0133eea4cbd4b1ffe06a6005dd7e0784ebb037bf8159dc935f3bbd31d6a4f7cc8eaadc79d4598c979e2d", &(0x7f00000009c0)="6f24ccd17d49cebd0b6fc5da82d4300e83781b503eb9446a5ae8d845f801e82bd7ca05082674ed6323ded354228aa6d17e6905eaa90fc5482c93444bc9d02589bb6ad35471601ffc2a71bad4ac962f4a3da89140075b983b2a1ca4a05ece8b8d9d2d7f962c0dac08113d8ff80fc181edb50d25b6630a459b2d60587fc995307e99f76b0de8a35a093644740f48e8fdec64c8a939da878e4a323351217453527db39b89cf6df1a2"], 0x4}) [ 621.013026][T26616] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 621.032581][T26616] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.039649][T26616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.047080][T26616] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.054225][T26616] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:30 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 621.134214][T26626] batman_adv: Cannot find parent device [ 621.143874][T26629] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.151270][T26629] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:30 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41084) r1 = dup(r0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x420, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x18}}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x6, 0x37}, 0x1, 0x5}}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$mixer(0xffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x40000, 0x0) finit_module(r7, &(0x7f0000000400)='SMC_PNETID\x00', 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000002a48c81507c593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7c21518403f6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000f332f67c43f1ef", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)={0x5}) [ 621.463198][T26632] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 621.488660][T26632] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.495840][T26632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.503306][T26632] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.510388][T26632] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:30 executing program 1: eventfd2(0x8, 0x100000) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x5fc, 0x7d202) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468000000001800f3ff1300383bd8c12801", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r5, @broadcast, @multicast2}, 0xc) [ 621.702607][T26638] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.709914][T26638] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.863028][T26639] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.876672][T26639] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.883816][T26639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.891175][T26639] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.898289][T26639] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:12:31 executing program 4: openat$uinput(0xffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x1}) 10:12:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 622.005187][T26653] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.012442][T26653] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.184173][T26658] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 622.202813][T26658] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.210008][T26658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.217475][T26658] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.224620][T26658] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:31 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="071e2020", @ANYRES16=r5, @ANYBLOB="2b0f0000000000000000110000000600b50000000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac06, 0xfac0a, 0xfac00]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r6, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/82, 0x52) [ 622.418047][T26665] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.425297][T26665] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.574542][T26668] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 622.592230][T26668] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.599489][T26668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.606985][T26668] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.614112][T26668] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:31 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 622.659385][T26676] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.666574][T26676] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.777825][T26679] batman_adv: Cannot find parent device [ 622.794896][T26680] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 10:12:31 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) [ 622.826333][T26680] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.834565][T26680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.845136][T26680] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.853602][T26680] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 622.906421][T26687] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.913758][T26687] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.053605][T26691] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 623.091612][T26691] bridge0: port 2(bridge_slave_1) entered blocking state 10:12:32 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x203, 0x4b2c3) [ 623.100846][T26691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.111383][T26691] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.121255][T26691] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:32 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 623.181659][T26703] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.188924][T26703] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:32 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) write$P9_RREADDIR(r1, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0x7fffffff, [{{0x20, 0x0, 0x3}, 0xff, 0x1, 0x7, './file0'}]}}, 0x2a) 10:12:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000300)="ba652d43f238373e204cd81424c5b2090bdc9ebac403c3d85106a59c4ec1ce66341feaa97c7a13310c6db7d96b2ee987af3794307faf41fa90202b551273b8444a51edc105bde16239c56a02922a80d69d3e46af0e7e466604598f327c1cf1d6827569805b0cbc50f61bb131955ae62a8631ee8d5cb58c5d9d39c695048287bb65bfad96e13f86bc9d092b1737d61bcf5a974f354615ad8c6100fa386f0cb9ad2e41e39b12c5865c8993efc4e412f45a0bf9008087a6d2e2f0f6c4b1aa0179c49850bc7cad822ee35e0283592c", 0xcd, 0x0) keyctl$link(0x8, 0x0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r2}, 0x8) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={r2, 0x3}, 0x8) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080), 0x10) r5 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r6 = openat$dlm_plock(0xffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200c00, 0x0) r7 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x227c, 0x8150000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x10000005}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0xc0245720, &(0x7f0000000000)) [ 623.437308][T26706] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 623.477578][T26706] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.485608][T26706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.496465][T26706] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.504951][T26706] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:32 executing program 1: r0 = openat$snapshot(0xffffff9c, &(0x7f0000002800)='/dev/snapshot\x00', 0x4001, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000002840)=0x1, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0245720, &(0x7f0000000000)) [ 623.776941][T26713] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.784144][T26713] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:32 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x3, 0xa4c40) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="4a3b8251ae9a4dd73ebe1014db219cab73a687ba3a378fafbaa0c3e696a2fd204690cedf48", 0x25}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRESDEC=r1], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRESOCT], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x5bc39250a6e11ece, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000380)={0x33, 0x3a, 0x0, 0x1, 0x100004, 0xfffffffc, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700072b3", @ANYRES16=r7, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r8 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0xc0205710, &(0x7f0000000000)) 10:12:33 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) socketpair(0x28, 0x4, 0x100, &(0x7f0000000680)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x1c}}, 0x48001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x10) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) msgget$private(0x0, 0x11) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r7 = syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES16=r6, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/34}) [ 624.013059][T26714] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.020259][T26714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.027704][T26714] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.034848][T26714] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000004) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) write$midi(r1, &(0x7f0000000080)="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", 0x1000) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x40000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) 10:12:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 624.233853][T26723] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.241099][T26723] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:33 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) munlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0xc, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000300)) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x11) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r6, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000240)=0x2) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000140)='\x00', 0x1, r1) r7 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="f03c98869c", 0x5, r0) keyctl$setperm(0x5, r7, 0x20) [ 624.444237][T26729] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.451399][T26729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.458895][T26729] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.466067][T26729] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:33 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20) 10:12:33 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB="3e997c4b6ef6bccdf83e8b359975f9c466cc678e102735854467aa2c3036620dc5cdef09340a2b4162bb962f728d9c6fc9b81066bfed3d7d44988429a50f9630a85ffaa0bb6236b2091b59ef9517231f708d71c995214f7cafc812c36eb69e3265b3a8acd9dcd0399e929c07ef269e8cfe3586f2b11e555949afab398d61e647d78b3fb9ed7d567527d675e13f0b19761111a8eaf9e7fddbbe354a373886c158bc834ea72542ea272809237a50a0ae06c13eb906f14a41a259ade64e70ea6e37"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) [ 624.675483][T26739] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.682730][T26739] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40040, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r5, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='/dev/snd/midiC#D#\x00', &(0x7f00000000c0)='./file0\x00', r2) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) [ 624.880962][T26743] batman_adv: Cannot find parent device [ 624.894874][T26744] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.902070][T26744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.909521][T26744] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.916663][T26744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.027583][T26758] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.034856][T26758] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.172984][T26761] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.180070][T26761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.187513][T26761] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.194636][T26761] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:34 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:34 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0xffffffffffff8000, 0x1, 0x5}, &(0x7f0000000100)=[{}, {}, {}, {}, {}]) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) 10:12:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0205710, &(0x7f0000000000)) r1 = syz_open_dev$loop(0x0, 0x6, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x227c, 0x8150000) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x43}, 0x5}}}, 0x84) ioctl$BLKTRACETEARDOWN(r2, 0x227c, 0x8150000) dup2(r1, r2) 10:12:34 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 625.332648][T26781] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.339839][T26781] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.639246][T26784] __nla_validate_parse: 4 callbacks suppressed [ 625.639257][T26784] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 625.689098][T26784] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.696273][T26784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.703713][T26784] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.710802][T26784] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:34 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r5}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) 10:12:34 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 625.823116][T26799] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.830327][T26799] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.002877][T26804] batman_adv: Cannot find parent device [ 626.024352][T26805] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.031581][T26805] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:35 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 626.342592][T26807] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 626.354723][T26807] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.361798][T26807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.369227][T26807] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.376350][T26807] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 626.424047][T26809] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 626.439702][T26809] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.446962][T26809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.454397][T26809] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.461462][T26809] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 626.506187][T26821] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.513556][T26821] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.655419][T26823] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 626.675317][T26823] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.683448][T26823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.692227][T26823] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.700739][T26823] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:35 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 626.845120][T26835] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.852589][T26835] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.036311][T26836] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.061397][T26836] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.070525][T26836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.082398][T26836] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.090374][T26836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.136163][T26839] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.143397][T26839] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 627.339633][T26842] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.346872][T26842] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.502649][T26841] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.512712][T26841] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.519798][T26841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.527236][T26841] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.534356][T26841] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:36 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 627.563822][T26843] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 627.579216][T26843] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.586487][T26843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.593918][T26843] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.600981][T26843] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:36 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 627.683598][T26851] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.690753][T26851] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.800446][T26852] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 627.810243][T26852] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.817386][T26852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.824846][T26852] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.831927][T26852] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 627.879899][T26857] batman_adv: Cannot find parent device [ 627.906634][T26861] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.913930][T26861] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.125062][T26862] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 628.158819][T26862] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.166509][T26862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.174123][T26862] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.181170][T26862] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 628.224657][T26865] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.232032][T26865] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.379604][T26872] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.386928][T26872] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.562460][T26870] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 628.571930][T26870] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.579091][T26870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.586461][T26870] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.593699][T26870] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:37 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x1fc, 0x408200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000080)) 10:12:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 628.642159][T26875] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.649226][T26875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.656791][T26875] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.663927][T26875] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665e, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 628.734718][T26881] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.742075][T26881] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:37 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x40800) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 629.085469][T26883] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.092645][T26883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.100030][T26883] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.107299][T26883] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:38 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="1004447f81c6177e7c9563dd1f9ab1d12f71f9b949674f2209d45dc23bb3275678e07f"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9f61980a", @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x3567470785e10c7f, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'SMC_PNETID\x00'}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, '/dev/snd/midiC#D#\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x68}}, 0x4000800) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r8 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0xc0245720, &(0x7f0000000000)) 10:12:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 629.319863][T26887] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.327197][T26887] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.462563][T26888] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.469759][T26888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.477219][T26888] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.484353][T26888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.508001][T26891] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.515335][T26891] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e23, @remote}}) 10:12:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 629.772642][T26893] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.779842][T26893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.787247][T26893] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.794398][T26893] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:38 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 629.845765][T26898] batman_adv: Cannot find parent device [ 629.869976][T26899] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.877273][T26899] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 630.007180][T26903] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.014369][T26903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.021745][T26903] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.028899][T26903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.123639][T26913] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.130767][T26913] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.234904][T26916] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.242093][T26916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.249493][T26916] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.256648][T26916] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:39 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 630.321190][T26923] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.328449][T26923] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.600663][T26928] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.607971][T26928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.615422][T26928] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.622554][T26928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.636014][T26933] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.643303][T26933] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:39 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 630.822376][T26934] __nla_validate_parse: 7 callbacks suppressed [ 630.822385][T26934] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 630.847944][T26934] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.855148][T26934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.862585][T26934] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.869659][T26934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.897873][T26937] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.905095][T26937] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:40 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 631.062496][T26938] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.072570][T26938] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.079772][T26938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.087202][T26938] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.094392][T26938] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 631.158024][T26947] batman_adv: Cannot find parent device [ 631.219635][T26948] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.226960][T26948] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.320734][T26950] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 631.331392][T26950] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.338569][T26950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.346083][T26950] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.353215][T26950] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:40 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 631.377911][T26956] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.385218][T26956] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.573117][T26957] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.597265][T26957] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.605040][T26957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.618320][T26957] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.627822][T26957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.674472][ T0] NOHZ: local_softirq_pending 08 10:12:40 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 631.711539][T26960] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.718732][T26960] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.823214][T26961] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 631.839047][T26961] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.846325][T26961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.853770][T26961] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.860841][T26961] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:40 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 631.973317][T26972] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.980660][T26972] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.112500][T20150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.132627][T26973] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.148006][T26973] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.155177][T26973] bridge0: port 2(bridge_slave_1) entered forwarding state 10:12:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') r3 = openat$sequencer(0xffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x9}}, 0x18) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000040)={0x0, 0x9, 0x8, 0x1}) 10:12:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 632.162551][T26973] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.169627][T26973] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 632.317506][T26976] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.324783][T26976] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000040)) [ 632.585653][T26979] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 632.607542][T26979] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.614699][T26979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.622086][T26979] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.629169][T26979] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:41 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$mice(0xffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r2}, 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) read$midi(r3, &(0x7f00000001c0)=""/156, 0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="fffffc00b8c5bc6a0296cf031a7d453cf44e82123952a2553dab64f77a3b2c5bed6f65c4376bfee72ddb4ca6406a3480c49b21f7400b515836368f12f8bf74878b5358a7814cbf513104c5dbded58ae4103e24cce678b21e887e72d639b3a06c79f18375d0130b53916c7b68be6ebc75e0c1e4c4126a60fe49479fcb8b96eb800e3037c3e179ee5cbbf00fee9ea9dd2c9172dd9b4155cb7dedbf584c7ea8161b30f16502c548c964f6affaea5e8ca1345a88d2455afb04a4bafddb74645d43724dfb7d2222db528aa778e4b30c8d542858c5ff5502c2630fd3c6c34c340b10b211eb4a7e46c77c898402a38d09c8c3bd401afd0e0fbf1ec522"], 0x104) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, &(0x7f0000000400)={0x80000001, 0x6, 0x4, 0x400, 0x10000, {r6, r7/1000+10000}, {0x5, 0xc, 0x3, 0xeb, 0x4, 0x36, "065c67b0"}, 0x3, 0x1, @offset=0x45ac, 0x2, 0x0, 0xffffffffffffffff}) mkdirat(r8, &(0x7f0000000340)='./file0\x00', 0x200) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r2, 0xf9}, 0xc) r9 = openat$sequencer2(0xffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f00000004c0)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 632.778383][T26982] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.785713][T26982] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:42 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 633.025742][T26983] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 633.046569][T26983] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.053729][T26983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.061113][T26983] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.068235][T26983] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:42 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 633.216311][T26986] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.223628][T26986] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.374203][T26987] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.389299][T26987] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.396450][T26987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.403886][T26987] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.410936][T26987] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:42 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000140)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}]}) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r5, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc0fc4110, &(0x7f0000000180)={0xf0, [0x6, 0x10000, 0x6], [{0x7f0, 0x1fffc0, 0x1}, {0x80000000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x101, 0x7, 0x1}, {0x10001, 0x1a, 0x1, 0x1, 0x0, 0x1}, {0xfffffffa, 0x2, 0x1, 0x0, 0x1}, {0x7ff, 0x4a, 0x1}, {0x20, 0x6, 0x0, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x1}, {0xfffffff9, 0x5, 0x0, 0x1, 0x1}, {0x66, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x1, 0x1, 0x1}], 0xffff}) 10:12:42 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 633.482457][T26992] batman_adv: Cannot find parent device [ 633.489253][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.506061][T26997] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.513354][T26997] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.792726][T27000] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.808312][T27000] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.815542][T27000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.822978][T27000] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.830055][T27000] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:42 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 633.849064][T27009] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.856359][T27009] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.002225][T27014] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.009311][T27014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.016748][T27014] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.023883][T27014] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:43 executing program 1: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) r1 = socket(0x40000000002, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r2) r3 = socket(0x40000000002, 0x3, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/102400, 0x19000}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r5, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r5, @ANYBLOB="10002bbd7000fcdbdf2504000000080004000300"], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008011) lchown(&(0x7f0000000140)='./file0\x00', 0x0, r4) getgroups(0x6, &(0x7f0000000080)=[0xee01, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xee01]) ioctl$TUNSETGROUP(r0, 0x400454ce, r6) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) r7 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0xc0245720, &(0x7f0000000000)) [ 634.139790][T27026] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.147112][T27026] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x2db24, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:43 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:43 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x60048811}, 0x4000) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x103000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000000100000000000000000000030000040c000680080001007f000001080015400000000008000c4000000000380002801400018008000100e000000208000200ac14141d0c00028005000100840000000c000280050001003c0000000600034000010000df23a23233cb9ae9e1205e602ff8d3f3db3cca20ec122673f0ea402e65e4406cfcd560eb520b54d19a87776033360c7f34d4b8dac93da29ec05bf6f09acaeb"], 0x68}, 0x1, 0x0, 0x0, 0x40880}, 0x20000) [ 634.512352][T27029] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.519459][T27029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.526930][T27029] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.534036][T27029] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:43 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x3c, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000040)) 10:12:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:43 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0xc0245720, &(0x7f0000000180)) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x27c5000, 0xd950c296acc71c04) r6 = openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101402, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r6, 0x800442d4, &(0x7f00000000c0)=0x8) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000000080)) [ 634.748572][T27036] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.755787][T27036] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.967981][T27040] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.975107][T27040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.982556][T27040] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.989666][T27040] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:44 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x441, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'bridge_slave_1\x00', {0x2, 0x4e22, @local}}) r3 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x23480, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4040000) [ 635.103414][T27044] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.110680][T27044] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.312376][T27045] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.319777][T27045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.327273][T27045] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.334378][T27045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.349575][T27053] bridge0: port 2(bridge_slave_1) entered disabled state 10:12:44 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 635.356831][T27053] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:44 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x38, 0x0, 0x1c, 0x4, 0xfffffff9, 0x3, 0xd0}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="aea90350d88e550951d3004b26161ed040d688ad0ada979757f76787529a21da85f9f8590d001f5fa916ab2545bc05713ced3b829f4c3a69199bc5464a3f73c66761f226b3b3a9798adeb786bd8042e10cc5d6e2c2872c6fc699aeabde6487034bd6f692eb50507e6cda8997cdb3aa2a0139f75b"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x200a00}]) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r8, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r8, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$VIDIOC_ENUMSTD(r5, 0xc0405619, &(0x7f0000000080)={0x2, 0x8, "34a81f5c6765f8751ec9e266917d367b1b800a401274af95", {0x80, 0x9}, 0x6}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) [ 635.616826][T27055] batman_adv: Cannot find parent device [ 635.635321][T27056] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.642546][T27056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.649942][T27056] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.657083][T27056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.689947][T27069] batman_adv: Cannot find parent device 10:12:44 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:12:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x3ffff, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 635.775997][T27080] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.783319][T27080] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:44 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x227c, 0x8150000) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYRES64], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030273797a30090000000900010073667a31000000000900ee0073797a32400000000900030073797a32000000162679a372fd5099a469e9e5da1cc6bb38feb6e18f141d8e756c485f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e2fb607707b5aa856c4bfdef45ddda30fe000b7f976aec9dda4bc75fff6b828d915523dc39df157480df8d93c214f1527c7ea520276c37d9adb97902af0f88061c60f55e09dfaaac7bcaf99404027ecc0d0d4b6dbc56e47fe48f515eeb9109ee716913aab00e7bd22d8fa2134c3709f8160cabc70d7ba75c4ad786c1d3d513941c8588789895410d9af6309e9f6a6593ec8420667106c2ded9444c5373af46c2d8c9992971790c5e45bdb408471d9d8791c33f955e59817a3ac3ff2f14732f20300e47ffa0844ae8b857f1e78b6069be1e7c424fd4146198fe0b0e63351ec5d31142e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x36) [ 636.033501][T27081] __nla_validate_parse: 5 callbacks suppressed [ 636.033512][T27081] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.063381][T27081] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.070542][T27081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.077999][T27081] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.085172][T27081] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 636.227765][T27091] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.235052][T27091] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:45 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/102400, 0x19000}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r4, 0x20, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB="10002bbd7000fcdbdf2504000000080004000300"], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c0}, 0x80) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x320, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20000800) [ 636.463479][T27093] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 636.487455][T27093] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.494649][T27093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.502096][T27093] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.509184][T27093] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:45 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:12:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1665f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 636.630941][T27103] batman_adv: Cannot find parent device [ 636.656825][T27105] batman_adv: Cannot find parent device [ 636.717017][T27106] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.724297][T27106] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:45 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = openat$snapshot(0xffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x1002000, 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x8b, 0x4, 0x3]}, &(0x7f0000000080)=0xa) [ 636.893334][T27109] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 636.910953][T27109] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.918156][T27109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.925596][T27109] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.932722][T27109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.021299][T27117] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.028591][T27117] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:46 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:46 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x227c, 0x8150000) fchmod(r1, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 637.362027][T27119] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 637.372528][T27119] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.379626][T27119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.387094][T27119] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.394237][T27119] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:46 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:46 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80800, 0x0) 10:12:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 637.587809][T27134] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.595185][T27134] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:46 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000040)) 10:12:46 executing program 1: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) pipe2(&(0x7f0000000040), 0x84800) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r1, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 637.920482][T27136] batman_adv: Cannot find parent device [ 637.936426][T27137] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 637.956360][T27137] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.963616][T27137] bridge0: port 2(bridge_slave_1) entered forwarding state 10:12:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 637.971010][T27137] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.978142][T27137] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:47 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:47 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 638.072558][T27146] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.079854][T27146] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.337184][T27148] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 638.361441][T27148] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.368560][T27148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.375985][T27148] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.383103][T27148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.425963][T27157] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.433379][T27157] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:47 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 638.661054][T27162] batman_adv: Cannot find parent device [ 638.675108][T27159] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 638.687262][T27159] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.694525][T27159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.701957][T27159] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.709034][T27159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.727740][T27176] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.735041][T27176] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 638.885356][T27179] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.906490][T27179] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.914683][T27179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.922159][T27179] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.929220][T27179] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:48 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 639.030758][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.037959][T27180] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.135039][T27183] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.142335][T27183] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.311920][T27184] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.331399][T27184] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.338582][T27184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.346073][T27184] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.353196][T27184] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 639.393753][T27185] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.408581][T27185] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.415915][T27185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.423372][T27185] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.430441][T27185] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:48 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:12:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xf0ffff, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 639.512637][T27191] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.519804][T27191] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:48 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 639.756716][T27192] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.764000][T27192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.771450][T27192] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.778523][T27192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.928057][T27199] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.935261][T27199] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.051896][T27200] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.059078][T27200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.066507][T27200] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.073633][T27200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.096524][T27203] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.103936][T27203] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:49 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 640.262736][T27204] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.269816][T27204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.277246][T27204] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.284389][T27204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.295748][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.330697][T27207] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.337911][T27207] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.491942][T27210] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.499026][T27210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.506437][T27210] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.513587][T27210] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 640.558198][T27214] batman_adv: Cannot find parent device [ 640.636294][T27215] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.643490][T27215] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:49 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 640.801746][T27218] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.808824][T27218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.816402][T27218] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.823542][T27218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.940388][T27221] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.940552][T27221] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.042914][T27222] __nla_validate_parse: 5 callbacks suppressed [ 641.042924][T27222] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 641.071740][T27222] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.078963][T27222] bridge0: port 2(bridge_slave_1) entered forwarding state 10:12:50 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 641.086400][T27222] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.093544][T27222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.114529][T27227] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.121736][T27227] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.409639][T27229] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.416834][T27229] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.511762][T27230] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.521139][T27230] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.528265][T27230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.535673][T27230] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.542886][T27230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.574320][T27231] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 641.596458][T27231] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.603692][T27231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.611071][T27231] bridge0: port 1(bridge_slave_0) entered blocking state 10:12:50 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 641.618199][T27231] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 641.652780][T27239] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.660042][T27239] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:50 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 641.881781][T27242] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 641.898186][T27242] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.905252][T27242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.912702][T27242] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.919792][T27242] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 641.964826][T27245] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.972137][T27245] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.184488][T27246] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.199532][T27246] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.206814][T27246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.214249][T27246] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.221349][T27246] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:51 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 642.249042][T27249] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.256368][T27249] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.401704][T27252] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 642.417578][T27252] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.424856][T27252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.432286][T27252] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.439357][T27252] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:51 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 642.528542][T27256] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.535750][T27256] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.706890][T27257] batman_adv: Cannot find parent device [ 642.727540][T27259] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.734835][T27259] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.862110][T27261] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.877635][T27261] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.884876][T27261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.892290][T27261] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.899388][T27261] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:52 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 642.923431][T27263] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.943222][T27263] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.950490][T27263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.957933][T27263] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.965046][T27263] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:52 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 642.982088][T27267] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.989283][T27267] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.121690][T27270] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 643.142458][T27270] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.149507][T27270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.156978][T27270] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.164110][T27270] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:52 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 643.272289][T27273] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.279515][T27273] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.441730][T27274] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 643.460977][T27274] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.468210][T27274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.475652][T27274] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.482804][T27274] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:52 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:12:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x2000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 643.562280][T27279] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.569468][T27279] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.772252][T27282] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.779351][T27282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.786747][T27282] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.793868][T27282] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:52 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1e"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 643.948890][T27288] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.956095][T27288] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.161109][T27289] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.168315][T27289] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.263712][T27290] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.270790][T27290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.278210][T27290] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.285335][T27290] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:53 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 644.309344][T27291] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.316447][T27291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.323875][T27291] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.330952][T27291] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 644.374381][T27295] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.381653][T27295] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.521689][T27297] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.528796][T27297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.536255][T27297] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.543372][T27297] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:53 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 644.584471][T27301] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.591792][T27301] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.847308][T27303] batman_adv: Cannot find parent device [ 644.862434][T27305] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.869644][T27305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.877089][T27305] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.884236][T27305] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 644.910277][T27309] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.917590][T27309] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.043774][T27310] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.050946][T27310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.058377][T27310] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.065500][T27310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.091861][T27315] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.099236][T27315] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:54 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 645.322810][T27317] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.330111][T27317] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x3000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 645.483017][T27320] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.490117][T27320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.497564][T27320] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.504704][T27320] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:54 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 645.581449][T27343] batman_adv: Cannot find parent device [ 645.605196][T27321] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.612435][T27321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.619828][T27321] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.626966][T27321] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 645.688604][T27325] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.695886][T27325] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.851721][T27326] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.858951][T27326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.866407][T27326] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.873515][T27326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.889234][T27333] bridge0: port 2(bridge_slave_1) entered disabled state 10:12:55 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000180)={0x1, 0x70, 0xeb, 0x5, 0x8, 0x1, 0x0, 0xffffffffffff6ad1, 0xa502e, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x5, 0x278cf31e}, 0x4008, 0x8, 0x101, 0x9, 0x3ff, 0x5a, 0xffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 645.896452][T27333] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.157115][T27334] __nla_validate_parse: 9 callbacks suppressed [ 646.157125][T27334] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 646.186412][T27334] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.193633][T27334] bridge0: port 2(bridge_slave_1) entered forwarding state 10:12:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:12:55 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000180)={0x1, 0x70, 0xeb, 0x5, 0x8, 0x1, 0x0, 0xffffffffffff6ad1, 0xa502e, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x5, 0x278cf31e}, 0x4008, 0x8, 0x101, 0x9, 0x3ff, 0x5a, 0xffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 646.201083][T27334] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.208154][T27334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.226317][T27337] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.233517][T27337] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:55 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000180)={0x1, 0x70, 0xeb, 0x5, 0x8, 0x1, 0x0, 0xffffffffffff6ad1, 0xa502e, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x5, 0x278cf31e}, 0x4008, 0x8, 0x101, 0x9, 0x3ff, 0x5a, 0xffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0245720, &(0x7f0000000000)) [ 646.501943][T27340] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 646.518292][T27340] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.525525][T27340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.532967][T27340] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.540036][T27340] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x4000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 646.632498][T27351] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.639699][T27351] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:55 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:12:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x0, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 646.891464][T27352] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 646.904876][T27352] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.912213][T27352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.919593][T27352] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.926758][T27352] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 647.145411][T27354] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.152621][T27354] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.302352][T27356] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.319381][T27356] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.326668][T27356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.334101][T27356] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.341229][T27356] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:56 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x0, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 647.360199][T27365] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.367412][T27365] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.511408][T27366] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.521506][T27366] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.528578][T27366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.536044][T27366] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.543178][T27366] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 647.627975][T27375] batman_adv: Cannot find parent device [ 647.709504][T27377] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.716754][T27377] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.827850][T27378] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 647.837978][T27378] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.845099][T27378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.852567][T27378] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.859610][T27378] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:57 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 647.918174][T27383] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.925408][T27383] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.131426][T27384] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 648.141696][T27384] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.148782][T27384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.156224][T27384] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.163344][T27384] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:57 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x0, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 648.274522][T27389] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.281860][T27389] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.441247][T27390] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 648.454733][T27390] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.462005][T27390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.469395][T27390] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.476517][T27390] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 648.518088][T27394] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.525373][T27394] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.641346][T27395] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 648.656969][T27395] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.664334][T27395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.671756][T27395] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.678853][T27395] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x5000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 648.698939][T27403] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.706241][T27403] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:57 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 648.952289][T27404] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 648.962170][T27404] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.969347][T27404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.976790][T27404] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.983933][T27404] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 649.095957][T27407] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.103372][T27407] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.211403][T27410] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.218646][T27410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.226077][T27410] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.233230][T27410] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:58 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 649.256550][T27413] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.263844][T27413] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:58 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x0, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 649.476101][T27414] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.483438][T27414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.490903][T27414] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.497973][T27414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.656685][T27419] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.664031][T27419] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.781404][T27420] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.788515][T27420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.795944][T27420] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.803081][T27420] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 649.847433][T27423] batman_adv: Cannot find parent device [ 649.917171][T27425] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.924382][T27425] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:59 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 650.023277][T27428] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.030543][T27428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.038065][T27428] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.045304][T27428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.152024][T27432] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.159160][T27432] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.267944][T27433] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.275181][T27433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.282650][T27433] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.289728][T27433] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 650.316539][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.323837][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.452160][T27439] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.459323][T27439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.466780][T27439] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.473918][T27439] bridge0: port 1(bridge_slave_0) entered forwarding state 10:12:59 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 650.513844][T27442] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.521134][T27442] bridge0: port 1(bridge_slave_0) entered disabled state 10:12:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x6000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 650.744336][T27447] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.751562][T27447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.758956][T27447] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.766088][T27447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.834410][T27452] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.841621][T27452] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 651.122361][T27453] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.129609][T27453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.137063][T27453] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.144217][T27453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.160586][T27456] bridge0: port 2(bridge_slave_1) entered disabled state 10:13:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 651.167942][T27456] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.321475][T27457] __nla_validate_parse: 8 callbacks suppressed [ 651.321483][T27457] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.353699][T27457] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.360972][T27457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.368351][T27457] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.375441][T27457] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:00 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 651.422354][T27460] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.429669][T27460] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.581149][T27461] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 651.596943][T27461] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.604217][T27461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.611678][T27461] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.618772][T27461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.634495][T27464] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.641865][T27464] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 651.801108][T27467] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 651.810548][T27467] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.817678][T27467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.825127][T27467] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.832258][T27467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.877983][T27470] batman_adv: Cannot find parent device 10:13:01 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 651.949958][T27473] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.957192][T27473] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.111226][T27475] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 652.131848][T27475] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.138978][T27475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.146437][T27475] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.153579][T27475] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 652.204141][T27479] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.211468][T27479] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.399234][T27480] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.418842][T27480] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.426114][T27480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.433593][T27480] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.440714][T27480] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 652.519821][T27483] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.527193][T27483] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:01 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 652.620951][T27484] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 652.632388][T27484] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.639578][T27484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.647066][T27484] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.654172][T27484] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x7000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 652.765226][T27489] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.772583][T27489] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.938123][T27490] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.953542][T27490] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.960878][T27490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.968291][T27490] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.975438][T27490] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 652.987856][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.995132][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.165241][T27498] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 653.181610][T27498] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.188925][T27498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.196390][T27498] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.203546][T27498] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:02 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 653.269160][T27501] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.276364][T27501] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.461130][T27502] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 653.478152][T27502] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.485419][T27502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.492873][T27502] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.499958][T27502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.513797][T27507] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.521083][T27507] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 653.751088][T27508] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 653.761631][T27508] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.768682][T27508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.776093][T27508] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.783227][T27508] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:02 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 653.828906][T27511] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.836256][T27511] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.979676][T27512] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.986870][T27512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.994275][T27512] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.001388][T27512] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 654.037559][T27514] batman_adv: Cannot find parent device [ 654.069525][T27519] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.076939][T27519] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.201056][T27520] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.208380][T27520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.215808][T27520] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.222939][T27520] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 654.366262][T27523] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.373436][T27523] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.473792][T27526] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.481000][T27526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.488359][T27526] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.495492][T27526] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:03 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 654.544095][T27529] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.551409][T27529] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 654.840627][T27532] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.847707][T27532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.855153][T27532] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.862283][T27532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.877333][T27537] bridge0: port 2(bridge_slave_1) entered disabled state 10:13:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 654.884521][T27537] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.071201][T27538] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.078335][T27538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.085777][T27538] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.092893][T27538] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 655.140217][T27543] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.147533][T27543] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.377555][T27544] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.384673][T27544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.392162][T27544] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.399256][T27544] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 655.482082][T27548] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.489490][T27548] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.593549][T27549] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.600774][T27549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.608176][T27549] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.615352][T27549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.645819][T27552] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.653189][T27552] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 655.801191][T27553] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.808379][T27553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.815962][T27553] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.823103][T27553] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:05 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 655.875755][T27558] batman_adv: Cannot find parent device [ 655.894502][T27560] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.901796][T27560] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.132412][T27563] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.139515][T27563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.146964][T27563] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.154097][T27563] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 656.179396][T27568] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.186712][T27568] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.408679][T27569] __nla_validate_parse: 9 callbacks suppressed [ 656.408689][T27569] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 656.431263][T27569] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.438339][T27569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.445787][T27569] bridge0: port 1(bridge_slave_0) entered blocking state 10:13:05 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 656.452920][T27569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.473323][T27572] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.480611][T27572] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.620942][T20150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.637021][T27573] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 656.655909][T27573] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.663224][T27573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.670713][T27573] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.677804][T27573] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 656.749104][T27576] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.756287][T27576] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x9000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 656.934260][T27580] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 656.949633][T27580] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.956859][T27580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.964273][T27580] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.971487][T27580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.008212][T27585] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.015483][T27585] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 657.175355][T27588] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 657.185294][T27588] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.192542][T27588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.200023][T27588] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.207179][T27588] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:06 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 657.221269][T27591] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.228561][T27591] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.480939][T27594] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 657.490779][T27594] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.497843][T27594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.505286][T27594] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.512407][T27594] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:06 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 657.543680][T27597] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.551004][T27597] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.790858][T27598] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 657.807652][T27598] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.814915][T27598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.822377][T27598] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.829446][T27598] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:06 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 657.869454][ T8250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 657.893597][T27601] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.900985][T27601] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.010842][T27602] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 658.023060][T27602] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.030301][T27602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.037694][T27602] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.044857][T27602] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:07 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 658.074561][T27605] batman_adv: Cannot find parent device [ 658.093342][T27609] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.100612][T27609] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.220758][T27610] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 658.237680][T27610] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.244926][T27610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.252322][T27610] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.259384][T27610] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 658.338681][T27613] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.345849][T27613] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.450742][T27616] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 658.460139][T27616] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.467293][T27616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.474772][T27616] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.481940][T27616] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:07 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 658.675373][T27619] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.682637][T27619] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.781591][T27620] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 658.796794][T27620] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.804045][T27620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.811500][T27620] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.818563][T27620] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xa000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 658.841737][T27627] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.849035][T27627] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:08 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 659.107510][T27628] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.114723][T27628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.122181][T27628] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.129263][T27628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.148737][T27633] bridge0: port 2(bridge_slave_1) entered disabled state 10:13:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 659.156043][T27633] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.350946][T27634] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.358045][T27634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.365511][T27634] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.372650][T27634] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 659.460114][T27637] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.467309][T27637] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.571519][T27638] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.578608][T27638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.586040][T27638] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.593172][T27638] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 659.617944][T27641] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.625274][T27641] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.795797][T27644] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.802952][T27644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.810381][T27644] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.817460][T27644] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b7"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 659.877779][T27647] batman_adv: Cannot find parent device [ 659.943826][T27649] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.951014][T27649] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.120872][T27652] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.128048][T27652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.135484][T27652] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.142640][T27652] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:09 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 660.167948][T27657] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.175325][T27657] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.421780][T27658] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.428847][T27658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.436265][T27658] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.443394][T27658] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:09 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 660.484952][T27661] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.492277][T27661] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 660.630847][T27662] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.638014][T27662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.645579][T27662] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.652685][T27662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.740304][T27665] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.747598][T27665] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.860797][T27667] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.867945][T27667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.875405][T27667] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.882634][T27667] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xc000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 660.994019][T27673] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.001203][T27673] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.180826][T27676] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.187904][T27676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.195358][T27676] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.202494][T27676] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:10 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 661.243457][T27680] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.250793][T27680] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.470686][T27683] __nla_validate_parse: 9 callbacks suppressed [ 661.470696][T27683] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.509549][T27683] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.516700][T27683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.524116][T27683] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.531243][T27683] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 661.583575][T27686] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.590886][T27686] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.771407][T27687] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 661.790198][T27687] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.797300][T27687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.804736][T27687] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.811837][T27687] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 661.925762][T27690] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.933096][T27690] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.030529][T27691] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 662.039932][T27691] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.047040][T27691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.054551][T27691] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.061654][T27691] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 662.108627][T27694] batman_adv: Cannot find parent device [ 662.126866][T27696] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.134185][T27696] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.280512][T27699] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.290026][T27699] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.297154][T27699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.304578][T27699] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.311731][T27699] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:11 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 662.366930][T27702] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.374243][T27702] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.530506][T27705] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 662.540037][T27705] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.547107][T27705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.554523][T27705] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.561672][T27705] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:11 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 662.603296][T27708] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.610595][T27708] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.791808][T27711] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.806495][T27711] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.813709][T27711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.821183][T27711] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.828260][T27711] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xe000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 662.981125][T27717] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.988285][T27717] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.221663][T27718] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 663.231858][T27718] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.239098][T27718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.246544][T27718] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.253800][T27718] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 663.267319][T27723] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.274564][T27723] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.429663][T27724] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 663.445313][T27724] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.452595][T27724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.460076][T27724] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.467164][T27724] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:12 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 663.519082][T27727] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.526275][T27727] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:12 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 663.647311][T27728] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 663.658042][T27728] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.665241][T27728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.672686][T27728] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.679764][T27728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.710537][T27731] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.717745][T27731] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:12 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:12 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000040)) 10:13:12 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000040)) 10:13:13 executing program 4: openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x380000, 0x0) syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000040)) [ 663.899411][T27732] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 663.909713][T27732] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.916932][T27732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.924387][T27732] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.931542][T27732] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:13 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:13 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000140)='v', 0x1, r2) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, 0x0, r1}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000300)={0x0}) keyctl$setperm(0x5, r1, 0xc0008) [ 664.068263][T27737] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.075553][T27737] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:13 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x120}}, 0x10000041) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 664.315542][T27738] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.322622][T27738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.330067][T27738] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.337116][T27738] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 664.368719][T27743] batman_adv: Cannot find parent device [ 664.386073][T27747] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.393394][T27747] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.590723][T27748] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.597935][T27748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.605380][T27748] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.612540][T27748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.651720][ T4063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.716823][T27758] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.723981][T27758] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:13 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r3, 0x400, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}}, 0x4000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg(r4, &(0x7f0000004b00)=[{{&(0x7f0000000340)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000080)="a6fd987955a75b079134", 0xa}, {&(0x7f0000000200)="adc07a49f68f61dd779def38537eb375fa17bc90d364afc041cf6edf1e00fcc13304fa44284cfd6a8de4", 0x2a}, {&(0x7f00000003c0)="d37a6c41e995b86da350fc4ec9895baacd7809d07d618e42192970db38e12edbc75c75395c82f82cc51d4f1f613602cc02cf2145df191363b16cb6f3528e5da0a87136b52df362de9c205712a55a51da5ceb46aa8a5a7a547917e10a0cd63e18a5f96335981beb61352f8cd997527bd05a81dd957ca2dc379bf1a1bd", 0x7c}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="28ef924b2c3bec6e608b504005f952e6d127ec084b7b0f1ff6cb01e6c62bcca9066a97adafa4a92a16a86207bb5b9fd26961d6ea24bd4a5349b544c46278ca39d91c7b", 0x43}], 0x5, &(0x7f0000001500)=[{0x104, 0x88, 0x51c4, "9f47438d7c15e8e4b205ac29fcdce9e922d89953f039e5d5efdb755e368a2ff6a1a5802c36adafa1f73e3bd5dc192c1445b3d3b2d44703445bbb7b317049cbea4c75f17c787f9ee7f9ec0ea7862dc275b7398291425c6768aa1eef8bda30d79f49253cd2fd55095bb28dd5bd32ac3cd09f9e92334ac6bfd12f696f3b6fb47007333010c728599dca2b4b232b3369d79eed1ed53a7d46e34e073edc3584b615e3bb46085cc80ed107940ec4c6152e17ca1694e206825f65c3f9f7e2ff808e7e4dcdbe42b4310c52f8c4b698ccfa541cafc3f2aa2c36f366b5e0315592c67db5a893fc71183ae4cf9df8daf6f2ed91240f11ba55ce8e"}, {0x98, 0x103, 0x1, "cb21904f2bee056446eeefccb53d6c19dfebdcac3d38907b12fec8fc51648c44d0a162ebcbd1497fb6974cbdc0db21279f6bd24456699072fba2de1b37773b43657e2e08c0ea59b51aba6ff77d9815c973b52b68fd18bc956f502a373c40b0ee50775bc0ab6cc9ac3513100c2d9ff8b9fa225eded2b762ec1244628ddc0c4363aa498bb9d5990a80fb36"}, {0xec, 0x103, 0xfffffffc, "26cac5af08cca7bab362b310af060ab7d5361e7638639202b240c1f424bf8fdec4b8960477411ca746f75759747d648b8ab97de3c5ae145aad894ab6b9a4a93d528bb3ce0296fa4e02154e4b4351158fcf06bc269a2535d2165491b6c86074970d21a9a1e7f6167342391c40ad3a2fd01d9c02d854022b2204f154b7060dfeb0b63e45693f40d59ddc2a74645bfafba3083977423ecb7103bcfb39f3744a8c027434503b12361e2621b20c4c5db5258d0bae54d5746c18f553f30ac235a118a1d226461478f5f6122bd20a69bbf8b8e51300a04875fd5333192a9a1028"}, {0x7c, 0x107, 0x7, "42b8cfee5b9fa38a14806603e4517f3769f63857a95e1d3e8e1c9c4fdbb6b2de24e8ff184fa4ce12475dc5b2bf9b16742ee776d76a4a32974d133d9fc99528ee6c338ae00b1960928c34cd1348924dff4e5382c8f7f807b1af52498bad4d34e9830e1e907de6ca6cd197f055de1926"}], 0x304}}, {{&(0x7f0000001840)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000018c0)="b355c365775bba882b384dfdd0bc3da5de293eb0acbd2ba2590432d58f41b1308360fbd03602abb1823f227549c22fbd09370920d80dd0f2f8da3857052732966eef5874945d388071a3ccf0e563c7e743d2491508290bb846c21d07b284b4711804d4bc6e8278ffddbe2c5285cd06a6366c340344aa347e44b2f6466736f1768e139f10714eb7bf5dfa3b7313dd80fa640937e8cf494b64e06e5a2de3faf4a4f262a5c26db6afa5399dd5d766dd29e7d1b7094aad2f7739b272cd7a0ccc2a04f23403e9d253b4ded6c64fc50add0417bf73b3daa1", 0xd5}], 0x1, &(0x7f0000001a00)=[{0xb8, 0xff, 0xfff, "1f2a0b91b62d1183b2dd4bb9d245c15b00d31db1114d6d13b5a8939b5d9f5eabc1e075906be9634275d062c9f4298d26f77a0dfa4a205c0c8cae81f53be3a180cd530323f9b379b03a1acb6bad6725a9e490b034fc38f9c71e8714bb70d83a9f1a270fe540441d8a6c94f63952958a7da966738d12276b2d657c70e991e5b93f2b7c6c45d5876f583683a25074f158d7e89186695394c53951358445ec9fac75d9e1875ff3a90df0410b"}, {0x60, 0x10a, 0x200, "6e86001651b44b9f1b6d07f56afd712dcb0f537106a2f8c7d612db6209a3b0fcd377ef08af4f2de62fff41c05b49441b2dc632f2df2ba53baa003d066dde79e6ef6074bcc156b65c853c49e40e5d534724"}], 0x118}}, {{&(0x7f0000001b40)=@xdp={0x2c, 0x1, r2, 0xb}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001bc0)="3925bc1cca61f13b26fd06594e1c3a741fefc7ec68d53395d9c2e49f69bdbfb61563ad98da5539bd9e19e24f098475ee7f1ba786ebf0ac8062e96c15f65bb45993689fcec5791fc434f01e05104ff1606148dfe9997cae3716ff6aa98e16fb01d864ef9fc55f253beaa2224e13cf9666fd571ec6", 0x74}, {&(0x7f0000001c40)="fe99e8b326b16fc18fd9934209a9760a0efb81f28d7cf5bf8482a9d380392c00131874a1ae1b4545e5c7bbf57c56c54253e9c8fd958794b4249713aeb1bf8e347d9407e31ea6cd8445945361e761dc4e5844f5afe6bc62e974a9763e", 0x5c}, {&(0x7f0000001cc0)="6295fc24696e3e444b1b4ff5c6cbd8b55a033df4b62560ee4454859449efcbad7408a0e8b1a61197c79e8e922e59e2bf37f20cea28cc9f12f9a9a3", 0x3b}, {&(0x7f0000001d00)="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", 0x1000}], 0x4, &(0x7f0000002d40)=[{0x6c, 0x104, 0x80000001, "9e30d453e70255baf125e43a3e00a32fc23882744e76c3318a816f5fd5d2e7b586d49f63d9bd88b4e4669f1b22d29b3f6fefea97bcbb3e03c622d224d47f3817b66729d1a46f2e6e589d8d51ff5a0ffff4706815a0de489a7c60e1ebf6ebc191"}, {0xfc, 0x10f, 0x7fa, "6d813bb1940863adf9a0bdd97ca23615627c8d0e54d24fda2a385f28fcf73599881f8c2b1e603a9217224c6be03fb61f0cafb549acd56fe75b662fc1873adcdaeb731606f61f204d7a43fd9e13bb4d8efc2a8c3536c1082a65665c2d4f5090bf8092f32c4ac4fc7bac14083b59d85d2081a0e95d2640757cced11843e47748f3b18946ad8c1a2319506b4af88649f35ea6470d15505b9832ccbfd8f5de80e38383a14929a854494595564d64787ce68cb80393acd39e8d2773198b576520d0ec5ce7b7956cfce1f17f16bb56a7eba4c392c0e91b90ed1a1cf4af500af37c99dd26ccad9a8fd6ddb6dea1070262e3"}, {0x7c, 0x84, 0x4, "c57f96bd3f53aebceface4dcee10a294e030a4d0dfac5f335a70132d67618388b303175800648573e3eeb05e9e59178e17a9967b8c05a857ca011e31a5a3e08f0f1f5882e46092f28a3f0559ff369d891e2c080c67c0cdf96bc8a8533cb717bf392efe56728e1c8b0548878f32"}, {0x38, 0x101, 0x5, "c987e219c42b76d9e41b97864d502cf045bf65d13c86f81e6c6cbb74277367095e9de4e6919486b5449169af"}, {0x98, 0x0, 0x0, "f86cdb5154d62b0897d31196c723997f60283eb60361fbb3f4d352ae3ac8b63ffecd4ae5193c5cf37d30e68af523dfb274194263da44b67108a9db0f4daceaa2564c017ffdd7cbaa63024270701f866add6fe2bde00c99932de79d226278837c2c9eb5235330f609172d9f2980a4a533b97c52ea601c95140b70fbcf32ce99e00218ff1d3fc6b6c93a2a"}, {0x10, 0x170, 0x8, "67ca"}, {0xc8, 0x10f, 0x7, "64d0577eb31c2eed0eb3837f794a5ad44ed6af3b7ba67a3d5b9f64115ff7087bf9a8a37f079256db628295882927adbb3d1700b5e9140d37246608f1066802668c064cfdf575ae7d11f5e07ad39c7dfb625042f5d2b3eadcb1b4d330878f07c22df2946d9cf3fdc0ba7406b6bb335858e863d0165916c6ca2425b9621769360ccd307230dab213653e43c7b4ea55a0d8f578da3c7f698d3e8e3d5cb4458eaff7519c39b594ba00f3b2e5344cbcafc088e4e6c6f41269b01331"}, {0x74, 0x109, 0x7fffffff, "0b2f50cb2bdc976cbc4e6e38fd8b86685b3a9fb65d446976d7ecbbf614be62f2b8b571f0321c11ef16c1bdb6c4035ed1599534ed6526dd29c48764176ab257bc5ae636647727093d6e68db0c128d472b98f81dfeb04764b01e1b3a81ad0909ac8ed4e19edf"}, {0x100, 0x102, 0x6f5, "f5357a10ac32bfa239c0e56fcab70746b2db04f518105febe7c71ff8d63cfaceaeb4af7ffea7dca9e5bc3049aebe7b072793c9740d5f86e67a514a7d9ab62383307b1965ce3a79783bbf152d58f973dbf141fe09d4fa9eb68639be753295abee995e5db0346f5f7c133ffed7782065fb21c44481ee1df50053fdc30ea07e1fb26ccf033a0a77c54794997aade98d91cad851e8bc894eea4ed05e5908f290a409fd9ab04519f45f3a7f55c3f3af661ad054e219388920e7e0969706626b4c950e01726f2ff3dd9a7ac300273423e53b360417ab453276bcf26f0139cc2adb388784eb88ca58ff4785957b359332ed5e5174"}], 0x500}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003240)="298b3551dfd8a38d91ece1bc1feecedfb1792f1883c78113cf78653302cc3134f4ab18c4e8d695ac96e06c1fc2cdc2ad184fb81f9dabf36be8dc61382ff94901b1f7bc6c6cc55438b862c6f8dad3046802df22f4c9842c0cffe6b210a28ff5e735b653bfca166d07abff5849f0103dfd04438d85bc6ba74429008f3ed783d0ed5bdf6482f4a92c0b42acd69875097d25b82e459231aa947ce06de1d5baf53dcf1e2ff76a910700535ceffe0a4bd4f384f71c01d189e3a4a40a48406164306e94372ff730", 0xc4}, {&(0x7f0000003340)="f3595f913ecd7d17cfdf3232d0bcf7254c88c1e7a6bbeca2", 0x18}, {&(0x7f0000003380)="a9c61b468c954e68bc3ffe7c8d74c89c3d2b1432360b8852afc81f36144eb6be9306bbfc8e28fe07d2b452873ce68020a0f4b3d29058fe811efdcd0f058f9c683d327755201647bcde8b102b91b9990b15ca1ca4317be2fa589428003b2a", 0x5e}, {&(0x7f0000003400)="4666c843ec89e68ca99ddf18643b33a5c5761954291a5741ee10f04b5371e15e3e7b373c1e023460c3bcd54f9821f59bc28a811db4b986044d61016f28e5cb62865cf86575f2deaf0e3d7e6079d3180fad30b2243332d6754aa5d490649f0978c32c", 0x62}, {&(0x7f0000003480)="ad5b8647a3f46fb60bdd4525c28a7adb459ded08df4572aa", 0x18}, {&(0x7f00000034c0)="77031f8e923d69a5f195d48feba8772dcfa920d713141da4132ceb721823ddf641713a16d8b958c421b133b1e932bcd956afa8d8576ea05079c94d66db4427f5461da5d73f082302f4e114964fcd0c8186b521165e7ce0210a3d726e1c7c1726025f00679f5a71f14ef1aba97f539c8f72555d90561b5e6824be87e883289b45e2f4f7ddb8ffce8322ec2847c1c0045af67854279561f9ce9d0d97a342ef7184859e1aa6e515fb1361dcdfcffdcda0fae205fd4b0b9767676290ee0a434439ba8499202eb49426a6c71b24ae88789dea003250644d525416df08", 0xda}], 0x6, &(0x7f0000003600)=[{0x108, 0x104, 0x3, "cf501eaa3d9243c2fe424859f4cdfe5f6b28d699dca46c5e9d103b309226db9de7dd181c4276ed99b696e2aa63b892cca77c7466c1eacb0cfa2278d52c1ac0ebb6191caa102a46696f27eb06b7f7459a2d7e16ee03cf192a266a5eb0fc35466daa9b4dbdd25df846f87f29c249e2874985672450a8ce7ec53d81f8ce146fbd0e1fee8855424e4fafe8e2fa854df0604217ad3a9449cbdefc62aab9e2f2dfbfd89e67a04bfbb12066c75a152a02660baf96a3590176fe7f530a15f2067c269d34ae2024497e24638f6537582e73a46734f9e170e16f6b650ad27137261492c875f3788e21a8a34f5a04d628ca9c11afedbbcec8564e37acdae4"}], 0x108}}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="c1d6ead01019a8bdc6ea109ffda560ec0a6f8cb946303dbb8e8fef047beab2d70c8b441ab0e384fb3b9b1af69c4c1de3fcb3ce6c2e07560480834d7f15d6a73b86e63e38", 0x44}, {&(0x7f00000047c0)="0d559f74c800d8b94beacbb918e92505c018580b1fd0c3d1bd4bf436f00034dbf2dd5074e0d87ccd87b13c8fbd06d2eb5c80fa9dc27f63c4c8f35ee5cc141f0fbad72da6292eaca3ec7c3fb3bc0fca5f90c409d6971e39793ab5311c8757d5bf5c90426107d35670dd63eb65b1ae52b485672e51a8e53ea66e61e5f7396f962999015a2dbaab4ffa40107ec9fe6b77331b3d33", 0x93}, {&(0x7f0000004880)="d69816df953ed7829b621bbb4af313c38d3e0cf9e9c8fe2240c8c4a8be3df3172c9e190f70cbffed00a7464b88a6246d887edd0fcbc113e21896dcc3532c174feb86092e406bcad44d13", 0x4a}, {&(0x7f0000004900)="c24ef1a61e3d6ea58ceceb5a05fe117578aff986f7bca0b6c804904d668d4bf04de6dd538e7e17ba5dc98310bb6730bfa3710831b61322820cbd573afc16c70a6557b02f83d1e5b42e238a52ab8ea675a682ce009650d56d66484c03acf9ba8b53bb83ab55c8d1842bf93ba795e3b839ead4e978a2c22b3fe173c9c6f4645af4dad2e37495d2a2f7d06b77725bf4f919d27807be0f4f94d5b12663939d2afc4637a12b18d9d1bb7b2db009a9eaa36eb28c1ac1711338944b5792819aacf1a585073adb6541e0189a108991c41e6b01c188dbcb1967ccfb597c22631eb4fa78e804e36661328479c753e5fddf18e39f9e227e06cfdfc4e148d2", 0xf9}, {&(0x7f0000004a00)="f8309990f45859d2d8d8d6bcbce33dee06b710092909984d3a5b6048b47f1a76d218254d79146644b7001d6af8e2b5ea511478415d660ced984f55028b6ee22bce8151405fa016691ec183af3c52ee95f68aa5b60fe0426306905c29cfde070e4de729c16c43cfebe49203a3da9550a3", 0x70}], 0x6, &(0x7f0000004ac0)=[{0x10, 0x100, 0x7, "ea"}], 0x10}}], 0x5, 0x4c000) r5 = openat$vcs(0xffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0x38, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x0, 0x2, 0xa911}]}]}, 0xfffffffffffffca2}, 0x1, 0x0, 0x0, 0x44014}, 0x240c8056) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000004bc0)=""/4096) 10:13:13 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 664.877902][T27762] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.885111][T27762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.892547][T27762] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.899624][T27762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.948379][T27769] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.955546][T27769] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:14 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r1, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) r3 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x140002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0xc0305720, &(0x7f0000000000)) 10:13:14 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:14 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8100, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)=0x1) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x204002) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@int=0x6, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) [ 665.210904][T27774] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.218010][T27774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.225455][T27774] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.232570][T27774] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:14 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 665.283787][T27784] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.291201][T27784] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:14 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="071e2020", @ANYRES16=r5, @ANYBLOB="2b0f0000000000000000110000000600b50000000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x804) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 10:13:14 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9bc2cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a7a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000602926a53e63e396cf81d824000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60fc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4085dd395b194e738a80900c5298a13f08b2aacc1a8ccbeffbeb23af3217b0138e091797535af2185aba9515d4811cc968c4968519197ae321c9c5f294e98a4f5f1b31730b820e29fef14dc28904cd8839afa3b7ac1200e6a70960c9c1a75dd758ff5ca0b83eeec387a6213058fb3eef0aaa51b920fe19fe38454c681133b3d47e65183be7be2de45c7b992c7419b984882a2191bb77b1b1dabcc1ae071cb1edef68c813fb73e00f22122f2519e596540db4528c43ee8c55d00230a1dfb1d6e156c87e0b51498f22f44b9d58594736e081c2cd2b36831998ae7b1894e2032327d13d1ca80fa0cf937c43afd42f"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x227c, 0x8150000) r6 = pidfd_getfd(r1, r5, 0x0) dup3(r0, r6, 0x0) [ 665.633958][T27786] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.641095][T27786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.648477][T27786] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.655608][T27786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.796336][T27794] batman_adv: Cannot find parent device 10:13:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:15 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8b00, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x227c, 0x8150000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000040)={{0x2, 0x0, @identifier="1ab9ade8aae1bd6514e46866f2bfc3f1"}}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 665.965540][T27795] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.972730][T27795] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.297149][T27797] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.304286][T27797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.311785][T27797] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.318922][T27797] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:15 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 666.357413][T27804] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.364699][T27804] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.573931][T27806] __nla_validate_parse: 6 callbacks suppressed [ 666.573940][T27806] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 666.590344][T27806] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.597482][T27806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.605006][T27806] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.612155][T27806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.624438][T27812] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.631675][T27812] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.760196][T27815] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 666.774632][T27815] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.781824][T27815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.789214][T27815] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.796557][T27815] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x10660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:15 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x6, 'ipvlan1\x00'}, 0x18) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000007c0)={{0x2, 0x0, 0x80, {0x3000}}, "b927294d8bad921a3bc76fb59e3375708415d15fd19c9cfeffcbc80b7cafd742fc7e848dc85bae324851c7e86b2b5c22c6c01fde33c8a10af46db214ce4474f23175996a523340d4f26cea54694e7b9cf50829394f0b3e126c3d96c0d3c01b56f0fa280712e8b78869fd83aaec838877f09ccc4cd257150e9ff01cec0e9cc3c4387e4e77edc41ef1925aebae9ea1a60eeec4760bfdf509b6ce635dab779f014141ff2799308294fd938213aa2829b92b2888617636f4f183df45fa2a15633280304a18cc3b57d91c81cf18499589742b7a63232e77edf32b69fe570f0e476033f37f66359d5e572a3eaa727ddb364521b7d91022496077f297f2cef15d2b2c0921c9516828047d435352b5578177dfd4edcbc2dcbea3cc60d97ff0f983711a16ad7a1e0b132322264a800fd3156c0506aa6c0b2de652e278cf352454defa3a27032586880be0c513135a5a411c181e11c1e873e94e67351d0c96face03d5c43ddf3481f7f079a48075d8cefec18fb37783d631e2eb3f047b592ce2c4d8d3a8d888ece6a0808943d4b67a4ff7e3b345561cb188a53cfa9a9ecbf61dabb7190fc7e0a2e33531756930f688714fe33eee0930f99eeb6fee03557f8af8335dc71687e0f96a041f2c99618398383649a5eff3122b64759a9fc3604ec182779486b6bc28be33eed32e970c61a35aab403d04396ce7eb3b9da3ec71f4e1405bea2d4dd1db56899387a4a0739c85211709496efc790c17191d52efd99014ecbce5651fad67b9230795c63c463062dcc4de576cb8e40ce583a9fa15c6ddbe967802df2f598b3bdcebdd79a4b684275db5deb00ef1ff31055b9a5ef27d491dad22786384d838ea36ff97e18271e47c4b990279464852b09353938c77a34c3ee34bae99d2aff60764fa3e9a714ccd21154ef035f66e99a8cb1a6822933741688f1e3c57a676cbb51cdbd87dce8c0bb54a86f933b504d00adc32407088d66e8d484510ff95de035800b1d426776d530235e5b7e53f0723ac453c5b343a38519f8446d30d69277160a35139b89056bb396f20183a95a4809fca31e4dce4666fbf4fd24a417e453994801cbe32a180f4088b6984a359755a3ccdc08778277fb996b0377b3cc99f4692d85271f66f71a9a95d82455a9199108be79bf489f2a5448771ea0b3e8b5f384b4283e101245371503b72af4701e7329b5d264b546c3ba95219bbe00bb930ba509a2e5f17a246d0fe752f99583872a4fac7f4a263415cf0d575cf0a1c8ff4c371bca776b5b3c1235b12f8b7b39f7c1b02354b4c20124181f175f3492a5cf9941f31d6fb2d35a6929baaab365b69675f3e9f6a430e9adb2206844e5cbe7095395101ccabe5f1feae3d8b0ad5c37618b5353becf0d9a2d19a35c70eb960bec7f30a4dc5c69e08f1b3a19668f9186386d8fa06df4bd4575c4cd9e5273a2702764764d4fca74d0ddbeee10e3311394aae3ed87fef0ac287200aed3ce9319b2b3a6ec441ecec20d9ab18f1cdf9dc6a2fdccbaa0772f13557bd332c20f108fc16b958447abbc98c9654499f32b1271078f7462386df27ce731934b1ab26a0fc19dd3dbc2ee5caecc808c1cb6a22044f08333cd16ab8814ff1325abdba5b94b905a02cc8015cbbdea971becd9a532677d47301a9f465a18b7c907fbad414d8e60c2ab8f8ed13c4f1d79668dfa754a4571c5b2b997acb35edab7ec43fbd230fbb33a152953e374cc57f7f576e9f86c7a307c345cca4955923893d3c928839a3a7726d201a2f798662266ff2af84b743afce5870bf24b5e859d64a5942c0d3c0a08f2e3cf4d5de5c1a6163119760de5af02cd2802397156c2f247b6837271f32a6184e073f895416812fda2340d3f3ce70a24fe7b3019c2127592b4a9c37a1064591a13c6efc412b828b12f7a24c382c9ea1975823765e97aef3051399717df2a655b28bc73f4512c84e6821c01a30c9f972731a0a7cb65df26c819f7102e55fceee4ec51524dcaef0c09bdcb83f00b62552162c1463f6e5ad84eef92fb7a692b2d60dbf432dd667c6deede0bb2c835cdace3ec6151e3867312c80e9819b87605d88d6acc6c8dae3d7347b7c3a6e577b472dd79c198ae09b8d217054cd3daaa35798ca3401731a4b0ce5ad994f8b40ed42248e6f56657c9a99a3a86168a3cee2a0a86378a1961fe31d0068e504eef72e2907ee6ddb5f18ecf7f5846995e5bd9dca85652481f043fb5e2ed3b9f442fce2a9bfcd83432b792db852ca10ea4e8c538d3796593479c73b2a180ccde10431b96acb699b424e481583ded8ecdcca87602f14e8fc2d1f1daca589e2e722cc82b73d55948a0bb64a0799e959565da94bcbf534e0375bf668d7379d84726d6ade4f8eaab9f9cd88161205adf3c7fcaa48fcccdeab5ba6cf2c827c02ce8d2be1dfb60baa1d30452354a5dbdf129f8be2cc8075b70bfbf5fbe9242f3aee4c53a49fd66891c4a8167e4929d40a8e393795031081e859a09d7545be44ffdf3def21642178cb9974296715a6c79d65676e636427f96ddc865c692a6d72300c8808bd4726fefcd4fdf26ccb0d8f9bc4a8a327fdb261ca5984ab13abdd6c774df2081cad60a48ecb32c8164a67849c6b65412ee5a35416e0e7b2bdb2dc5328457995a2923b22e5a8557eea61211174724f8db4c4d14898075e7021ab6276e6f06f4cbb24778d01940b93428c4dd021f21a0e41ff29cf8b5dd3135fcccc37740c9a295178bb6d441b9438f817903063e821aa0e7123e030e628f50fb4999d18a5961435d7e69d6437cfd10467db76811667ffa9d3850bbd35e4708a351df34301d2b9bbabc6f2e9d11677ac59db91b1da5f4e38036dc5b657dacdf32c39ea70e64778384b286398146d03945bf34333f80ff595b416f7858adda1ffcfdc84b57d2194f1c03ef53834f2a595d15b9af31a8e238f1da5aed5a99ac5cd4fa3410a18ff17faa345e03967720e8bae39ffddcb1a2fb2bf04f86fc2cda6e361574c3135baf1811b28c7e385364d2f584c80fb89ad1c638433e4855d49eb9dce7e217a59763d84e2eed83706e3bd880ea258fb5086550958effdf22516fbd63eea7ca4dae75c0b23a8e89d0ea0ff8d8d851f0185f7e9b5a505f3049d500e003341a83d30c925dbc8dbef4acb29763e253777760481609c9606fb856064eeefb10c6558693833826010dba047419bba92cf064d995f7c0587a0fad3212d0ce0839079152348c92d8892177fb02562e30532e7de38e3f1c13518070ff3ba3d3016d7f511c124f1d44bbfc015b5cf01f5a4aabb97540903607236f6003329ed8eba0195883f6e32c2668537737ec0190ff624add04350941a0b242e3ada04e8534af339df1abb3c94d437cf92e3eb34bb8929f4b199a31e55a91596a36ae2a0779cca7d8c84916b64898330b88350b6b7ab5d1ae622fd9e3b3744b832bbb1f669667a1aa5ed59a2026afd7ec825ee2c453dc286e7091c1542af78bfc885c15eb269e1ad647a1b997cf1c8eb9b591b3b6f2144b51a8cbd7deaad1174f7a83b4b21a19c1e68e6513c851323088f91f3a77a3d822d5772787a33ab2f9c38735ba16787c94412e7c2b0f4c0f5e416675a252470b4f36136cd563b5168c2fea8a634167ca34b8c744c18c9a7d37c3edec5bfa40b8c590b78c0cdc55a577df6fa265a361298eebd6a0dc5af27641fc717abd5466a4bb370e78ea736302c3c8e4d4bb34549e0949417bc89e0436ebc42a8dd9944468e2632ef1050f0aaccbc597084eb04980ede72d32d95de939e4dca960f7772d236bd971aa721880a3758d953481d055aec6733e539f84181187e1fa5ca3da5a36557e6c01d0c6206626d4095cbd28e9c8af3bca1fa9e306b765c45ffd2f0b6ffeadd3612977e1eafd54e49e545b909ee43bf0f91c9425fd885487ada66c459c4f9976eee3b5a957511152ea68dcae565b926083ecf839edc94cdabd973e82eeda6cbca09d07856f9b4f98267755a586618f1242a5ca91f1640b28e281ee4594ef419500ed5e8aecfa259dda2ccb470b170e5c344ac432ed636f7c43795e1ed0618e6871ce7124d4f213740f5238b59d7e460d6b8b1bb2fc848acecb4b02fb87830becc77097dbef84a7db0fde50eaf1c3c9fe757e0e59caf6be17229717a90ae54a6327cd68e0714899f81f4839e317468bffd054d6a880e41abd7996c57142a08bdab847a540365af5258248d1d8898dd4572a1fcb1e099d5f5502cca875bb7913c8d5fbf504745011ac627a0498d807c7661c87dfc08a1e08ed1999bfd65660929e10d2f057aa491b8042bd1d02bd3de9f84c7913ec493f3d93a1cd3d208a7eba02f24541132169b5d526c372652109a0a46e5a34c6a1ee550539ea2e57c9d1b337de1a84756308a375bca734085f56c5c00a14b5bfcd2d732ead14947f1f2dec8573bbedfef5e726f6b20d9fd68b74b2bcd4acddbd34234389f9a1a48fc0dcb4596a40fed0c978b475492e8c6ac5cc4bd331990d2259175885b75bd8a193c754818a825a540f42d61db9984a88d289c1111404185b56c3351b62ccaca087c27d8a68bac839ab54ad0f8234db2a0f5be9cd4680d5a977222f2fb35bdd26416bf0f3482f1ed5cac562f65d517ce1f6a96030fbaf59ee4e593ccb0d69e121cc33e139108ea050740fab9e119b7a15851ce3d0e1b0570869222b15dce697673912bc460a2d3f3442700346e06ee616f929ba7422ac2847da973e15c245ded253cedd11dde64c1fc406c2e359958abd3bf5c2bc44723081fdc790412c28ecc047f8dda4b3bfbe0d00de806d8779b2facab19e60727be5cbc832b1d48df0808ea0e8215349ec324d5873bb79f15f572ae15feef70f34e2e034d4a196f72774215a07514cc09023ea2c8ea522b282a2e3b8a22398cc4eb537b76ebf299717a71aea50e242ef8528ed5d7a47446dab824a1ecdcfe915846db4ce3613784a852052ad1b38b14dee5cb53e1efd3f0e1446deea1b6a76614688e9dc78ec958d650a87d7311c87fe548fdb26d8414c13474d08684833b19df72731448ebd2534e71cccb600e79c1896f09d636e57ad6ebecf20f50d69d655d54b38d1a1c5160398d4a1900ce2807027b09ca7ec33a09fc6eea6ea1b34e999ada6c63ddce3ec7d196bd11dde83e38f44c9eacb1957d30e392baa0e31f11a1dc7ac074c3e72322ab4aa3d6984b480b5b39f17357e07d8a80055a188419c8fad8eb2d42bad88e5541fa7110ca487bd0193aa45e8e84a6e3e3b3fc3881fd76b61764ff107afad42375701c20195379744ba4dab1ede55712726ee228f9d1dc6ffbd326d10a0f440f6122b5316c3273a2a0455273d82ab6ca6d6ffe61ef8fe7a5a4b10a5dc86a4b48ad6b5eaa64e9ce4f8bb9a882ca296962dc7eddd119842308c16bfd6ae6bf3b418cfe7c4cae5d2ac6c5620d285f19e3f5a00012c18afde3e1cfe3067bf929e0b093bd5108ce600a20574ab05fe44a81277807acb5b004dee3fda05fef5e4b7410a70f8aaeacb5445783a0e1ad5e96b0577f72ee0fdf1af7593e65d330cf62f24c9a5a064bcba87fb475cfbee774f75629110db93672408d73cde0b69ae7393da2e76e2b97055536a65f9ae86dafe80d27adedce306cf50dc2f4215a81d893976872b0b77bc55c49b2b2f8340cf880d34cbfa41dc739005aa133a8605edd0a2d361a7a58f1ab0e067b321fa9ae0cc1af5904d4d0ca2f5ba367f1ce499fbef29a2941af849fd7045bf0a7e254d2471b967373dca6e8cc9d76933bdf341e6dbcc3dbdd4d2d83e03eb21c5b5041d40e5b0615fa", "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"}) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r7, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000040)={0x80, 0x5ba, 0x2, 0x80000000, 0x0, 0x7fff}) 10:13:15 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:15 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 666.851099][T27830] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.858286][T27830] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.150387][T27831] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 667.160298][T27831] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.167505][T27831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.174949][T27831] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.182088][T27831] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:16 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f00000000c0)) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=""/35, &(0x7f0000000080)=0x23) [ 667.196545][T27839] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.203848][T27839] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:16 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 667.511282][T27840] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 667.534365][T27840] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.541592][T27840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.549044][T27840] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.556194][T27840] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 667.615430][T27844] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.622639][T27844] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:16 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00f88cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000040)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x3567470785e10c7f, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) 10:13:16 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x204, 0x2c1103) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) [ 667.864166][T27848] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.871571][T27848] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.027100][T27850] batman_adv: Cannot find parent device [ 668.040245][T27854] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 668.057381][T27854] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.064723][T27854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.072188][T27854] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.079261][T27854] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 668.121616][T27852] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.137237][T27852] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.144456][T27852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.151866][T27852] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.158941][T27852] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:17 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@upd={0xf8, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {{'rfc4106(rfc4309(aegis256))\x00'}, [], [], 0x0, 0x2400}, [{0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004085}, 0xa0) [ 668.218858][T27863] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.226114][T27863] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.460306][T27864] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 668.470226][T27864] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.477274][T27864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.484720][T27864] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.491842][T27864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.524985][T27869] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.532272][T27869] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x11660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:17 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)=""/9, 0x9) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 10:13:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000000)={0x6, [0xa6, 0x4291, 0x2, 0x4, 0xff, 0x9, 0x3, 0x4, 0x1ff, 0x3ff, 0x0, 0xffff, 0x9, 0x9, 0x2, 0x1, 0x7fff, 0x7, 0x3f, 0xfff, 0x2, 0x8, 0x800, 0x4, 0x0, 0x6, 0x4, 0x540, 0x8, 0xfffc, 0x20, 0x7ff, 0x3, 0xa41, 0x5, 0x2, 0x1000, 0x6, 0x4, 0x1, 0x7, 0x0, 0x7fff, 0x200, 0x5, 0x5, 0x300, 0x1], 0x9}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 668.795820][T27874] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.805887][T27874] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.813181][T27874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.820832][T27874] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.827915][T27874] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:18 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) [ 668.885154][T27903] input: syz1 as /devices/virtual/input/input6 [ 668.924493][T27886] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.931823][T27886] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.938141][T27903] input: syz1 as /devices/virtual/input/input7 10:13:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000c10c4fd1b59513ecdaf4bfba1fd25f4d1deccb6074e234f516c9509a934945cf5538d5e898a6d2e7b84d81eed1522c1028698308ea88f1f820", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0xf0, 0x1f, 0x0, 0x2, 0x0, 0x10001, 0x8000, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x8, 0xff, 0x4, 0x3, 0x6, 0x8000, 0x64}, r7, 0xc, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', r6}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0xa, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f00000001c0)=0x9, 0x4) 10:13:18 executing program 4: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x7, 0x0, r1, &(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x0, 0x7}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x227c, 0x8150000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) read$fb(r1, &(0x7f0000000040)=""/37, 0x25) 10:13:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) r1 = openat$pfkey(0xffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400200, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) [ 669.424117][T27888] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.431358][T27888] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.559991][T27893] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.575185][T27893] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.582413][T27893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.589846][T27893] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.596942][T27893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.618868][T27892] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 669.641962][T27892] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.649066][T27892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.656520][T27892] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.663661][T27892] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:18 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x1d9, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0xb439d000) 10:13:18 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 669.691038][T27906] batman_adv: Cannot find parent device [ 669.724614][T27924] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.731868][T27924] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.885313][T27928] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.893242][T27928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.903777][T27928] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.912123][T27928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.957216][T27935] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 669.981535][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:13:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x12660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:19 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 670.001131][T27949] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.008356][T27949] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:19 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x40200) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$TCSBRK(r1, 0x5409, 0x1000) 10:13:19 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="64efb41718b224ca7104", @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 670.421607][T27951] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.428825][T27951] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:19 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x400000) [ 670.541500][T27953] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.549976][T27953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.560621][T27953] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.569691][T27953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.594316][T27954] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.601515][T27954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.608911][T27954] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.616040][T27954] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:19 executing program 4: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa885ccfed73928e5, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x15, 0xfffffffc, 0xa, 0x40004, 0xfffff801, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x227c, 0x8150000) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x227c, 0x8150000) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r5], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000040)={0x8, 0x7fffffff, 0x100000, 0x7d32cf71, 0x10, 0xfffffff7}) r6 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0xc0305720, &(0x7f0000000000)) 10:13:19 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:19 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 670.660738][T27965] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.667911][T27965] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:20 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 671.048276][T27967] batman_adv: Cannot find parent device [ 671.085941][T27968] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.093235][T27968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.100688][T27968] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.107771][T27968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.138323][T27984] bridge0: port 2(bridge_slave_1) entered disabled state 10:13:20 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0xe, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB="99a100fb0500"/16], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000040)={0x0, "7b1b03562d1ac572ab4cb781d5485f5a76ee298dbb4eb0311e7ba0cd0f8f2b9cf5b647ca9627ef8d5a8730d60ae5ae311300", {0xfffffffd, 0x4}}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 671.145715][T27984] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:20 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 671.359263][T27988] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.366563][T27988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.376189][T27988] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.384774][T27988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.464432][T27989] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.471715][T27989] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.601526][T27990] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.608773][T27990] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.747343][T27995] __nla_validate_parse: 5 callbacks suppressed [ 671.747353][T27995] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 671.771767][T27995] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.778952][T27995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.786414][T27995] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.793539][T27995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.815057][T27996] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.830274][T27996] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.837320][T27996] bridge0: port 2(bridge_slave_1) entered forwarding state 10:13:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x13660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:21 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:21 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:21 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 671.844717][T27996] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.851845][T27996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.872308][T28011] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.879551][T28011] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.264320][T28012] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 672.289786][T28012] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.296882][T28012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.304354][T28012] bridge0: port 1(bridge_slave_0) entered blocking state 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x227c, 0x8150000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x55, "e7ec0275fb53e9097d0d97c1d1b6aaf645cb6f0b270b5f4b9cfc580974a69aaae7e6717d339b7491173fa343ee0891401883129aec99e1df3b99e38511b7951d0653551a8c6ee29d5f57f8ec1ceb03112ca196e071"}, &(0x7f00000000c0)=0x79) r3 = dup2(r1, 0xffffffffffffffff) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) [ 672.311485][T28012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.379062][T28019] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.386403][T28019] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:21 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40c100) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x59002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = dup(0xffffffffffffffff) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x63, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 672.680900][T28021] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.688217][T28021] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x12) [ 672.959133][T28020] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.966550][T28020] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:22 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', '/dev/snd/midiC#D#\x00'}) [ 673.074897][T28023] batman_adv: Cannot find parent device [ 673.082600][T28025] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 673.099574][T28025] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.106658][T28025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.114058][T28025] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.121197][T28025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.167290][T28027] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 673.185330][T28027] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.192471][T28027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.199925][T28027] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.207010][T28027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.251202][T28028] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 673.266834][T28028] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.274022][T28028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.281461][T28028] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.288539][T28028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.345447][T28043] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.352671][T28043] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.522105][T28046] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.538535][T28046] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.545727][T28046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.553203][T28046] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.560346][T28046] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x14660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:22 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x8150000) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x227c, 0x8150000) r2 = dup2(r0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x227c, 0x8150000) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000001740)={0x40000, 0x7, 0xfffffffc, r4, 0x0, &(0x7f0000001700)={0xa3032d, 0xfffffffa, [], @p_u32=&(0x7f00000016c0)=0x8}}) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x8, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000000140)={0x14cc, 0x12, 0x2, 0x70bd28, 0x25dfdbfd, {0x15, 0x81, 0x94, 0x40, {0x4e21, 0x4e24, [0xdd, 0x0, 0x7, 0x1], [0x4, 0x1, 0x8, 0x101], r3, [0x10000, 0x1ff]}, 0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "7f8a6792f30675f5169b0cc03baafeb3ecd5857b67d793f870987f9a10eb67953777e1aa9cf1294615b76d428f18d08d3b1554f6ac2db41a83ce63a78f5ecb23fae384d841263351a75ebf6397bb841b2e00b8a525830155d9a0a4038046404a863b3e59e94b68cc3e374bfc038c8ef56a3628f8cd3bc0e109bd68fefce5a485f1d749734022b124bbbfecc8fae76909aa338c9c07208014f88e343089d9829f5ce2e806dfc8b06f2dacfd27f5ecfc1a7d12da226c94fee0343c74308fcda7ca325c52aa4bde9bb93063cf8997207441d784f023ef3c8aa22f92d8fab761b558bb355d7a05dc9958bc3538819abc553d15a8b22e7f0dff4d42f97aa4bf19a158717eedc8a7e2b92426682dbf30629af6d5b5aaea2cdb5380f47e48aaf1f53c9561097b897471a12b973594a81de2370133ec8149ec04357bc52f23cb176c3e3425f676787006ad11d81d08c9a32b07bd9e9353e348253784bc6f37acd48e2be020e5418633f352ebf6c5f0f98349aaf6b8b8b98672908b16c624fab6a46ca3108e0a8e58b5b4916aa192e4f1715dc60f36050b7e555599c1e3edf62fcc5af802c4696d705e9f1edc8a7a596950f83217187a0e850d1be8bc3e4070bae236e1070a536085c7e59375481f3bfdece9e312e79dff18ca0955672da264f095c1bc5552d90eb3b5302445850dafb5f9c00ea96c8444faf3a2958f8922ddef72f0677c9bf05a0c188e59b99e5cf82355e5919a5cefebb122fae8f95e5be5ea75d57cadc8a3f4f5bc07ebf6349cbd5dd612ae230d89185872204cb769e8e12ace82f7f9bd9dd03da1d2401fada7b98360c80d8667179dd13d59f73cf3bd31186528bd8748052647eabe1b4d20c9307357d34118b6a560a95dc7ebc284756000e5ebdfe16d9a6256779bd7a0cd34678acf75f9df26e2013b866ace15390539744f3c81c1f2bbdd4da589a6401fa3508deb517627027c0f93f35ff5f77c2e7edaaf9142b85257d3f7d076e726f4893c7347702b4c3e334c2ec087c69d32b11d38e2906ed4ea3010403b7b2e1126196b5ed8fecb6689de7616d436451dd3b93d388f7b5f6a8b558a24c3a312c33b8649d3dc6f0ae58f7513c6a0166f8df6138d88f0fdafc4f6af9a3690beb4195c2de47d0ae9175431b9c7e33147aa1a880c9774bf8b6b69586b041d350c7809eda1697ce623c00ca170cc504aa01f8218274b789c02207f0455e044b3f67e1da4217d627a001e923df2f052223d3e10cc687322689468a221322fd51afef383f8191d7de21cec12cdeee34e5bad169dd0f1007ef60da91fd59c5a7242337ba63242cedc9f56fa1f54469f2672dc0e63b05750251b1732970c44024386454bebbc6d2802235987fb700cdd45885b8cad4bee40e1e0ea81b957cc8b02e251f2682f16a28e96a99fa5d9f5af6695d43d12fe1c4938b9d0008fd0f64fd4b5f212d0982d228e30c19378e49adb983fab605003ac412b09be761539f0fadaab348bb8ad32107972d30f9661f6c76440e625e1bcc11e7a3ec73f692d406d7c14568d2f2737c29035cd35d8ee9d65f7c0cb9c022bca91dc6d4ea05bfdfc7ce4dfa45abddf114ba15e2e9c7d6eef07023f9cefdd79890bf338f6ade73531e8ad5a0d3372ac89c64a3517b8762c3a8ba2f666b65c6bda43ec00da16aab09e2b84209bccc4448974614704931136726e98cb396f6f64645a34045cde42257b8d89e48e2a2e2ce1cba8f85d2fe83d6ded600a7208d0601c6e0ded023af495d26255e160fc5ae2b2790f57d9c9a79c5807116cb1672c6d688bf1cb176a9261b74254ef3c155db54faa348930f7020cdf894333aaea8ffe1607d21f7379e6d0b892ab0e26d255da4020889b350ab448851ebb6272d1be69ca6af20ae1a8f9c7723603e06ef74cfa2720f6790a2ec948a45641b2597360e86570510c9438c12d79c1299bd38ed788759e6e4b77342fd010c31dfa4e3150d16c9a3c9f0df3932c092697c0f3b54c0a5e0715dc4f4bdea0fd1519f50427bc7f44fe85d6a08110e13058c0ae6f6fa3fed5572a10c0e7b81a7cee7625401ee5ec8f0211636784986716b6218e4a561490e2c7d53423ef1c3516ceafc7239ef796a003343c61ff501b6c42075efdf601e97e9a512ada1408e37821bd02f8fdcd4be231701c00f89e43f6ca4945e858996e3b452a48c636bfd800deb531fe9fc6b40675c54bbbc703470f2210897e96a7fd27182a2ca66eeaf3adfd1a079bd41d431a2200721dee6180d488010d55da01d50b59009ca98681ef76d8ccd81d80f668445fdac77999febf97780b34c52a0b8e0bf3a1139f0d1d5b091100d4fb249183caa0a82cc28d6d1fcbeb6f518607de82e1e50c0faea4558af46e667ee6d4710d28d845dc1cb8791f0d7a297082334ff441d433530b786fad4727198b4a719a6e90b1c479b01be4b49760ce1a7ffefdf63731604000e5f3876e18f5be7e27cf9e9bd5ffcce10a254d1dc328bcfa954b815dea384bf4d72c8ba60e386e155a61dc2c6a9b2b4084c4a70ffd4259cebc4156c0447875b0122f10b28e9682b557bcfec96f4a8726095c3a6589c2445c2ccca780ae6d227ba40471346f2d83914ef6c36b35062d669b03bd5603df7b04f5b6d0bd2a79d93cc48aba88e6f4b27481486a60fc2517073ce83832cbc808ed7a36461278e90abf7ca6de48daabb61e55292296dd12148c86ddd5edb52027a650fed2a4523cde3676d5f33e874de1224570a9edd4efedb8a86bc7c0f74fd47532cf992e1f514f0ae5001d754f2d83e4e31cb46493e0c78bcca6e86f70c3ec1a22fa0f0dfefd3bade0ecf477b45b1d4bd0cf699173d06d349412fcae06d9e973ca322ea5b1b24e17c0ab226337b92de4b7158f7fe2c1d9cd05b85ce367bda8ddb8583633567a5b12f89f419685238277b3a8d159d2a7e0f9487945c7d41de1d9c9e79fc59fa46d76423e72081550e5e354c36cabb4ebce22ccbf71b33cce2a799338745ebc5fe0426f7e7cde1405d778d14199012d477ad2da088184d12bdc0a0ef083af8b44eb4ec614e817e7fdc6a7b32f3dbbd8c4a4d2c2c3b50159632a4cc552503bc009b98277798bd308bcbbfbc39419f5a4c559cd98f7aa7b3f94a2bc241a7b03ed7099743998e2a08dcf6c556c9b13f908e6cbe909a597958083f2adef7128a706a680d5a927affa7044bf11aba6c4b0b52abfc81a00b7dfe705e2242a53b04f9e837f11891e066a1484c0bee5d85b06eb8dcf0790dfb89c8da73b6134ab5764b236cc513cb30084fdf308197826e8e8f7d02b76f6ad37a2649fa38075aadf02b913a8c5edd0e85ebd929b08a9688274c56b85789c905c3631d24b7b2ed52057e400e0a64f57657fecaae385db6f64dff9e89f6506168e7a206dd493ba2802dd79a2f78d02ebba101b53e033c70cbaf3fa126bf5aa017a72d92b59f3745bb0eb29fb4048d734f8252edcf5794289be8641ee70548534cf8fb283c1b1b19352436f7e011e58527f906ff20924048e7b77280477d55c72caae6895bde78cb2ae8ce212a54890e7ee724137a148d6120706ba1a3307b37e15641a97ea0f0f7e4a16ed9361369e0e3f3f2dc8282794d440843f8b3b287d50dffeb9e8faf28d7f067a583b98b507ad5408c9108b1e7ee810eb457ac198f825237047e90d2a138834e6e5327d0c63eb24ebfd81eb734fde3c53d327473dd8e97eee38a606653bd70e332714834523bef393ef5fb70391be550318bdcde65fab3bcc3d94879cdd11a2bb5955fa980548ac139da3e5883b8b81d5855a9c400648b38e2efc2daa1b66d159976889ad331d0a90c3bf0fadb6e10665d7f81e0c0848e734f3595688b1b7e87be52230e0d30213e39489fc92f24b957f8be950dc27d9d750bc4cfc1715883d06bc14533eea4589b1ab2f3d7117c96e865187e5680b45e947d66c83669b274dc810739daa803f511d21d692aea42973eedc4660fa2d48897fd3d0854c420fd72df4d90075c060f06cce263e678da1790e612324a25a9f43d58bbcbe7b8fa78f1791c5506ac0a72093b506fbb9d1d839e911a5fb980d1bca0cf1e0a516c6ff2edad75239d05bde549272f865ec3e96ddf9c1f61b1325dc5b803b2ac1ebafe8220739e50f0a995f3038c045ae00c3c5fa998b85ccf1453cea10b340235a331b8e3be82e1f8911eea67121c904d6139ddb97c41de0263e90533c620f3b3d83d738eb65b79e6d636dc8d4ded7de31f81696e163858737f6617c3451691cb6bbf4280e22837753c8e1eaf2a49d80c423cf7b38192709fe4065b763dd0422b1ccc8b5978291d0bc9d046b1724cbe5c6ef59ad8eb681c723df50ce04a1e2874442f76de26cdd65b84cacd9f971dcf58adabd8700326caf5de78a0e59028b0eca193c2e5c21076bb48a4812840c2d05958d97ad4931c5cc03e9d60c3b2aa0160a371bef267d73db9aa64c5af8d51a0839ea06846d65127ab6213bdd0e7b6debf36b441135345aab23c179e42591c74840d3c0d46782fb7d0730bccf7822cd6fc289f7acdfcc09922fdc6a27e8929fb472396f6f6162306bf8738fdddf18272f40ad21d103ab486303e43223429c1912cdfcd8da51a8339dfd199f3a05696673bc439bd1f0375d1e8c7fa37519d736f158413ccaad68bfc37d9b7c7018eed1479b2bf52813a0a3d43d1b4af57a23ecb2d992d32d8c8fa19dd80585385e717a54977dd7d493b0e6619b25f233638d9d75798fd777f8ccbdba8c9223fd95466ef30a1218c3431485aa99a2713bb9883ffd269488c380e3077077fa7390e8f09093a0bdda5fbdbdcf704d433bf42d11bd4ebb34ab0acb6dde6d08e32fcb2dc85a664a48c234784766873a1712a7ac35bad47994e553725959fc06c2044f6fe25042d8e763d7652dd2663eaf5150857f1d86409ac2e0be84c8a19f4aa77619c837b57a72684946b39b01c7d7c82250d77d136dd68b1a92fac65b88df40b25f6c5e04c1b61edf1436b83e375c4ad7fa4a186636813d345d76034f63c869b4285afa912474cf77b2dc8849d46c41ed92e2f3a85b39078ced3081c913cd6e8757895f2a35b0cbbe93442d0e0146ce59173550ab4dad14b93719381d58fda12685ccaa53306eb8e69a7b4310826e7d16a232c63317d98e51dc6a1e83eaff5ad519beaaf1c9ee491f4512b3c30d7b658bb4b4d65683f96a69163e85f24f9d113f9510990191b2a18e77a9d297bab5bc293d0abde44107d0c266e5f6c36fc4256ba9374485eeb5c341747ac40e874ed5895b9de7e5d06f94ad092bfad64f14bc8c7a259628be5c89e85e31606247eba49f4b33d070a081f6d6af582e522202b4d69ebdc3707fb2e7c14feda5e91d01c4654426b59ed8818a86610fb4bf6ef42cc2fac8badaf02d2e1c016608332bcef05146c70e6dcb93e331dae34780bc644a2105b91233557c0a0a37359385ad45f1b023719c2c260d8b1d67c6e22b28a180d4c37da80ceee87f05f19537c49dfb72bbfdbcbd03956d39664e593fc1acffde9604747a625e0c02a2f17f3f5b9e35f4d4f8067183839d1bd6afe7b08cc993b3c4fd2e096dd45bcdfe1afc9f201841d174cd33861391682a9a5b34635f2adeb3516fabfdc8f75acb13d7ec8f9065e100dff3e9356a19767844247beb3b08fadfbd7aec3087a3abcf526ad89b48198b09e99e3774525c6a6755563c9f684577b7d268a6991bb963b66f1d15e0696934aa600c59923c0564055a1aa8eaacac2251344894698e863b58f0b33475f36fbf44b241174efb75b20eeca1ca07a77dd344"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "33dd29e576e40e5784879af882cd800ae0979d04fe911c65eef8501d82755de245ed9f541f041a8872787b1fdbe4de8e2b1ddc7bf4e49a8d06b09b15f84ee27765e5eb42d7a2142eeeec7079f81cd59b6599efd2724852280dbc4c5e5731a6344f5bae1bddf6b1d298eccbf94dda561be9150517521af71dba6757407887b682494ec4159e45e6cda7f4558436de15a185aba87df5707a8fbfb61a9e9edafe586396be56d83ff9b66e8693725043b4810e14e591efcbeae62acb9ffa37390505fef8defe28d4591e01a0f4dc268adb2289251d5413d9502d8fa0549850de81f1"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "71fb81acadd12f7a39fd1ae8621bae0ac5082b4cbfd7d8400d58ff9b6c1e012c4f932273903deaee1e0bd7098c8213c806100c5b2658bcf34d32f1a1e68aaae7af1e29543c76d3204ddf6dcb4fae09df730eb4347343dab5d40cbc481f43832710697e58f663246519765a96bfcf89585f79780ff12a8b2b7152a670d12566f8f69819bde0bdfb8457b4bf6dc375fd081e52536cb048a259c83f9aee079a4e17b7f390756513fe7b1c24bbaf9d1d5560f1e5ac3ef9c9"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "9d28bd500faf8394ae200f225e9c743a45a50664098c6a3283c27bbe17104f0c2fe23010e32bb7"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "6e2f9853136187fe37d25310a0daee8135ee9dfc0ae4a33e312e6e943dcdbbf8f76a0dcaf6c019bf6cda3f269902b71de4cd6d533ab6f623501115eaf74c2a9c78bf54f1a9bd6a72c64bf5db36d705a781c14727a2637c323bba6d687feaf8f8b2384cbb8f755694d16f5d9cd1df61a789385d7f8324fc4e335366768a92d52b871aa9e9e94b2ba5e3ae887274e0ad454d53847b35b397b0e400130874f80b3552e94475cfb6825de59069db633358679da15fc1e27a189091cbce8c8b2d81e7f45d7769fb7fe9a4bea3"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "8209a7f175c0698ee0d21db7f1e6d434a3bb93fa10710f781c6cd0f30652b656aef82355229cb737a279352cd09cd2d90126542381fd282e9d930fdf105937cd14bcf3aef2594855a62c27d8467ff09007e0961bf17a5f32fee8480d3217cc145b8d2863a336bad02df26db177dcb6392bf9b2fe4206a1dc4e1bb0102230522f9a719d521a7d1789746740d102c1b22831a7de9b3a7bb4aac1dc0e05b85d6beac158b3219a46e651157d1c2ecc4c195fc2719a792d8ee9047a7f123e4ecaa02e2a2286c7eb159abfc8573ec55d62ffb81c57e0078ffebaa8bd40266bc468453e27f4d0ce1fb665a08639cde0af848138d468"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "45c63e116641028da43c7cbaed23905222179a8fafc27b564d18c9767ace20e207efc347421d"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "600868a792da4d8dee8ba96a161bbb98532aba0a8a0e297ece2a641274ef2def7298b51cbe13f922de8b765b88c3591103534b2d01e425f1d7dfbc12342e7dbfd8428a0eb69397691c5576688896d2ce69073f463b60762f2d36f4c7883829952f53e9cd94edb483906dfbc05e33c5b1b3a27b4e5bc878e0acf143e817cea3e880debae6d830704cd374556354cf23a9e2b406532b54a4b530846afd2c2fc4d53024b23a16906a098b786718ed7e1330845588610bbd3375"}]}, 0x14cc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r6 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0xc0305720, &(0x7f0000000000)) r7 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x56c81, 0x0) write$P9_RXATTRCREATE(r7, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 10:13:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:22 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 673.655644][T28073] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.663088][T28073] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:23 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde3553a6a78da7ca61ef8ad2137b4acf6239922a6ab51bba2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r4) [ 673.931908][T28072] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.939164][T28072] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:23 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0xc4401) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a300c2af7126", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363aeb6aec08f0a42b2ec300e7fac3300000000080002000000000020f7428d4e4af1c63ccfa2d9348bcdfa20ad6a0ab51bd9ca494b72bb9a5026867008e0a83aad5a5ab54cc821266a9ba3"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB='\x00\x00W\x00\x00\x00\x00\x00\b\x00\t\x00'], 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000df82d8ac562480e2e444784af96671bfd6fc235db62bc784fff3eadf9f837e25af95005520aa08c029d6b86f2297ea303ceb032b653886e70000000000000010000000000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf25010000000400050008000b00", @ANYRES32=r3, @ANYBLOB='\b\x00\v\x00', @ANYRES32=r7, @ANYBLOB="050002000a000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) [ 674.317661][T28076] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.325099][T28076] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.441631][T28078] batman_adv: Cannot find parent device [ 674.449121][T28080] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 674.467792][T28080] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.475026][T28080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.482468][T28080] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.489618][T28080] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:23 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 674.577724][T28081] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.584915][T28081] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.738700][T28082] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 674.748534][T28082] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.755715][T28082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.763091][T28082] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.770201][T28082] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 674.784430][T28083] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.797730][T28083] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.804962][T28083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.812372][T28083] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.819589][T28083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.832372][T28087] bridge0: port 2(bridge_slave_1) entered blocking state 10:13:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 674.839520][T28087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.846971][T28087] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.854101][T28087] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:24 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x15660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 674.939032][ T4063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.954212][T28107] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.961571][T28107] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.163744][T28110] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.171455][T28110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.183704][T28110] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.192051][T28110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.235092][ T0] NOHZ: local_softirq_pending 08 [ 675.279931][T28113] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.287240][T28113] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:24 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 675.598787][T28116] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.606054][T28116] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x227c, 0x8150000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="00000006000000001c0012800b00010067656e65766500000c000280080002007f000001", @ANYRESHEX=r0], 0x3c}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0xc0305720, &(0x7f0000000000)) [ 675.719031][T28125] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.726125][T28125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.733554][T28125] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.740703][T28125] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:24 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:24 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x6c1280) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 675.897174][T28127] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.897357][T28127] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x8000204, 0x41002) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x244600, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$alg(r2, &(0x7f0000000200), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000080)=0x7) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r6, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) flock(r0, 0x5) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)={0x7, 0x1}) [ 676.079959][T28123] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.087164][T28123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.094622][T28123] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.101763][T28123] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:25 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 676.175836][T28130] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.183003][T28130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.190450][T28130] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.197538][T28130] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 676.250329][T28170] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.257595][T28170] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x227c, 0x8150000) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x227c, 0x8150000) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x227c, 0x8150000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[r2, r0, r3, r4]}, 0x4) 10:13:25 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x8150000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x3ff}) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00 A', @ANYRES16=r6, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000000c0)={0x400, 0x5, 0x5, 0x8, 0x7fffffff, 0x5}) [ 676.465915][T28133] batman_adv: Cannot find parent device [ 676.500851][T28138] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.508109][T28138] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.649831][T28141] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.657018][T28141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.664452][T28141] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.671561][T28141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.788292][T28152] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.795710][T28152] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x16660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:26 executing program 4: r0 = msgget(0x2, 0x44) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/45) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f00000001c0)={0x30, 0x640, 0xc80, 0x30, 0x8, 0x3, 0x4, 0x2, {0x5f1a, 0x101}, {0x9, 0x6, 0x1}, {0x80000001, 0x6}, {0x8, 0xffffffff}, 0x0, 0x2, 0xd83, 0x7ff, 0x0, 0x0, 0x0, 0x9, 0x80000001, 0x48, 0x7, 0x7a4a1d76, 0x8, 0x4, 0x3, 0x3}) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$DRM_IOCTL_GET_STATS(r2, 0x807c6406, &(0x7f0000000080)=""/216) 10:13:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 676.967356][T28157] __nla_validate_parse: 6 callbacks suppressed [ 676.967366][T28157] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 677.024457][T28157] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.031633][T28157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.039004][T28157] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.046158][T28157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.108702][T28171] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 677.124562][T28171] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.131698][T28171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.139062][T28171] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.146227][T28171] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:26 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x1, "7d81f31420e1f3"}, 0x9, 0x1) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000040)) r4 = openat$snapshot(0xffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x218281, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) [ 677.171970][T28173] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.179232][T28173] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:26 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 677.372297][T28179] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 677.382124][T28179] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.389254][T28179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.396631][T28179] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.403816][T28179] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:26 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x8200, 0x47082) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000080)) 10:13:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 677.481628][T28192] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.488959][T28192] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:26 executing program 4: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8ac00, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x800, 0x7, 0x5, 0xff, 0x0, "3ad460d23cef1dbeaea687b918b3d92bc6aa68", 0x2, 0x6}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) 10:13:26 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 677.716922][T28195] batman_adv: Cannot find parent device [ 677.728947][T28196] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 677.747319][T28196] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.755011][T28196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.763263][T28196] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.772248][T28196] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:26 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x241002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 677.874485][T28207] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.881688][T28207] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.049314][T28203] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.056433][T28203] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.179716][T28209] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 678.194227][T28209] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.201497][T28209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.209004][T28209] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.216158][T28209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.227586][T28208] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 678.259438][T28208] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.266538][T28208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.273912][T28208] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.281038][T28208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.303425][ T2694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 678.322691][T28216] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.329969][T28216] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.429522][T28220] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 678.447040][T28220] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.454193][T28220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.461646][T28220] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.468717][T28220] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x17660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x2e, 0x38, 0x0, 0x18, 0x104, 0xfffffff9, 0x1, 0x0, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f00000002c0)={{0x3f, 0x8}, 'port1\x00', 0xcd, 0x8, 0x420, 0xa8, 0x81, 0x10000, 0x3, 0x0, 0x4}) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$rds(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/158, 0x9e}], 0x4, &(0x7f0000000740)=[@rdma_map={0x2c, 0x114, 0x3, {{&(0x7f00000005c0)=""/177, 0xb1}, &(0x7f0000000680), 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x73}, &(0x7f00000006c0)=0x689, &(0x7f0000000700)=0x61, 0x6, 0x8, 0x4, 0x6, 0x10, 0x81}}], 0x84, 0x4000041}, 0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) 10:13:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb8", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:27 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 678.507447][T28232] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.514715][T28232] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:27 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x200, 0x92000) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)={0x1}) [ 678.852212][T28237] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 678.867432][T28237] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.874598][T28237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.882034][T28237] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.889165][T28237] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:28 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2f) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0xf, &(0x7f00000000c0)=0x1) 10:13:28 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 679.007386][T28243] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.014692][T28243] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:28 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x200840, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x227c, 0x8150000) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRESDEC=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r5, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000000c0)={0x401, 0x2, [{0x6}, {0x5}]}) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:28 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x8150000) fstatfs(r0, &(0x7f0000000040)=""/86) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f00000000c0)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) [ 679.279456][T28244] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.286863][T28244] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:28 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$zero(0xffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x100, 0x4, 0x3, 0x1, 0x1}, 0x8) [ 679.515969][T28247] batman_adv: Cannot find parent device [ 679.532483][T28249] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 679.549253][T28249] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.556339][T28249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.563779][T28249] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.570921][T28249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.610829][T28248] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.625201][T28248] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.632426][T28248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.639842][T28248] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.646916][T28248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.659847][T28251] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.667072][T28251] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.770783][T28259] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.777862][T28259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.785298][T28259] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.792437][T28259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.811592][T28266] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.818726][T28266] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.939671][T28270] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.946794][T28270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.954217][T28270] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.961359][T28270] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:29 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:29 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f00000001c0)=[{0x8000, 0xff, 0x20, 0x3}, {0xfff, 0x5d, 0x0, 0x8001}, {0xcf, 0x0, 0x7, 0x81}, {0x1, 0x6, 0x8, 0x9b9e}, {0x8, 0x3f, 0xff, 0x8}]}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000900010072737670000010a0ef000200"/28], 0x34}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r6) r7 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) sendto$rxrpc(r1, &(0x7f0000000480)="594bb9e69ac62818a33e687e37f36e053f87615e9921872128d824823ab7d78bd8e477c30f311005a57206c19f5b953b94c01252937a9821c95f1bec5de8bec40c33564bb522af19448f0408650fb79cb9d6f6f87ada9503db26ab47e62ff1441051694b6b526587a644a51f17c30968d819032372a75620096bcaa583d5c290a21cff8ce4b63717b0f0fdea4b9c08caa50b2b1625490964d3331c636beefdbf27816ecc23e14e48c8ed2e23eb0050e3037376522f", 0xb5, 0x800, 0x0, 0x0) shmctl$IPC_RMID(r7, 0x0) 10:13:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x18660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 680.131366][T28293] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.138625][T28293] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.373631][T28292] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.381062][T28292] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.615514][T28291] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.622858][T28291] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.730548][T28295] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.737910][T28295] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.915896][T28302] batman_adv: Cannot find parent device [ 680.931515][T28304] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.938602][T28304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.946029][T28304] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.953152][T28304] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 681.004422][T28303] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.011525][T28303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.018988][T28303] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.026062][T28303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.054221][T28306] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.061411][T28306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.068777][T28306] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.075911][T28306] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:30 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:30 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="89000700", @ANYRES16, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x62, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe8}}], [{@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@obj_role={'obj_role', 0x3d, '^$$/-'}}, {@subj_user={'subj_user', 0x3d, ' \x01\x00'}}, {@fowner_lt={'fowner<', r6}}]}}) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000180)={0xfffffffe, "88972672bd2f16582bc45009a9da803d8d2fdd60c195c4f96ef8914b5fe04d05", 0x4, 0x8, 0x1, 0x4, 0x5}) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) [ 681.104670][T28305] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.111781][T28305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.119167][T28305] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.126237][T28305] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x19660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 681.172158][T28321] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.179511][T28321] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x4, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x240000c0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0xc0305720, &(0x7f0000000000)) 10:13:30 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xffff35ff, 0x100, "3eb568cac04dd9673c1dfebd0b732e79e467740d862529e654f8b6761be866db", 0x4127, 0x65fcafb4, 0x5, 0x20, 0x108}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = shmget(0x2, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 10:13:30 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x10200, 0x61003) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r1, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x30, 0xc, 0x1c, 0x4, 0xfffffff9, 0x2}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70f8ddf9", @ANYRES16=r5, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf890123000900030073797a30090000000900010073667a31000000000900030073790000000000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c020800dc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x200a00}]) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r8, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) [ 681.554136][T28322] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.563027][T28322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.573424][T28322] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.582386][T28322] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:30 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 681.670147][T28324] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.677474][T28324] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:30 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x6, 0x41002) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000080)={0x10000, 0xa, 0x4, 0x2, 0x1000, {}, {0x1, 0xc, 0x7f, 0x1f, 0x8, 0xff, "578d6f02"}, 0x5, 0x2, @planes=&(0x7f0000000040)={0xa304, 0x3, @fd, 0x7}, 0x8, 0x0, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0xc59, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:30 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1) 10:13:31 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fdcb772eb6020000000000000090830f169fa77b0e19c89bbb2440319289198126838856e6b362a9ce47fc641e0397063a1d12a05298583335fb0e2bf3daa2f641dd9d39c76a529dee2fceee961125810ea128acd642b4867d00f1fc852c8c42cbb3045cde18cf7c7f9ccc49ef112e84ae00b8b7179fc91269ce35652b0db0725d4db62af277a7f8f14728cc4682129738193ccc70ef28fc5ed4c6f0aa726c4f4da70f6220bfa474584605fa483dcefb49827351fbb7fc51a02bcb5fe292d5d1117440e76dc2847158c29ae48844789d2c89b64cd4be0919b9066a54442ce6faa1ebde3c788878f9fd3609", @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$TUNGETFILTER(r1, 0x800854db, &(0x7f0000000080)=""/55) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 681.990615][T28326] __nla_validate_parse: 7 callbacks suppressed [ 681.990625][T28326] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 682.051128][T28326] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.058271][T28326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.065719][T28326] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.072843][T28326] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:31 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 682.205748][T28334] batman_adv: Cannot find parent device 10:13:31 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 682.395333][T28335] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.402573][T28335] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.599585][T28339] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.612680][T28339] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.620135][T28339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.627518][T28339] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.634686][T28339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.688054][T28350] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.695306][T28350] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 682.858574][T28354] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.878146][T28354] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.885346][T28354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.892844][T28354] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.899966][T28354] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1a660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:32 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)={r1, 0xa6d, 0x14, "8bf9f9f07cdb868d5b0ba954ba5100dab6cb7ef2"}, 0x1c) 10:13:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 682.920286][T28369] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.927543][T28369] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:32 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/62) [ 683.245058][T28370] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 683.254793][T28370] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.261932][T28370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.269386][T28370] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.276433][T28370] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:32 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:32 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 683.442592][T28376] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.449872][T28376] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:32 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:32 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000380)={0x2, 0x3a, 0x0, 0x20, 0x200004, 0xfffffffa}) r7 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x227c, 0x8150000) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000180)=0xfff) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r6, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$TUNDETACHFILTER(r5, 0x400854d6, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7, 0xd735, 0x68c, 0x7f}, 0x8) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB, @ANYBLOB="92b8e452d669d76867a8929a5eb4831b84abb63e9abcef1cef72f30fb51ece72fd50f3ae59941ef669e006a5f9c48566410b3c512a426849f682549f03e7c982d82345eca2c42b822c24c211ad5adf6ec0b82b50ba3e12898c497750bf1fd6f8426988a379e58b897a6854ba6d47b51a8d3eb5e8293aae7a427d6850e30e9e6bac50169f7e1adbfef4", @ANYRES16], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ae4a3001400020069705f7674690000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c39698cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e00"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 683.686927][T28377] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 683.697126][T28377] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.704376][T28377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.711811][T28377] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.718942][T28377] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 683.735844][T28381] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.743233][T28381] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r2, 0x400, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}]}, 0x18}}, 0x4000000) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x21c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb056}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x542d}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x629}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800000}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2fe}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private1, 0x750a066b}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6f, @local, 0x80000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5c6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x84}, 0x400c000) 10:13:33 executing program 4: openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000180)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000100)={0x4, 0xd02, 0x7c8d, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00905, 0x67b, [], @p_u32=&(0x7f0000000080)=0x8}}) [ 683.994628][T28386] batman_adv: Cannot find parent device [ 684.010542][T28385] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.029021][T28385] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.036093][T28385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.043568][T28385] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.050682][T28385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.102312][T28388] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.109636][T28388] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.249384][T28395] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.258848][T28395] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.265932][T28395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.273365][T28395] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.280499][T28395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.368064][T28401] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.375258][T28401] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.459230][T28406] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 684.473459][T28406] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.480649][T28406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.488014][T28406] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.495111][T28406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.521644][T28415] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.528878][T28415] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.689744][T28417] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 684.705767][T28417] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.712955][T28417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.720404][T28417] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.727468][T28417] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1b660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:33 executing program 4: r0 = openat$sequencer(0xffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x442702, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x800, 0x1ff, 0x4, 0x1000}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000068769926747f506ae6dfa9e72991bc47ca250e1f4627d3ff91ca88530f5614f432d9998c15c8888b0bfdd3562714dd09be4aa9131dd444b41a22855064650c1def45e624d783b74eba6b1568ccdc47951187213c703a2b5775ac800f46bbe6ce5f6c2c61a3736c3dcd16b4695e98bbb123dc032d8604bc13b437a4"], 0x48}}, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40880) r5 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0xc0305720, &(0x7f0000000000)) 10:13:33 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:33 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:33 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 684.837866][T28434] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.845116][T28434] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.115327][T28435] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.122580][T28435] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:34 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:34 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x400200, 0x45002) r0 = dup(0xffffffffffffffff) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x100, 0x204, 0x8000, 0x7fffffff, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0xc3, "3f84b8aa9e1dca87be34e4a8c6ae0fc73fc2000b8b00daf37111043f3c33cec14c729dcd0ef2244816b1f515ca4432f4920c579e4d34ae624976b056caa5ebf12af54b27023269c5b25285e94898765e8a0fa57c7cb40a8d857ee55b8432d2afbf2c5b37c740ca940c54fe29690045ee6afac1b98b64e58e0c6334000b660cd797fa810b847202d34f83fa7bcfb44f4891f7872523a969c1e84a5c999704ee99d08bab8b7284f2faf776a987e15f67a852f263f475617ba1ea7756fb3f7131cde24f5b"}, &(0x7f00000001c0)=0xcb) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600400) [ 685.414921][T28438] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.422223][T28438] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 685.679924][T28440] batman_adv: Cannot find parent device 10:13:34 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x49003) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:34 executing program 4: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x0, 0x5}]) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r7, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000180)) r8 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0xc0305720, &(0x7f0000000000)) [ 685.942782][T28446] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.949942][T28446] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:35 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x49800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}], 0x10) [ 686.059268][T28447] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 686.076030][T28447] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.083129][T28447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.090592][T28447] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.097636][T28447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.154750][T28443] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.161851][T28443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.169278][T28443] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.176385][T28443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.239676][T28448] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.246789][T28448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.254232][T28448] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.261362][T28448] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1c660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:35 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:35 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:35 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 686.312759][T28464] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.319857][T28464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.327234][T28464] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.334364][T28464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.428044][T28486] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.435253][T28486] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:35 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) 10:13:35 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r2, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0)=0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca6baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e000000000000001436181ed647d66d0000000000000004c9a349fbf6a83362ba8c355f0dcf77f02ee4be7865dfc7d712f6b9398309e5fd85e4862a05af1f8f8bbcc6b9754d5205f14be338db5d589e227d7691229de9a8091db750e027a6116492", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0xc0305720, &(0x7f0000000180)) 10:13:35 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3d, 0x441440) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) open(&(0x7f0000000100)='./file0\x00', 0x102, 0x22) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000f80000"], 0x48}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40cd) [ 686.823377][T28492] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.830734][T28492] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.934120][T28489] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.941575][T28489] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.104926][T28494] batman_adv: Cannot find parent device [ 687.135501][T28497] __nla_validate_parse: 3 callbacks suppressed [ 687.135511][T28497] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.179555][T28497] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.187131][T28497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.196445][T28497] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.204298][T28497] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x23, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000680)="4a83d12ffbf22dec53d9718e40e4125e56e235c89e52a29f596bd5845020f6b24d9fffb53ce015fed2613d4419f7e6d57261fcb61e98479ca12ce1fba43007edbb725294e068a84d3daded7ecd8911a8783cd6d172a33f28cb46a165289b7bd70f5ed152464ff01dd41df7f670cab98e304c0b66a5ac68548e27e0a987659575bc43a0846c5d2b2e87d7d539d8") r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x4a03}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14050000", @ANYRES16=r2, @ANYBLOB="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"], 0x51c}}, 0x4800) [ 687.239840][T28495] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.254568][T28495] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.261805][T28495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.269251][T28495] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.276336][T28495] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:36 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 687.300793][T28496] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.308120][T28496] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.494228][T28498] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 687.527783][T28498] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.534965][T28498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.542433][T28498] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.549544][T28498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.572348][T28502] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 10:13:36 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 687.588522][T28502] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.595748][T28502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.603204][T28502] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.610364][T28502] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1d660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:36 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:36 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x236e42, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) userfaultfd(0x80000) [ 687.699586][T28519] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 687.760811][T28521] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.767989][T28521] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:36 executing program 4: r0 = openat$sequencer2(0xffffff9c, &(0x7f0000001440)='/dev/sequencer2\x00', 0x288400, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001480)=0x401, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x548043) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f0000000000)) 10:13:37 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x227c, 0x8150000) fallocate(r5, 0x0, 0x9, 0x0) [ 687.985207][T28524] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 688.018907][T28524] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.027102][T28524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.037785][T28524] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.046614][T28524] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 688.164597][T28529] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.171803][T28529] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.369978][T28534] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.379837][T28534] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.387226][T28534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.396797][T28534] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.405714][T28534] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 688.455985][T28519] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 688.481018][T28542] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.488340][T28542] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:37 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:37 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) openat$null(0xffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x141000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 688.684139][T28543] batman_adv: Cannot find parent device [ 688.702715][T28548] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.725604][T28548] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.732862][T28548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.740278][T28548] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.747354][T28548] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:37 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x400, 0x0, 0x3, 0x8bb5, 0x7a736c15, 0x9, 0x6, r1}, &(0x7f0000000080)=0x20) 10:13:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 688.814222][T28557] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.821618][T28557] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:37 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 688.989535][T28560] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 689.015767][T28560] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.025040][T28560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.040070][T28560] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.047749][T28560] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1e660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:38 executing program 4: syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x2, 0x41002) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r7, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f0000000180)=0x3) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000080)) 10:13:38 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 689.149880][T28568] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.157094][T28568] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:38 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x8}]}, {0x0, [0x30, 0x61, 0x2e, 0x30, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000100)=""/220, 0x2d, 0xdc}, 0x20) r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$snapshot(0xffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x4, @private2, 0x3b, 0x1}, 0x20) [ 689.545348][T28569] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.552668][T28569] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:38 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x603080) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) 10:13:38 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0xc0305720, &(0x7f0000000000)) [ 689.709227][T28572] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.716314][T28572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.723779][T28572] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.730914][T28572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.760419][T28575] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.767478][T28575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.774900][T28575] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.782026][T28575] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:38 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:38 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:38 executing program 4: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x227c, 0x8150000) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477c26815c9be5cc6d82d64d951562bbe238c4870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db28987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00"/127, @ANYRES16=r3, @ANYRESOCT=r4], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$TIOCSBRK(r0, 0x5427) r5 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0xc0305720, &(0x7f0000000000)) [ 689.925078][T28584] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.932264][T28584] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:39 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0xc0305720, &(0x7f00000000c0)) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "eedf501314e3a881ae2171b37b9b8e25682eccff"}, 0x15, 0x2) [ 690.089066][T28587] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.096275][T28587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.103738][T28587] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.110857][T28587] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 690.178187][T28594] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.185403][T28594] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.234221][T28625] Unknown ioctl -1070573792 10:13:39 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='/devD\xdfn7\x97U\xf4\xc8S\x13\x18\xed\xe6\x99*\xaf\xb2#\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 690.267762][T28628] Unknown ioctl -1070573792 [ 690.345078][T28596] batman_adv: Cannot find parent device [ 690.365820][T28597] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.373081][T28597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.380541][T28597] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.387629][T28597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.502689][T28612] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.502804][T28612] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.716308][T28615] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.723602][T28615] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.819106][T28616] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.826267][T28616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.833675][T28616] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.840792][T28616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.870310][T28619] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.877464][T28619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.884897][T28619] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.892057][T28619] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1f000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:40 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13) 10:13:40 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:40 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:40 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 690.939775][T28627] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.946920][T28627] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:40 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41802) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) [ 691.249861][T28629] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.256999][T28629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.264473][T28629] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.271625][T28629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.356751][T28642] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.364035][T28642] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 691.887490][T28641] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.894770][T28641] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.107733][T28647] batman_adv: Cannot find parent device [ 692.136783][T28648] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.143907][T28648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.151371][T28648] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.158510][T28648] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:41 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 692.316238][T28650] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.323498][T28650] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.575961][T28649] __nla_validate_parse: 8 callbacks suppressed [ 692.575971][T28649] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 692.617216][T28649] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.624413][T28649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.631848][T28649] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.639066][T28649] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:41 executing program 1 (fault-call:8 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 692.736619][T28656] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 692.755124][T28656] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.762312][T28656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.769736][T28656] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.776808][T28656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.875045][T28660] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.882285][T28660] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:42 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 693.128953][T28661] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.144268][T28661] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.151427][T28661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.158863][T28661] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.165962][T28661] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:42 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1f660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 693.348028][T28669] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.355230][T28669] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.628993][T28671] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 693.649976][T28671] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.657192][T28671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.664623][T28671] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.671745][T28671] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:42 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 693.793589][T28675] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.801082][T28675] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:43 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 694.047299][T28678] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.054594][T28678] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.341026][T28679] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 694.363088][T28679] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.370286][T28679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.377671][T28679] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.384819][T28679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.435838][T28683] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.443085][T28683] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:43 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 694.759080][T28686] batman_adv: Cannot find parent device [ 694.775623][T28685] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.791385][T28685] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.798616][T28685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.806003][T28685] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.813139][T28685] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:44 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 694.918995][T28691] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.926386][T28691] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.139601][T28694] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. [ 695.153827][T28694] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.161016][T28694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.168494][T28694] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.175571][T28694] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:44 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x6d280) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r4, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000000)=[0x1, 0x800, 0x6], 0x3, 0x80000, r5}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r7, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r7, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfffffffa) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000080)={r5}) 10:13:44 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000006c0)={"7e8e6405c1c05060c02ebedec1e79edf91a04c39182edbbe51482b44870e357ccde4e35bbd3353be615304b72abbe527dc564fa653959d32cbd0364372dbc2ad1aa13e1ef6208adf30868ceaa825a6c6df210be7e27c14a13d305ddaad43ac26f5525423a730ad374b3cd86112372f8931c72f378dc7a60a8a71144974a02e7961f44ccc00454c194aeb9c1b111aedb0de6687f809c004345615e0f400865278d05204d356f7a23667b2c28972fe8f6fae20b333292aa2db135093c2de47b1db516904289c62aea55986a9c30aa207c4f4d073d5fadab3a93ebe2837ed6cd7bf8006d7207735d035b308dd7b5d605500999b17b8341c6e0935f277039f1b5334c42ec2ed6c9ce43afede72fada7b686908904768e437f48886d933d06ee108b1614b3fd704d523b20302c6d01dd0259db6376794170b8485913a7ea62a182f69565a8c922c4a2a518a4d5052b119e3bb975de6a611feac6c2af70833311896c243fdcc2b4473288aad647014ac5307412a51b403447acb42eb38d9e00748ae5746ccdf11d10190b9441a7a0d9bb8f3c8d4ac8487695366c9a7a0f1c8c4727a642fec30f0d66599bf3827d3fcaae07eafff486e10fda24174e90b89a475014a503b3223d84cc7bfb6f7828b91ad632150ea6ccd184616fcda1ffc1acc1836cc69a1cee90d108b56cb35aa042ef7e89d5b3eca3dbedf0cda87c58946504d70d55c9a21938c1c6184375f7cbed0645eac20d28cae251dcafd3723cdc922193caae5e748c965f06aef779b68b7180d0b0317a240d74ffd2ce8256f02a0b0bd247866e5791a6a7638f486d04a12b9e51b5a448059e3ac951bc08e17f6e8172da8436249fc63a866625e6c9be9d6c91acff728628f37e55a203279d3d9a9f823e1cfd5250ead713697392d95efef049bec6f8bad967233a66e335c897b5eece85e660d6912cb7ba8f3329750348a99ed6b3959853ad3126deb06d7ef9502814057077301546c1541abda8db0c26d9bdca58b7c176b6ab09ff2d14a270bcbff32dcdd83453738cd5d932f46c6bc182be705e6abd029c7f2cd14bface0169f04b44a606dae439d93b58243423a8812b94edcdf847c4e54bcb7bf3c9787f23f9c17153afe89d7b54b88cb6f57bdcd91d4c521019fb65a1dc43fa4132e35c39fa584e4ca831e7a604f84ce619b2d4c7efe1113251201fd314f87e4422979484eb2d539501f7243474f487956be6d8af0c29395114bf3916547df5bebe446cfba44ab23805874a2673bbb7dd2357b9aa9c6c8497f860c8da3c47dbb1ccb681396191ccb56c6e539299f7ed1c0bda9d9cd0f06cc19fe6a4fb8dc7a54605d8f5867bcb1842d7c57526618869575b43b60aaaed4479831c5b557b0900ceec5c68aa275e48afcd149f77c3cb130ab1664a21967b825a4b12fcabea121c35cd7e7b784dd9e616916"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x8701, 0xa1) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) chroot(&(0x7f0000000340)='./file0\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) waitid(0x1, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000102010300000000000000000700000513000b0063616c6c666f25592c21e91b937277617264696e6700000600074063616c6c666f7277617264696e6700000800054000000009"], 0x1}}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) 10:13:44 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x41002) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0xc0305720, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r2, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x1c}}, 0x48001) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20200002}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x0, 0x31, 0x8001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x0, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x0, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) [ 695.414050][T28700] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 695.436666][T28700] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.443858][T28700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.451334][T28700] bridge0: port 1(bridge_slave_0) entered blocking state 10:13:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) [ 695.458468][T28700] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:44 executing program 4: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15000000, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r3, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r3, @ANYBLOB="300628bd7000fbdbdf25040000000900030073797af17ad9a3001400020069705f767469300000000000000000000900030073797a300000007d1070bf894123000900030073797a30090000000900010073667a31000000000900030073797a32400000000900030073797a3200000000c7f38b027c2783562938c45d162679a372fd5099a469e9e5da1cc6bb38fe5f7d166aa7e44db667aea2e35a60bc092cc4307d6e578f1ad12873f9302c02943adc6487e363fdac094633c6c38498cfd47196df5d4084dd395b194e738a80900c5298a13f08b2e1a3914cbfb41612829e"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x0, 0x7f, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r4}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xd, 0x2, 0x4, 0x123, 0x0, r6, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8]}, 0x40) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 695.503563][T28703] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.510922][T28703] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:44 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000006c0)={"7e8e6405c1c05060c02ebedec1e79edf91a04c39182edbbe51482b44870e357ccde4e35bbd3353be615304b72abbe527dc564fa653959d32cbd0364372dbc2ad1aa13e1ef6208adf30868ceaa825a6c6df210be7e27c14a13d305ddaad43ac26f5525423a730ad374b3cd86112372f8931c72f378dc7a60a8a71144974a02e7961f44ccc00454c194aeb9c1b111aedb0de6687f809c004345615e0f400865278d05204d356f7a23667b2c28972fe8f6fae20b333292aa2db135093c2de47b1db516904289c62aea55986a9c30aa207c4f4d073d5fadab3a93ebe2837ed6cd7bf8006d7207735d035b308dd7b5d605500999b17b8341c6e0935f277039f1b5334c42ec2ed6c9ce43afede72fada7b686908904768e437f48886d933d06ee108b1614b3fd704d523b20302c6d01dd0259db6376794170b8485913a7ea62a182f69565a8c922c4a2a518a4d5052b119e3bb975de6a611feac6c2af70833311896c243fdcc2b4473288aad647014ac5307412a51b403447acb42eb38d9e00748ae5746ccdf11d10190b9441a7a0d9bb8f3c8d4ac8487695366c9a7a0f1c8c4727a642fec30f0d66599bf3827d3fcaae07eafff486e10fda24174e90b89a475014a503b3223d84cc7bfb6f7828b91ad632150ea6ccd184616fcda1ffc1acc1836cc69a1cee90d108b56cb35aa042ef7e89d5b3eca3dbedf0cda87c58946504d70d55c9a21938c1c6184375f7cbed0645eac20d28cae251dcafd3723cdc922193caae5e748c965f06aef779b68b7180d0b0317a240d74ffd2ce8256f02a0b0bd247866e5791a6a7638f486d04a12b9e51b5a448059e3ac951bc08e17f6e8172da8436249fc63a866625e6c9be9d6c91acff728628f37e55a203279d3d9a9f823e1cfd5250ead713697392d95efef049bec6f8bad967233a66e335c897b5eece85e660d6912cb7ba8f3329750348a99ed6b3959853ad3126deb06d7ef9502814057077301546c1541abda8db0c26d9bdca58b7c176b6ab09ff2d14a270bcbff32dcdd83453738cd5d932f46c6bc182be705e6abd029c7f2cd14bface0169f04b44a606dae439d93b58243423a8812b94edcdf847c4e54bcb7bf3c9787f23f9c17153afe89d7b54b88cb6f57bdcd91d4c521019fb65a1dc43fa4132e35c39fa584e4ca831e7a604f84ce619b2d4c7efe1113251201fd314f87e4422979484eb2d539501f7243474f487956be6d8af0c29395114bf3916547df5bebe446cfba44ab23805874a2673bbb7dd2357b9aa9c6c8497f860c8da3c47dbb1ccb681396191ccb56c6e539299f7ed1c0bda9d9cd0f06cc19fe6a4fb8dc7a54605d8f5867bcb1842d7c57526618869575b43b60aaaed4479831c5b557b0900ceec5c68aa275e48afcd149f77c3cb130ab1664a21967b825a4b12fcabea121c35cd7e7b784dd9e616916"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x8701, 0xa1) chdir(&(0x7f0000000240)='./file0\x00') sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) chroot(&(0x7f0000000340)='./file0\x00') r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) waitid(0x1, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8080008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000102010300000000000000000700000513000b0063616c6c666f25592c21e91b937277617264696e6700000600074063616c6c666f7277617264696e6700000800054000000009"], 0x1}}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0xc0c0583b, &(0x7f0000000080)) 10:13:44 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="0f00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:44 executing program 5: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x20008000, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x5e) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) getpeername$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000080)=0x6e) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x0, 0x48010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 695.892214][T28704] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 695.916751][T28704] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.923924][T28704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.931365][T28704] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.938515][T28704] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:45 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@rc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x6, &(0x7f0000000600)=""/151, 0x97}, 0x2002) r1 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x18b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 10:13:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 696.023496][T28742] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 10:13:45 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000380)={0x0, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r1, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000080)) [ 696.188330][T28709] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.195593][T28709] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.407085][T28710] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 696.422022][T28710] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.429265][T28710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.436561][T28710] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.443714][T28710] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:45 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e0000000000000000", @ANYRES16=r5, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 10:13:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0xa8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x582f) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0xc4ef) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="d5110000edffffffffffffff00"/30], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x200, 0x2) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') 10:13:45 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000040)) syz_open_dev$sndpcmp(0x0, 0x8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x405, @mcast1, 0x8}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), 0x0) dup(0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000180)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 696.485835][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 696.507647][T28725] batman_adv: Cannot find parent device [ 696.558580][T28731] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.565746][T28731] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.761495][T28747] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.768824][T28747] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.072700][T28750] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.079910][T28750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.087340][T28750] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.094461][T28750] bridge0: port 1(bridge_slave_0) entered forwarding state 10:13:46 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12102) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000180)=""/169) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r2, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000002a44719d455593b752dffa57ca49c62477e26815c9be5cc6d82d64d951562bbe238c469870ef48921896b4071768ff14dfde2553a6a78da7ca61ef8ad2137b4acf6239922a6ab51baa2166e78d7242db289d987673f1ad2c4139bcdb839d3e00fa8cf713f85b5a4a56503df51de62709586bf4e00", @ANYRES16=r4, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20660100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) 10:13:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0xa8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x582f) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0xc4ef) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="d5110000edffffffffffffff00"/30], 0x48}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x200, 0x2) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') [ 697.265992][T28773] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.273173][T28773] bridge0: port 1(bridge_slave_0) entered disabled state 10:13:46 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x9, 0x4, 0x3, 0x0, r1, 0xe95e}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="1000000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00') ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000380)={0x100000, 0x3a, 0x0, 0x1c, 0x4, 0xfffffff9, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="04b7254c17c18c9a603a3c6f1401000095effa524eae34b93381b1b6e729defa9c8397e95c78ea1cb3041b56db8912f3e1e297455d3da6167cd393d8439aa0c4232f61c52ae47d769619897dbf79638eb101e552cb4776e78ba6dc97724d8519b68eddb15b194e0950068677268adab8f10d3cc9b1becdd1209463baf60bb575065d964f2b18121b1eb0a7ee1fa01a36dc03b3f3366dc646d370b73d"], 0x9c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000005) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000240)=0xffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) 10:13:46 executing program 4: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x8150000) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x200000d, 0x12, r0, 0x0) [ 697.702674][T28803] ------------[ cut here ]------------ [ 697.716252][T28803] memtype_reserve failed: [mem 0xffffffffff000-0x00008fff], req write-back [ 697.758646][T28803] WARNING: CPU: 0 PID: 28803 at arch/x86/mm/pat/memtype.c:589 memtype_reserve+0x69f/0x820 [ 697.768539][T28803] Kernel panic - not syncing: panic_on_warn set ... [ 697.775125][T28803] CPU: 0 PID: 28803 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 [ 697.783980][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.794023][T28803] Call Trace: [ 697.797330][T28803] dump_stack+0x188/0x20d [ 697.801666][T28803] ? memtype_reserve+0x5b0/0x820 [ 697.806688][T28803] panic+0x2e3/0x75c [ 697.810612][T28803] ? add_taint.cold+0x16/0x16 [ 697.815296][T28803] ? __probe_kernel_read+0x188/0x1d0 [ 697.820595][T28803] ? __warn.cold+0x14/0x35 [ 697.825020][T28803] ? memtype_reserve+0x69f/0x820 [ 697.829994][T28803] __warn.cold+0x2f/0x35 [ 697.834240][T28803] ? irq_work_queue+0xc3/0x100 [ 697.839002][T28803] ? memtype_reserve+0x69f/0x820 [ 697.843930][T28803] report_bug+0x27b/0x2f0 [ 697.848249][T28803] do_error_trap+0x12b/0x220 [ 697.852833][T28803] ? memtype_reserve+0x69f/0x820 [ 697.857766][T28803] do_invalid_op+0x32/0x40 [ 697.862265][T28803] ? memtype_reserve+0x69f/0x820 [ 697.867198][T28803] invalid_op+0x23/0x30 [ 697.868511][T28774] __nla_validate_parse: 1 callbacks suppressed [ 697.868519][T28774] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 697.871349][T28803] RIP: 0010:memtype_reserve+0x69f/0x820 [ 697.877607][T28774] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.886734][T28803] Code: 48 8b 2c ed 80 ff 28 88 e8 ae ae 3e 00 48 8d 4b ff 49 89 e8 4c 89 e2 48 c7 c6 e0 ff 28 88 48 c7 c7 40 f8 28 88 e8 79 e8 0f 00 <0f> 0b 41 bf ea ff ff ff e9 03 fc ff ff 41 bf ea ff ff ff e9 f8 fb [ 697.886742][T28803] RSP: 0018:ffffc90015a27790 EFLAGS: 00010282 [ 697.886753][T28803] RAX: 0000000000000000 RBX: 0000000000009000 RCX: 0000000000000000 [ 697.886760][T28803] RDX: 0000000000011f55 RSI: ffffffff815ce751 RDI: fffff52002b44ee4 [ 697.886769][T28803] RBP: ffffffff8828fe00 R08: ffff888097ed0540 R09: ffffed1015cc66a9 [ 697.886778][T28803] R10: ffff8880ae633547 R11: ffffed1015cc66a8 R12: 000ffffffffff000 [ 697.886786][T28803] R13: 1ffff92002b44ef8 R14: dffffc0000000000 R15: 0000000000000000 [ 697.886812][T28803] ? vprintk_func+0x81/0x17e [ 697.892401][T28774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.899368][T28803] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 697.899385][T28803] ? stack_depot_save+0x252/0x440 [ 697.899406][T28803] ? pat_init+0x440/0x440 [ 697.919161][T28774] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.925027][T28803] ? __init_cache_modes+0x270/0x270 [ 697.933029][T28774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.940918][T28803] ? save_stack+0x32/0x40 [ 697.940930][T28803] ? save_stack+0x1b/0x40 [ 697.940949][T28803] reserve_pfn_range+0x173/0x470 [ 698.024480][T28803] ? entry_SYSENTER_compat+0x70/0x7f [ 698.029863][T28803] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 698.035587][T28803] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 698.041580][T28803] ? ksys_mmap_pgoff+0x457/0x5b0 [ 698.046512][T28803] track_pfn_remap+0x18b/0x280 [ 698.051263][T28803] remap_pfn_range+0x202/0xbf0 [ 698.055999][T28803] ? __kmalloc+0x75f/0x7a0 [ 698.060391][T28803] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 698.065907][T28803] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 698.071782][T28803] ? copy_page_range+0x1f00/0x1f00 [ 698.076864][T28803] ? __kmalloc+0x62f/0x7a0 [ 698.081258][T28803] ? hcd_buffer_alloc+0x1ed/0x290 [ 698.086259][T28803] dma_direct_mmap+0x197/0x260 [ 698.090999][T28803] dma_mmap_attrs+0xfe/0x150 [ 698.095560][T28803] usbdev_mmap+0x3ae/0x730 [ 698.099954][T28803] ? usbdev_vm_close+0x40/0x40 [ 698.104693][T28803] mmap_region+0xafb/0x1540 [ 698.109171][T28803] ? __x64_sys_brk+0x6e0/0x6e0 [ 698.113905][T28803] ? security_mmap_addr+0x81/0xa0 [ 698.118902][T28803] ? get_unmapped_area+0x2a0/0x3c0 [ 698.123991][T28803] do_mmap+0x849/0x1160 [ 698.128122][T28803] vm_mmap_pgoff+0x197/0x200 [ 698.132687][T28803] ? randomize_stack_top+0x100/0x100 [ 698.137957][T28803] ? ksys_dup3+0x3c0/0x3c0 [ 698.142345][T28803] ? get_old_timespec32+0x1f0/0x1f0 [ 698.147510][T28803] ksys_mmap_pgoff+0x457/0x5b0 [ 698.152244][T28803] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 698.157842][T28803] ? __x64_sys_clock_gettime32+0x240/0x240 [ 698.163618][T28803] ? trace_hardirqs_off_caller+0x55/0x230 [ 698.169313][T28803] do_fast_syscall_32+0x270/0xe90 [ 698.174308][T28803] entry_SYSENTER_compat+0x70/0x7f [ 698.180898][T28803] Kernel Offset: disabled [ 698.190048][T28803] Rebooting in 86400 seconds..