x4100001) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000002c0)={0x8001006, 0x8}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r2, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x80000, 0x0) write$ppp(r1, &(0x7f00000002c0)="5abf68fcbae6df7721ed59ce6d4eee71f9658768f43f0e883a334c8dd550598287acdcc01fd84699279e54db58343e80f640064a28aac1736aa1997ec923f1350ec4929442181ddccc21b239ed2f69f3ad47a54804407fdbdb56089cb4aedcd6b4a206fe23a9", 0x66) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x64, "26c2aec67468ff9702469557abf1bbb798e0f3218b7e5c555946ea3c546adbaa9fe914aa2d8f22fa211d0eb69fb15b542f4176010c92476eadf752601315c2b385581fdf6e0e488bc936d012b9f7500be62817408617dfd41250bceb5433e559c0235689"}, &(0x7f0000000280)=0x6c) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1346.561927][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.569160][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.576559][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.583730][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:51 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1346.659800][ T465] device bridge0 entered promiscuous mode [ 1346.677519][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.685578][ T479] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x80000000, 0x2, 0xe, 0x3, 0xe, 0x100000000, 0xffffffffffffffff, 0x80, 0x101, 0x2}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1346.748078][ T479] device bridge0 left promiscuous mode [ 1347.128171][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.135344][ T517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.142794][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.149947][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) 04:13:52 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x3f000000}) [ 1347.184852][ T517] device bridge0 entered promiscuous mode [ 1347.210199][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.218214][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.266712][ T1056] device bridge0 left promiscuous mode 04:13:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:52 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xd131, 0x4c00c2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1347.668619][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.675744][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.683215][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.690363][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:52 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1347.778140][ T1058] device bridge0 entered promiscuous mode [ 1347.843557][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.851676][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.878273][ T1186] device bridge0 left promiscuous mode 04:13:52 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x7ffffffffffff}) 04:13:53 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000000000}) 04:13:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x80, 0x20) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x240) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x60100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0xffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x400, 0x400}, 0x0, 0x0, &(0x7f0000000240)={0x98bc, 0x0, 0xaf, 0x9}, &(0x7f0000000280)=0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x3}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0)=0x4, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x6d, 0x7, [], &(0x7f0000000100)={0xa2092a, 0x80000000063, [], @p_u32=&(0x7f0000000440)=0x3f}}) write$ppp(r2, &(0x7f0000000480)="c5234acbecc16c4998e3c2215d855eb8406b02a8f30a5bc860b4a66b8e358b9a0171808d40899d89aab20b7c0e4c7ce47547cceac2600c73d272d1479dd6b447ca9246feec1dd024452f34fc29594a334ad934d238f4dc8b7b960faeb5cf9ed3", 0x60) [ 1348.639500][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.646670][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.654568][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.661713][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.692193][ T1245] device bridge0 entered promiscuous mode 04:13:53 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) 04:13:53 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1348.875837][ T1658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.883231][ T1658] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x100008080, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x9, 0x3f, 0x6f, 0x51, 0xd, 0x0, 0x0, 0xc4, 0x7, 0x46, 0xa000000, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1348.927258][ T1658] device bridge0 left promiscuous mode 04:13:54 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x200000000000000}) 04:13:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0xfffffffffffffff7, 0x400}, {0xffffffff80000001, 0xffff}], r1}, 0x18, 0x2) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1349.175456][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.182806][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.190278][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.197458][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.307541][ T1659] device bridge0 entered promiscuous mode 04:13:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x9) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x8000, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fffffff, 0x0) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000100)=""/208) r4 = getpgrp(0xffffffffffffffff) r5 = geteuid() getsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000700)=""/169, &(0x7f00000007c0)=0xa9) r6 = getgid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() r11 = getuid() fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)="6fd056a2d289b9e8756b4814ffb2433bdfb758872d03544393128f9fef9431ae6b67be4c011f53cec3f3c56c2d74eac072abcd3ab2bf7aefd49b425f61dbd75c866bb9a594db33ee7b8f4d57b225e563702aff37896f5fcf9e719da7c156cc56e4a2a828e270da335eb651313f5b3c891170e22a6d24449b195df4ea54bdf51092fcb20a66", 0x85}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000002000001", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x48000}, 0x4) 04:13:54 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:54 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) [ 1349.348231][ T1882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.356382][ T1882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.411643][ T1882] device bridge0 left promiscuous mode 04:13:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) openat(r1, &(0x7f0000000100)='./file0\x00', 0x40, 0x40) 04:13:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x20000000000001ef, 0x0, 0x0, 0x0) 04:13:54 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x600000000000000}) 04:13:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000100)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x10000, 0x7, 0x81}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) [ 1350.241491][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.248664][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.256059][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.263216][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.288118][ T1890] device bridge0 entered promiscuous mode [ 1350.308106][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.315306][ T2205] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:55 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1350.348106][ T2205] device bridge0 left promiscuous mode 04:13:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x100000000, 0xa) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000100)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDSKBLED(r0, 0x4b65, 0x9707) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffc}], 0x1, 0x0, 0x0, 0x0) 04:13:55 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) [ 1350.604409][ T2210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.611625][ T2210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.619114][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.626223][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:55 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1200000000000000}) [ 1350.741063][ T2210] device bridge0 entered promiscuous mode [ 1350.766418][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.774585][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:55 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1350.811884][ T2536] device bridge0 left promiscuous mode 04:13:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x3f00000000000000}) 04:13:56 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000400)=0x2) recvfrom$llc(r0, &(0x7f00000001c0)=""/213, 0xd5, 0x2, &(0x7f00000002c0)={0x1a, 0x339, 0x8c2, 0x5, 0x8, 0x8000, @remote}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0xc0000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x80000) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x8100, 0x0) writev(r0, &(0x7f0000003880)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="dbb994010a0888b6523b23426d10d0050a894ba97363483b8e04dae199e59aba5bd4c128b1f0402916855f1c829a464d546f3afea19b88fd406c527af38637f0fc6f17f238d3fcd2a06c7894d45b6ab07952fd05a9081b34be3e15ebca0e97a8f0b9ccdef659b157892e423c27753e4507b946e7d1d54fc13217b534fa01eb4097e69a3098c456a9f4", 0x89}, {&(0x7f0000002600)="2805ef85ede0a809ba1b92befd4c47425375189a3ba509e9a3f0d1c0ea815adfe3fe01544ef47a0c09c1e56cf8dd62af36175044ff8c6a9dc5af08", 0x3b}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="428173307377f29f2a8afbe32c40ad25f9d5bf5487f7deb3639c55b81dc5e41791b0530bad852d0d55eba073bcf97c5e9ef00ce94037e5cd410a5ae06668be8b94b9b773731976df912c46777107fb343cced83cc543273f8f3341fb36e6ce76bd673b6fb080fcaf96fc18d6cf26ab3509dddfcaf5f59c9d22244bb7f9767617684590034002c67903629b1a1a6adf772a0cbc1a807b265ecb1cb771efe624199094ebb2bfc0ed603d314accf0491c8ba682ae58da8a11f8258e", 0xba}, {&(0x7f0000003700)="43e29b8d712d9a8c0394fafaeab8e50d1cea84434fa09e6b5211e336b69e704cb398f85d2b08e1333a47ea8c47af84a6343f962e273c0c461b7102ad0fa3cd64bf44b5b3e573e2cdd2fcf2e464bd9b0dcef9a661fb6b2f22d236de4d52ad336a35667bc52d09acf6cf77ec077b0ad01ea3fd2f3dbc25b5fbb6572f4b462e9d0f6765a1950df22dd60210fda27c7ffdd35941dcef5862e3beba7fe6f521ee0a2697cbef4f4717c98e6b9f736328287b659d0b738cf980016dea602100b783d5f76793e0de94d0fbe8b9fb1b546cd1471f6d9fe2e28968d1673205", 0xda}, {&(0x7f0000003800)="d60135de8ace4d5b9f3a235dacbd8ea9f8099265e42f247093b8a48bcd076f99952e19fa85b396981e42560dae915df5890aa9adde87ffd44fdd79e25e44be7436fc4091deddcc7b8aa8f2504835c831ef404ab4371f52", 0x57}], 0x7) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000440)=""/4096, &(0x7f0000000100)=0x1000) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001440)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) r6 = getgid() keyctl$chown(0x4, r4, r5, r6) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x802, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = syz_open_pts(r0, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bpq0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x9) ppoll(&(0x7f0000000080), 0x2000000000000033, 0x0, 0x0, 0x649) [ 1351.693357][ T2544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.700510][ T2544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.708011][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.716271][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffff0700}) [ 1351.793241][ T2544] device bridge0 entered promiscuous mode 04:13:56 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 04:13:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1351.972905][ T2764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.980357][ T2764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.993588][ T2764] device bridge0 left promiscuous mode [ 1352.138431][ T2765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.145593][ T2765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.153183][ T2765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.161882][ T2765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.205316][ T2765] device bridge0 entered promiscuous mode 04:13:57 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1352.252328][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.260340][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:13:57 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1352.329419][ T2995] device bridge0 left promiscuous mode 04:13:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x75f0b0f3) 04:13:57 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x2]}) 04:13:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) sysfs$3(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400800, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffea3) 04:13:57 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x6]}) 04:13:58 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x12]}) [ 1353.532279][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.539473][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.546885][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.554035][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.597957][ T3009] device bridge0 entered promiscuous mode 04:13:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1353.645477][ T3243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.652737][ T3243] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:58 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1353.697896][ T3243] device bridge0 left promiscuous mode [ 1353.839174][ T3251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.846459][ T3251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.853933][ T3251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.861168][ T3251] bridge0: port 1(bridge_slave_0) entered forwarding state 04:13:58 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1353.895944][ T3251] device bridge0 entered promiscuous mode 04:13:58 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x600]}) [ 1353.999727][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.007928][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state 04:13:58 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 1354.053694][ T3711] device bridge0 left promiscuous mode 04:13:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:13:59 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x1200]}) 04:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 04:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000000082, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) syz_open_pts(r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x240400, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x0, 0x5, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000180)=""/244) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) r3 = getpid() rt_tgsigqueueinfo(r2, r3, 0x0, &(0x7f00000002c0)={0xb, 0x0, 0x1}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0xfffffffffffffcc3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f00000000c0)) 04:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = socket(0x1d, 0xa, 0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x177}, 0x4) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x19, 0x1, @thr={&(0x7f0000000080)="d85aae509262d0e09dbe88a8b6e1db3571237ea53a17a5c73e6b20bf5fc20471e1586f45756988484d", &(0x7f0000000440)="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"}}, &(0x7f0000000100)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x14001, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="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", 0xfb) timer_delete(r2) [ 1355.125878][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.133054][ T3712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.140533][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.147647][ T3712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.188027][ T3712] device bridge0 entered promiscuous mode [ 1355.218658][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:14:00 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:00 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x3f00]}) [ 1355.243565][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.250879][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.270966][ T3775] device bridge0 left promiscuous mode 04:14:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1355.481918][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.489142][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.496558][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.503731][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.552001][ T3801] device bridge0 entered promiscuous mode 04:14:00 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0x0, 0x1ffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x82601, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000002c0)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x2000}) 04:14:00 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 1355.686215][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.694198][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1355.779285][ T4350] device bridge0 left promiscuous mode 04:14:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="b81400001a00100029bd7000fcdbdf250a00000614006c00fe8000000000000000000000000000bb08002100", @ANYRES32=r3, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="5fafb2c9c5fa598f338ccb9c3a48072342f1dbadb9efc293cf9bb2a0c18bf4d0095b464a9c687ee0a84632126f0fcbb44a48cfc2bcc09392436846d9613c8100a4520e52c751f70fe78f7638c2ff5cb464dc5c6828e630f4c99e0d84c18d2407f4a4965ac310336b461fc1", @ANYRES32=r3, @ANYRES16=r5, @ANYPTR, @ANYPTR, @ANYRES16], @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES32, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYPTR64]], @ANYBLOB="18006b002f6465762f76686f73742d76736f636b000000006b765881b0e32a77595d709adb2f8415676f33d647b46286da780107984d26b0d8b467dec719abeed47405a9367051ccd620df7de11011116ef5603f3290cd782fdfa04f566d622cf28138b09e37c303b21c1efb4c3b9d4707e13b70074a30a0b4277ad3c2e3c60790bd748d0e848f0fc99fa3aa8764bb4854568c0347cd118d15cd26d8c117859ade43507bc48235b588b4c6c50635350abca678d9bfa5997ba430dc667fd5c540e381bab4656b0c7ea51e9a30e17e7d1b791671acad630dfdbdd9b3e4c7c91e2c0fa2efe54bc5a9e84942f4269cffb166b78ea48cc6097d98fbe5901493a3661f7087e2a5a5b664c927cd9cc8f2b82a97ffd09f7c32e9360d84ef9280f23f12cbd1d60b905815e2e8009f27f7741aa582ca456f2cd7bb3bf92bc0e146f1e5103ed9fd8c10ea495263c46a8a1c8a22702fe97ef3b871f92033f15f0675789d0dac6947a6cd78d2935177e6d52c533f598ad54813a1f0ac0a85193d9dabecb8beda45a5ceffe922218e46e92de4d12b7430e3cf78e237b8deb45062f2d4165c4a313b08ff32dcfe094457106d33e73270b14830dbf3e4ecf576e367c412af4d18fd9a9e06de40fc8b69e37ef1d7018ac3a1acce002a986bd1107f4b6d007da983a61ff062afa259f44d1dc47d74daa5a6d22e8e1dff1ba6553bb0467f2fdf173f4c040f6fccc382cbceea34bbc8e01da43bb307e7c62e645ab9402adbddffa0f6e49aa83bdc22ca371b24e1ddcf671835614b32fbedb68f3fe465ba47b34f1c1d762c5f67fdcac72f3916cd8afa9929eb8cae8631708e8ade1208f98a9520eb3d605316d45da049dbfbaae32a815baf098405ebf88af8f02cf0c212c105b168a6c8bdab90c7047686838620d6ead19c907342236ce7aad7f79694ef1f9e359e02940f60b188f3971733c5be57521449ed17aa6ae89f81336c6c714a92a6e3856934b4fb4dfaee312793beea49ff82b697489e4ec681b202e05171733b6564100f53b0766da3d51fd08c58d3a2f903c576953435bd898863707ae7fc08cef0b4bbc997b0c3d387cf6c1b42e67b8aec8590190caaa9ea71f35f324ebffafcac61d859a01fbdb4b63ae2ffd7da5abd5b7cbb6ffa0b54e9402fc7f4f5d7c6a499864445033b1846b2607889275ae1e3b30183d505d0eb2d06485f2b1ea7e11e9e00495c14902cd726f35405e0a4c17c4d4b823d31f3930647d7575feb3d631dc06d7bda5b107c509fdad82c8fea09352056ea710e2cd867833f70b2436866c7d0e2da6970ce345630fc3abb001e0ca9c0a6ceeb120318228113cb0892cc33cff021f5565f503860721585e4524776e5e53c103e7dc79d3da7f9b740d05b9635b84091dded6c4dafa3d490263b9f580d91d840f2232858a55bb3d420ef4ba8b8564df7b29d33679a8891a8c88a552fef00606604fa72a3a8bf7d46508206f82bd704822ab71289e9e7fd5d42b03f96fb866f028527a14a5620884b614b44dad866de23db5f5dbbf742347de5b8724ca14a405873d3203a33ec089c28d0a68ac0fbf24d87e5749daeb0d2164a60da6fc23b433bfd64fc575a3b80ac9430bb82c01c43301de56ccfb6d07ef37b41c80dca35f6cec70d56fd32e0dfbf3de7d69d59523ecd16d0752aa22fb279877fce6300f1bc6e88f0a13ec3e10f0f43b58ab42d94fd062102e661b96c5c0f76ebbd4e8e7ff9a5fa4158da30509e0548f6134c274d8b05cdea0d8ea1b42e7c3e60a74668d148b3d4005a54f8879b6a25165a3d8eac936d5053d4b04b3d72e79adf479ebc024365a21c86d3e9cef4fe1a121cfb137569951a00476d92dae611043bcc067ae26f4c20797e933bebc74fceb6eca5fb0b96c3b3fb95442076f014a435ed3dde9edd7357101de7445bb3af65e1c1403c560609ef2497f3c2025924de0f4b3176458b0c5a328e5e0fa20f0464095ad61b23149ddc1c21b00e951d80846f8a78dd3dd8b22b293a550fe59873e853086da7507a3cd102259db0935868e698c8ba515ad513d2e7bba331eb8ede982e61ec02013a1983181d7865b73615efe877070178173b371496eda891c3bcfbb34fdb0efcfbd4010bbda97a0a29cb9432ff496d7d38fc13fac37512e125e0c0a6c76e174aabb223a235b184f5c1576a442304fd347a7e80546cf6325f087a7a6612178edef89ac5f254e646fe53d850618901e05086a812e29d85148b9127e160d101bebb734c3a8dc72e370f7cee8a6d0ef936d44c89e6dc543a9fd34a1104efdea5942b968f118b77b86fd5047c39ba11b0409dbc0a0362c740b34048aaa6e40777087ac7b6c46dbb78460cff52b4a4a0565d8b2699c47d6778d096e17fcbc84963dfbc61b31288e5329844627d2c5a9fa9b7e7a9ed10f23d588ab92f80398d2288b544a85cf946856a540301d93e729e2428453c387d7f7078b3e563ca45aa6a382444a83521a4e44cbe27843ffdc4c01a1005cac2e15708f08959c967b26bcf589bab4a4fcc882466a4c55bac608e0ac860d4b934a3c5e1f8929404050cf5f85099fb3b9b8167b526628e6e7e6638b4a1978884f3db1dcd8537e4039bce64aeb04f6b55539320713f394307cf8889a639d2076e474d95e1bfb5d37aa105e5aa9ca5ca419dddba8ca07712bae4f04b8d9ba8d79138ac975e608663d41e8e56b52526aa32d70a4ad0591a99514de572eb825977c7e82f4200f7640e5bcd08a0499c61f44eda955ac287eec1ab85b4b8062802bc30b8c42f70298d4cf4c75fed9bdb00bdf09811a7e6ff5be3dd0e9084be99ce4150038f88a5940c630866e39949b9483ce319549f2f7f0dd166e839d0234875fcf7d45e5bfaf431569a6c920631676b8b419cc407f4b983e1c2afff7b2520b370bf1d36882c565133a3f3dac27b0cc99bed3c4dc13d46afc9aaf3ed83fdf9c9b03672b017545db7264b6a31b613c39d925c85fe99c6478f60b098cdcead1b2e8768684e569583215f23c7764ff8be837eb992ea824666b4762ae4e528e9a8d12049c1f149b1bfff808d354b03621c79a071562b017ea55fda3c247f18579575ac5245b9a8cfe5e5abc033adb774a93dccc40275f6703807e0fce63b179a8070ae7d35b6e995625b39d3af75935e9a54994b42443be8dfff91c82d82719edb79bdc8f4fbd9e89940a48e84f297fbc61396f714704a00eca00cb6bc0b84efa6456ed5a897bc170015ef5031b083340204d7b00a5c438e923994d3c7c731b0e84e1479518f02607e72b362fb3c2203db645ccdb864bbf38059530ce26679e6a35205d36bbcbd39f12c1393ef9e58bc213e72e55717946312853b65492ef2d023c867553edd078a4fa159c762049d2648c779d635f073bc39487c0b8356801758923db25d57cc7bd9fab97b37dadd7882a30cbcca28a670144e6efef46d00a4f9a4fe934d73f886b68962750b892ec9a601ca00e5652ae70928ec7b48bc54f047b0ac14119756b6250c818202cbe5b3404ab24b5bef43890c74161dc3fa032e0772e5d1f7daa39c6e43d3b057833796c486ab94d23fcb33023292f173f7dd1a543edb7e2757714264fafcd9be5d5520519b94496b02594406c1c17505eab7ac36bf358f753acc6d1bdf2d5c33b4620db0a63fad8bf97501bb624fc1f280fbbbd21db55f5c400a4f00e462b9ef7baf332ee0351f280aec3c47c293fbcdc0c1a0311e364644b3118995681fa7f74f5f5a3caf0a041a45d2c00e306309c7de2abedab986960dbd1dc90d6ceb70e646d18ce0f4807a001e95122ba2a4ac69bbd7d74133da7f6ce27c04273a99d830aa80c3418c018492e73a4016173afb43d93749f72e69324f3cfaad08684bb4f298b41374c56a3fff94debd6b9c3666672bb48e846094733da5a102888d014b69c75d20a8a7e33bfdf85948fb487ff8306fdbcd0b71d9f04d7b0fb018aef3c59f2b6b87582103ddf41dc8a94945f7e315d5f8d591ff18c9ff5497bc9f3f9570ea99495200cf0b77d4b122ac6cada75adea4533e876d6e34a864e10e4260f0d3b48a7cc2cf6814cacfa741f6f00c9a1fc5746a56789db6ddb7e422ec523613c4ac51f4c4a409cf40a28841a4c22a3ce76f29ff48a950285b931ca65132c1935f46e9e1052337863ffbc8b19d236079cdd65f2c75dfe6c7eb36be58863f3e36944bc177f915b318319601458f8962a0e206237aa48ca9e13f61997289e16fdf9d00e100801071049f23c2f833f58574cf0b73af0da6b278c896cb10b8b724186d4045a33731911c5e9ce415b550f78bf6b8696b56c4a63b31aff57f0fd25ebe8a825e3882cfd671be56776318d8052a3c82f41cb237043614744bd4eeb5cbc7f9aefb893820434b74b943dda430b55d586beec750c4e5a10351774d91ef405effde163a17c4330141737498e441d45164cb92a4d100aae73b2140e9a6f0ede6587c1a94bbf10de621df112928ae13ac19af63fd2b84da99447a6ff55d83ef866f9bd137afeee9feb355091e62b3828385e041a5b422d997e27f0518b181851a684986925b551406eff622fa9f49d23a04550d62a9174bf95de5a88adbf8a90a9831667db65396aefb85335a80ba4579a77b2aa0db399708125c418c05a0e1f55a15dc009001262c79e62cde3b5a5cd18229181ce56a0b10894019e83cf0e9cfbca0392cade2c62acd19e93695270c5a0264b9a730b03909c0fb50246c8124ba1dd537079078a14435a953083f8aec312f2463890e99b4b788195a4566313201c620c80e70f8a8219efcaac049da6f388e6fb9e446889d234ebc8224b192359af18f3619fcf30387db59eaea33ebe7d0fb2e75ef25bb0ad6e67577cdc868438496b2f9b5fdfb8f516df59d1b620b2b4a6513ef0fbf1d5d1da718361760c2a456370f5c03741c37a3668ac0fb09bd1ba4dfddb3dd0bf80bf1bdd4190e4dd65c97e65549d207b2e68c9ce5264c4d05349079c230ae26077cf241172c848c424ea5bf905d30c312bfd603db0ddeb06619aecbba4252df77c91262373fb21e7a91f11c44a0113299833da68b86a8729e90ccd6e01bddb956c4068c678b73170506a95ae36439b8a1b5d82d83f3841af1f6f3c6908544ad43f169da00b90bc064a35a7274c89aba9fb613536d2e10965ebd28b92f8b1fd31633d9d1947bba92a899fabbeca73cb41cfa5c7ac6209bfdb7bd711de5abe950012918fc272dd8a0feb2e07ff6b7ad1069067e9029531cfd7ec59cf085794979e39c92a2e5432e0ba2692b287c4e06d3f21f9e901bb01b5935130921c9b32e041e0373c5a77466ebf6a47421f9716fcf18df2cd1cefe41bd618276474a537556e14b2b060cda83d03d8ca32c4bfae09d0f062f474b368e380fc5d385013611539ca9a25508f4bf5f358082f7524d9da7f37db8098532defbf0b5954629a649287d93e0224e1562a01ca928fd3c5dd2314f04bf8cc0c10b2e5d7eae2585833f724faac7356e0ff924fbe65109a3901546d46f6a5006dff5661c3525838a90ad05c6af40536c566a01802d7ac8f35c38029a4101f3bbca10e19f039b5e7494d8eced26ba57caeb8c1d2171da4654ec3c61f2455ec24f2f6d628c30e105e280c647c4208f98eb6fb94d307f8bbcb994ea4122053b8e4da58d087adbf79ae260958f71166e5b124062ad8ed0049858e2b02108a6deccaf92a752d3c79fa396e9972bdaefc6a1499bc6a900e6192840005170e532b820a3273c8ffc87f1b71b5bb9fefb2dad477d629650dc66fce2e205aa2d8a40102c1603fd7c7bda5f5fab2f5896b2e53a8d22947fb558889ceb90fbadfb0f0930c5499b6367d4ac23ea2eeb84d9ad4246d7b8444e4e7c023e3e82b547513226ada3434cbf5f3eaab20b4cf56f8c0fe6d2a18fb9fd70f70d5269239bc247880356cbda14c809914c045ae4d0158fc6a0ce687e2ee216e8495d7ec2ad4c7aa2c5533e4a4f057d1315386acb99997f535c205f7c5befd105e7a256cd7d3b65fed773fdc6fb06170a5939ba48d8670074fcd6d009073735a17496e4421e14b28acd90347bae3d196b00ede9b14b21a205fa8732a604b446965a44f90032597ff0f56599456f9dd69ea2897a340d78d59d64d233def827b06e06222fab1d9904007c00000008000e00", @ANYRES32=r0], 0x14bc}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) dup3(r0, r6, 0x80000) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140), 0xfffffffffffffd86) 04:14:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xc646, 0xc840) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x245dcc8b, 0x4, 0x7, 0x8, r1, 0x101, [], 0x0, r2, 0xb43, 0x7}, 0x3c) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:01 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x1000000]}) 04:14:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x204800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x4, 0x10, [0x4157, 0x7fff, 0x7473, 0x5]}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1356.567782][ C0] net_ratelimit: 10 callbacks suppressed [ 1356.567791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.579412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.585283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1356.591147][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1356.731444][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.738605][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.745998][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.753162][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.804691][ T4354] device bridge0 entered promiscuous mode [ 1356.816283][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.823543][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:01 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:01 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x2000000]}) 04:14:01 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 1356.860021][ T4626] device bridge0 left promiscuous mode [ 1357.037436][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.044656][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.052128][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.059258][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.066712][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.072589][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.127833][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1357.133762][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1357.134228][ T4674] device bridge0 entered promiscuous mode 04:14:02 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1357.317764][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.325791][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.336005][ T5001] device bridge0 left promiscuous mode 04:14:02 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x6000000]}) 04:14:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:02 executing program 2: prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101000) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x1, 0x1, @start={0x8, 0x1}}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000340)={0x5, 0xa, 0xfa00, {&(0x7f0000000840), r2, 0xfffffffffffffffd}}, 0xffffffe4) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40, 0x2801) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x102e22e7, 0x800, 0x2}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:02 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x12000000]}) 04:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000100)="7f10af6358015cde0debe06c4560ac5fdc5aaf0d8434af00f234858efcacd456904660020fae6b0faba998", &(0x7f0000000440)="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", 0x3}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ppoll(&(0x7f0000000180)=[{r1, 0x41}, {r2, 0x4080}], 0x36b, 0x0, 0x0, 0x0) [ 1358.452167][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.459318][ T5005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.466704][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.473882][ T5005] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x7, 0x1000, 0x0, 0x2, 0x7, 0xbadf, 0x3f, 0xffffffffffffff01, 0x72b4, 0xfffffffffffffffc}, 0x10) ioctl$KDADDIO(r0, 0x4b34, 0x100) 04:14:03 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 1358.518193][ T5005] device bridge0 entered promiscuous mode [ 1358.531731][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.539028][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.555294][ T5140] device bridge0 left promiscuous mode [ 1358.748348][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.755471][ T5200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.762943][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.770203][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:03 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:03 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x3f000000]}) [ 1358.819180][ T5200] device bridge0 entered promiscuous mode [ 1358.884458][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.892385][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.960072][ T5756] device bridge0 left promiscuous mode 04:14:03 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:03 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:14:04 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x7ffffffffffff]}) 04:14:04 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x100000000000000]}) 04:14:04 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101300, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r2, 0x424, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="970fc46001a39736b9f582e5564e70b7"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x48880}, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:04 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x200000000000000]}) [ 1360.090026][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.097275][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.105073][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.112214][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.154126][ T5858] device bridge0 entered promiscuous mode [ 1360.177055][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.184325][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x1, 0x0, 0x0, 0x0) [ 1360.219067][ T5939] device bridge0 left promiscuous mode [ 1360.418489][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.425669][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.433148][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.440275][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.508013][ T5969] device bridge0 entered promiscuous mode [ 1360.555599][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.563508][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:05 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:05 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 1360.595033][ T6304] device bridge0 left promiscuous mode 04:14:05 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x600000000000000]}) 04:14:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) dup2(r0, r0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getresgid(&(0x7f0000000580), &(0x7f0000000340), &(0x7f0000000540)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x2, r2}, {0x2, 0x0, r3}, {0x2, 0x7, r4}], {0x4, 0x5}, [{0x8, 0x6, r5}, {0x8, 0x5, r6}], {0x10, 0x5}, {0x20, 0x3}}, 0x54, 0x1) 04:14:06 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x1200000000000000]}) 04:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote, @mcast1, @local, 0x1f, 0x8, 0x20, 0x100, 0x9, 0x0, r1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfffffffffffffffe) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1361.601738][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.608948][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.616336][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.623529][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1361.671972][ T6305] device bridge0 entered promiscuous mode 04:14:06 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1361.764082][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.771390][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.795368][ T6411] device bridge0 left promiscuous mode 04:14:06 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 1361.928053][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.935221][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.942723][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.950133][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.968009][ T6417] device bridge0 entered promiscuous mode 04:14:06 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1362.002822][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.010775][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:07 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x3f00000000000000]}) [ 1362.109987][ T6842] device bridge0 left promiscuous mode 04:14:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:07 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0xffffffffffff0700]}) 04:14:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0x49, "cfa332", "69171dc86f4a9c17dfad56feb994d559f50d8ad1521c4515691027641e8cacb3a1288274a9c1465273f83ec6c48afb6d7b3845b55727a4f7479b8378f5091703d0a33ac6fc2026f3a2a3e5ab3a0cdcd4f60cfa356aff5f7889277d446732c8eb3dfdf65f31597197201d8d7157629c537fb3afddb308e20d2fb9bec259404c2991737844ce7be4b840a6083773b9250ed099e372958e61edf24ff35548c20b395a9bf893858567d05331404d7540022c273e929b206d01604604ddee64ec36e9db1049bc27b8eedd24a17d65bff40a212b31883a7e82160273e7b00deddabcc94f75c560f5be9172ba2d86d7f656f7d69adceab51cf5c1e730aa5ac583fce81c"}}, 0x110) 04:14:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x169, 0x0, 0x0, 0x0) unshare(0x10000400) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) [ 1363.020593][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.027737][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.035202][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.042378][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.087960][ T6843] device bridge0 entered promiscuous mode 04:14:08 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) 04:14:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1363.136403][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.143651][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.155292][ T6951] device bridge0 left promiscuous mode 04:14:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = semget(0x3, 0x2, 0x620) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/223) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:08 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x36) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:08 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x2]}) [ 1363.416195][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.423418][ T6955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.430877][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.438007][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:08 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) [ 1363.505885][ T6955] device bridge0 entered promiscuous mode [ 1363.532664][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.540764][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:08 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1363.590990][ T7376] device bridge0 left promiscuous mode 04:14:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:08 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x6]}) 04:14:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f00000000c0), 0x20000000000002c0, 0x0, 0x0, 0xffffffffffffffe4) 04:14:09 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x12]}) 04:14:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000840)=""/4096) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000440)={"71b8ee540b498156f65788332993a918e0d79fe7e0180b4908758d8b9fca70cd7d90037bd8b4af8b4fcc1a59827df163f1a58b8fcbbf300e445d0dd79f53a104b1a569640ee432e97d073d9bb323e23995448ae76e479059c12d771d4f0de321c64fc188f7a7b4f1a20a806f70ed05f66c9e848174d5480dea29b303fa69e9d104ab130d4b99ca71ae1f7a56ba6fe81f5f4c74bdfd492e1a2db0f61eaa4d2a0c72f0a0d0fd0b3c288286d8b2e4db712db2b56f46b88d37222d9eec940882d2d049b89d96dfb0f63db55c7c327b940c52203f1f917de1f6d288a853456362dbc5a6a5b09a851c578b165a299ac0f38c89b291aafed882b00b51766b733a3481a4923529c68cf3f4876e8748f1f9e3bd35ad7f8887387edf0fb7e34ad8277edb6c231a323adf739e91b1d9c8becbed3fb0cfaab8410d73d51d8cb0131f3670e1dd9ada819bd987e7e9fc2282ae550413950fd2d09aec4862b5ff7f7a244bc110bdf55f9300adcf3d4eeb34e8a5a327033a189cea9e72acc4a9b2893a2ac9367102df888aa12fca423797ef12e48dd6c5fc582a73841e03f0cb3ac3d6b2fc51e1077e6347005385a80a6c928f232003565c256322dc0171d3b05c82876717c2db7a25c2c5678ad356e6f1cec9b14b92719d7a40e66ff106c3fed85ec1ed61061efed1d0b1976d7cca915f962b3c50e32818c44e20462dec588befd0013e4764abd47dc00582ded40a56b04afb75500066367185db13c0a9815e60fe1e32c33f27285e330335130aa70ed9d5c8684cba5c95dfbfa8ef601117619b2f0c4af3f2027ddb1ad35c3e10e23e59462b85479ab6ec75edee30c2e511b6f247132ff9d18c854efd27dce46e9f590d88b2a3b8f5d9f19594467418b91945c378bf876f14f480ca1c17c35322371476cde2bca7ba9962a86a1855605fd98695a5c7b1372eda76a2c18f826851ec6dd2775e8ad5df8a764c084bb648e3df6937e4b0df3003251dace7eb1984b56276badcf1f7541db94718aa44393dd3e0410fa5d1c41b356376488d4e3209bc77711e52b57c5c49257e4b458eafe09b97f74256b4d6897aef9a09651f1d526914da11c783e619b9925d8aec06be0f16f737f49cde03f722d1b0ef0f1cbbc3b6e637badd3199c7cf9148677dc580170add2fb62c1a2cca287f023a8f5a2e0bb89c2ebcc5c9cc3e807cb40e8518acdeee1c33b4c4b965bac93f48229eb47a23b66c803d3a380d13b6073a05d7855f5ac37e573c5760da229461fc0bc7cf26e7b74acb1e8b378b74afc4c42b835e2536283fc4c489ed192d8897333c2905f1dd4849d6a918531cb64bc4ea49725c7ccbcb06ecec4c9caa4ce69d80d5df08f9858531ca9d208a5407333d3db996865ec5485e15fff407bb2dc52098cfa34b73047f0a783022895f9ae032bba0bc116c35f987b235f504b2ce3e51a3"}) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) rt_sigpending(&(0x7f0000000080), 0x8) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1364.551923][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.559099][ T7381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.566475][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.573711][ T7381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.627110][ T7381] device bridge0 entered promiscuous mode [ 1364.665932][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state 04:14:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:09 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) [ 1364.673294][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.712978][ T7596] device bridge0 left promiscuous mode 04:14:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0x4400}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x185080) write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x1000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'hsr0\x00', 0x200}) [ 1364.966840][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.974004][ T7599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.981578][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.988926][ T7599] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:09 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1365.037842][ T7599] device bridge0 entered promiscuous mode 04:14:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040), 0x20000000000000f9, 0x0, 0x0, 0xfffffffffffffe15) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x900, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) [ 1365.092719][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.100748][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.166746][ T8011] device bridge0 left promiscuous mode 04:14:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0xfffffd9f, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x81}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80400) ppoll(&(0x7f0000000040)=[{r1, 0x11ff}], 0x0, 0x0, 0x0, 0x0) 04:14:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xfff) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:10 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x600]}) [ 1365.978050][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.985238][ T8076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.992713][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.999878][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:10 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x1200]}) 04:14:10 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) 04:14:10 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1366.034697][ T8076] device bridge0 entered promiscuous mode [ 1366.042882][T32388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1366.059304][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.066551][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.106157][ T8312] device bridge0 left promiscuous mode 04:14:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="616ad57a12e80122e2fae4423bd9fc69e98179e81ca92dc0df8bb8f79102bfc1215fd1fbde380dfb64f209d9d6f41db4afb871148a0c525fa146d9ab0946c40e54a6c63eccc02fd98a7db527ce13f6de90fe738eb9de163cb71a83480b1034079bc8550abe49d8fb0cefadd98d116fead82e18361d4a91b57fc5eaab3d8252ec2dc916fcc7652e6945aded88fc7e749962b20e4f91d1bc148b76ec91074d0ba09bee831b4d11fe7a672e3b0e637d096127f7b8874999ec83c2c540f97afce0c9714c") r1 = socket(0x2, 0x0, 0x8001) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="612b94aed528fdfff3a14e2dee2ca7d0", 0x9, 0x2, 0x1, 0x1, 0x35, 0xbba}, &(0x7f0000000080)=0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) [ 1366.323357][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.330634][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.338102][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.345190][ T8369] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1366.437938][ T8369] device bridge0 entered promiscuous mode [ 1366.461472][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.469624][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.498825][ T8517] device bridge0 left promiscuous mode 04:14:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:11 executing program 2: rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x80) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:11 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x3f00]}) 04:14:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x20a002, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x1, 0x0, [], {0x0, @reserved}}) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) 04:14:12 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r0 = syz_open_dev$media(&(0x7f0000002140)='/dev/media#\x00', 0x7551, 0x4000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002180)=""/104) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000000c0)={0x0, 0x0, 0x2080}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xfffffffffffffffa}], 0x2000000000000075, 0x0, 0x0, 0xffffff69) 04:14:12 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x1000000]}) 04:14:12 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) [ 1367.599297][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.606476][ T8520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.613933][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.621160][ T8520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.638017][ T8520] device bridge0 entered promiscuous mode 04:14:12 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:12 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x2000000]}) [ 1367.768543][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.775875][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.800866][ T8748] device bridge0 left promiscuous mode [ 1367.938168][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.945323][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.952796][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.959950][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:12 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1368.019088][ T8824] device bridge0 entered promiscuous mode [ 1368.053214][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.061057][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:13 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e2800", 0x26}], 0x1}, 0x0) [ 1368.123070][ T9160] device bridge0 left promiscuous mode 04:14:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {r0, 0xa}], 0x2, 0x0, 0x0, 0x0) 04:14:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:13 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x6000000]}) 04:14:13 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x12000000]}) [ 1369.001503][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.008673][ T9165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.016058][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.023217][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1369.057854][ T9165] device bridge0 entered promiscuous mode [ 1369.114406][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.121663][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.143310][ T9368] device bridge0 left promiscuous mode 04:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x48a00, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000440)={{0x9, 0x4, 0x3, 0xf4a, '\x00', 0x7fffffff}, 0x0, [0x200, 0x6, 0x20, 0x4, 0x6, 0x8, 0xff, 0x8, 0xb4d, 0x5, 0x8000, 0x81, 0x80, 0xe6ee, 0x8, 0x5, 0x100000000, 0x0, 0x7fffffff, 0x9, 0x80000001, 0x6, 0x7, 0x8, 0x4, 0x99ad, 0x1, 0xffffffff, 0x7, 0x2, 0x2d0, 0x3, 0x12c6, 0x1, 0x0, 0xf4, 0x3, 0xdc2, 0x5671, 0x6, 0x5e, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1f, 0x9, 0x3, 0xfffffffffffffe01, 0x7ed0, 0xb41e, 0x328780b2, 0x1, 0x7, 0x101000000000000, 0x4, 0x1, 0x4, 0x8001, 0x3, 0x7fffffff, 0x708, 0xfffffffffffffffc, 0x3, 0x5, 0x1, 0x2, 0x0, 0x5, 0xfffffffffffffc01, 0x10001, 0x1, 0x6, 0x8, 0x3, 0x3, 0x10001, 0x238aef72, 0x5, 0x1ff, 0x1, 0x8, 0x1, 0x7fff, 0x3, 0x5f5, 0x0, 0x7, 0x57, 0x7, 0x9, 0x81, 0x0, 0x7, 0x600000, 0x3, 0x0, 0x0, 0x4e, 0x0, 0x5, 0x200, 0x100000001, 0x62ac, 0x81, 0xfffffffffffff800, 0x80, 0x3, 0x8, 0x4, 0xa000000000000, 0x800, 0x100000000, 0x1, 0xfffffffffffffffb, 0x40, 0x6, 0x7ab9, 0x0, 0x1f, 0x8, 0x1000, 0x4, 0x4, 0x1, 0x8000, 0x5], {0x0, 0x989680}}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x82000, 0x0) write$nbd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6744669801000000020004000400000068bb79593d8d81d59307cdbe4eca20c6c879e48de617f242ac0c5b0dac2d6e3d53dc0016b0bdf9a448ca9ac58f43ef0151f52b1d963dcd865995bdc7c49b003e50acab5a3988a645dee3bffd430835986c78f8f8b947ad0b4b16a0227df1b90c024ec4c361d6ca236ca7b540d326c1b4b0545497d6efd53f1c9ccd007039c886dd9e65ab0e152b84c2057b4547514e8b36cd43902c28a0837615bbed512a987c258e474a57f451988dd444ab72bdb675e1b3a5df2040ddee2e7b53c745f8ef7ad2cd4e4b2e30ec6d1cab2547d806a83d2eeb0de0a7531126c7d10228495d11a1547c3bcf34a2521e63e22f00"/271], 0x9e) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:14 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x3f000000]}) [ 1369.294971][ T9375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.302168][ T9375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.309629][ T9375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.316726][ T9375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.368298][ T9375] device bridge0 entered promiscuous mode 04:14:14 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e00", 0x39}], 0x1}, 0x0) 04:14:14 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) uname(&(0x7f0000000080)=""/114) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1369.661163][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.669378][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:14 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x7ffffffffffff]}) [ 1369.704177][ T9598] device bridge0 left promiscuous mode 04:14:14 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x40) lseek(r0, 0x0, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r1, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xa8, 0x1, 0x4, "e4d758ba1aa113f55d07874c1f624aa8", "7d9f25622007ca60de6a2968865a64f331719fa41c759869b30c1ee236e157a47078d8015b47d94ea3e80755911644938781019d9fc93ea197915b8429e392fc0a74713d8b29a48e405fc55789cb0ac4d15a3be8793ff025dc908f7331236579a8325f2d79667e1e208ad1638f65b22cdd3457accfc07e4328342b4ea524266e9b17f54954ceae9176132233612fcc3d70f136"}, 0xa8, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x600640) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0x8, 0x4) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) 04:14:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)) 04:14:15 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x100000000000000]}) [ 1370.607684][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.614800][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.622248][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.629386][ T9603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.645889][ T9603] device bridge0 entered promiscuous mode 04:14:15 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000140)=0x400) ppoll(&(0x7f0000000040)=[{r0, 0xfffffffffffffffd}], 0x2000000000000033, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20140203}, 0xfffffffffffffe94, &(0x7f0000000340)={&(0x7f0000000580)={0x170, r2, 0x520, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc52e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78cd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x0) 04:14:15 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e00", 0x39}], 0x1}, 0x0) [ 1370.678653][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.685888][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.714208][ T9816] device bridge0 left promiscuous mode 04:14:15 executing program 2 (fault-call:15 fault-nth:0): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1370.945073][T10516] FAULT_INJECTION: forcing a failure. [ 1370.945073][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.988975][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.996134][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.003587][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.010703][ T9832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.050936][T10516] CPU: 0 PID: 10516 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1371.058950][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.069010][T10516] Call Trace: [ 1371.069041][T10516] dump_stack+0x172/0x1f0 [ 1371.069064][T10516] should_fail.cold+0xa/0x15 [ 1371.069096][T10516] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1371.069118][T10516] ? ___might_sleep+0x163/0x280 [ 1371.069139][T10516] __should_failslab+0x121/0x190 [ 1371.069156][T10516] should_failslab+0x9/0x14 [ 1371.069182][T10516] kmem_cache_alloc+0x2b2/0x6f0 [ 1371.106275][T10516] ? fput+0x1b/0x20 [ 1371.110106][T10516] ? ksys_write+0x1f1/0x2d0 [ 1371.114620][T10516] getname_flags+0xd6/0x5b0 [ 1371.117285][ T9832] device bridge0 entered promiscuous mode [ 1371.119128][T10516] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.119147][T10516] getname+0x1a/0x20 [ 1371.119162][T10516] __x64_sys_execve+0x73/0xc0 [ 1371.119181][T10516] do_syscall_64+0x103/0x610 [ 1371.119199][T10516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.119211][T10516] RIP: 0033:0x458da9 [ 1371.119226][T10516] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1371.119233][T10516] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1371.119247][T10516] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1371.119263][T10516] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 04:14:16 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:16 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x200000000000000]}) [ 1371.198222][T10516] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1371.206201][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1371.214181][T10516] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1371.223421][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.231422][T10379] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1371.278775][T10379] device bridge0 left promiscuous mode 04:14:16 executing program 2 (fault-call:15 fault-nth:1): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1371.549838][T10569] FAULT_INJECTION: forcing a failure. [ 1371.549838][T10569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1371.563148][T10569] CPU: 0 PID: 10569 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1371.571149][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.581849][T10569] Call Trace: [ 1371.585168][T10569] dump_stack+0x172/0x1f0 [ 1371.589530][T10569] should_fail.cold+0xa/0x15 [ 1371.594142][T10569] ? find_held_lock+0x35/0x130 [ 1371.599063][T10569] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1371.604897][T10569] ? __lock_acquire+0x548/0x3fb0 [ 1371.610291][T10569] ? find_held_lock+0x35/0x130 [ 1371.615095][T10569] should_fail_alloc_page+0x50/0x60 [ 1371.620311][T10569] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1371.625697][T10569] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1371.631424][T10569] ? find_held_lock+0x35/0x130 [ 1371.636208][T10569] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1371.642035][T10569] cache_grow_begin+0x9c/0x860 [ 1371.646829][T10569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1371.653103][T10569] kmem_cache_alloc+0x62d/0x6f0 [ 1371.657966][T10569] ? fput+0x1b/0x20 [ 1371.661796][T10569] getname_flags+0xd6/0x5b0 [ 1371.666319][T10569] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.672404][T10569] getname+0x1a/0x20 [ 1371.676310][T10569] __x64_sys_execve+0x73/0xc0 [ 1371.680996][T10569] do_syscall_64+0x103/0x610 [ 1371.685599][T10569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1371.691500][T10569] RIP: 0033:0x458da9 [ 1371.695406][T10569] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1371.715146][T10569] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1371.723576][T10569] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1371.731562][T10569] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1371.739558][T10569] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1371.747733][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1371.755736][T10569] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:16 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x600000000000000]}) 04:14:16 executing program 2 (fault-call:15 fault-nth:2): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1372.044085][T10681] FAULT_INJECTION: forcing a failure. [ 1372.044085][T10681] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.077608][T10681] CPU: 1 PID: 10681 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1372.085660][T10681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.095735][T10681] Call Trace: [ 1372.099052][T10681] dump_stack+0x172/0x1f0 [ 1372.103397][T10681] should_fail.cold+0xa/0x15 [ 1372.108000][T10681] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1372.113827][T10681] ? ___might_sleep+0x163/0x280 [ 1372.118691][T10681] __should_failslab+0x121/0x190 [ 1372.123645][T10681] should_failslab+0x9/0x14 [ 1372.128154][T10681] kmem_cache_alloc+0x2b2/0x6f0 [ 1372.133007][T10681] ? save_stack+0xa9/0xd0 [ 1372.137342][T10681] ? save_stack+0x45/0xd0 [ 1372.141673][T10681] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1372.147477][T10681] ? kasan_slab_alloc+0xf/0x20 [ 1372.152252][T10681] dup_fd+0x85/0xb30 [ 1372.156845][T10681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.163103][T10681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.169359][T10681] unshare_fd+0x160/0x1d0 [ 1372.173707][T10681] ? cache_grow_end+0xa4/0x190 [ 1372.178475][T10681] ? set_max_threads+0xe0/0xe0 [ 1372.183343][T10681] ? cache_grow_end+0xa4/0x190 [ 1372.188213][T10681] unshare_files+0x7f/0x1f0 [ 1372.192724][T10681] ? lock_downgrade+0x880/0x880 [ 1372.197599][T10681] ? __ia32_sys_unshare+0x40/0x40 [ 1372.202633][T10681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.208883][T10681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.215138][T10681] __do_execve_file.isra.0+0x27e/0x23f0 [ 1372.220692][T10681] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1372.226416][T10681] ? __check_object_size+0x3d/0x42f [ 1372.231633][T10681] ? copy_strings_kernel+0x110/0x110 [ 1372.236934][T10681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.243188][T10681] ? getname_flags+0x277/0x5b0 [ 1372.247966][T10681] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.254138][T10681] __x64_sys_execve+0x8f/0xc0 [ 1372.258839][T10681] do_syscall_64+0x103/0x610 [ 1372.263449][T10681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.269346][T10681] RIP: 0033:0x458da9 [ 1372.273244][T10681] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1372.293710][T10681] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1372.302238][T10681] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1372.310225][T10681] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1372.322201][T10681] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1372.334267][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1372.342250][T10681] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:17 executing program 2 (fault-call:15 fault-nth:3): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:17 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x1200000000000000]}) [ 1372.525414][T10685] FAULT_INJECTION: forcing a failure. [ 1372.525414][T10685] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.582730][T10685] CPU: 0 PID: 10685 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1372.590777][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.600855][T10685] Call Trace: [ 1372.604207][T10685] dump_stack+0x172/0x1f0 [ 1372.608563][T10685] should_fail.cold+0xa/0x15 [ 1372.613174][T10685] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1372.619000][T10685] ? ___might_sleep+0x163/0x280 [ 1372.623862][T10685] __should_failslab+0x121/0x190 [ 1372.629949][T10685] should_failslab+0x9/0x14 [ 1372.634470][T10685] kmem_cache_alloc_trace+0x2d1/0x760 [ 1372.639950][T10685] ? lock_downgrade+0x880/0x880 [ 1372.644831][T10685] alloc_fdtable+0x86/0x290 [ 1372.649345][T10685] dup_fd+0x743/0xb30 [ 1372.653336][T10685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.659596][T10685] unshare_fd+0x160/0x1d0 [ 1372.663935][T10685] ? cache_grow_end+0xa4/0x190 [ 1372.668711][T10685] ? set_max_threads+0xe0/0xe0 [ 1372.673497][T10685] ? cache_grow_end+0xa4/0x190 [ 1372.678281][T10685] unshare_files+0x7f/0x1f0 [ 1372.682795][T10685] ? lock_downgrade+0x880/0x880 [ 1372.687662][T10685] ? __ia32_sys_unshare+0x40/0x40 [ 1372.692695][T10685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.699031][T10685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.705291][T10685] __do_execve_file.isra.0+0x27e/0x23f0 [ 1372.710855][T10685] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1372.716589][T10685] ? __check_object_size+0x3d/0x42f [ 1372.721818][T10685] ? copy_strings_kernel+0x110/0x110 [ 1372.727126][T10685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.733371][T10685] ? getname_flags+0x277/0x5b0 [ 1372.738143][T10685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.744220][T10685] __x64_sys_execve+0x8f/0xc0 [ 1372.748919][T10685] do_syscall_64+0x103/0x610 [ 1372.753536][T10685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.759442][T10685] RIP: 0033:0x458da9 [ 1372.762528][T10448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.763339][T10685] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1372.763349][T10685] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1372.763364][T10685] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1372.763374][T10685] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1372.763382][T10685] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1372.763390][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1372.763406][T10685] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1372.770530][T10448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.846419][T10448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.853596][T10448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.866264][T10448] device bridge0 entered promiscuous mode 04:14:17 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(0x0, 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1372.877357][ T1215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1372.893396][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.900649][T10560] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:17 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e00", 0x39}], 0x1}, 0x0) 04:14:17 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x3f00000000000000]}) [ 1372.940848][T10560] device bridge0 left promiscuous mode [ 1373.133843][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.141036][T10563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.148489][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.155628][T10563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.208048][T10563] device bridge0 entered promiscuous mode 04:14:18 executing program 2 (fault-call:15 fault-nth:4): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:18 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:18 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427", 0x43}], 0x1}, 0x0) [ 1373.251079][T10697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.259253][T10697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.382935][T10697] device bridge0 left promiscuous mode [ 1373.389838][T10792] FAULT_INJECTION: forcing a failure. [ 1373.389838][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.408226][T10792] CPU: 0 PID: 10792 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1373.416232][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.426291][T10792] Call Trace: [ 1373.429622][T10792] dump_stack+0x172/0x1f0 [ 1373.433976][T10792] should_fail.cold+0xa/0x15 [ 1373.438618][T10792] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1373.444435][T10792] ? ___might_sleep+0x163/0x280 [ 1373.449299][T10792] __should_failslab+0x121/0x190 [ 1373.454248][T10792] should_failslab+0x9/0x14 [ 1373.458776][T10792] kmem_cache_alloc_node_trace+0x270/0x720 [ 1373.464604][T10792] ? ip_local_error+0x200/0x6d0 [ 1373.469475][T10792] __kmalloc_node+0x3d/0x70 [ 1373.474097][T10792] kvmalloc_node+0x68/0x100 [ 1373.478617][T10792] alloc_fdtable+0xd6/0x290 [ 1373.483138][T10792] dup_fd+0x743/0xb30 [ 1373.487147][T10792] unshare_fd+0x160/0x1d0 [ 1373.491483][T10792] ? set_max_threads+0xe0/0xe0 [ 1373.496253][T10792] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1373.501909][T10792] ? find_held_lock+0x35/0x130 [ 1373.506696][T10792] unshare_files+0x7f/0x1f0 [ 1373.511214][T10792] ? __ia32_sys_unshare+0x40/0x40 [ 1373.516243][T10792] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1373.522072][T10792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.528326][T10792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.534592][T10792] __do_execve_file.isra.0+0x27e/0x23f0 [ 1373.540148][T10792] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1373.545880][T10792] ? __check_object_size+0x3d/0x42f [ 1373.551111][T10792] ? copy_strings_kernel+0x110/0x110 [ 1373.556442][T10792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.562695][T10792] ? getname_flags+0x277/0x5b0 [ 1373.567471][T10792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.573560][T10792] __x64_sys_execve+0x8f/0xc0 [ 1373.578264][T10792] do_syscall_64+0x103/0x610 [ 1373.582900][T10792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.588802][T10792] RIP: 0033:0x458da9 [ 1373.592708][T10792] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1373.612406][T10792] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1373.620831][T10792] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 04:14:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1373.628843][T10792] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1373.636830][T10792] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1373.644900][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1373.652884][T10792] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:18 executing program 2 (fault-call:15 fault-nth:5): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1373.794734][T10843] FAULT_INJECTION: forcing a failure. [ 1373.794734][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.836504][T10843] CPU: 1 PID: 10843 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1373.844548][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.844555][T10843] Call Trace: [ 1373.844591][T10843] dump_stack+0x172/0x1f0 [ 1373.844616][T10843] should_fail.cold+0xa/0x15 [ 1373.844639][T10843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1373.872724][T10843] ? ___might_sleep+0x163/0x280 [ 1373.877606][T10843] __should_failslab+0x121/0x190 [ 1373.882571][T10843] should_failslab+0x9/0x14 [ 1373.887095][T10843] kmem_cache_alloc_node_trace+0x270/0x720 [ 1373.892913][T10843] ? kasan_unpoison_shadow+0x35/0x50 [ 1373.892933][T10843] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1373.892955][T10843] __kmalloc_node+0x3d/0x70 [ 1373.892971][T10843] kvmalloc_node+0x68/0x100 [ 1373.892989][T10843] alloc_fdtable+0x142/0x290 [ 1373.893008][T10843] dup_fd+0x743/0xb30 [ 1373.921640][T10843] unshare_fd+0x160/0x1d0 [ 1373.926015][T10843] ? set_max_threads+0xe0/0xe0 [ 1373.930791][T10843] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1373.936447][T10843] ? find_held_lock+0x35/0x130 [ 1373.941233][T10843] unshare_files+0x7f/0x1f0 [ 1373.945752][T10843] ? __ia32_sys_unshare+0x40/0x40 [ 1373.950788][T10843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1373.956629][T10843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.962887][T10843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.969157][T10843] __do_execve_file.isra.0+0x27e/0x23f0 [ 1373.974715][T10843] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1373.980449][T10843] ? __check_object_size+0x3d/0x42f [ 1373.985688][T10843] ? copy_strings_kernel+0x110/0x110 [ 1373.990997][T10843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.997249][T10843] ? getname_flags+0x277/0x5b0 [ 1374.002037][T10843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.008123][T10843] __x64_sys_execve+0x8f/0xc0 [ 1374.012830][T10843] do_syscall_64+0x103/0x610 [ 1374.017441][T10843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.023343][T10843] RIP: 0033:0x458da9 [ 1374.027253][T10843] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1374.046871][T10843] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1374.055302][T10843] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1374.063288][T10843] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1374.071269][T10843] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1374.079255][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 04:14:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0xffffffffffff0700]}) [ 1374.087245][T10843] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:19 executing program 2 (fault-call:15 fault-nth:6): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1374.325704][T10932] FAULT_INJECTION: forcing a failure. [ 1374.325704][T10932] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.356579][T10932] CPU: 1 PID: 10932 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1374.364611][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.374684][T10932] Call Trace: [ 1374.378002][T10932] dump_stack+0x172/0x1f0 [ 1374.382355][T10932] should_fail.cold+0xa/0x15 [ 1374.387139][T10932] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1374.392965][T10932] ? ___might_sleep+0x163/0x280 [ 1374.397839][T10932] __should_failslab+0x121/0x190 [ 1374.402789][T10932] should_failslab+0x9/0x14 [ 1374.407313][T10932] kmem_cache_alloc_trace+0x2d1/0x760 [ 1374.412696][T10932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1374.418945][T10932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1374.425204][T10932] __do_execve_file.isra.0+0x325/0x23f0 [ 1374.430761][T10932] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1374.436488][T10932] ? __check_object_size+0x3d/0x42f [ 1374.441701][T10932] ? copy_strings_kernel+0x110/0x110 [ 1374.447003][T10932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1374.453246][T10932] ? getname_flags+0x277/0x5b0 [ 1374.458021][T10932] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.464185][T10932] __x64_sys_execve+0x8f/0xc0 [ 1374.468876][T10932] do_syscall_64+0x103/0x610 [ 1374.473478][T10932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.479375][T10932] RIP: 0033:0x458da9 [ 1374.483283][T10932] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1374.502918][T10932] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1374.511343][T10932] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1374.519329][T10932] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1374.527311][T10932] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1374.535285][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1374.543266][T10932] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1374.557886][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.564961][T10700] bridge0: port 2(bridge_slave_1) entered forwarding state 04:14:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0acf1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'cgroup\x00'}, 0x0, 0x0, 0x1) [ 1374.572470][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.579609][T10700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.596542][T10700] device bridge0 entered promiscuous mode 04:14:19 executing program 2 (fault-call:15 fault-nth:7): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x2]}) [ 1374.757922][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.764417][T10939] FAULT_INJECTION: forcing a failure. [ 1374.764417][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.765151][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.784204][T10939] CPU: 1 PID: 10939 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1374.792188][T10811] device bridge0 left promiscuous mode [ 1374.792669][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.792677][T10939] Call Trace: [ 1374.792705][T10939] dump_stack+0x172/0x1f0 [ 1374.792729][T10939] should_fail.cold+0xa/0x15 [ 1374.820396][T10939] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1374.826214][T10939] ? ___might_sleep+0x163/0x280 [ 1374.831075][T10939] __should_failslab+0x121/0x190 [ 1374.836021][T10939] should_failslab+0x9/0x14 [ 1374.840528][T10939] kmem_cache_alloc+0x2b2/0x6f0 [ 1374.845393][T10939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1374.851640][T10939] ? __validate_process_creds+0x22d/0x380 [ 1374.857366][T10939] prepare_creds+0x3e/0x3f0 [ 1374.861879][T10939] prepare_exec_creds+0x12/0xf0 [ 1374.866741][T10939] __do_execve_file.isra.0+0x393/0x23f0 [ 1374.872289][T10939] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1374.878010][T10939] ? __check_object_size+0x3d/0x42f [ 1374.883235][T10939] ? copy_strings_kernel+0x110/0x110 [ 1374.888529][T10939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1374.894784][T10939] ? getname_flags+0x277/0x5b0 [ 1374.899560][T10939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.905642][T10939] __x64_sys_execve+0x8f/0xc0 [ 1374.910330][T10939] do_syscall_64+0x103/0x610 [ 1374.914927][T10939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.920830][T10939] RIP: 0033:0x458da9 [ 1374.924735][T10939] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1374.944343][T10939] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1374.952789][T10939] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1374.960772][T10939] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1374.968755][T10939] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1374.976732][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1374.984710][T10939] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1374.998450][T10815] bridge0: port 2(bridge_slave_1) entered blocking state 04:14:19 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427", 0x43}], 0x1}, 0x0) [ 1375.005609][T10815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.013068][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.020203][T10815] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:19 executing program 2 (fault-call:15 fault-nth:8): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:20 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x6]}) [ 1375.087008][T10815] device bridge0 entered promiscuous mode 04:14:20 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:20 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) [ 1375.185337][T10956] FAULT_INJECTION: forcing a failure. [ 1375.185337][T10956] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.324022][T10956] CPU: 1 PID: 10956 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1375.332060][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.342131][T10956] Call Trace: [ 1375.345451][T10956] dump_stack+0x172/0x1f0 [ 1375.349802][T10956] should_fail.cold+0xa/0x15 [ 1375.354415][T10956] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1375.360235][T10956] ? ___might_sleep+0x163/0x280 [ 1375.365096][T10956] __should_failslab+0x121/0x190 [ 1375.370040][T10956] should_failslab+0x9/0x14 [ 1375.374556][T10956] kmem_cache_alloc_trace+0x2d1/0x760 [ 1375.379939][T10956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1375.386180][T10956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1375.392431][T10956] __do_execve_file.isra.0+0x325/0x23f0 [ 1375.397978][T10956] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1375.403698][T10956] ? __check_object_size+0x3d/0x42f [ 1375.408919][T10956] ? copy_strings_kernel+0x110/0x110 [ 1375.414210][T10956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1375.420452][T10956] ? getname_flags+0x277/0x5b0 [ 1375.425214][T10956] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.431375][T10956] __x64_sys_execve+0x8f/0xc0 [ 1375.436058][T10956] do_syscall_64+0x103/0x610 [ 1375.440655][T10956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.446570][T10956] RIP: 0033:0x458da9 [ 1375.450472][T10956] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1375.470189][T10956] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1375.478615][T10956] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1375.486604][T10956] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1375.494587][T10956] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1375.502571][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1375.510556][T10956] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1375.519877][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.529338][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.554783][T10965] device bridge0 left promiscuous mode 04:14:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1b}) dup2(r0, r1) 04:14:20 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427", 0x43}], 0x1}, 0x0) 04:14:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00p\x06e\xdd\xb9\xe9\xb5oH\xd9\xcf\x92\x97n\x13\xd6)\x02\x1d\xf8\xdc^\x81\x83\x99\xaa\xbf\xa9I\xc1\x8b\x06q_\x1a\xaa=\xc3\xec\xbb\xebr[\x86\xfb\a\xf7\x8e\xd3\xe8}\xe70i\x84_g\xb9\x8c\n\xd9\x895\xba\xf4\xf5I4q\xdd\xdf1 \xb2\\\x9c@\"^5\xae\x02t\x02\x7fz\xae\xa4:k\x04/2\xcb\fWt\x8d\x87F\xc69\x88\'\xcf/\x97U\xe9%\v\xa7<\t%-K\x81%\xa4\xa4\xb8\xd1Z\xc3i\n\xdeR\xa7e?p\xb4\xb9\xbbt\x19!\xc0\xd2\xe3\xdb\x9b@O>\xa7\x82\xb6\x02(\x8b1W;/\x82\xbf6\xe2\xd4\xfaM,\xe1kx\xa2\xf1:}IO\x80\v\xfb\xa1\x97\xa6\xaa\xdaU\x05\xe3g\xe5\t8Tr\xe9\xfc\xdcr\xad\x04\xc4\xc7\xa3\x904A&\xdf\xaf\x10\xf2\x0e\xc6\xaf\f\x9c\xcf\x8e\xcdQ5\xffs\xc4\x01\xe35\x11\xc1\x17C+\xab\xcf\xe2c\xb7`\xcb&\x84Z\x8b\xce\x9e\x9b\xb3a\x10\xf7~*\x84\x85L\x7f\xee\x18Vx\xcd>\xdcE\xf7\xbc\x13\xe0\x97\xd1_\x16\x0fU@\xe5\x8bn\x94\xea\xbd9G\xc8\xda\x9b\xab\x16\xb6\x16\x03\xba#6\x8c\xbbR\x81+\xbbu \xdcv\xc8\xd7\xec3\xd3\x01\xfd\xb546\xf5\xb4\xcf\x856\xea\xbf4)') sendfile(r1, r0, &(0x7f0000000240)=0x5d, 0x80000000) 04:14:20 executing program 2 (fault-call:15 fault-nth:9): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:20 executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) 04:14:20 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x12]}) [ 1375.947274][T10979] FAULT_INJECTION: forcing a failure. [ 1375.947274][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.040174][T10979] CPU: 1 PID: 10979 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1376.048198][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.058272][T10979] Call Trace: [ 1376.061598][T10979] dump_stack+0x172/0x1f0 [ 1376.065989][T10979] should_fail.cold+0xa/0x15 [ 1376.070622][T10979] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1376.076456][T10979] ? ___might_sleep+0x163/0x280 [ 1376.081333][T10979] __should_failslab+0x121/0x190 [ 1376.086304][T10979] should_failslab+0x9/0x14 [ 1376.090834][T10979] kmem_cache_alloc+0x2b2/0x6f0 [ 1376.095708][T10979] ? kasan_check_read+0x11/0x20 [ 1376.100589][T10979] __alloc_file+0x27/0x300 [ 1376.105034][T10979] alloc_empty_file+0x72/0x170 [ 1376.109825][T10979] path_openat+0xef/0x46e0 [ 1376.114271][T10979] ? save_stack+0xa9/0xd0 [ 1376.118620][T10979] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1376.124001][T10979] ? __kmalloc+0x15c/0x740 [ 1376.128435][T10979] ? security_prepare_creds+0x123/0x190 [ 1376.133990][T10979] ? prepare_creds+0x2f5/0x3f0 [ 1376.138768][T10979] ? prepare_exec_creds+0x12/0xf0 [ 1376.143901][T10979] ? __do_execve_file.isra.0+0x393/0x23f0 [ 1376.149629][T10979] ? __x64_sys_execve+0x8f/0xc0 [ 1376.154501][T10979] ? do_syscall_64+0x103/0x610 [ 1376.159984][T10979] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1376.166064][T10979] ? __lock_acquire+0x548/0x3fb0 [ 1376.171100][T10979] ? prepare_exec_creds+0x12/0xf0 [ 1376.176251][T10979] do_filp_open+0x1a1/0x280 [ 1376.180767][T10979] ? may_open_dev+0x100/0x100 [ 1376.185480][T10979] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1376.191128][T10979] ? find_held_lock+0x35/0x130 [ 1376.195914][T10979] ? __lock_acquire+0x548/0x3fb0 [ 1376.200881][T10979] do_open_execat+0x137/0x690 [ 1376.205576][T10979] ? unregister_binfmt+0x170/0x170 [ 1376.210697][T10979] ? lock_downgrade+0x880/0x880 [ 1376.215555][T10979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1376.221816][T10979] ? kasan_check_read+0x11/0x20 [ 1376.226671][T10979] ? do_raw_spin_unlock+0x57/0x270 [ 1376.231791][T10979] __do_execve_file.isra.0+0x178d/0x23f0 [ 1376.237442][T10979] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1376.243183][T10979] ? copy_strings_kernel+0x110/0x110 [ 1376.248577][T10979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1376.254838][T10979] ? getname_flags+0x277/0x5b0 [ 1376.259617][T10979] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1376.265696][T10979] __x64_sys_execve+0x8f/0xc0 [ 1376.270390][T10979] do_syscall_64+0x103/0x610 [ 1376.274990][T10979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1376.280880][T10979] RIP: 0033:0x458da9 [ 1376.284774][T10979] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1376.305164][T10979] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1376.313592][T10979] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1376.321574][T10979] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1376.330417][T10979] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1376.339885][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1376.347867][T10979] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:21 executing program 2 (fault-call:15 fault-nth:10): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1376.588683][T11195] FAULT_INJECTION: forcing a failure. [ 1376.588683][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.613849][T10967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.621026][T10967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.622539][T11195] CPU: 0 PID: 11195 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1376.628585][T10967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.636315][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.636327][T11195] Call Trace: [ 1376.643480][T10967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.653418][T11195] dump_stack+0x172/0x1f0 [ 1376.653437][T11195] should_fail.cold+0xa/0x15 [ 1376.653454][T11195] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1376.653479][T11195] ? ___might_sleep+0x16c/0x280 [ 1376.683552][T11195] __should_failslab+0x121/0x190 [ 1376.688496][T11195] should_failslab+0x9/0x14 [ 1376.693007][T11195] kmem_cache_alloc+0x2b2/0x6f0 [ 1376.697863][T11195] ? rcu_read_lock_sched_held+0x110/0x130 [ 1376.703586][T11195] ? kmem_cache_alloc+0x32e/0x6f0 [ 1376.708623][T11195] security_file_alloc+0x39/0x170 [ 1376.713654][T11195] __alloc_file+0xac/0x300 [ 1376.718082][T11195] alloc_empty_file+0x72/0x170 [ 1376.722856][T11195] path_openat+0xef/0x46e0 [ 1376.727297][T11195] ? save_stack+0xa9/0xd0 [ 1376.731638][T11195] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1376.737031][T11195] ? __kmalloc+0x15c/0x740 [ 1376.741547][T11195] ? security_prepare_creds+0x123/0x190 [ 1376.747110][T11195] ? prepare_creds+0x2f5/0x3f0 [ 1376.751895][T11195] ? prepare_exec_creds+0x12/0xf0 [ 1376.756931][T11195] ? __do_execve_file.isra.0+0x393/0x23f0 [ 1376.762660][T11195] ? __x64_sys_execve+0x8f/0xc0 [ 1376.767518][T11195] ? do_syscall_64+0x103/0x610 [ 1376.772286][T11195] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1376.778373][T11195] ? __lock_acquire+0x548/0x3fb0 [ 1376.783319][T11195] ? prepare_exec_creds+0x12/0xf0 [ 1376.788377][T11195] do_filp_open+0x1a1/0x280 [ 1376.792892][T11195] ? may_open_dev+0x100/0x100 [ 1376.797595][T11195] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 1376.803264][T11195] ? find_held_lock+0x35/0x130 [ 1376.808060][T11195] ? mark_held_locks+0xa4/0xf0 [ 1376.812851][T11195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1376.818322][T11195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1376.823793][T11195] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1376.829097][T11195] ? retint_kernel+0x2d/0x2d [ 1376.833724][T11195] do_open_execat+0x137/0x690 [ 1376.838413][T11195] ? unregister_binfmt+0x170/0x170 [ 1376.843631][T11195] ? retint_kernel+0x2d/0x2d [ 1376.848250][T11195] __do_execve_file.isra.0+0x178d/0x23f0 [ 1376.853889][T11195] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1376.859629][T11195] ? copy_strings_kernel+0x110/0x110 [ 1376.864926][T11195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1376.871173][T11195] ? getname_flags+0x277/0x5b0 [ 1376.875959][T11195] __x64_sys_execve+0x8f/0xc0 [ 1376.880740][T11195] do_syscall_64+0x103/0x610 [ 1376.885348][T11195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1376.891248][T11195] RIP: 0033:0x458da9 [ 1376.895154][T11195] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1376.914765][T11195] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1376.923190][T11195] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1376.931167][T11195] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1376.939142][T11195] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1376.947118][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1376.955102][T11195] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:21 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x600]}) 04:14:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:21 executing program 2 (fault-call:15 fault-nth:11): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1377.003275][T10967] device bridge0 entered promiscuous mode [ 1377.023447][T32187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 04:14:22 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf54", 0x48}], 0x1}, 0x0) [ 1377.207771][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.213696][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.219563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.220632][T11308] FAULT_INJECTION: forcing a failure. [ 1377.220632][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.225336][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.252883][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.259853][T11308] CPU: 1 PID: 11308 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1377.264284][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.267930][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.267936][T11308] Call Trace: [ 1377.267959][T11308] dump_stack+0x172/0x1f0 [ 1377.267979][T11308] should_fail.cold+0xa/0x15 [ 1377.267998][T11308] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1377.268029][T11308] ? ___might_sleep+0x163/0x280 [ 1377.307936][T11308] __should_failslab+0x121/0x190 [ 1377.312888][T11308] should_failslab+0x9/0x14 [ 1377.317399][T11308] kmem_cache_alloc+0x2b2/0x6f0 [ 1377.322261][T11308] ? nr_iowait+0x130/0x130 [ 1377.326689][T11308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.327270][T11310] device bridge0 left promiscuous mode [ 1377.332943][T11308] mm_alloc+0x1d/0xd0 [ 1377.332962][T11308] __do_execve_file.isra.0+0xaa3/0x23f0 [ 1377.332988][T11308] ? copy_strings_kernel+0x110/0x110 [ 1377.333010][T11308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.359480][T11308] ? getname_flags+0x277/0x5b0 [ 1377.364254][T11308] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1377.370342][T11308] __x64_sys_execve+0x8f/0xc0 [ 1377.375208][T11308] do_syscall_64+0x103/0x610 [ 1377.379819][T11308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1377.385715][T11308] RIP: 0033:0x458da9 [ 1377.389618][T11308] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1377.409234][T11308] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1377.417662][T11308] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1377.425680][T11308] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1377.433874][T11308] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1377.441854][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1377.449925][T11308] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1377.609890][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.616962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.624516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.631761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.847775][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1377.853687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1377.913299][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.920470][T11315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.928010][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.935056][T11315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.946403][T11315] device bridge0 entered promiscuous mode 04:14:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xff}, 0x13) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) lstat(0x0, 0x0) chown(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) 04:14:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}) 04:14:22 executing program 2 (fault-call:15 fault-nth:12): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:22 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x1200]}) 04:14:22 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf54", 0x48}], 0x1}, 0x0) 04:14:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1378.074951][T11328] FAULT_INJECTION: forcing a failure. [ 1378.074951][T11328] name failslab, interval 1, probability 0, space 0, times 0 04:14:23 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf54", 0x48}], 0x1}, 0x0) [ 1378.117513][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.124783][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.182892][T11328] CPU: 1 PID: 11328 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1378.191015][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.201087][T11328] Call Trace: [ 1378.204406][T11328] dump_stack+0x172/0x1f0 [ 1378.208757][T11328] should_fail.cold+0xa/0x15 [ 1378.213367][T11328] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1378.219197][T11328] ? ___might_sleep+0x163/0x280 [ 1378.224065][T11328] __should_failslab+0x121/0x190 [ 1378.224081][T11328] should_failslab+0x9/0x14 [ 1378.224102][T11328] kmem_cache_alloc+0x2b2/0x6f0 [ 1378.238381][T11328] vm_area_alloc+0x20/0x110 [ 1378.238402][T11328] __do_execve_file.isra.0+0xc34/0x23f0 [ 1378.238425][T11328] ? copy_strings_kernel+0x110/0x110 [ 1378.254133][T11328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1378.260391][T11328] ? getname_flags+0x277/0x5b0 [ 1378.265163][T11328] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.271249][T11328] __x64_sys_execve+0x8f/0xc0 [ 1378.275950][T11328] do_syscall_64+0x103/0x610 [ 1378.280583][T11328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.286588][T11328] RIP: 0033:0x458da9 [ 1378.291947][T11328] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1378.311557][T11328] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1378.319994][T11328] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1378.327971][T11328] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1378.335954][T11328] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1378.343926][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1378.351891][T11328] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1378.372110][T11336] device bridge0 left promiscuous mode 04:14:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000840)={0x0, 0x0, 0xfffffffffffffffc}) 04:14:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) socket$inet6(0xa, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 04:14:23 executing program 2 (fault-call:15 fault-nth:13): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1378.674364][T11509] FAULT_INJECTION: forcing a failure. [ 1378.674364][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.701013][T11509] CPU: 1 PID: 11509 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1378.709218][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.719293][T11509] Call Trace: [ 1378.722620][T11509] dump_stack+0x172/0x1f0 [ 1378.726977][T11509] should_fail.cold+0xa/0x15 [ 1378.731593][T11509] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1378.737417][T11509] ? ___might_sleep+0x163/0x280 [ 1378.742288][T11509] __should_failslab+0x121/0x190 [ 1378.747250][T11509] should_failslab+0x9/0x14 [ 1378.751765][T11509] kmem_cache_alloc+0x2b2/0x6f0 [ 1378.756654][T11509] vm_area_alloc+0x20/0x110 [ 1378.761178][T11509] __do_execve_file.isra.0+0xc34/0x23f0 [ 1378.766755][T11509] ? copy_strings_kernel+0x110/0x110 [ 1378.772057][T11509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1378.778314][T11509] ? getname_flags+0x277/0x5b0 [ 1378.783095][T11509] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.789183][T11509] __x64_sys_execve+0x8f/0xc0 [ 1378.793883][T11509] do_syscall_64+0x103/0x610 [ 1378.798594][T11509] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.804500][T11509] RIP: 0033:0x458da9 [ 1378.808406][T11509] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1378.828021][T11509] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1378.836447][T11509] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1378.844434][T11509] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1378.852419][T11509] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1378.860408][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 04:14:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000840)={0x0, 0x0, 0xfffffffffffffffc}) 04:14:23 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x3f00]}) [ 1378.868484][T11509] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4f}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 04:14:23 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x4}], 0x1, 0xc000) 04:14:23 executing program 2 (fault-call:15 fault-nth:14): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1378.982989][T11376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.990165][T11376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.997555][T11376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.004723][T11376] bridge0: port 1(bridge_slave_0) entered forwarding state 04:14:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x90}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 1379.096921][T11376] device bridge0 entered promiscuous mode 04:14:24 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3", 0x4a}], 0x1}, 0x0) [ 1379.146884][T11674] FAULT_INJECTION: forcing a failure. [ 1379.146884][T11674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1379.200928][T11674] CPU: 0 PID: 11674 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1379.208953][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.219019][T11674] Call Trace: [ 1379.222350][T11674] dump_stack+0x172/0x1f0 [ 1379.226697][T11674] should_fail.cold+0xa/0x15 [ 1379.231307][T11674] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1379.237134][T11674] ? ___might_sleep+0x163/0x280 [ 1379.242004][T11674] should_fail_alloc_page+0x50/0x60 [ 1379.247237][T11674] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1379.252622][T11674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1379.258100][T11674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1379.263573][T11674] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1379.269307][T11674] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1379.275022][T11674] ? page_cache_sync_readahead+0x1d3/0x520 [ 1379.280878][T11674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1379.286349][T11674] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1379.292608][T11674] alloc_pages_current+0x107/0x210 [ 1379.297803][T11674] __page_cache_alloc+0x2bd/0x460 [ 1379.302867][T11674] ? generic_file_read_iter+0x15a6/0x2870 [ 1379.308596][T11674] generic_file_read_iter+0x15e1/0x2870 [ 1379.308618][T11674] ? mark_held_locks+0xa4/0xf0 [ 1379.308636][T11674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1379.308655][T11674] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1379.329687][T11674] ? filemap_write_and_wait_range+0xd0/0xd0 [ 1379.329709][T11674] ? retint_kernel+0x2d/0x2d [ 1379.329780][T11674] ? ext4_file_read_iter+0x12b/0x3c0 [ 1379.329800][T11674] ext4_file_read_iter+0x180/0x3c0 [ 1379.350680][T11674] new_sync_read+0x4c4/0x740 [ 1379.355295][T11674] ? do_iter_readv_writev+0x8e0/0x8e0 [ 1379.360681][T11674] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1379.366337][T11674] ? security_file_permission+0x94/0x380 [ 1379.371981][T11674] __vfs_read+0xe4/0x110 [ 1379.376237][T11674] vfs_read+0x194/0x3e0 [ 1379.380410][T11674] kernel_read+0xab/0x120 [ 1379.384759][T11674] prepare_binprm+0x6a2/0x940 [ 1379.389451][T11674] ? install_exec_creds+0x180/0x180 [ 1379.394664][T11674] ? count.isra.0.constprop.0+0xf4/0x180 [ 1379.400414][T11674] __do_execve_file.isra.0+0x10c1/0x23f0 [ 1379.406077][T11674] ? copy_strings_kernel+0x110/0x110 [ 1379.411381][T11674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1379.417650][T11674] ? getname_flags+0x277/0x5b0 [ 1379.422437][T11674] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1379.428622][T11674] __x64_sys_execve+0x8f/0xc0 [ 1379.433317][T11674] do_syscall_64+0x103/0x610 [ 1379.437958][T11674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1379.443863][T11674] RIP: 0033:0x458da9 [ 1379.447770][T11674] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1379.467390][T11674] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1379.475824][T11674] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1379.483812][T11674] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1379.491792][T11674] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:14:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:24 executing program 3: syz_execute_func(&(0x7f0000000cc0)="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") 04:14:24 executing program 1: pause() syz_execute_func(&(0x7f0000000080)="3666440f50f564ff0941c3c4e1a5f97300c4820538c626f00fbb60475100617b12e5c441dfd0ee4b969642019dccd211d46f") syz_execute_func(0x0) syz_execute_func(&(0x7f0000000540)="c4e379614832074a2be924db980f053ef3aec4a37bf0c50141e2e90f6839f995f21440068fe97890bb008000003d2ff34290660f8fc978c65e5b1b63f102a60000f2d2dec436266765f243e109464655b1e6250000c4151fd64669fa88008800859ecf493e2f660fdc3400c203e5005c005cc4c125571d9a00000001c1470ff9d1c442319ebb70fe6581f04344c0b264cd4cb4ba1c5856c44279ac800000000041053a16f2aec4018dfafbc423c96cb83d000000fe7341ff500909660fc4a1f92b5f32c422d9f2f269609b5687a8e1430fae277cd8e4a1a12ad764f3cb1fad473ee50ca55fc05fc18d308e8ed4f20f12e4f2420f5cfb9ab5b5646666413a0f7830ca30ca5b5b0f38253d03000000c4417910d321c82b032b0309c4c1c651ca00c4c2801d9c9683e8e995676436438367b8004700a59ad081819cd8001ff4092ddc8f0b0000a17ae64295c483295f9c4208000000a2d2fb2e36646466264683b9080000000d64e42e0fc1930a5e000046f68866980000e65e2ea20f6baf00c4e39978414c598374fb0a07b3ddbb646458ed086a44c422a1b9bc0e0e49e5a2c4827d13f20b0ba151d09200800000450f01d402c1fda847d21d07070000c4037d05ba5e00000044f92ff265460f940665002d08000000c40208f35824420fae06260f0189655666660f4401a9bb000042c4414974ecd53131fb") [ 1379.499782][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1379.507772][T11674] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:24 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3", 0x4a}], 0x1}, 0x0) [ 1379.611578][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.619759][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.670390][T11690] device bridge0 left promiscuous mode 04:14:24 executing program 2 (fault-call:15 fault-nth:15): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:24 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x1000000]}) 04:14:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 1379.876349][T11801] FAULT_INJECTION: forcing a failure. [ 1379.876349][T11801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1379.944330][T11801] CPU: 1 PID: 11801 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1379.952460][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.962530][T11801] Call Trace: [ 1379.965858][T11801] dump_stack+0x172/0x1f0 [ 1379.970209][T11801] should_fail.cold+0xa/0x15 [ 1379.974826][T11801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1379.980645][T11801] ? ___might_sleep+0x163/0x280 [ 1379.985511][T11801] should_fail_alloc_page+0x50/0x60 [ 1379.990726][T11801] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1379.996111][T11801] ? lock_downgrade+0x880/0x880 [ 1380.000979][T11801] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1380.006704][T11801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.012958][T11801] ? __sb_end_write+0xd9/0x110 [ 1380.017746][T11801] ? file_remove_privs+0x480/0x480 [ 1380.022952][T11801] ? touch_atime+0xe9/0x2a0 [ 1380.027467][T11801] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1380.033721][T11801] alloc_pages_current+0x107/0x210 [ 1380.038853][T11801] get_zeroed_page+0x14/0x50 [ 1380.043457][T11801] __pud_alloc+0x3b/0x250 [ 1380.047819][T11801] __handle_mm_fault+0x7a5/0x3ec0 [ 1380.052867][T11801] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1380.058424][T11801] ? find_held_lock+0x35/0x130 [ 1380.063285][T11801] ? handle_mm_fault+0x322/0xb30 [ 1380.068242][T11801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.074508][T11801] ? kasan_check_read+0x11/0x20 [ 1380.079371][T11801] handle_mm_fault+0x43f/0xb30 [ 1380.084152][T11801] __get_user_pages+0x7b6/0x1a40 [ 1380.089111][T11801] ? follow_page_mask+0x19a0/0x19a0 [ 1380.094323][T11801] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1380.100065][T11801] get_user_pages_remote+0x21d/0x440 [ 1380.105383][T11801] copy_strings.isra.0+0x3dc/0x890 [ 1380.110521][T11801] ? remove_arg_zero+0x590/0x590 [ 1380.115474][T11801] ? prepare_binprm+0x6aa/0x940 [ 1380.120342][T11801] ? install_exec_creds+0x180/0x180 [ 1380.125561][T11801] copy_strings_kernel+0xa5/0x110 [ 1380.130626][T11801] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1380.136284][T11801] ? copy_strings_kernel+0x110/0x110 [ 1380.141591][T11801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.147856][T11801] ? getname_flags+0x277/0x5b0 [ 1380.152637][T11801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.159214][T11801] __x64_sys_execve+0x8f/0xc0 [ 1380.163918][T11801] do_syscall_64+0x103/0x610 [ 1380.168535][T11801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.174544][T11801] RIP: 0033:0x458da9 [ 1380.178560][T11801] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1380.198271][T11801] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1380.206702][T11801] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1380.214694][T11801] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1380.222678][T11801] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1380.230744][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1380.238728][T11801] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 04:14:25 executing program 2 (fault-call:15 fault-nth:16): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:25 executing program 3: open(0x0, 0x0, 0x80) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) sendto$packet(r1, &(0x7f0000000100)="e181ed67e582b58706dff3f9aa4a3d57da7a593d9f019ee39283371ec30c14e11c253010ceae7226440aee8ca0019a8a07377cc9c4a68b03ecf371c1a2ab207e7a929faa9fb4e8ea11b080a53cc9fd263f108490b567e486002e2daea583e8d12c0877b290a52f5a3837b189747cfd292ce3f349b282", 0x76, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66b8ea000f00d8eadd5484f88a00f0833600660f71d50066ba4100edb8010000000f01d90f0866b8bd008ee0b94d0200000f32360f07", 0x36}], 0xaaaaaaaaaaaabce, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1380.513670][T11734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.520914][T11734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.528361][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.535456][T11734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.607466][T11734] device bridge0 entered promiscuous mode [ 1380.656911][T12018] FAULT_INJECTION: forcing a failure. [ 1380.656911][T12018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1380.714956][T12018] CPU: 1 PID: 12018 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1380.723175][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.733269][T12018] Call Trace: [ 1380.736594][T12018] dump_stack+0x172/0x1f0 [ 1380.740951][T12018] should_fail.cold+0xa/0x15 [ 1380.745559][T12018] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1380.751386][T12018] ? ___might_sleep+0x163/0x280 [ 1380.756260][T12018] should_fail_alloc_page+0x50/0x60 [ 1380.761465][T12018] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1380.766860][T12018] ? __pud_alloc+0x1d3/0x250 [ 1380.771466][T12018] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1380.777195][T12018] ? __pud_alloc+0x1d3/0x250 [ 1380.781822][T12018] ? lock_downgrade+0x880/0x880 [ 1380.786690][T12018] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1380.792947][T12018] alloc_pages_current+0x107/0x210 [ 1380.798072][T12018] __pmd_alloc+0x41/0x460 [ 1380.802412][T12018] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1380.808673][T12018] __handle_mm_fault+0x192a/0x3ec0 [ 1380.813812][T12018] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1380.819454][T12018] ? find_held_lock+0x35/0x130 [ 1380.824230][T12018] ? handle_mm_fault+0x322/0xb30 [ 1380.829191][T12018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.835450][T12018] ? kasan_check_read+0x11/0x20 [ 1380.840328][T12018] handle_mm_fault+0x43f/0xb30 [ 1380.845111][T12018] __get_user_pages+0x7b6/0x1a40 [ 1380.850075][T12018] ? follow_page_mask+0x19a0/0x19a0 [ 1380.855291][T12018] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1380.861031][T12018] get_user_pages_remote+0x21d/0x440 [ 1380.866338][T12018] copy_strings.isra.0+0x3dc/0x890 [ 1380.871470][T12018] ? remove_arg_zero+0x590/0x590 [ 1380.876415][T12018] ? prepare_binprm+0x6aa/0x940 [ 1380.881279][T12018] ? install_exec_creds+0x180/0x180 [ 1380.886489][T12018] copy_strings_kernel+0xa5/0x110 [ 1380.891618][T12018] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1380.897277][T12018] ? copy_strings_kernel+0x110/0x110 [ 1380.902591][T12018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.908848][T12018] ? getname_flags+0x277/0x5b0 [ 1380.913621][T12018] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.919701][T12018] __x64_sys_execve+0x8f/0xc0 [ 1380.924391][T12018] do_syscall_64+0x103/0x610 [ 1380.928999][T12018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.934924][T12018] RIP: 0033:0x458da9 [ 1380.938839][T12018] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:14:25 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1380.958550][T12018] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1380.966987][T12018] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1380.974971][T12018] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1380.982959][T12018] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1380.990942][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1380.998951][T12018] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:26 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3", 0x4a}], 0x1}, 0x0) [ 1381.075193][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.082721][T12022] bridge0: port 1(bridge_slave_0) entered disabled state 04:14:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 04:14:26 executing program 2 (fault-call:15 fault-nth:17): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1381.184424][T12022] device bridge0 left promiscuous mode 04:14:26 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x2000000]}) 04:14:26 executing program 1: [ 1381.365535][T12069] FAULT_INJECTION: forcing a failure. [ 1381.365535][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.383495][T12069] CPU: 0 PID: 12069 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1381.391491][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.401571][T12069] Call Trace: [ 1381.404879][T12069] dump_stack+0x172/0x1f0 [ 1381.409229][T12069] should_fail.cold+0xa/0x15 [ 1381.413944][T12069] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1381.419767][T12069] ? ___might_sleep+0x163/0x280 [ 1381.424639][T12069] __should_failslab+0x121/0x190 [ 1381.429582][T12069] should_failslab+0x9/0x14 [ 1381.434095][T12069] kmem_cache_alloc+0x2b2/0x6f0 [ 1381.434114][T12069] ? alloc_pages_current+0x10f/0x210 [ 1381.434135][T12069] __pmd_alloc+0xc9/0x460 [ 1381.448596][T12069] __handle_mm_fault+0x192a/0x3ec0 [ 1381.453751][T12069] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1381.459303][T12069] ? find_held_lock+0x35/0x130 [ 1381.464075][T12069] ? handle_mm_fault+0x322/0xb30 [ 1381.464100][T12069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1381.475266][T12069] ? kasan_check_read+0x11/0x20 [ 1381.480132][T12069] handle_mm_fault+0x43f/0xb30 [ 1381.484906][T12069] __get_user_pages+0x7b6/0x1a40 [ 1381.489875][T12069] ? follow_page_mask+0x19a0/0x19a0 [ 1381.495108][T12069] get_user_pages_remote+0x21d/0x440 [ 1381.500415][T12069] copy_strings.isra.0+0x3dc/0x890 [ 1381.505542][T12069] ? remove_arg_zero+0x590/0x590 [ 1381.510512][T12069] ? prepare_binprm+0x6aa/0x940 [ 1381.515375][T12069] ? __get_user_4+0x30/0x30 [ 1381.519887][T12069] ? install_exec_creds+0x180/0x180 [ 1381.525094][T12069] copy_strings_kernel+0xa5/0x110 [ 1381.530134][T12069] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1381.535779][T12069] ? copy_strings_kernel+0x110/0x110 [ 1381.541079][T12069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1381.547328][T12069] ? getname_flags+0x277/0x5b0 [ 1381.552095][T12069] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1381.558169][T12069] __x64_sys_execve+0x8f/0xc0 [ 1381.562853][T12069] do_syscall_64+0x103/0x610 [ 1381.567444][T12069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1381.573333][T12069] RIP: 0033:0x458da9 [ 1381.577229][T12069] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1381.596850][T12069] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1381.605276][T12069] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 04:14:26 executing program 1: 04:14:26 executing program 3: [ 1381.613346][T12069] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1381.621352][T12069] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1381.629330][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1381.637305][T12069] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:26 executing program 1: 04:14:26 executing program 3: 04:14:26 executing program 1: 04:14:26 executing program 3: [ 1381.951216][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.958404][T12026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1381.965783][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.972946][T12026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.078467][T12026] device bridge0 entered promiscuous mode 04:14:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x0, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:27 executing program 1: 04:14:27 executing program 3: 04:14:27 executing program 2 (fault-call:15 fault-nth:18): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x6000000]}) 04:14:27 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3", 0x4b}], 0x1}, 0x0) 04:14:27 executing program 3: 04:14:27 executing program 1: 04:14:27 executing program 1: 04:14:27 executing program 3: 04:14:27 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3", 0x4b}], 0x1}, 0x0) [ 1382.365354][T12176] FAULT_INJECTION: forcing a failure. [ 1382.365354][T12176] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.468602][T12176] CPU: 0 PID: 12176 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1382.476630][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.486690][T12176] Call Trace: [ 1382.490008][T12176] dump_stack+0x172/0x1f0 [ 1382.494366][T12176] should_fail.cold+0xa/0x15 [ 1382.498978][T12176] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1382.504813][T12176] ? ___might_sleep+0x163/0x280 [ 1382.509684][T12176] __should_failslab+0x121/0x190 [ 1382.514632][T12176] should_failslab+0x9/0x14 [ 1382.519150][T12176] kmem_cache_alloc+0x2b2/0x6f0 [ 1382.524008][T12176] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1382.530271][T12176] ptlock_alloc+0x20/0x70 [ 1382.534619][T12176] pte_alloc_one+0x6d/0x1a0 [ 1382.539230][T12176] __pte_alloc+0x20/0x310 [ 1382.543577][T12176] __handle_mm_fault+0x3391/0x3ec0 [ 1382.548705][T12176] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1382.554258][T12176] ? find_held_lock+0x35/0x130 [ 1382.559037][T12176] ? handle_mm_fault+0x322/0xb30 04:14:27 executing program 3: [ 1382.564030][T12176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1382.570299][T12176] ? kasan_check_read+0x11/0x20 [ 1382.575167][T12176] handle_mm_fault+0x43f/0xb30 [ 1382.579949][T12176] __get_user_pages+0x7b6/0x1a40 [ 1382.584912][T12176] ? follow_page_mask+0x19a0/0x19a0 [ 1382.590126][T12176] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1382.595871][T12176] get_user_pages_remote+0x21d/0x440 [ 1382.601190][T12176] copy_strings.isra.0+0x3dc/0x890 [ 1382.606331][T12176] ? remove_arg_zero+0x590/0x590 [ 1382.611291][T12176] ? prepare_binprm+0x6aa/0x940 [ 1382.616159][T12176] ? install_exec_creds+0x180/0x180 [ 1382.621373][T12176] copy_strings_kernel+0xa5/0x110 [ 1382.626417][T12176] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1382.632084][T12176] ? copy_strings_kernel+0x110/0x110 [ 1382.637383][T12176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1382.643636][T12176] ? getname_flags+0x277/0x5b0 [ 1382.648417][T12176] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1382.654506][T12176] __x64_sys_execve+0x8f/0xc0 [ 1382.659200][T12176] do_syscall_64+0x103/0x610 [ 1382.663800][T12176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1382.669708][T12176] RIP: 0033:0x458da9 [ 1382.673609][T12176] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1382.693229][T12176] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1382.701656][T12176] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1382.709640][T12176] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1382.717625][T12176] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1382.725598][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1382.725607][T12176] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:27 executing program 3: 04:14:27 executing program 1: 04:14:27 executing program 0: ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3", 0x4b}], 0x1}, 0x0) 04:14:27 executing program 2 (fault-call:15 fault-nth:19): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x0, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:27 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x12000000]}) 04:14:28 executing program 3: 04:14:28 executing program 1: [ 1383.087220][T12200] FAULT_INJECTION: forcing a failure. [ 1383.087220][T12200] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.173146][T12200] CPU: 0 PID: 12200 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1383.181178][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.191256][T12200] Call Trace: [ 1383.194573][T12200] dump_stack+0x172/0x1f0 [ 1383.198928][T12200] should_fail.cold+0xa/0x15 [ 1383.203534][T12200] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1383.209369][T12200] ? ___might_sleep+0x163/0x280 [ 1383.214242][T12200] __should_failslab+0x121/0x190 [ 1383.219191][T12200] should_failslab+0x9/0x14 [ 1383.223709][T12200] kmem_cache_alloc+0x2b2/0x6f0 [ 1383.228573][T12200] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1383.234841][T12200] ptlock_alloc+0x20/0x70 [ 1383.239182][T12200] pte_alloc_one+0x6d/0x1a0 [ 1383.243787][T12200] __pte_alloc+0x20/0x310 [ 1383.248142][T12200] __handle_mm_fault+0x3391/0x3ec0 [ 1383.253268][T12200] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1383.258827][T12200] ? find_held_lock+0x35/0x130 [ 1383.263604][T12200] ? handle_mm_fault+0x322/0xb30 [ 1383.268563][T12200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1383.274826][T12200] ? kasan_check_read+0x11/0x20 [ 1383.279692][T12200] handle_mm_fault+0x43f/0xb30 [ 1383.284473][T12200] __get_user_pages+0x7b6/0x1a40 [ 1383.289430][T12200] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1383.294910][T12200] ? follow_page_mask+0x19a0/0x19a0 [ 1383.300113][T12200] ? retint_kernel+0x2d/0x2d [ 1383.304730][T12200] get_user_pages_remote+0x21d/0x440 [ 1383.310038][T12200] copy_strings.isra.0+0x3dc/0x890 [ 1383.315174][T12200] ? remove_arg_zero+0x590/0x590 [ 1383.315190][T12200] ? prepare_binprm+0x6aa/0x940 [ 1383.315210][T12200] ? __get_user_8+0x25/0x2b [ 1383.329508][T12200] ? install_exec_creds+0x180/0x180 [ 1383.334724][T12200] copy_strings_kernel+0xa5/0x110 [ 1383.339768][T12200] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1383.345443][T12200] ? copy_strings_kernel+0x110/0x110 [ 1383.350759][T12200] __x64_sys_execve+0x8f/0xc0 [ 1383.355466][T12200] do_syscall_64+0x103/0x610 [ 1383.360075][T12200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1383.360088][T12200] RIP: 0033:0x458da9 [ 1383.360103][T12200] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1383.360110][T12200] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1383.360123][T12200] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1383.360131][T12200] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1383.360139][T12200] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:14:28 executing program 2 (fault-call:15 fault-nth:20): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:28 executing program 1: 04:14:28 executing program 3: 04:14:28 executing program 0: [ 1383.360147][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1383.360154][T12200] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:28 executing program 0: [ 1383.480140][T12217] FAULT_INJECTION: forcing a failure. [ 1383.480140][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.495317][T12217] CPU: 0 PID: 12217 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1383.503315][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.513374][T12217] Call Trace: [ 1383.516680][T12217] dump_stack+0x172/0x1f0 [ 1383.521029][T12217] should_fail.cold+0xa/0x15 [ 1383.525643][T12217] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1383.531468][T12217] ? ___might_sleep+0x163/0x280 [ 1383.536339][T12217] __should_failslab+0x121/0x190 [ 1383.541295][T12217] should_failslab+0x9/0x14 [ 1383.545816][T12217] kmem_cache_alloc+0x2b2/0x6f0 [ 1383.550672][T12217] ? __might_sleep+0x95/0x190 [ 1383.550694][T12217] __anon_vma_prepare+0x62/0x3c0 [ 1383.550707][T12217] ? __pte_alloc+0x1ba/0x310 [ 1383.550724][T12217] __handle_mm_fault+0x34db/0x3ec0 [ 1383.550745][T12217] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1383.550761][T12217] ? lock_release+0x4c1/0xa00 [ 1383.550790][T12217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1383.580273][T12217] ? kasan_check_read+0x11/0x20 [ 1383.580296][T12217] handle_mm_fault+0x43f/0xb30 [ 1383.580316][T12217] __get_user_pages+0x7b6/0x1a40 [ 1383.591409][T12217] ? follow_page_mask+0x19a0/0x19a0 [ 1383.591427][T12217] ? retint_kernel+0x2d/0x2d [ 1383.591450][T12217] get_user_pages_remote+0x21d/0x440 [ 1383.591475][T12217] copy_strings.isra.0+0x3dc/0x890 [ 1383.610955][T12217] ? remove_arg_zero+0x590/0x590 [ 1383.610972][T12217] ? prepare_binprm+0x6aa/0x940 [ 1383.610988][T12217] ? install_exec_creds+0x180/0x180 [ 1383.611005][T12217] copy_strings_kernel+0xa5/0x110 [ 1383.611024][T12217] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1383.611047][T12217] ? copy_strings_kernel+0x110/0x110 [ 1383.611074][T12217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1383.611088][T12217] ? getname_flags+0x277/0x5b0 [ 1383.611110][T12217] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1383.626412][T12217] __x64_sys_execve+0x8f/0xc0 [ 1383.626433][T12217] do_syscall_64+0x103/0x610 [ 1383.626453][T12217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1383.684524][T12217] RIP: 0033:0x458da9 [ 1383.688425][T12217] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1383.708041][T12217] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1383.716479][T12217] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 04:14:28 executing program 0: 04:14:28 executing program 1: 04:14:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 1383.724460][T12217] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1383.732441][T12217] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1383.740419][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1383.740427][T12217] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:28 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x0, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:28 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x3f000000]}) 04:14:28 executing program 0: 04:14:28 executing program 1: 04:14:28 executing program 3: 04:14:28 executing program 2 (fault-call:15 fault-nth:21): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1384.068016][T12247] FAULT_INJECTION: forcing a failure. [ 1384.068016][T12247] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.112524][T12247] CPU: 1 PID: 12247 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1384.120601][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.130671][T12247] Call Trace: [ 1384.133978][T12247] dump_stack+0x172/0x1f0 [ 1384.138331][T12247] should_fail.cold+0xa/0x15 [ 1384.142951][T12247] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1384.148788][T12247] ? ___might_sleep+0x163/0x280 [ 1384.153665][T12247] __should_failslab+0x121/0x190 [ 1384.159257][T12247] should_failslab+0x9/0x14 [ 1384.163772][T12247] kmem_cache_alloc+0x2b2/0x6f0 [ 1384.168645][T12247] ? __might_sleep+0x95/0x190 [ 1384.173415][T12247] __anon_vma_prepare+0x1b1/0x3c0 [ 1384.179180][T12247] ? __pte_alloc+0x1ba/0x310 [ 1384.183790][T12247] __handle_mm_fault+0x34db/0x3ec0 [ 1384.188933][T12247] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1384.194492][T12247] ? find_held_lock+0x35/0x130 [ 1384.199280][T12247] ? handle_mm_fault+0x322/0xb30 [ 1384.204247][T12247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1384.210504][T12247] ? kasan_check_read+0x11/0x20 [ 1384.215375][T12247] handle_mm_fault+0x43f/0xb30 [ 1384.220158][T12247] __get_user_pages+0x7b6/0x1a40 [ 1384.225119][T12247] ? follow_page_mask+0x19a0/0x19a0 [ 1384.230335][T12247] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1384.236081][T12247] get_user_pages_remote+0x21d/0x440 [ 1384.241392][T12247] copy_strings.isra.0+0x3dc/0x890 [ 1384.246531][T12247] ? remove_arg_zero+0x590/0x590 [ 1384.251486][T12247] ? prepare_binprm+0x6aa/0x940 [ 1384.251503][T12247] ? install_exec_creds+0x180/0x180 [ 1384.251519][T12247] copy_strings_kernel+0xa5/0x110 [ 1384.251538][T12247] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1384.251562][T12247] ? copy_strings_kernel+0x110/0x110 [ 1384.251585][T12247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1384.283748][T12247] ? getname_flags+0x277/0x5b0 [ 1384.283765][T12247] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1384.283788][T12247] __x64_sys_execve+0x8f/0xc0 [ 1384.299900][T12247] do_syscall_64+0x103/0x610 [ 1384.304619][T12247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1384.310519][T12247] RIP: 0033:0x458da9 [ 1384.314420][T12247] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1384.334207][T12247] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1384.342634][T12247] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1384.350639][T12247] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 04:14:29 executing program 0: 04:14:29 executing program 1: 04:14:29 executing program 3: [ 1384.358620][T12247] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1384.366600][T12247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1384.374586][T12247] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:29 executing program 1: 04:14:29 executing program 3: 04:14:29 executing program 2 (fault-call:15 fault-nth:22): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1384.648619][T12268] FAULT_INJECTION: forcing a failure. [ 1384.648619][T12268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1384.663014][T12268] CPU: 0 PID: 12268 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1384.671043][T12268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.681106][T12268] Call Trace: [ 1384.684397][T12268] dump_stack+0x172/0x1f0 [ 1384.688725][T12268] should_fail.cold+0xa/0x15 [ 1384.693315][T12268] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1384.699123][T12268] ? ___might_sleep+0x163/0x280 [ 1384.703975][T12268] should_fail_alloc_page+0x50/0x60 [ 1384.709172][T12268] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1384.714570][T12268] ? __anon_vma_prepare+0x184/0x3c0 [ 1384.719785][T12268] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1384.725617][T12268] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1384.731857][T12268] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1384.738103][T12268] alloc_pages_vma+0xdd/0x540 [ 1384.742779][T12268] __handle_mm_fault+0x1dd4/0x3ec0 [ 1384.747907][T12268] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1384.753448][T12268] ? find_held_lock+0x35/0x130 [ 1384.758207][T12268] ? handle_mm_fault+0x322/0xb30 [ 1384.763192][T12268] ? rcu_read_unlock_special+0xf3/0x210 [ 1384.768750][T12268] handle_mm_fault+0x43f/0xb30 [ 1384.773517][T12268] __get_user_pages+0x7b6/0x1a40 [ 1384.778462][T12268] ? follow_page_mask+0x19a0/0x19a0 [ 1384.783657][T12268] ? retint_kernel+0x2d/0x2d [ 1384.788261][T12268] get_user_pages_remote+0x21d/0x440 [ 1384.793547][T12268] copy_strings.isra.0+0x3dc/0x890 [ 1384.798671][T12268] ? remove_arg_zero+0x590/0x590 [ 1384.803605][T12268] ? prepare_binprm+0x6aa/0x940 [ 1384.808566][T12268] ? install_exec_creds+0x180/0x180 [ 1384.813775][T12268] copy_strings_kernel+0xa5/0x110 [ 1384.818838][T12268] __do_execve_file.isra.0+0x10ef/0x23f0 [ 1384.824485][T12268] ? copy_strings_kernel+0x110/0x110 [ 1384.829879][T12268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1384.836209][T12268] ? getname_flags+0x277/0x5b0 [ 1384.840979][T12268] __x64_sys_execve+0x8f/0xc0 [ 1384.845658][T12268] do_syscall_64+0x103/0x610 [ 1384.850264][T12268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1384.856154][T12268] RIP: 0033:0x458da9 [ 1384.860052][T12268] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1384.879689][T12268] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1384.888109][T12268] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 04:14:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) 04:14:29 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0xffff, 0x6) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:14:29 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x7ffffffffffff]}) 04:14:29 executing program 1: pause() syz_execute_func(&(0x7f0000000640)="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") 04:14:29 executing program 3: syz_mount_image$gfs2(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000180)='squashfs\x00', 0x0, 0x0) 04:14:29 executing program 2 (fault-call:15 fault-nth:23): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1384.896094][T12268] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1384.904157][T12268] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1384.912128][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1384.920099][T12268] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1385.033986][T12280] FAULT_INJECTION: forcing a failure. [ 1385.033986][T12280] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.107252][T12280] CPU: 1 PID: 12280 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1385.115311][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.125400][T12280] Call Trace: [ 1385.125451][T12280] dump_stack+0x172/0x1f0 [ 1385.125473][T12280] should_fail.cold+0xa/0x15 [ 1385.137866][T12280] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1385.143689][T12280] ? ___might_sleep+0x163/0x280 [ 1385.143710][T12280] __should_failslab+0x121/0x190 04:14:30 executing program 0: pause() syz_execute_func(&(0x7f00000017c0)="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") 04:14:30 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1385.143729][T12280] should_failslab+0x9/0x14 [ 1385.158013][T12280] kmem_cache_alloc_trace+0x2d1/0x760 [ 1385.163397][T12280] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1385.169201][T12280] ? map_id_up+0x19c/0x320 [ 1385.173650][T12280] tomoyo_find_next_domain+0xe4/0x1f8a [ 1385.179122][T12280] ? mark_held_locks+0xf0/0xf0 [ 1385.183903][T12280] ? __lock_acquire+0x548/0x3fb0 [ 1385.188866][T12280] ? tomoyo_dump_page+0x510/0x510 [ 1385.193903][T12280] ? lock_acquire+0x16f/0x3f0 [ 1385.198601][T12280] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1385.204429][T12280] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1385.210167][T12280] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1385.216014][T12280] security_bprm_check+0x69/0xb0 [ 1385.220971][T12280] search_binary_handler+0x77/0x570 [ 1385.226182][T12280] ? kasan_check_read+0x11/0x20 [ 1385.231053][T12280] __do_execve_file.isra.0+0x1394/0x23f0 [ 1385.236722][T12280] ? copy_strings_kernel+0x110/0x110 [ 1385.242019][T12280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1385.248262][T12280] ? getname_flags+0x277/0x5b0 [ 1385.253029][T12280] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1385.259119][T12280] __x64_sys_execve+0x8f/0xc0 [ 1385.263826][T12280] do_syscall_64+0x103/0x610 [ 1385.268431][T12280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1385.274328][T12280] RIP: 0033:0x458da9 [ 1385.278232][T12280] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1385.297851][T12280] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b 04:14:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1385.306400][T12280] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1385.314386][T12280] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1385.322367][T12280] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1385.330345][T12280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1385.338340][T12280] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1385.406877][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.415851][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.441836][T12401] device bridge0 left promiscuous mode 04:14:30 executing program 2 (fault-call:15 fault-nth:24): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1385.830944][T12610] FAULT_INJECTION: forcing a failure. [ 1385.830944][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.857508][T12610] CPU: 0 PID: 12610 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1385.865521][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.875597][T12610] Call Trace: [ 1385.878911][T12610] dump_stack+0x172/0x1f0 [ 1385.883251][T12610] should_fail.cold+0xa/0x15 [ 1385.887858][T12610] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1385.893675][T12610] ? ___might_sleep+0x163/0x280 [ 1385.898533][T12610] __should_failslab+0x121/0x190 [ 1385.903473][T12610] should_failslab+0x9/0x14 [ 1385.907987][T12610] kmem_cache_alloc_trace+0x2d1/0x760 [ 1385.913357][T12610] ? retint_kernel+0x2d/0x2d [ 1385.917949][T12610] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1385.923592][T12610] tomoyo_find_next_domain+0x12c/0x1f8a [ 1385.929146][T12610] ? retint_kernel+0x2d/0x2d [ 1385.933752][T12610] ? tomoyo_dump_page+0x510/0x510 [ 1385.938785][T12610] ? lock_acquire+0x1ea/0x3f0 [ 1385.943484][T12610] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1385.949225][T12610] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1385.955061][T12610] security_bprm_check+0x69/0xb0 [ 1385.960017][T12610] search_binary_handler+0x77/0x570 [ 1385.965218][T12610] ? kasan_check_read+0x11/0x20 [ 1385.970082][T12610] __do_execve_file.isra.0+0x1394/0x23f0 [ 1385.975750][T12610] ? copy_strings_kernel+0x110/0x110 [ 1385.981042][T12610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1385.987396][T12610] ? getname_flags+0x277/0x5b0 [ 1385.992181][T12610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1385.998260][T12610] __x64_sys_execve+0x8f/0xc0 [ 1386.002943][T12610] do_syscall_64+0x103/0x610 [ 1386.007543][T12610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.013434][T12610] RIP: 0033:0x458da9 [ 1386.017347][T12610] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1386.036958][T12610] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1386.045404][T12610] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1386.053459][T12610] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1386.061457][T12610] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1386.069438][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1386.077465][T12610] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) 04:14:31 executing program 0 (fault-call:4 fault-nth:0): ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000560007031dfffd946f610500070000001f000000fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff24d8238e7a427b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) 04:14:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1386.333107][T12621] FAULT_INJECTION: forcing a failure. [ 1386.333107][T12621] name failslab, interval 1, probability 0, space 0, times 0 04:14:31 executing program 2 (fault-call:15 fault-nth:25): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1386.443696][T12621] CPU: 1 PID: 12621 Comm: syz-executor.0 Not tainted 5.1.0-rc7+ #97 [ 1386.451738][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.461800][T12621] Call Trace: [ 1386.461839][T12621] dump_stack+0x172/0x1f0 [ 1386.461861][T12621] should_fail.cold+0xa/0x15 [ 1386.461882][T12621] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1386.461907][T12621] ? ___might_sleep+0x163/0x280 [ 1386.484835][T12621] __should_failslab+0x121/0x190 [ 1386.489793][T12621] should_failslab+0x9/0x14 [ 1386.494322][T12621] kmem_cache_alloc_node+0x264/0x710 [ 1386.499643][T12621] __alloc_skb+0xd5/0x5e0 [ 1386.503987][T12621] ? skb_trim+0x190/0x190 [ 1386.508341][T12621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.514710][T12621] ? netlink_autobind.isra.0+0x228/0x310 [ 1386.520542][T12621] netlink_sendmsg+0x97b/0xd70 [ 1386.525334][T12621] ? netlink_unicast+0x720/0x720 [ 1386.530288][T12621] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1386.535857][T12621] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1386.541327][T12621] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.547588][T12621] ? security_socket_sendmsg+0x93/0xc0 [ 1386.553056][T12621] ? netlink_unicast+0x720/0x720 [ 1386.558008][T12621] sock_sendmsg+0xdd/0x130 [ 1386.562440][T12621] ___sys_sendmsg+0x806/0x930 [ 1386.567138][T12621] ? copy_msghdr_from_user+0x430/0x430 [ 1386.572656][T12621] ? kasan_check_read+0x11/0x20 [ 1386.577530][T12621] ? __fget+0x381/0x550 [ 1386.581713][T12621] ? ksys_dup3+0x3e0/0x3e0 [ 1386.586150][T12621] ? __fget_light+0x1a9/0x230 [ 1386.590846][T12621] ? __fdget+0x1b/0x20 [ 1386.594927][T12621] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1386.601189][T12621] __sys_sendmsg+0x105/0x1d0 [ 1386.605801][T12621] ? __ia32_sys_shutdown+0x80/0x80 [ 1386.610938][T12621] ? fput_many+0x12c/0x1a0 [ 1386.615378][T12621] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1386.620854][T12621] ? do_syscall_64+0x26/0x610 [ 1386.625552][T12621] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.631635][T12621] ? do_syscall_64+0x26/0x610 [ 1386.636329][T12621] __x64_sys_sendmsg+0x78/0xb0 [ 1386.641111][T12621] do_syscall_64+0x103/0x610 [ 1386.645719][T12621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.651617][T12621] RIP: 0033:0x458da9 [ 1386.655527][T12621] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1386.675146][T12621] RSP: 002b:00007f4bb1277c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1386.683580][T12621] RAX: ffffffffffffffda RBX: 00007f4bb1277c90 RCX: 0000000000458da9 [ 1386.691698][T12621] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1386.699691][T12621] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.707677][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4bb12786d4 [ 1386.715660][T12621] R13: 00000000004c5ff5 R14: 00000000004da7d8 R15: 0000000000000005 [ 1386.751282][T12626] FAULT_INJECTION: forcing a failure. [ 1386.751282][T12626] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.790086][T12626] CPU: 1 PID: 12626 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1386.798111][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.808178][T12626] Call Trace: [ 1386.811513][T12626] dump_stack+0x172/0x1f0 [ 1386.815886][T12626] should_fail.cold+0xa/0x15 [ 1386.820502][T12626] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1386.826334][T12626] ? ___might_sleep+0x163/0x280 [ 1386.831204][T12626] __should_failslab+0x121/0x190 [ 1386.836152][T12626] should_failslab+0x9/0x14 [ 1386.840669][T12626] kmem_cache_alloc_trace+0x2d1/0x760 [ 1386.846048][T12626] ? __sanitizer_cov_trace_cmp4+0x16/0x20 04:14:31 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x200000000000000]}) [ 1386.851773][T12626] ? map_id_up+0x19c/0x320 [ 1386.856215][T12626] tomoyo_find_next_domain+0x12c/0x1f8a [ 1386.861772][T12626] ? mark_held_locks+0xf0/0xf0 [ 1386.866557][T12626] ? __lock_acquire+0x548/0x3fb0 [ 1386.871520][T12626] ? tomoyo_dump_page+0x510/0x510 [ 1386.876559][T12626] ? lock_acquire+0x16f/0x3f0 [ 1386.881253][T12626] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1386.887083][T12626] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1386.892828][T12626] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1386.898654][T12626] security_bprm_check+0x69/0xb0 [ 1386.903611][T12626] search_binary_handler+0x77/0x570 [ 1386.908834][T12626] ? kasan_check_read+0x11/0x20 [ 1386.913710][T12626] __do_execve_file.isra.0+0x1394/0x23f0 [ 1386.919373][T12626] ? copy_strings_kernel+0x110/0x110 [ 1386.924681][T12626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1386.930936][T12626] ? getname_flags+0x277/0x5b0 [ 1386.935709][T12626] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.941789][T12626] __x64_sys_execve+0x8f/0xc0 [ 1386.946488][T12626] do_syscall_64+0x103/0x610 [ 1386.951093][T12626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1386.956987][T12626] RIP: 0033:0x458da9 [ 1386.960888][T12626] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1386.980498][T12626] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1386.988915][T12626] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1386.996892][T12626] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1387.004866][T12626] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1387.012845][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1387.020833][T12626] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:32 executing program 2 (fault-call:15 fault-nth:26): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) 04:14:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000010c0)={[{0x0, 0x400, 0xffffffff, 0x4, 0x1e814dee, 0x22, 0x400, 0x8, 0xba, 0x6857bf27, 0x8, 0x1, 0xfffffffffffffa88}, {0x8, 0x6, 0x7e0, 0x8, 0x7fff, 0x40, 0x3ff, 0x0, 0x3, 0xffffffffffffffc3, 0x9d2d, 0x401, 0x8}, {0x0, 0x7fffffff, 0x4, 0x9, 0x2, 0x7, 0xa7, 0x3, 0xaa, 0x7, 0xffffffffffff0000, 0x8, 0x8001}]}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000000000800001, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0xfffffdae) ioctl$int_in(r1, 0x544f, &(0x7f0000001240)=0x1) socket$inet(0x10, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r2 = socket$inet6(0xa, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000001140)={0x0, 0x0, [0x4, 0x0, 0x5, 0x6]}) read$FUSE(r1, &(0x7f00000000c0), 0x1003) [ 1387.287625][T12637] FAULT_INJECTION: forcing a failure. [ 1387.287625][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.327963][T12637] CPU: 0 PID: 12637 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1387.336016][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.346086][T12637] Call Trace: [ 1387.349400][T12637] dump_stack+0x172/0x1f0 [ 1387.353846][T12637] should_fail.cold+0xa/0x15 [ 1387.358455][T12637] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1387.364275][T12637] ? ___might_sleep+0x163/0x280 [ 1387.369141][T12637] __should_failslab+0x121/0x190 [ 1387.374100][T12637] should_failslab+0x9/0x14 [ 1387.378617][T12637] kmem_cache_alloc+0x2b2/0x6f0 [ 1387.383497][T12637] getname_kernel+0x53/0x370 [ 1387.388110][T12637] kern_path+0x20/0x40 [ 1387.392192][T12637] tomoyo_realpath_nofollow+0x74/0xdb [ 1387.397613][T12637] ? tomoyo_realpath_from_path+0x730/0x730 [ 1387.403435][T12637] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1387.409688][T12637] ? tomoyo_init_request_info+0x105/0x1d0 [ 1387.415427][T12637] tomoyo_find_next_domain+0x28c/0x1f8a [ 1387.420996][T12637] ? mark_held_locks+0xf0/0xf0 [ 1387.425781][T12637] ? tomoyo_dump_page+0x510/0x510 [ 1387.430832][T12637] ? lock_acquire+0x16f/0x3f0 [ 1387.435526][T12637] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1387.441356][T12637] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1387.447115][T12637] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1387.452933][T12637] security_bprm_check+0x69/0xb0 [ 1387.457913][T12637] search_binary_handler+0x77/0x570 [ 1387.463121][T12637] ? kasan_check_read+0x11/0x20 [ 1387.467989][T12637] __do_execve_file.isra.0+0x1394/0x23f0 [ 1387.473749][T12637] ? copy_strings_kernel+0x110/0x110 [ 1387.479043][T12637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1387.485301][T12637] ? getname_flags+0x277/0x5b0 [ 1387.490086][T12637] __x64_sys_execve+0x8f/0xc0 [ 1387.494780][T12637] do_syscall_64+0x103/0x610 [ 1387.499392][T12637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.505287][T12637] RIP: 0033:0x458da9 [ 1387.509186][T12637] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:14:32 executing program 5: r0 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\xbb\x0f\xe8\xfaV\xdcFv\x91\x1e&\xd6\xe2\xde\x11\x00Bf]\xf0V^\xc1\x9fw\xcb\x11\x84\x16F\xa1\xb6\x17Fv\xdf\xd2\xf5j\xa9\xd67\xd3\xa0e4U\r\xb3u\xab\xcf\v\x8c5\xdb++\xd4\xddS\xf4\'\x83\x05\xbf\x17\t\xea\xb2\x14\xf1]\x13\xeb\x89%\x86\xa5\f\xde\x8f\x90?\xefj\x8f?\xf7\xe7\xa7\xf4_\fV\vr\x10hh\x002\xfd[\x02\xc7Og\xa9\xb4=VC6\xb7\x7f\xfcA\x95\xa9_H/aG\x95\x86\xf6aT\xa9b\x8d\x8d\xd4B\xb4\xfc\xf9\x9f\xcb\f\x9d1\a\x10C9m\x7f\xa9\xe9\x17', 0x0) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x600000000000000]}) [ 1387.528798][T12637] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1387.537356][T12637] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1387.545427][T12637] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1387.553407][T12637] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1387.561387][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1387.569368][T12637] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 04:14:32 executing program 2 (fault-call:15 fault-nth:27): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x3ffffe, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x8}}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpriority(0x0, r2, 0x10000) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=""/67, 0x43) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) [ 1387.933311][T12651] FAULT_INJECTION: forcing a failure. [ 1387.933311][T12651] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.958356][T12651] CPU: 1 PID: 12651 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1387.966459][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.976537][T12651] Call Trace: [ 1387.979866][T12651] dump_stack+0x172/0x1f0 [ 1387.984234][T12651] should_fail.cold+0xa/0x15 [ 1387.988862][T12651] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1387.994692][T12651] ? ___might_sleep+0x163/0x280 [ 1387.999571][T12651] __should_failslab+0x121/0x190 [ 1388.004521][T12651] should_failslab+0x9/0x14 [ 1388.009033][T12651] __kmalloc+0x2dc/0x740 [ 1388.013298][T12651] ? tomoyo_realpath_from_path+0xba/0x730 [ 1388.019035][T12651] ? rcu_read_lock_sched_held+0x110/0x130 [ 1388.024769][T12651] ? tomoyo_realpath_from_path+0xc7/0x730 [ 1388.030518][T12651] tomoyo_realpath_from_path+0xc7/0x730 [ 1388.036084][T12651] tomoyo_realpath_nofollow+0xc8/0xdb [ 1388.041471][T12651] ? tomoyo_realpath_from_path+0x730/0x730 [ 1388.047290][T12651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1388.053546][T12651] ? tomoyo_init_request_info+0x105/0x1d0 [ 1388.059284][T12651] tomoyo_find_next_domain+0x28c/0x1f8a [ 1388.065105][T12651] ? mark_held_locks+0xf0/0xf0 [ 1388.069880][T12651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1388.075386][T12651] ? tomoyo_dump_page+0x510/0x510 [ 1388.080509][T12651] ? lock_acquire+0x16f/0x3f0 [ 1388.085197][T12651] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1388.091023][T12651] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1388.096756][T12651] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1388.102591][T12651] security_bprm_check+0x69/0xb0 [ 1388.107546][T12651] search_binary_handler+0x77/0x570 [ 1388.112760][T12651] ? kasan_check_read+0x11/0x20 [ 1388.117651][T12651] __do_execve_file.isra.0+0x1394/0x23f0 [ 1388.123581][T12651] ? copy_strings_kernel+0x110/0x110 [ 1388.128883][T12651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.135147][T12651] ? getname_flags+0x277/0x5b0 [ 1388.139930][T12651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.146017][T12651] __x64_sys_execve+0x8f/0xc0 [ 1388.150706][T12651] do_syscall_64+0x103/0x610 [ 1388.155310][T12651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.161787][T12651] RIP: 0033:0x458da9 [ 1388.165696][T12651] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1388.186004][T12651] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1388.194520][T12651] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1388.202497][T12651] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1388.210471][T12651] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1388.218458][T12651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1388.226436][T12651] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1388.277386][T12651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1388.284374][T12651] Kernel panic - not syncing: MAC Initialization failed. [ 1388.292143][T12651] CPU: 1 PID: 12651 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 1388.300116][T12651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.310173][T12651] Call Trace: [ 1388.313479][T12651] dump_stack+0x172/0x1f0 [ 1388.317840][T12651] panic+0x2cb/0x65c [ 1388.321750][T12651] ? __warn_printk+0xf3/0xf3 [ 1388.326361][T12651] ? tomoyo_realpath_from_path+0x394/0x730 [ 1388.332174][T12651] ? tomoyo_warn_oom.cold+0x24/0x43 [ 1388.337389][T12651] tomoyo_warn_oom.cold+0x35/0x43 [ 1388.342423][T12651] tomoyo_realpath_from_path+0x3a8/0x730 [ 1388.348079][T12651] tomoyo_realpath_nofollow+0xc8/0xdb [ 1388.353464][T12651] ? tomoyo_realpath_from_path+0x730/0x730 [ 1388.359281][T12651] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1388.365538][T12651] ? tomoyo_init_request_info+0x105/0x1d0 [ 1388.371284][T12651] tomoyo_find_next_domain+0x28c/0x1f8a [ 1388.376861][T12651] ? mark_held_locks+0xf0/0xf0 [ 1388.381639][T12651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1388.387128][T12651] ? tomoyo_dump_page+0x510/0x510 [ 1388.392165][T12651] ? lock_acquire+0x16f/0x3f0 [ 1388.396855][T12651] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1388.402685][T12651] tomoyo_bprm_check_security+0x12a/0x1b0 [ 1388.408416][T12651] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 1388.414325][T12651] security_bprm_check+0x69/0xb0 [ 1388.419281][T12651] search_binary_handler+0x77/0x570 [ 1388.424497][T12651] ? kasan_check_read+0x11/0x20 [ 1388.429367][T12651] __do_execve_file.isra.0+0x1394/0x23f0 [ 1388.435026][T12651] ? copy_strings_kernel+0x110/0x110 [ 1388.440323][T12651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1388.446581][T12651] ? getname_flags+0x277/0x5b0 [ 1388.451359][T12651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.457451][T12651] __x64_sys_execve+0x8f/0xc0 [ 1388.462144][T12651] do_syscall_64+0x103/0x610 [ 1388.466749][T12651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.472645][T12651] RIP: 0033:0x458da9 [ 1388.476546][T12651] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1388.496166][T12651] RSP: 002b:00007fd92fd04c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1388.504604][T12651] RAX: ffffffffffffffda RBX: 00007fd92fd04c90 RCX: 0000000000458da9 [ 1388.512694][T12651] RDX: 0000000020000ac0 RSI: 0000000000000000 RDI: 0000000020000300 [ 1388.520682][T12651] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1388.528659][T12651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd92fd056d4 [ 1388.536642][T12651] R13: 00000000004bf3a9 R14: 00000000004d05d8 R15: 0000000000000005 [ 1388.546163][T12651] Kernel Offset: disabled [ 1388.550726][T12651] Rebooting in 86400 seconds..