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", 0x1000}, {&(0x7f0000001f80)="308078007015ac6693b4ca1ab0ad66e2c47d3de1685f3e4f354c35b2c2a07ec0aa69274a0e972faa364e76957cb4591fb0e553fe6339304926da7f2a55056cd82891a24ec7350914e2504fd4f5a3ea82ee935b5d97775847d5f9a250df0e035cf8b9c4b4c478578310e9ebd40787adbaa799a64dbfb88f2b034321ae0c16a66ada", 0x81}, {&(0x7f0000002040)="2b784be1623557c2e9ba872833fc764234b4db59ba6b55cca41207cf39293472730e7de00edce4c3e9758da77779b912ec989fdceff14a0b586d28a2436472542eb95710e950fb86cacd20864985ccbed2229ec20aed87fabf3f4a9f7c9207e37dc2f2f974b08f889888b414b1bdcc8c345265745a689c623aeba5bf9792a483b8f5307c62df0ef108e47fbae8cb8f99174a79f8263a76389b6f6b656e04b2a01a846e3fbec6a67da32ae654ec8d603135", 0xb1}, {&(0x7f0000002100)="b298a17a930dd234fe0d775881d72b88e72be87b88a0e1b1beecda707936f19133141d10361ab4142fdf2674dbe6976effff8b96ea6f592c004209a06dc0063a4fe5ef6c79dffe517bb41c2b06b852f89e151e", 0x53}, {&(0x7f0000002180)="86a96220f058b46aedbe5def91fb44a8728d7854f7317ca97aa91957670014b9fb86a6ac32482b93e9e2b7bc44ba", 0x2e}, {&(0x7f00000021c0)}], 0x7, 0x0, 0x0, 0x20004010}, {&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="a88db89c7a", 0x5}, {&(0x7f0000002340)="cc5e6d26f258b587350201e651", 0xd}, {&(0x7f0000002380)="9e536388aed92b5bc218605cf5455cf68b41d79ba08a83ec0d7211e4ec41a29a8035cc549006c16f98e590be18eb684bd8", 0x31}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r279, @ANYRES32=r255, @ANYRES32, @ANYRES32=r280, @ANYRES32=r281, @ANYRES32=r282, @ANYRES32=r283, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r284, @ANYRES32=r285, @ANYRES32=r254, @ANYRES32, @ANYRES32=r257, @ANYRES32=r254, @ANYRES32=r286, @ANYRES32=r287, @ANYBLOB="1c000000000000000100000001000000c70fbd3141f35123a84b4753d9eeacc1a8102aab575395585b3662eda91839c1dbc61f347862d6f75a9b34b2da4be6e0b22afc226d009c8fdaeb6089c4ce8a5ab1317c3b1eef7c2d90f2d286aa05f3a262f1ad06000000000000007a53b7120ff2fa0c2827163acca59ef474a5449cc2ebf62104b5fbbddfb4d07de35cc0ad85c817d8f88d707e92a068cd05d46e9208e339437b6e2000e8a52f35a67895c9df34defec35a038f1f4de4af283fed1861cbfbee5345cdcab4f62655", @ANYRES32=r288, @ANYRES32=r289, @ANYRES32=r290, @ANYBLOB='\x00\x00\x00\x00'], 0x137, 0x20045000}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002600)="2e517c9413f09962631801a2daba35f0018f49ddce4d5d729c4379b674d5d802e429f2f0a3d2aff2d009b2532b8131ff8ef66cb858b858251211b42a0fc7ecfe7c20b7a1ec53811d79e98e1d6efd863d041c9154832d37360f6c714ecbc29072b44e8ab596218df7b2ae3af43aea71936eede7c1db541209259a1c13588be88de15543ff354f03a85d5f5be0eef86487f836ee5a4e07f7f22c3f31b4c924d0e14f5cf209fae95b99f725e30ccf801a40619ed57328c1cc07a00cbe5ba389906908ef430d47a72e759fcca1f412cb1d5c82876e667cd4d631ee5703800dffd537", 0xe0}, {&(0x7f0000002700)="173a367b754e2f61b4127df53188f255cd208feddc9c2fe1b4d6d55d7995450ffc19418b09fc473d12e3c22e750e581be22e12fa5b98028078667b1c26305c3e1ab131342ab2e2e9a0e4d23bd3c8dde66073e010cd98b7be35c32902ed6f114a1a6efce9c55f6c097b559a", 0x6b}, {&(0x7f0000002780)="d94e5bdeee3f6c1cfcf8857a0d695f6f04b0e115795e903216878b1a2722c5b99e9125fec6a73a41882c2243e6f8feda942ddccdfa335b94fd6901a961f22e4137ecc94e4f1b562ea875b9ff80d7a90334d349594f3518b3a13f5acf62096b04b1341468b3fef465211f4ec9ddf108a7bb7b48954131e90e6fc02a05156299e7b04a2db7c5d402084ebf7f7d8ca9e770e888e871f750fdc0", 0x98}, {&(0x7f0000002840)="ed9d62a5702126aebddbb05ac4ebfc4b7c6f5d7e44e7f9119d51c1668e038db5c1b5f12ab988b18dcde521dc66227a6ddca949825a1b9bdc0b4c9318ce5a8f9980aa6cc57f08803d533136289d6291eaaca0b0b956348b110bf2d2181a6f4e17f64ff1540f5d66f365d3ed7a3add83f3ee37ad86cbb1dbf13698232f6dab45d553c86adcfbb27d6656eb5261755c09772fecd61496c250e5517ff7a6c838f5e57bfc3e1e11eb4958ec94e632d8b4b50aeefde210a82ac50a374cd5595b4b3ac93c2db70db96fa521151bdfa7cc012cf4f0f1f0001d", 0xd5}, {&(0x7f0000002940)="4f532591625209e0291ef0fa2d42d78fa02129becb63b3c05f55190af7460b2b1baf2a5cfa3f3d19ce", 0x29}, {&(0x7f0000002980)="14b0193cb296c7314d1c521ccfd6f9fc9c9505337e3df5f1bc62c16f733e3b651f50a555b426e22a6f7e479afd69e467ca852aa6a098037d5fee91e1eab1807b71b11e1be90a22cbcf94cca7d4b725e213af69344fd02668b090b75e0a3c8d8c56851640e7e0504cae607e4a3037dafa50569a78d72801628992f965210132091fce315458b1b54a60caea5f8685fc958ede9c1d4b2926262953426a", 0x9c}, {&(0x7f0000002a40)="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", 0xfd}, {&(0x7f0000002b40)="7c9d0e1bf04f8151c488ba3def0a9bc953d8385e8c787b939c5464f1796045cbf461e4715b989b01da4fbd2a7d34cd98312cc6e8bc3c1ca7269e9b29247c418288d990cfa7a6eed5216ec7", 0x4b}], 0x8, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r291, 0xffffffffffffffff, 0xffffffffffffffff, r292]}}], 0x20, 0x810}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="2efbf35eb03f3da15be1a888b99a71776a8c217255379113afaab83767c6dd856f8c216e61e1806c0c04a75e18a99c97d9069bb6e82bbfc59a9c8219663bfac87af6c15135f171e9ced3546ce4c69daf220a52dea05425cf098758049b235c438e92be136193de3b31ee08a10ac430aba942848b7eb32ff188cacf06b07e06b25362f61006cfe51e7fb954649771587ce75e839f8414d94f865ae226a3d9e0c400a3504f5b08175cc5fd891983345022dc91f544c8216d3b14", 0xb9}, {&(0x7f0000002dc0)="aa4357652982d67f3ca16b107ffbc212adec714cae928a3b2b9737c9a4ffb92139a3c0474926271775e913dfa2169171f8336939a464fda0bf5e71b82ca69af32cb45065c544b09a7f828bc925131a97f9fe752d9426ddc15d85a674d324dad082b6b6da77dea52be897b03d703aa9e89513a5c093a032f4ae92053609889fee3cc3dec724003b81a8deab86ccd49754e3997f82588d4303f9c271c31247f7475aae15b01489cfbdd7e1b531cbf4fa7022", 0xb1}, {&(0x7f0000002e80)="61e0b7fd3693848b7ee0b23384eca51c32", 0x11}, {&(0x7f0000002ec0)="a65469f397cc3bd820005876e1d1750dd15d280a8104410ec0906143903d82cb3cc53f92cbb688cc690bf04c7a9a68de6d367cbf726f398ada77523d604087a781b42bbb1b2a7ca6de6ec691b1b8dbe4dd94ce804c19f44e89ae92f2d9dc69d858590cc49c4e5df16162d03681cd", 0x6e}, {&(0x7f0000002f40)="4b0a862afb593625f14c67b77d73061e85ed6700f56737c27f4dffb3f7de409af37ba574b5a82081d0cf7868b2c8cd899aed482ee71d6e1cb238fcdc9fdfb333823f7d93ab2dd6d95b378246701de3f5f9d1d26eee252014f2e2805eb9e2293b1ce18cea6bfc34963b53ae7e4bebf4423664cda4bbd0b0e1cb257f3d36fb24f468f465dc832b6237ff24ff9e824f18deb70090", 0x93}, {&(0x7f0000003000)="cadc20837e22cdb4b899661a038f1ae6a1131bc8d36ca222aafe4346f7ddd67125d45e40844de31b221f6195481a23ba24efc64e7edf39adc9714c71aeae7a", 0x3f}, {&(0x7f0000003040)="0a22fb80e4cb055ab0a5b486ea302c25e42119f3a8c9e1b4c3b24d3aa17d8cbfe12a7a505c7beeed32a8921f7f7400cb4126d1d9d11caf4baba8cf83b414dd6a761329f8adc23c288bc001083ba712", 0x4f}], 0x7, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r294, r295, r296}}}], 0x38, 0x4000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="5fc830ff2a6cead25e7470f4144dd79e3a27e72b76e2659caefed433509aab0c295abc89060d80f48f38134333026e85e87f4e10c9a2e3c4076a1174f33e53d3f2307053d3be81429ee6d9e748f329c579b409a28e1065faf9ad334657381c88382e41c04755a2812aac5f15ce1748c68d795a6a9328273fb006e3581b83f0daf5c6ef1d842b57696880dac3a09d556cf2247c1b2b2cbe03f031fafc42fd207f6f87abcb970230545feacb8042c09b69fc98811abb3ab366aa8434c7d25bc1cd3daf19033188b0b1756994a95819f03d3456f691cc3f", 0xd6}, {&(0x7f0000003380)="33880ba130115622a3a1b4892d28fb77b522688f5c7f9ce792dec0", 0x1b}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r297, r298, r299, r300, r254, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r256]}}, @rights={{0x14, 0x1, 0x1, [r254]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r302, r303, r304}}}, @rights={{0x18, 0x1, 0x1, [r305, r254]}}, @rights={{0x2c, 0x1, 0x1, [r306, r307, r308, r254, r309, r310, r255]}}], 0xd8, 0x10}, {&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f0000004fc0)="76393e14e03005ebc124782eba813c39820aca18c5947e9a416d7d18c94a6612edfd7f3cc49a7f0bf4ec86ab117e646826e98dd5b56b7b16b769d1ef1667612d3e53af62f4b89f8729313a3ee869b5f57d454792be8119af994faa62bb020cb73cbcf2dd9c98bb0c8f697f0d0c698cc6aae1bf68563f570e37db96b4fa3e4b9f2a725dbcf08269b8d97bd39cbd89c6f76cb2ebf3c210187ca32ff2aad4fb15ed9a2fd3c0e93d93473da5624679406f6b00ed6d5391dd6979bc542fdbd5b329435947e73142457b9c1933f329e073c5a045c578fa088f7b2f2b096d14079985dd95bd108441e561f4d488589aa06e4a4527dbb5a85ea372da534a0e", 0xfb}, {&(0x7f00000050c0)="5f611b5dd820f8e1c4f14423555d7c8bf367f13627cf832bc33ca03a10b12b91b2250b08c165cb8fbc748de66696f2b879c99a21b6a2b30870c77f1d18031dd5a95de29ebbc09b22de918314d68711c63b6991e09d1ede514f8aae9a93d533dc5d6c70673aa43d687c7929bcf75a1705ed2a429f578c33cc6ae6bca8f53c345daf829c21cae18f930b2c8db5e31a0049631757e7401b76d8c3ac01273690367613d00906b2e5205aaade1c6ab98321ed509e947814a50e858b047f73a317071be7e2acc78dc4ecd85ada208204112575f7267b1d9ab4ced0a9edd280542375563f711a8bc7ad9d4835cdae5eecbc4a52cd6d3511", 0xf4}, {&(0x7f00000051c0)="1495263896ec1ce1d6a3d57b55fa1ce760b4a38ffba1d0a6419bf5b78c3119889b79e278436a1dd1cea2bba35dee565de35ef6aba4f8110827451080c405c4bb2ab33155595c84e9fa7892a7c4aad3b4c1d0bfa1643c394ffd697993aef4bec8f321fff5c8b7686379c1b1a2cff47d4ee33c11ae26c84d576f16e0763a7fff39bc03bde7a6d5c0a47e17da28c1dc1c27b2d85fd3435406ba98c6d66b2af77f4c0ba9c3955ea5f9826277a26a074a34d41560eddd3c651efaec6b90", 0xbb}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005340)="911a6eff80af8194e191c46c2fe40443e691b5b637ff5070142198d9d98a3637898268a61d11ac3b4eab24067e8abdb5c5d8fca108c0b75f3f679d09d201934f5cd2cb9bdc665d5142a4c3e9a98bfa50da71f8bfd67683cf84f43c9ebe745e043892166b6d4a90966ee7801b57f6e5d8128a0018b8ffaa8d04dbcd904846a91c1e87b9adf3fdf233409f6e5d6c0976279b2309b03f352dae5e84d76bceeca08ce466224a2633f356e1b2e8ca9f77a91220dc4cbed8f4de099522e838a04b8ef53190a34d3dc8781e48", 0xc9}], 0x1, &(0x7f0000005480)}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005540)="2886249f0e87701299fb5758dcf850f5d6d9e3b333012421e47a7358e72db213897da9b04e", 0x25}, {&(0x7f0000005580)}, {&(0x7f00000055c0)="167db38e4dbf771070734798d13748b4886c09d9f54f62fae48baa9f375487c00c57b2d7ec9fe46893e143b52429ae08", 0x30}, {&(0x7f0000005600)="b1aee0871f53db466eb3e4814433ee6b50ad9664542bfbf3fcd1fceb7af60011d6528c4507f20a136a8ee2a1d008897348c8f53f1aa5c1e9ecd4025178fb3aece6e6045b3f43571ea6cad5d39609bcf4697a54692bca2b1fab80e576c9a31511098557881a6f5caa8d67f70196118510d620fc5b0708cb8144d0e01b241a15e6eefc5b76422686ea00d127c2f0b0ef77a6b11851f4571bbcb925966f45dd8a5769e6b385c32a91f58ed44931826f6ed87885730cc2354e3550be69081137cf1778502e93dca19bdad6e5c663914e80a809ce3b3c56088492176af54cd40781a8", 0xe0}], 0x4, 0x0, 0x0, 0xc000}], 0xa, 0x20000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005f40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005f80)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000006080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000060c0)={0x0, 0x0, 0x0}, &(0x7f0000006100)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r316 = accept$netrom(r315, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r317 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r317, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r318 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r319 = openat$cgroup_procs(r318, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r320 = getpid() write$cgroup_pid(r319, &(0x7f0000000100)=r320, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r315, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r322 = getgid() r323 = gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r324, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r325 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r324, r325}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r326 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r326}, 0xc) r327 = socket(0x40000000015, 0x805, 0x0) getsockopt(r327, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r327, 0x8903, &(0x7f0000000780)=0x0) r329 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r329}, 0xc) getsockopt$sock_cred(r317, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) r332 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r332}, 0xc) r333 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r334 = openat$cgroup_procs(r333, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r335 = getpid() write$cgroup_pid(r334, &(0x7f0000000100)=r335, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r336, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r337 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r336, r337}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r317, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r339 = socket(0x40000000015, 0x805, 0x0) getsockopt(r339, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r340 = socket(0x40000000015, 0x805, 0x0) [ 1542.747173][ T3002] netlink: 'syz-executor.4': attribute type 282 has an invalid length. getsockopt(r340, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r341 = socket(0x40000000015, 0x805, 0x0) getsockopt(r341, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r342 = accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r343 = socket(0x40000000015, 0x805, 0x0) getsockopt(r343, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r344 = socket(0x40000000015, 0x805, 0x0) getsockopt(r344, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r345 = socket(0x40000000015, 0x805, 0x0) getsockopt(r345, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r346 = socket(0x40000000015, 0x805, 0x0) getsockopt(r346, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r347 = socket(0x40000000015, 0x805, 0x0) getsockopt(r347, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r348 = socket(0x40000000015, 0x805, 0x0) r349 = socket(0x40000000015, 0x805, 0x0) getsockopt(r349, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r350 = socket(0x40000000015, 0x805, 0x0) getsockopt(r350, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r351 = socket(0x40000000015, 0x805, 0x0) getsockopt(r351, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r352 = socket(0x40000000015, 0x805, 0x0) getsockopt(r352, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r353 = socket(0x0, 0x805, 0x0) getsockopt(r353, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r353, 0x8903, &(0x7f0000003140)=0x0) r355 = getuid() r356 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r356}, 0xc) r357 = socket(0x40000000015, 0x805, 0x0) getsockopt(r357, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r358 = socket$l2tp(0x2, 0x2, 0x73) r359 = socket(0x40000000015, 0x805, 0x0) getsockopt(r359, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r360 = socket(0x40000000015, 0x805, 0x0) getsockopt(r360, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r361 = socket(0x40000000015, 0x805, 0x0) getsockopt(r361, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r361, 0x1, 0x11, &(0x7f0000004a00)={0x0}, &(0x7f0000004a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a80)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000004b80)=0xe8) r364 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r364}, 0xc) r365 = socket(0x40000000015, 0x0, 0x0) getsockopt(r365, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r366 = socket$inet_sctp(0x2, 0x1, 0x84) r367 = socket$alg(0x26, 0x5, 0x0) r368 = socket(0x40000000015, 0x805, 0x0) getsockopt(r368, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004e00)={r316}) r370 = socket(0x40000000015, 0x805, 0x0) getsockopt(r370, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r314, &(0x7f0000005740)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="7d3c58f11442ba6a849d8007c2574c10fd4e763e75f23e4080227454f5218dff75ae00091ea9c05b3a6a56195d2f5d45fc48ea1d660c839cdb58331cfe112d0ac023e7202f1534091d82066f9381b70d90449ca503e72d080608fe4537e256a67d68e90fea9ec483fc1dcb5efa52d4a19c05aa4aa191360f08535c9dee63a7f4", 0x80}, {&(0x7f00000003c0)="20e1fa524503816ba1257139f07ff6d754e81936a0f30ee1f3ea81c63dcd52932b9cdb65aab7d3017e", 0x29}, {&(0x7f0000000400)="9848b1ab21536c2abb946e92617cfdfa7980bb314b368efb2968fbf81f15239d9dbe29b5e8d7a31520a52a2887a76a168e61f3bf0d214818545375c7d124e14f1422f415de28ac95c6d991422ed46191e320d6e4d486d34ae28cf7b4ef5bcd9243902c08a524f0b09c71bd15d107faca53d402653aa32564d6607c49ed36b6e5cb5c967d28170a63e3d5d24c3702418c035e9c0ab8aea4123e9c635be3144df6b1fc1ffaa96351e9e177bac49375836e04", 0xb1}, {&(0x7f00000004c0)="e3fbd55da0ef388d1a2682d871bfdc0b1b757c2fad99eb4fba1e03599a5135ae8dd7b4486d7639c8744d11eddd49c1c7c02a000306acf679103f51cf8566c2407c4b23038c1500d1a531ca5c3b024786c5ad3453e2a901166d35536a9aa1a3b2b24b4dd737417d991d29d73cc20f1cea8465b454b5e5226afbda4cd5502cf7ee4c116c95c179c90f9e7766a6f5aa", 0x8e}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r320, r321, r322}}}, @cred={{0x1c, 0x1, 0x2, {r323, r325, r326}}}, @cred={{0x1c, 0x1, 0x2, {r328, 0x0, r329}}}, @cred={{0x1c, 0x1, 0x2, {r330, r331, r332}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r335, r337, r338}}}], 0xb8, 0x20008000}, {&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000dc0)="f8b93a8a44bfcea993e8f9744deb18591ad6628d95da3ec7bfde5e09af36b6d19a3d1a105850fa18a691831b61687c9a74c368840ee142f46fb9ec22fd655213c299e1a27657f2e3f6f406bdac2a1b266558a05f2f2a4c488a0e0479a4e6978475ce7e9d148870d9063e18a6fcf119876453e672fda8464e32af91d5a43cf414b091", 0x82}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="308078007015ac6693b4ca1ab0ad66e2c47d3de1685f3e4f354c35b2c2a07ec0aa69274a0e972faa364e76957cb4591fb0e553fe6339304926da7f2a55056cd82891a24ec7350914e2504fd4f5a3ea82ee935b5d97775847d5f9a250df0e035cf8b9c4b4c478578310e9ebd40787adbaa799a64dbfb88f2b034321ae0c16a66ada", 0x81}, {&(0x7f0000002040)="2b784be1623557c2e9ba872833fc764234b4db59ba6b55cca41207cf39293472730e7de00edce4c3e9758da77779b912ec989fdceff14a0b586d28a2436472542eb95710e950fb86cacd20864985ccbed2229ec20aed87fabf3f4a9f7c9207e37dc2f2f974b08f889888b414b1bdcc8c345265745a689c623aeba5bf9792a483b8f5307c62df0ef108e47fbae8cb8f99174a79f8263a76389b6f6b656e04b2a01a846e3fbec6a67da32ae654ec8d603135", 0xb1}, {&(0x7f0000002100)="b298a17a930dd234fe0d775881d72b88e72be87b88a0e1b1beecda707936f19133141d10361ab4142fdf2674dbe6976effff8b96ea6f592c004209a06dc0063a4fe5ef6c79dffe517bb41c2b06b852f89e151e", 0x53}, {&(0x7f0000002180)="86a96220f058b46aedbe5def91fb44a8728d7854f7317ca97aa91957670014b9fb86a6ac32482b93e9e2b7bc44ba", 0x2e}, {&(0x7f00000021c0)}], 0x7, 0x0, 0x0, 0x20004010}, {&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="a88db89c7a", 0x5}, {&(0x7f0000002340)="cc5e6d26f258b587350201e651", 0xd}, {&(0x7f0000002380)="9e536388aed92b5bc218605cf5455cf68b41d79ba08a83ec0d7211e4ec41a29a8035cc549006c16f98e590be18eb684bd8", 0x31}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r339, @ANYRES32=r315, @ANYRES32, @ANYRES32=r340, @ANYRES32=r341, @ANYRES32=r342, @ANYRES32=r343, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r344, @ANYRES32=r345, @ANYRES32=r314, @ANYRES32, @ANYRES32=r317, @ANYRES32=r314, @ANYRES32=r346, @ANYRES32=r347, @ANYBLOB="1c000000000000000100000001000000c70fbd3141f35123a84b4753d9eeacc1a8102aab575395585b3662eda91839c1dbc61f347862d6f75a9b34b2da4be6e0b22afc226d009c8fdaeb6089c4ce8a5ab1317c3b1eef7c2d90f2d286aa05f3a262f1ad06000000000000007a53b7120ff2fa0c2827163acca59ef474a5449cc2ebf62104b5fbbddfb4d07de35cc0ad85c817d8f88d707e92a068cd05d46e9208e339437b6e2000e8a52f35a67895c9df34defec35a038f1f4de4af283fed1861cbfbee5345cdcab4f62655", @ANYRES32=r348, @ANYRES32=r349, @ANYRES32=r350, @ANYBLOB='\x00\x00\x00\x00'], 0x137, 0x20045000}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002600)="2e517c9413f09962631801a2daba35f0018f49ddce4d5d729c4379b674d5d802e429f2f0a3d2aff2d009b2532b8131ff8ef66cb858b858251211b42a0fc7ecfe7c20b7a1ec53811d79e98e1d6efd863d041c9154832d37360f6c714ecbc29072b44e8ab596218df7b2ae3af43aea71936eede7c1db541209259a1c13588be88de15543ff354f03a85d5f5be0eef86487f836ee5a4e07f7f22c3f31b4c924d0e14f5cf209fae95b99f725e30ccf801a40619ed57328c1cc07a00cbe5ba389906908ef430d47a72e759fcca1f412cb1d5c82876e667cd4d631ee5703800dffd537", 0xe0}, {&(0x7f0000002700)="173a367b754e2f61b4127df53188f255cd208feddc9c2fe1b4d6d55d7995450ffc19418b09fc473d12e3c22e750e581be22e12fa5b98028078667b1c26305c3e1ab131342ab2e2e9a0e4d23bd3c8dde66073e010cd98b7be35c32902ed6f114a1a6efce9c55f6c097b559a", 0x6b}, {&(0x7f0000002780)="d94e5bdeee3f6c1cfcf8857a0d695f6f04b0e115795e903216878b1a2722c5b99e9125fec6a73a41882c2243e6f8feda942ddccdfa335b94fd6901a961f22e4137ecc94e4f1b562ea875b9ff80d7a90334d349594f3518b3a13f5acf62096b04b1341468b3fef465211f4ec9ddf108a7bb7b48954131e90e6fc02a05156299e7b04a2db7c5d402084ebf7f7d8ca9e770e888e871f750fdc0", 0x98}, {&(0x7f0000002840)="ed9d62a5702126aebddbb05ac4ebfc4b7c6f5d7e44e7f9119d51c1668e038db5c1b5f12ab988b18dcde521dc66227a6ddca949825a1b9bdc0b4c9318ce5a8f9980aa6cc57f08803d533136289d6291eaaca0b0b956348b110bf2d2181a6f4e17f64ff1540f5d66f365d3ed7a3add83f3ee37ad86cbb1dbf13698232f6dab45d553c86adcfbb27d6656eb5261755c09772fecd61496c250e5517ff7a6c838f5e57bfc3e1e11eb4958ec94e632d8b4b50aeefde210a82ac50a374cd5595b4b3ac93c2db70db96fa521151bdfa7cc012cf4f0f1f0001d", 0xd5}, {&(0x7f0000002940)="4f532591625209e0291ef0fa2d42d78fa02129becb63b3c05f55190af7460b2b1baf2a5cfa3f3d19ce", 0x29}, {&(0x7f0000002980)="14b0193cb296c7314d1c521ccfd6f9fc9c9505337e3df5f1bc62c16f733e3b651f50a555b426e22a6f7e479afd69e467ca852aa6a098037d5fee91e1eab1807b71b11e1be90a22cbcf94cca7d4b725e213af69344fd02668b090b75e0a3c8d8c56851640e7e0504cae607e4a3037dafa50569a78d72801628992f965210132091fce315458b1b54a60caea5f8685fc958ede9c1d4b2926262953426a", 0x9c}, {&(0x7f0000002a40)="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", 0xfd}, {&(0x7f0000002b40)="7c9d0e1bf04f8151c488ba3def0a9bc953d8385e8c787b939c5464f1796045cbf461e4715b989b01da4fbd2a7d34cd98312cc6e8bc3c1ca7269e9b29247c418288d990cfa7a6eed5216ec7", 0x4b}], 0x8, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r351, 0xffffffffffffffff, 0xffffffffffffffff, r352]}}], 0x20, 0x810}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="2efbf35eb03f3da15be1a888b99a71776a8c217255379113afaab83767c6dd856f8c216e61e1806c0c04a75e18a99c97d9069bb6e82bbfc59a9c8219663bfac87af6c15135f171e9ced3546ce4c69daf220a52dea05425cf098758049b235c438e92be136193de3b31ee08a10ac430aba942848b7eb32ff188cacf06b07e06b25362f61006cfe51e7fb954649771587ce75e839f8414d94f865ae226a3d9e0c400a3504f5b08175cc5fd891983345022dc91f544c8216d3b14", 0xb9}, {&(0x7f0000002dc0)="aa4357652982d67f3ca16b107ffbc212adec714cae928a3b2b9737c9a4ffb92139a3c0474926271775e913dfa2169171f8336939a464fda0bf5e71b82ca69af32cb45065c544b09a7f828bc925131a97f9fe752d9426ddc15d85a674d324dad082b6b6da77dea52be897b03d703aa9e89513a5c093a032f4ae92053609889fee3cc3dec724003b81a8deab86ccd49754e3997f82588d4303f9c271c31247f7475aae15b01489cfbdd7e1b531cbf4fa7022", 0xb1}, {&(0x7f0000002e80)="61e0b7fd3693848b7ee0b23384eca51c32", 0x11}, {&(0x7f0000002ec0)="a65469f397cc3bd820005876e1d1750dd15d280a8104410ec0906143903d82cb3cc53f92cbb688cc690bf04c7a9a68de6d367cbf726f398ada77523d604087a781b42bbb1b2a7ca6de6ec691b1b8dbe4dd94ce804c19f44e89ae92f2d9dc69d858590cc49c4e5df16162d03681cd", 0x6e}, {&(0x7f0000002f40)="4b0a862afb593625f14c67b77d73061e85ed6700f56737c27f4dffb3f7de409af37ba574b5a82081d0cf7868b2c8cd899aed482ee71d6e1cb238fcdc9fdfb333823f7d93ab2dd6d95b378246701de3f5f9d1d26eee252014f2e2805eb9e2293b1ce18cea6bfc34963b53ae7e4bebf4423664cda4bbd0b0e1cb257f3d36fb24f468f465dc832b6237ff24ff9e824f18deb70090", 0x93}, {&(0x7f0000003000)="cadc20837e22cdb4b899661a038f1ae6a1131bc8d36ca222aafe4346f7ddd67125d45e40844de31b221f6195481a23ba24efc64e7edf39adc9714c71aeae7a", 0x3f}, {&(0x7f0000003040)="0a22fb80e4cb055ab0a5b486ea302c25e42119f3a8c9e1b4c3b24d3aa17d8cbfe12a7a505c7beeed32a8921f7f7400cb4126d1d9d11caf4baba8cf83b414dd6a761329f8adc23c288bc001083ba712", 0x4f}], 0x7, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r354, r355, r356}}}], 0x38, 0x4000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="5fc830ff2a6cead25e7470f4144dd79e3a27e72b76e2659caefed433509aab0c295abc89060d80f48f38134333026e85e87f4e10c9a2e3c4076a1174f33e53d3f2307053d3be81429ee6d9e748f329c579b409a28e1065faf9ad334657381c88382e41c04755a2812aac5f15ce1748c68d795a6a9328273fb006e3581b83f0daf5c6ef1d842b57696880dac3a09d556cf2247c1b2b2cbe03f031fafc42fd207f6f87abcb970230545feacb8042c09b69fc98811abb3ab366aa8434c7d25bc1cd3daf19033188b0b1756994a95819f03d3456f691cc3f", 0xd6}, {&(0x7f0000003380)="33880ba130115622a3a1b4892d28fb77b522688f5c7f9ce792dec0", 0x1b}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r357, r358, r359, r360, r314, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r316]}}, @rights={{0x14, 0x1, 0x1, [r314]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r362, r363, r364}}}, @rights={{0x18, 0x1, 0x1, [r365, r314]}}, @rights={{0x2c, 0x1, 0x1, [r366, r367, r368, r314, r369, r370, r315]}}], 0xd8, 0x10}, {&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f0000004fc0)="76393e14e03005ebc124782eba813c39820aca18c5947e9a416d7d18c94a6612edfd7f3cc49a7f0bf4ec86ab117e646826e98dd5b56b7b16b769d1ef1667612d3e53af62f4b89f8729313a3ee869b5f57d454792be8119af994faa62bb020cb73cbcf2dd9c98bb0c8f697f0d0c698cc6aae1bf68563f570e37db96b4fa3e4b9f2a725dbcf08269b8d97bd39cbd89c6f76cb2ebf3c210187ca32ff2aad4fb15ed9a2fd3c0e93d93473da5624679406f6b00ed6d5391dd6979bc542fdbd5b329435947e73142457b9c1933f329e073c5a045c578fa088f7b2f2b096d14079985dd95bd108441e561f4d488589aa06e4a4527dbb5a85ea372da534a0e", 0xfb}, {&(0x7f00000050c0)="5f611b5dd820f8e1c4f14423555d7c8bf367f13627cf832bc33ca03a10b12b91b2250b08c165cb8fbc748de66696f2b879c99a21b6a2b30870c77f1d18031dd5a95de29ebbc09b22de918314d68711c63b6991e09d1ede514f8aae9a93d533dc5d6c70673aa43d687c7929bcf75a1705ed2a429f578c33cc6ae6bca8f53c345daf829c21cae18f930b2c8db5e31a0049631757e7401b76d8c3ac01273690367613d00906b2e5205aaade1c6ab98321ed509e947814a50e858b047f73a317071be7e2acc78dc4ecd85ada208204112575f7267b1d9ab4ced0a9edd280542375563f711a8bc7ad9d4835cdae5eecbc4a52cd6d3511", 0xf4}, {&(0x7f00000051c0)="1495263896ec1ce1d6a3d57b55fa1ce760b4a38ffba1d0a6419bf5b78c3119889b79e278436a1dd1cea2bba35dee565de35ef6aba4f8110827451080c405c4bb2ab33155595c84e9fa7892a7c4aad3b4c1d0bfa1643c394ffd697993aef4bec8f321fff5c8b7686379c1b1a2cff47d4ee33c11ae26c84d576f16e0763a7fff39bc03bde7a6d5c0a47e17da28c1dc1c27b2d85fd3435406ba98c6d66b2af77f4c0ba9c3955ea5f9826277a26a074a34d41560eddd3c651efaec6b90", 0xbb}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005340)="911a6eff80af8194e191c46c2fe40443e691b5b637ff5070142198d9d98a3637898268a61d11ac3b4eab24067e8abdb5c5d8fca108c0b75f3f679d09d201934f5cd2cb9bdc665d5142a4c3e9a98bfa50da71f8bfd67683cf84f43c9ebe745e043892166b6d4a90966ee7801b57f6e5d8128a0018b8ffaa8d04dbcd904846a91c1e87b9adf3fdf233409f6e5d6c0976279b2309b03f352dae5e84d76bceeca08ce466224a2633f356e1b2e8ca9f77a91220dc4cbed8f4de099522e838a04b8ef53190a34d3dc8781e48", 0xc9}], 0x1, &(0x7f0000005480)}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005540)="2886249f0e87701299fb5758dcf850f5d6d9e3b333012421e47a7358e72db213897da9b04e", 0x25}, {&(0x7f0000005580)}, {&(0x7f00000055c0)="167db38e4dbf771070734798d13748b4886c09d9f54f62fae48baa9f375487c00c57b2d7ec9fe46893e143b52429ae08", 0x30}, {&(0x7f0000005600)="b1aee0871f53db466eb3e4814433ee6b50ad9664542bfbf3fcd1fceb7af60011d6528c4507f20a136a8ee2a1d008897348c8f53f1aa5c1e9ecd4025178fb3aece6e6045b3f43571ea6cad5d39609bcf4697a54692bca2b1fab80e576c9a31511098557881a6f5caa8d67f70196118510d620fc5b0708cb8144d0e01b241a15e6eefc5b76422686ea00d127c2f0b0ef77a6b11851f4571bbcb925966f45dd8a5769e6b385c32a91f58ed44931826f6ed87885730cc2354e3550be69081137cf1778502e93dca19bdad6e5c663914e80a809ce3b3c56088492176af54cd40781a8", 0xe0}], 0x4, 0x0, 0x0, 0xc000}], 0xa, 0x20000000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r371, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r371, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_IPSEC_POLICY(r371, 0x0, 0x10, &(0x7f0000006140)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000006240)=0xe8) r373 = getgid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r376 = accept$netrom(r375, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r377 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r377, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r378 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r379 = openat$cgroup_procs(r378, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r380 = getpid() write$cgroup_pid(r379, &(0x7f0000000100)=r380, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r375, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r382 = getgid() r383 = gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r384, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r385 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r384, r385}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r386 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r386}, 0xc) r387 = socket(0x40000000015, 0x805, 0x0) getsockopt(r387, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r387, 0x8903, &(0x7f0000000780)=0x0) r389 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r389}, 0xc) getsockopt$sock_cred(r377, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) r392 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r392}, 0xc) r393 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r394 = openat$cgroup_procs(r393, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r395 = getpid() write$cgroup_pid(r394, &(0x7f0000000100)=r395, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r396, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r397 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r396, r397}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r377, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r399 = socket(0x40000000015, 0x805, 0x0) getsockopt(r399, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r400 = socket(0x40000000015, 0x805, 0x0) getsockopt(r400, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r401 = socket(0x40000000015, 0x805, 0x0) getsockopt(r401, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r402 = accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r403 = socket(0x40000000015, 0x805, 0x0) getsockopt(r403, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r404 = socket(0x40000000015, 0x805, 0x0) getsockopt(r404, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r405 = socket(0x40000000015, 0x805, 0x0) getsockopt(r405, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r406 = socket(0x40000000015, 0x805, 0x0) getsockopt(r406, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r407 = socket(0x40000000015, 0x805, 0x0) getsockopt(r407, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r408 = socket(0x40000000015, 0x805, 0x0) r409 = socket(0x40000000015, 0x805, 0x0) getsockopt(r409, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r410 = socket(0x40000000015, 0x805, 0x0) getsockopt(r410, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r411 = socket(0x40000000015, 0x805, 0x0) getsockopt(r411, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r412 = socket(0x40000000015, 0x805, 0x0) getsockopt(r412, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r413 = socket(0x0, 0x805, 0x0) getsockopt(r413, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r413, 0x8903, &(0x7f0000003140)=0x0) r415 = getuid() r416 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r416}, 0xc) r417 = socket(0x40000000015, 0x805, 0x0) getsockopt(r417, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r418 = socket$l2tp(0x2, 0x2, 0x73) r419 = socket(0x40000000015, 0x805, 0x0) getsockopt(r419, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r420 = socket(0x40000000015, 0x805, 0x0) getsockopt(r420, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r421 = socket(0x40000000015, 0x805, 0x0) getsockopt(r421, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r421, 0x1, 0x11, &(0x7f0000004a00)={0x0}, &(0x7f0000004a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a80)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000004b80)=0xe8) r424 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r424}, 0xc) r425 = socket(0x40000000015, 0x0, 0x0) getsockopt(r425, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r426 = socket$inet_sctp(0x2, 0x1, 0x84) r427 = socket$alg(0x26, 0x5, 0x0) r428 = socket(0x40000000015, 0x805, 0x0) getsockopt(r428, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004e00)={r376}) r430 = socket(0x40000000015, 0x805, 0x0) getsockopt(r430, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r374, &(0x7f0000005740)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="7d3c58f11442ba6a849d8007c2574c10fd4e763e75f23e4080227454f5218dff75ae00091ea9c05b3a6a56195d2f5d45fc48ea1d660c839cdb58331cfe112d0ac023e7202f1534091d82066f9381b70d90449ca503e72d080608fe4537e256a67d68e90fea9ec483fc1dcb5efa52d4a19c05aa4aa191360f08535c9dee63a7f4", 0x80}, {&(0x7f00000003c0)="20e1fa524503816ba1257139f07ff6d754e81936a0f30ee1f3ea81c63dcd52932b9cdb65aab7d3017e", 0x29}, {&(0x7f0000000400)="9848b1ab21536c2abb946e92617cfdfa7980bb314b368efb2968fbf81f15239d9dbe29b5e8d7a31520a52a2887a76a168e61f3bf0d214818545375c7d124e14f1422f415de28ac95c6d991422ed46191e320d6e4d486d34ae28cf7b4ef5bcd9243902c08a524f0b09c71bd15d107faca53d402653aa32564d6607c49ed36b6e5cb5c967d28170a63e3d5d24c3702418c035e9c0ab8aea4123e9c635be3144df6b1fc1ffaa96351e9e177bac49375836e04", 0xb1}, {&(0x7f00000004c0)="e3fbd55da0ef388d1a2682d871bfdc0b1b757c2fad99eb4fba1e03599a5135ae8dd7b4486d7639c8744d11eddd49c1c7c02a000306acf679103f51cf8566c2407c4b23038c1500d1a531ca5c3b024786c5ad3453e2a901166d35536a9aa1a3b2b24b4dd737417d991d29d73cc20f1cea8465b454b5e5226afbda4cd5502cf7ee4c116c95c179c90f9e7766a6f5aa", 0x8e}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r380, r381, r382}}}, @cred={{0x1c, 0x1, 0x2, {r383, r385, r386}}}, @cred={{0x1c, 0x1, 0x2, {r388, 0x0, r389}}}, @cred={{0x1c, 0x1, 0x2, {r390, r391, r392}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r395, r397, r398}}}], 0xb8, 0x20008000}, {&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000dc0)="f8b93a8a44bfcea993e8f9744deb18591ad6628d95da3ec7bfde5e09af36b6d19a3d1a105850fa18a691831b61687c9a74c368840ee142f46fb9ec22fd655213c299e1a27657f2e3f6f406bdac2a1b266558a05f2f2a4c488a0e0479a4e6978475ce7e9d148870d9063e18a6fcf119876453e672fda8464e32af91d5a43cf414b091", 0x82}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="308078007015ac6693b4ca1ab0ad66e2c47d3de1685f3e4f354c35b2c2a07ec0aa69274a0e972faa364e76957cb4591fb0e553fe6339304926da7f2a55056cd82891a24ec7350914e2504fd4f5a3ea82ee935b5d97775847d5f9a250df0e035cf8b9c4b4c478578310e9ebd40787adbaa799a64dbfb88f2b034321ae0c16a66ada", 0x81}, {&(0x7f0000002040)="2b784be1623557c2e9ba872833fc764234b4db59ba6b55cca41207cf39293472730e7de00edce4c3e9758da77779b912ec989fdceff14a0b586d28a2436472542eb95710e950fb86cacd20864985ccbed2229ec20aed87fabf3f4a9f7c9207e37dc2f2f974b08f889888b414b1bdcc8c345265745a689c623aeba5bf9792a483b8f5307c62df0ef108e47fbae8cb8f99174a79f8263a76389b6f6b656e04b2a01a846e3fbec6a67da32ae654ec8d603135", 0xb1}, {&(0x7f0000002100)="b298a17a930dd234fe0d775881d72b88e72be87b88a0e1b1beecda707936f19133141d10361ab4142fdf2674dbe6976effff8b96ea6f592c004209a06dc0063a4fe5ef6c79dffe517bb41c2b06b852f89e151e", 0x53}, {&(0x7f0000002180)="86a96220f058b46aedbe5def91fb44a8728d7854f7317ca97aa91957670014b9fb86a6ac32482b93e9e2b7bc44ba", 0x2e}, {&(0x7f00000021c0)}], 0x7, 0x0, 0x0, 0x20004010}, {&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="a88db89c7a", 0x5}, {&(0x7f0000002340)="cc5e6d26f258b587350201e651", 0xd}, {&(0x7f0000002380)="9e536388aed92b5bc218605cf5455cf68b41d79ba08a83ec0d7211e4ec41a29a8035cc549006c16f98e590be18eb684bd8", 0x31}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r399, @ANYRES32=r375, @ANYRES32, @ANYRES32=r400, @ANYRES32=r401, @ANYRES32=r402, @ANYRES32=r403, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r404, @ANYRES32=r405, @ANYRES32=r374, @ANYRES32, @ANYRES32=r377, @ANYRES32=r374, @ANYRES32=r406, @ANYRES32=r407, @ANYBLOB="1c000000000000000100000001000000c70fbd3141f35123a84b4753d9eeacc1a8102aab575395585b3662eda91839c1dbc61f347862d6f75a9b34b2da4be6e0b22afc226d009c8fdaeb6089c4ce8a5ab1317c3b1eef7c2d90f2d286aa05f3a262f1ad06000000000000007a53b7120ff2fa0c2827163acca59ef474a5449cc2ebf62104b5fbbddfb4d07de35cc0ad85c817d8f88d707e92a068cd05d46e9208e339437b6e2000e8a52f35a67895c9df34defec35a038f1f4de4af283fed1861cbfbee5345cdcab4f62655", @ANYRES32=r408, @ANYRES32=r409, @ANYRES32=r410, @ANYBLOB='\x00\x00\x00\x00'], 0x137, 0x20045000}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002600)="2e517c9413f09962631801a2daba35f0018f49ddce4d5d729c4379b674d5d802e429f2f0a3d2aff2d009b2532b8131ff8ef66cb858b858251211b42a0fc7ecfe7c20b7a1ec53811d79e98e1d6efd863d041c9154832d37360f6c714ecbc29072b44e8ab596218df7b2ae3af43aea71936eede7c1db541209259a1c13588be88de15543ff354f03a85d5f5be0eef86487f836ee5a4e07f7f22c3f31b4c924d0e14f5cf209fae95b99f725e30ccf801a40619ed57328c1cc07a00cbe5ba389906908ef430d47a72e759fcca1f412cb1d5c82876e667cd4d631ee5703800dffd537", 0xe0}, {&(0x7f0000002700)="173a367b754e2f61b4127df53188f255cd208feddc9c2fe1b4d6d55d7995450ffc19418b09fc473d12e3c22e750e581be22e12fa5b98028078667b1c26305c3e1ab131342ab2e2e9a0e4d23bd3c8dde66073e010cd98b7be35c32902ed6f114a1a6efce9c55f6c097b559a", 0x6b}, {&(0x7f0000002780)="d94e5bdeee3f6c1cfcf8857a0d695f6f04b0e115795e903216878b1a2722c5b99e9125fec6a73a41882c2243e6f8feda942ddccdfa335b94fd6901a961f22e4137ecc94e4f1b562ea875b9ff80d7a90334d349594f3518b3a13f5acf62096b04b1341468b3fef465211f4ec9ddf108a7bb7b48954131e90e6fc02a05156299e7b04a2db7c5d402084ebf7f7d8ca9e770e888e871f750fdc0", 0x98}, {&(0x7f0000002840)="ed9d62a5702126aebddbb05ac4ebfc4b7c6f5d7e44e7f9119d51c1668e038db5c1b5f12ab988b18dcde521dc66227a6ddca949825a1b9bdc0b4c9318ce5a8f9980aa6cc57f08803d533136289d6291eaaca0b0b956348b110bf2d2181a6f4e17f64ff1540f5d66f365d3ed7a3add83f3ee37ad86cbb1dbf13698232f6dab45d553c86adcfbb27d6656eb5261755c09772fecd61496c250e5517ff7a6c838f5e57bfc3e1e11eb4958ec94e632d8b4b50aeefde210a82ac50a374cd5595b4b3ac93c2db70db96fa521151bdfa7cc012cf4f0f1f0001d", 0xd5}, {&(0x7f0000002940)="4f532591625209e0291ef0fa2d42d78fa02129becb63b3c05f55190af7460b2b1baf2a5cfa3f3d19ce", 0x29}, {&(0x7f0000002980)="14b0193cb296c7314d1c521ccfd6f9fc9c9505337e3df5f1bc62c16f733e3b651f50a555b426e22a6f7e479afd69e467ca852aa6a098037d5fee91e1eab1807b71b11e1be90a22cbcf94cca7d4b725e213af69344fd02668b090b75e0a3c8d8c56851640e7e0504cae607e4a3037dafa50569a78d72801628992f965210132091fce315458b1b54a60caea5f8685fc958ede9c1d4b2926262953426a", 0x9c}, {&(0x7f0000002a40)="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", 0xfd}, {&(0x7f0000002b40)="7c9d0e1bf04f8151c488ba3def0a9bc953d8385e8c787b939c5464f1796045cbf461e4715b989b01da4fbd2a7d34cd98312cc6e8bc3c1ca7269e9b29247c418288d990cfa7a6eed5216ec7", 0x4b}], 0x8, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r411, 0xffffffffffffffff, 0xffffffffffffffff, r412]}}], 0x20, 0x810}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="2efbf35eb03f3da15be1a888b99a71776a8c217255379113afaab83767c6dd856f8c216e61e1806c0c04a75e18a99c97d9069bb6e82bbfc59a9c8219663bfac87af6c15135f171e9ced3546ce4c69daf220a52dea05425cf098758049b235c438e92be136193de3b31ee08a10ac430aba942848b7eb32ff188cacf06b07e06b25362f61006cfe51e7fb954649771587ce75e839f8414d94f865ae226a3d9e0c400a3504f5b08175cc5fd891983345022dc91f544c8216d3b14", 0xb9}, {&(0x7f0000002dc0)="aa4357652982d67f3ca16b107ffbc212adec714cae928a3b2b9737c9a4ffb92139a3c0474926271775e913dfa2169171f8336939a464fda0bf5e71b82ca69af32cb45065c544b09a7f828bc925131a97f9fe752d9426ddc15d85a674d324dad082b6b6da77dea52be897b03d703aa9e89513a5c093a032f4ae92053609889fee3cc3dec724003b81a8deab86ccd49754e3997f82588d4303f9c271c31247f7475aae15b01489cfbdd7e1b531cbf4fa7022", 0xb1}, {&(0x7f0000002e80)="61e0b7fd3693848b7ee0b23384eca51c32", 0x11}, {&(0x7f0000002ec0)="a65469f397cc3bd820005876e1d1750dd15d280a8104410ec0906143903d82cb3cc53f92cbb688cc690bf04c7a9a68de6d367cbf726f398ada77523d604087a781b42bbb1b2a7ca6de6ec691b1b8dbe4dd94ce804c19f44e89ae92f2d9dc69d858590cc49c4e5df16162d03681cd", 0x6e}, {&(0x7f0000002f40)="4b0a862afb593625f14c67b77d73061e85ed6700f56737c27f4dffb3f7de409af37ba574b5a82081d0cf7868b2c8cd899aed482ee71d6e1cb238fcdc9fdfb333823f7d93ab2dd6d95b378246701de3f5f9d1d26eee252014f2e2805eb9e2293b1ce18cea6bfc34963b53ae7e4bebf4423664cda4bbd0b0e1cb257f3d36fb24f468f465dc832b6237ff24ff9e824f18deb70090", 0x93}, {&(0x7f0000003000)="cadc20837e22cdb4b899661a038f1ae6a1131bc8d36ca222aafe4346f7ddd67125d45e40844de31b221f6195481a23ba24efc64e7edf39adc9714c71aeae7a", 0x3f}, {&(0x7f0000003040)="0a22fb80e4cb055ab0a5b486ea302c25e42119f3a8c9e1b4c3b24d3aa17d8cbfe12a7a505c7beeed32a8921f7f7400cb4126d1d9d11caf4baba8cf83b414dd6a761329f8adc23c288bc001083ba712", 0x4f}], 0x7, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r414, r415, r416}}}], 0x38, 0x4000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="5fc830ff2a6cead25e7470f4144dd79e3a27e72b76e2659caefed433509aab0c295abc89060d80f48f38134333026e85e87f4e10c9a2e3c4076a1174f33e53d3f2307053d3be81429ee6d9e748f329c579b409a28e1065faf9ad334657381c88382e41c04755a2812aac5f15ce1748c68d795a6a9328273fb006e3581b83f0daf5c6ef1d842b57696880dac3a09d556cf2247c1b2b2cbe03f031fafc42fd207f6f87abcb970230545feacb8042c09b69fc98811abb3ab366aa8434c7d25bc1cd3daf19033188b0b1756994a95819f03d3456f691cc3f", 0xd6}, {&(0x7f0000003380)="33880ba130115622a3a1b4892d28fb77b522688f5c7f9ce792dec0", 0x1b}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r417, r418, r419, r420, r374, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r376]}}, @rights={{0x14, 0x1, 0x1, [r374]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r422, r423, r424}}}, @rights={{0x18, 0x1, 0x1, [r425, r374]}}, @rights={{0x2c, 0x1, 0x1, [r426, r427, r428, r374, r429, r430, r375]}}], 0xd8, 0x10}, {&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f0000004fc0)="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", 0xfb}, {&(0x7f00000050c0)="5f611b5dd820f8e1c4f14423555d7c8bf367f13627cf832bc33ca03a10b12b91b2250b08c165cb8fbc748de66696f2b879c99a21b6a2b30870c77f1d18031dd5a95de29ebbc09b22de918314d68711c63b6991e09d1ede514f8aae9a93d533dc5d6c70673aa43d687c7929bcf75a1705ed2a429f578c33cc6ae6bca8f53c345daf829c21cae18f930b2c8db5e31a0049631757e7401b76d8c3ac01273690367613d00906b2e5205aaade1c6ab98321ed509e947814a50e858b047f73a317071be7e2acc78dc4ecd85ada208204112575f7267b1d9ab4ced0a9edd280542375563f711a8bc7ad9d4835cdae5eecbc4a52cd6d3511", 0xf4}, {&(0x7f00000051c0)="1495263896ec1ce1d6a3d57b55fa1ce760b4a38ffba1d0a6419bf5b78c3119889b79e278436a1dd1cea2bba35dee565de35ef6aba4f8110827451080c405c4bb2ab33155595c84e9fa7892a7c4aad3b4c1d0bfa1643c394ffd697993aef4bec8f321fff5c8b7686379c1b1a2cff47d4ee33c11ae26c84d576f16e0763a7fff39bc03bde7a6d5c0a47e17da28c1dc1c27b2d85fd3435406ba98c6d66b2af77f4c0ba9c3955ea5f9826277a26a074a34d41560eddd3c651efaec6b90", 0xbb}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005340)="911a6eff80af8194e191c46c2fe40443e691b5b637ff5070142198d9d98a3637898268a61d11ac3b4eab24067e8abdb5c5d8fca108c0b75f3f679d09d201934f5cd2cb9bdc665d5142a4c3e9a98bfa50da71f8bfd67683cf84f43c9ebe745e043892166b6d4a90966ee7801b57f6e5d8128a0018b8ffaa8d04dbcd904846a91c1e87b9adf3fdf233409f6e5d6c0976279b2309b03f352dae5e84d76bceeca08ce466224a2633f356e1b2e8ca9f77a91220dc4cbed8f4de099522e838a04b8ef53190a34d3dc8781e48", 0xc9}], 0x1, &(0x7f0000005480)}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005540)="2886249f0e87701299fb5758dcf850f5d6d9e3b333012421e47a7358e72db213897da9b04e", 0x25}, {&(0x7f0000005580)}, {&(0x7f00000055c0)="167db38e4dbf771070734798d13748b4886c09d9f54f62fae48baa9f375487c00c57b2d7ec9fe46893e143b52429ae08", 0x30}, {&(0x7f0000005600)="b1aee0871f53db466eb3e4814433ee6b50ad9664542bfbf3fcd1fceb7af60011d6528c4507f20a136a8ee2a1d008897348c8f53f1aa5c1e9ecd4025178fb3aece6e6045b3f43571ea6cad5d39609bcf4697a54692bca2b1fab80e576c9a31511098557881a6f5caa8d67f70196118510d620fc5b0708cb8144d0e01b241a15e6eefc5b76422686ea00d127c2f0b0ef77a6b11851f4571bbcb925966f45dd8a5769e6b385c32a91f58ed44931826f6ed87885730cc2354e3550be69081137cf1778502e93dca19bdad6e5c663914e80a809ce3b3c56088492176af54cd40781a8", 0xe0}], 0x4, 0x0, 0x0, 0xc000}], 0xa, 0x20000000) r431 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r431, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r433 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r433, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r433, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r433, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r433, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r433, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r433, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r433, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r433, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x4e21, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r434}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r432, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r434}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r431, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r434}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r437 = accept$netrom(r436, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r438 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r438, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r439 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r440 = openat$cgroup_procs(r439, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r441 = getpid() write$cgroup_pid(r440, &(0x7f0000000100)=r441, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r436, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r443 = getgid() r444 = gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r445, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r446 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r445, r446}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r447 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r447}, 0xc) r448 = socket(0x40000000015, 0x805, 0x0) getsockopt(r448, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r448, 0x8903, &(0x7f0000000780)=0x0) r450 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r450}, 0xc) getsockopt$sock_cred(r438, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) r453 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r453}, 0xc) r454 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r455 = openat$cgroup_procs(r454, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r456 = getpid() write$cgroup_pid(r455, &(0x7f0000000100)=r456, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r457, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r458 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r457, r458}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r438, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r460 = socket(0x40000000015, 0x805, 0x0) getsockopt(r460, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r461 = socket(0x40000000015, 0x805, 0x0) getsockopt(r461, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r462 = socket(0x40000000015, 0x805, 0x0) getsockopt(r462, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r463 = accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r464 = socket(0x40000000015, 0x805, 0x0) getsockopt(r464, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r465 = socket(0x40000000015, 0x805, 0x0) getsockopt(r465, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r466 = socket(0x40000000015, 0x805, 0x0) getsockopt(r466, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r467 = socket(0x40000000015, 0x805, 0x0) getsockopt(r467, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r468 = socket(0x40000000015, 0x805, 0x0) getsockopt(r468, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r469 = socket(0x40000000015, 0x805, 0x0) r470 = socket(0x40000000015, 0x805, 0x0) getsockopt(r470, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r471 = socket(0x40000000015, 0x805, 0x0) getsockopt(r471, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r472 = socket(0x40000000015, 0x805, 0x0) getsockopt(r472, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r473 = socket(0x40000000015, 0x805, 0x0) getsockopt(r473, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r474 = socket(0x0, 0x805, 0x0) getsockopt(r474, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r474, 0x8903, &(0x7f0000003140)=0x0) r476 = getuid() r477 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r477}, 0xc) r478 = socket(0x40000000015, 0x805, 0x0) getsockopt(r478, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r479 = socket$l2tp(0x2, 0x2, 0x73) r480 = socket(0x40000000015, 0x805, 0x0) getsockopt(r480, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r481 = socket(0x40000000015, 0x805, 0x0) getsockopt(r481, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r482 = socket(0x40000000015, 0x805, 0x0) getsockopt(r482, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r482, 0x1, 0x11, &(0x7f0000004a00)={0x0}, &(0x7f0000004a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a80)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000004b80)=0xe8) r485 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r485}, 0xc) r486 = socket(0x40000000015, 0x0, 0x0) getsockopt(r486, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r487 = socket$inet_sctp(0x2, 0x1, 0x84) r488 = socket$alg(0x26, 0x5, 0x0) r489 = socket(0x40000000015, 0x805, 0x0) getsockopt(r489, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004e00)={r437}) r491 = socket(0x40000000015, 0x805, 0x0) getsockopt(r491, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r492, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r492, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmmsg$unix(r435, &(0x7f0000005740)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="7d3c58f11442ba6a849d8007c2574c10fd4e763e75f23e4080227454f5218dff75ae00091ea9c05b3a6a56195d2f5d45fc48ea1d660c839cdb58331cfe112d0ac023e7202f1534091d82066f9381b70d90449ca503e72d080608fe4537e256a67d68e90fea9ec483fc1dcb5efa52d4a19c05aa4aa191360f08535c9dee63a7f4", 0x80}, {&(0x7f00000003c0)="20e1fa524503816ba1257139f07ff6d754e81936a0f30ee1f3ea81c63dcd52932b9cdb65aab7d3017e", 0x29}, {&(0x7f0000000400)="9848b1ab21536c2abb946e92617cfdfa7980bb314b368efb2968fbf81f15239d9dbe29b5e8d7a31520a52a2887a76a168e61f3bf0d214818545375c7d124e14f1422f415de28ac95c6d991422ed46191e320d6e4d486d34ae28cf7b4ef5bcd9243902c08a524f0b09c71bd15d107faca53d402653aa32564d6607c49ed36b6e5cb5c967d28170a63e3d5d24c3702418c035e9c0ab8aea4123e9c635be3144df6b1fc1ffaa96351e9e177bac49375836e04", 0xb1}, {&(0x7f00000004c0)="e3fbd55da0ef388d1a2682d871bfdc0b1b757c2fad99eb4fba1e03599a5135ae8dd7b4486d7639c8744d11eddd49c1c7c02a000306acf679103f51cf8566c2407c4b23038c1500d1a531ca5c3b024786c5ad3453e2a901166d35536a9aa1a3b2b24b4dd737417d991d29d73cc20f1cea8465b454b5e5226afbda4cd5502cf7ee4c116c95c179c90f9e7766a6f5aa", 0x8e}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r441, r442, r443}}}, @cred={{0x1c, 0x1, 0x2, {r444, r446, r447}}}, @cred={{0x1c, 0x1, 0x2, {r449, 0x0, r450}}}, @cred={{0x1c, 0x1, 0x2, {r451, r452, r453}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r456, r458, r459}}}], 0xb8, 0x20008000}, {&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000dc0)="f8b93a8a44bfcea993e8f9744deb18591ad6628d95da3ec7bfde5e09af36b6d19a3d1a105850fa18a691831b61687c9a74c368840ee142f46fb9ec22fd655213c299e1a27657f2e3f6f406bdac2a1b266558a05f2f2a4c488a0e0479a4e6978475ce7e9d148870d9063e18a6fcf119876453e672fda8464e32af91d5a43cf414b091", 0x82}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="308078007015ac6693b4ca1ab0ad66e2c47d3de1685f3e4f354c35b2c2a07ec0aa69274a0e972faa364e76957cb4591fb0e553fe6339304926da7f2a55056cd82891a24ec7350914e2504fd4f5a3ea82ee935b5d97775847d5f9a250df0e035cf8b9c4b4c478578310e9ebd40787adbaa799a64dbfb88f2b034321ae0c16a66ada", 0x81}, {&(0x7f0000002040)="2b784be1623557c2e9ba872833fc764234b4db59ba6b55cca41207cf39293472730e7de00edce4c3e9758da77779b912ec989fdceff14a0b586d28a2436472542eb95710e950fb86cacd20864985ccbed2229ec20aed87fabf3f4a9f7c9207e37dc2f2f974b08f889888b414b1bdcc8c345265745a689c623aeba5bf9792a483b8f5307c62df0ef108e47fbae8cb8f99174a79f8263a76389b6f6b656e04b2a01a846e3fbec6a67da32ae654ec8d603135", 0xb1}, {&(0x7f0000002100)="b298a17a930dd234fe0d775881d72b88e72be87b88a0e1b1beecda707936f19133141d10361ab4142fdf2674dbe6976effff8b96ea6f592c004209a06dc0063a4fe5ef6c79dffe517bb41c2b06b852f89e151e", 0x53}, {&(0x7f0000002180)="86a96220f058b46aedbe5def91fb44a8728d7854f7317ca97aa91957670014b9fb86a6ac32482b93e9e2b7bc44ba", 0x2e}, {&(0x7f00000021c0)}], 0x7, 0x0, 0x0, 0x20004010}, {&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="a88db89c7a", 0x5}, {&(0x7f0000002340)="cc5e6d26f258b587350201e651", 0xd}, {&(0x7f0000002380)="9e536388aed92b5bc218605cf5455cf68b41d79ba08a83ec0d7211e4ec41a29a8035cc549006c16f98e590be18eb684bd8", 0x31}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r460, @ANYRES32=r436, @ANYRES32, @ANYRES32=r461, @ANYRES32=r462, @ANYRES32=r463, @ANYRES32=r464, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r465, @ANYRES32=r466, @ANYRES32=r435, @ANYRES32, @ANYRES32=r438, @ANYRES32=r435, @ANYRES32=r467, @ANYRES32=r468, @ANYBLOB="1c000000000000000100000001000000c70fbd3141f35123a84b4753d9eeacc1a8102aab575395585b3662eda91839c1dbc61f347862d6f75a9b34b2da4be6e0b22afc226d009c8fdaeb6089c4ce8a5ab1317c3b1eef7c2d90f2d286aa05f3a262f1ad06000000000000007a53b7120ff2fa0c2827163acca59ef474a5449cc2ebf62104b5fbbddfb4d07de35cc0ad85c817d8f88d707e92a068cd05d46e9208e339437b6e2000e8a52f35a67895c9df34defec35a038f1f4de4af283fed1861cbfbee5345cdcab4f62655", @ANYRES32=r469, @ANYRES32=r470, @ANYRES32=r471, @ANYBLOB='\x00\x00\x00\x00'], 0x137, 0x20045000}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002600)="2e517c9413f09962631801a2daba35f0018f49ddce4d5d729c4379b674d5d802e429f2f0a3d2aff2d009b2532b8131ff8ef66cb858b858251211b42a0fc7ecfe7c20b7a1ec53811d79e98e1d6efd863d041c9154832d37360f6c714ecbc29072b44e8ab596218df7b2ae3af43aea71936eede7c1db541209259a1c13588be88de15543ff354f03a85d5f5be0eef86487f836ee5a4e07f7f22c3f31b4c924d0e14f5cf209fae95b99f725e30ccf801a40619ed57328c1cc07a00cbe5ba389906908ef430d47a72e759fcca1f412cb1d5c82876e667cd4d631ee5703800dffd537", 0xe0}, {&(0x7f0000002700)="173a367b754e2f61b4127df53188f255cd208feddc9c2fe1b4d6d55d7995450ffc19418b09fc473d12e3c22e750e581be22e12fa5b98028078667b1c26305c3e1ab131342ab2e2e9a0e4d23bd3c8dde66073e010cd98b7be35c32902ed6f114a1a6efce9c55f6c097b559a", 0x6b}, {&(0x7f0000002780)="d94e5bdeee3f6c1cfcf8857a0d695f6f04b0e115795e903216878b1a2722c5b99e9125fec6a73a41882c2243e6f8feda942ddccdfa335b94fd6901a961f22e4137ecc94e4f1b562ea875b9ff80d7a90334d349594f3518b3a13f5acf62096b04b1341468b3fef465211f4ec9ddf108a7bb7b48954131e90e6fc02a05156299e7b04a2db7c5d402084ebf7f7d8ca9e770e888e871f750fdc0", 0x98}, {&(0x7f0000002840)="ed9d62a5702126aebddbb05ac4ebfc4b7c6f5d7e44e7f9119d51c1668e038db5c1b5f12ab988b18dcde521dc66227a6ddca949825a1b9bdc0b4c9318ce5a8f9980aa6cc57f08803d533136289d6291eaaca0b0b956348b110bf2d2181a6f4e17f64ff1540f5d66f365d3ed7a3add83f3ee37ad86cbb1dbf13698232f6dab45d553c86adcfbb27d6656eb5261755c09772fecd61496c250e5517ff7a6c838f5e57bfc3e1e11eb4958ec94e632d8b4b50aeefde210a82ac50a374cd5595b4b3ac93c2db70db96fa521151bdfa7cc012cf4f0f1f0001d", 0xd5}, {&(0x7f0000002940)="4f532591625209e0291ef0fa2d42d78fa02129becb63b3c05f55190af7460b2b1baf2a5cfa3f3d19ce", 0x29}, {&(0x7f0000002980)="14b0193cb296c7314d1c521ccfd6f9fc9c9505337e3df5f1bc62c16f733e3b651f50a555b426e22a6f7e479afd69e467ca852aa6a098037d5fee91e1eab1807b71b11e1be90a22cbcf94cca7d4b725e213af69344fd02668b090b75e0a3c8d8c56851640e7e0504cae607e4a3037dafa50569a78d72801628992f965210132091fce315458b1b54a60caea5f8685fc958ede9c1d4b2926262953426a", 0x9c}, {&(0x7f0000002a40)="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", 0xfd}, {&(0x7f0000002b40)="7c9d0e1bf04f8151c488ba3def0a9bc953d8385e8c787b939c5464f1796045cbf461e4715b989b01da4fbd2a7d34cd98312cc6e8bc3c1ca7269e9b29247c418288d990cfa7a6eed5216ec7", 0x4b}], 0x8, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r472, 0xffffffffffffffff, 0xffffffffffffffff, r473]}}], 0x20, 0x810}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="2efbf35eb03f3da15be1a888b99a71776a8c217255379113afaab83767c6dd856f8c216e61e1806c0c04a75e18a99c97d9069bb6e82bbfc59a9c8219663bfac87af6c15135f171e9ced3546ce4c69daf220a52dea05425cf098758049b235c438e92be136193de3b31ee08a10ac430aba942848b7eb32ff188cacf06b07e06b25362f61006cfe51e7fb954649771587ce75e839f8414d94f865ae226a3d9e0c400a3504f5b08175cc5fd891983345022dc91f544c8216d3b14", 0xb9}, {&(0x7f0000002dc0)="aa4357652982d67f3ca16b107ffbc212adec714cae928a3b2b9737c9a4ffb92139a3c0474926271775e913dfa2169171f8336939a464fda0bf5e71b82ca69af32cb45065c544b09a7f828bc925131a97f9fe752d9426ddc15d85a674d324dad082b6b6da77dea52be897b03d703aa9e89513a5c093a032f4ae92053609889fee3cc3dec724003b81a8deab86ccd49754e3997f82588d4303f9c271c31247f7475aae15b01489cfbdd7e1b531cbf4fa7022", 0xb1}, {&(0x7f0000002e80)="61e0b7fd3693848b7ee0b23384eca51c32", 0x11}, {&(0x7f0000002ec0)="a65469f397cc3bd820005876e1d1750dd15d280a8104410ec0906143903d82cb3cc53f92cbb688cc690bf04c7a9a68de6d367cbf726f398ada77523d604087a781b42bbb1b2a7ca6de6ec691b1b8dbe4dd94ce804c19f44e89ae92f2d9dc69d858590cc49c4e5df16162d03681cd", 0x6e}, {&(0x7f0000002f40)="4b0a862afb593625f14c67b77d73061e85ed6700f56737c27f4dffb3f7de409af37ba574b5a82081d0cf7868b2c8cd899aed482ee71d6e1cb238fcdc9fdfb333823f7d93ab2dd6d95b378246701de3f5f9d1d26eee252014f2e2805eb9e2293b1ce18cea6bfc34963b53ae7e4bebf4423664cda4bbd0b0e1cb257f3d36fb24f468f465dc832b6237ff24ff9e824f18deb70090", 0x93}, {&(0x7f0000003000)="cadc20837e22cdb4b899661a038f1ae6a1131bc8d36ca222aafe4346f7ddd67125d45e40844de31b221f6195481a23ba24efc64e7edf39adc9714c71aeae7a", 0x3f}, {&(0x7f0000003040)="0a22fb80e4cb055ab0a5b486ea302c25e42119f3a8c9e1b4c3b24d3aa17d8cbfe12a7a505c7beeed32a8921f7f7400cb4126d1d9d11caf4baba8cf83b414dd6a761329f8adc23c288bc001083ba712", 0x4f}], 0x7, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r475, r476, r477}}}], 0x38, 0x4000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="5fc830ff2a6cead25e7470f4144dd79e3a27e72b76e2659caefed433509aab0c295abc89060d80f48f38134333026e85e87f4e10c9a2e3c4076a1174f33e53d3f2307053d3be81429ee6d9e748f329c579b409a28e1065faf9ad334657381c88382e41c04755a2812aac5f15ce1748c68d795a6a9328273fb006e3581b83f0daf5c6ef1d842b57696880dac3a09d556cf2247c1b2b2cbe03f031fafc42fd207f6f87abcb970230545feacb8042c09b69fc98811abb3ab366aa8434c7d25bc1cd3daf19033188b0b1756994a95819f03d3456f691cc3f", 0xd6}, {&(0x7f0000003380)="33880ba130115622a3a1b4892d28fb77b522688f5c7f9ce792dec0", 0x1b}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r478, r479, r480, r481, r435, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r437]}}, @rights={{0x14, 0x1, 0x1, [r492]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r483, r484, r485}}}, @rights={{0x18, 0x1, 0x1, [r486, r435]}}, @rights={{0x2c, 0x1, 0x1, [r487, r488, r489, r435, r490, r491, r436]}}], 0xd8, 0x10}, {&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f0000004fc0)="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", 0xfb}, {&(0x7f00000050c0)="5f611b5dd820f8e1c4f14423555d7c8bf367f13627cf832bc33ca03a10b12b91b2250b08c165cb8fbc748de66696f2b879c99a21b6a2b30870c77f1d18031dd5a95de29ebbc09b22de918314d68711c63b6991e09d1ede514f8aae9a93d533dc5d6c70673aa43d687c7929bcf75a1705ed2a429f578c33cc6ae6bca8f53c345daf829c21cae18f930b2c8db5e31a0049631757e7401b76d8c3ac01273690367613d00906b2e5205aaade1c6ab98321ed509e947814a50e858b047f73a317071be7e2acc78dc4ecd85ada208204112575f7267b1d9ab4ced0a9edd280542375563f711a8bc7ad9d4835cdae5eecbc4a52cd6d3511", 0xf4}, {&(0x7f00000051c0)="1495263896ec1ce1d6a3d57b55fa1ce760b4a38ffba1d0a6419bf5b78c3119889b79e278436a1dd1cea2bba35dee565de35ef6aba4f8110827451080c405c4bb2ab33155595c84e9fa7892a7c4aad3b4c1d0bfa1643c394ffd697993aef4bec8f321fff5c8b7686379c1b1a2cff47d4ee33c11ae26c84d576f16e0763a7fff39bc03bde7a6d5c0a47e17da28c1dc1c27b2d85fd3435406ba98c6d66b2af77f4c0ba9c3955ea5f9826277a26a074a34d41560eddd3c651efaec6b90", 0xbb}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005340)="911a6eff80af8194e191c46c2fe40443e691b5b637ff5070142198d9d98a3637898268a61d11ac3b4eab24067e8abdb5c5d8fca108c0b75f3f679d09d201934f5cd2cb9bdc665d5142a4c3e9a98bfa50da71f8bfd67683cf84f43c9ebe745e043892166b6d4a90966ee7801b57f6e5d8128a0018b8ffaa8d04dbcd904846a91c1e87b9adf3fdf233409f6e5d6c0976279b2309b03f352dae5e84d76bceeca08ce466224a2633f356e1b2e8ca9f77a91220dc4cbed8f4de099522e838a04b8ef53190a34d3dc8781e48", 0xc9}], 0x1, &(0x7f0000005480)}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005540)="2886249f0e87701299fb5758dcf850f5d6d9e3b333012421e47a7358e72db213897da9b04e", 0x25}, {&(0x7f0000005580)}, {&(0x7f00000055c0)="167db38e4dbf771070734798d13748b4886c09d9f54f62fae48baa9f375487c00c57b2d7ec9fe46893e143b52429ae08", 0x30}, {&(0x7f0000005600)="b1aee0871f53db466eb3e4814433ee6b50ad9664542bfbf3fcd1fceb7af60011d6528c4507f20a136a8ee2a1d008897348c8f53f1aa5c1e9ecd4025178fb3aece6e6045b3f43571ea6cad5d39609bcf4697a54692bca2b1fab80e576c9a31511098557881a6f5caa8d67f70196118510d620fc5b0708cb8144d0e01b241a15e6eefc5b76422686ea00d127c2f0b0ef77a6b11851f4571bbcb925966f45dd8a5769e6b385c32a91f58ed44931826f6ed87885730cc2354e3550be69081137cf1778502e93dca19bdad6e5c663914e80a809ce3b3c56088492176af54cd40781a8", 0xe0}], 0x4, 0x0, 0x0, 0xc000}], 0xa, 0x20000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006440)={0x0}, &(0x7f0000006480)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000064c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000065c0)=0xe8) r495 = getgid() r496 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006600)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000006700)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006740)={0x0, 0x0, 0x0}, &(0x7f0000006780)=0xc) r499 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000007d80)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000007d40)='\x00'}, 0x30) r501 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r501, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r503 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r503, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r503, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r503, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r503, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r503, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r503, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r503, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r503, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x4e21, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r504}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r502, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r504}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r501, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r504}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r507 = accept$netrom(r506, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r508 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r508, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r509 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r510 = openat$cgroup_procs(r509, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r511 = getpid() write$cgroup_pid(r510, &(0x7f0000000100)=r511, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r506, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r513 = getgid() r514 = gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r515, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r516 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r515, r516}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r517 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r517}, 0xc) r518 = socket(0x40000000015, 0x805, 0x0) getsockopt(r518, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r518, 0x8903, &(0x7f0000000780)=0x0) r520 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r520}, 0xc) getsockopt$sock_cred(r508, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000000b40)=0xc) r523 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r523}, 0xc) r524 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r525 = openat$cgroup_procs(r524, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r526 = getpid() write$cgroup_pid(r525, &(0x7f0000000100)=r526, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r527, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r528 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r527, r528}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r508, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) r530 = socket(0x40000000015, 0x805, 0x0) getsockopt(r530, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r531 = socket(0x40000000015, 0x805, 0x0) getsockopt(r531, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r532 = socket(0x40000000015, 0x805, 0x0) getsockopt(r532, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r533 = accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r534 = socket(0x40000000015, 0x805, 0x0) getsockopt(r534, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r535 = socket(0x40000000015, 0x805, 0x0) getsockopt(r535, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r536 = socket(0x40000000015, 0x805, 0x0) getsockopt(r536, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r537 = socket(0x40000000015, 0x805, 0x0) getsockopt(r537, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r538 = socket(0x40000000015, 0x805, 0x0) getsockopt(r538, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r539 = socket(0x40000000015, 0x805, 0x0) r540 = socket(0x40000000015, 0x805, 0x0) getsockopt(r540, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r541 = socket(0x40000000015, 0x805, 0x0) getsockopt(r541, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r542 = socket(0x40000000015, 0x805, 0x0) getsockopt(r542, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r543 = socket(0x40000000015, 0x805, 0x0) getsockopt(r543, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r544 = socket(0x0, 0x805, 0x0) getsockopt(r544, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r544, 0x8903, &(0x7f0000003140)=0x0) r546 = getuid() r547 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r547}, 0xc) r548 = socket(0x40000000015, 0x805, 0x0) getsockopt(r548, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r549 = socket$l2tp(0x2, 0x2, 0x73) r550 = socket(0x40000000015, 0x805, 0x0) getsockopt(r550, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r551 = socket(0x40000000015, 0x805, 0x0) getsockopt(r551, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r552 = socket(0x40000000015, 0x805, 0x0) getsockopt(r552, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r552, 0x1, 0x11, &(0x7f0000004a00)={0x0}, &(0x7f0000004a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a80)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000004b80)=0xe8) r555 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r555}, 0xc) r556 = socket(0x40000000015, 0x0, 0x0) getsockopt(r556, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r557 = socket$inet_sctp(0x2, 0x1, 0x84) r558 = socket$alg(0x26, 0x5, 0x0) r559 = socket(0x40000000015, 0x805, 0x0) getsockopt(r559, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004e00)={r507}) r561 = socket(0x40000000015, 0x805, 0x0) getsockopt(r561, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r505, &(0x7f0000005740)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="7d3c58f11442ba6a849d8007c2574c10fd4e763e75f23e4080227454f5218dff75ae00091ea9c05b3a6a56195d2f5d45fc48ea1d660c839cdb58331cfe112d0ac023e7202f1534091d82066f9381b70d90449ca503e72d080608fe4537e256a67d68e90fea9ec483fc1dcb5efa52d4a19c05aa4aa191360f08535c9dee63a7f4", 0x80}, {&(0x7f00000003c0)="20e1fa524503816ba1257139f07ff6d754e81936a0f30ee1f3ea81c63dcd52932b9cdb65aab7d3017e", 0x29}, {&(0x7f0000000400)="9848b1ab21536c2abb946e92617cfdfa7980bb314b368efb2968fbf81f15239d9dbe29b5e8d7a31520a52a2887a76a168e61f3bf0d214818545375c7d124e14f1422f415de28ac95c6d991422ed46191e320d6e4d486d34ae28cf7b4ef5bcd9243902c08a524f0b09c71bd15d107faca53d402653aa32564d6607c49ed36b6e5cb5c967d28170a63e3d5d24c3702418c035e9c0ab8aea4123e9c635be3144df6b1fc1ffaa96351e9e177bac49375836e04", 0xb1}, {&(0x7f00000004c0)="e3fbd55da0ef388d1a2682d871bfdc0b1b757c2fad99eb4fba1e03599a5135ae8dd7b4486d7639c8744d11eddd49c1c7c02a000306acf679103f51cf8566c2407c4b23038c1500d1a531ca5c3b024786c5ad3453e2a901166d35536a9aa1a3b2b24b4dd737417d991d29d73cc20f1cea8465b454b5e5226afbda4cd5502cf7ee4c116c95c179c90f9e7766a6f5aa", 0x8e}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r511, r512, r513}}}, @cred={{0x1c, 0x1, 0x2, {r514, r516, r517}}}, @cred={{0x1c, 0x1, 0x2, {r519, 0x0, r520}}}, @cred={{0x1c, 0x1, 0x2, {r521, r522, r523}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r526, r528, r529}}}], 0xb8, 0x20008000}, {&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000000dc0)="f8b93a8a44bfcea993e8f9744deb18591ad6628d95da3ec7bfde5e09af36b6d19a3d1a105850fa18a691831b61687c9a74c368840ee142f46fb9ec22fd655213c299e1a27657f2e3f6f406bdac2a1b266558a05f2f2a4c488a0e0479a4e6978475ce7e9d148870d9063e18a6fcf119876453e672fda8464e32af91d5a43cf414b091", 0x82}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="308078007015ac6693b4ca1ab0ad66e2c47d3de1685f3e4f354c35b2c2a07ec0aa69274a0e972faa364e76957cb4591fb0e553fe6339304926da7f2a55056cd82891a24ec7350914e2504fd4f5a3ea82ee935b5d97775847d5f9a250df0e035cf8b9c4b4c478578310e9ebd40787adbaa799a64dbfb88f2b034321ae0c16a66ada", 0x81}, {&(0x7f0000002040)="2b784be1623557c2e9ba872833fc764234b4db59ba6b55cca41207cf39293472730e7de00edce4c3e9758da77779b912ec989fdceff14a0b586d28a2436472542eb95710e950fb86cacd20864985ccbed2229ec20aed87fabf3f4a9f7c9207e37dc2f2f974b08f889888b414b1bdcc8c345265745a689c623aeba5bf9792a483b8f5307c62df0ef108e47fbae8cb8f99174a79f8263a76389b6f6b656e04b2a01a846e3fbec6a67da32ae654ec8d603135", 0xb1}, {&(0x7f0000002100)="b298a17a930dd234fe0d775881d72b88e72be87b88a0e1b1beecda707936f19133141d10361ab4142fdf2674dbe6976effff8b96ea6f592c004209a06dc0063a4fe5ef6c79dffe517bb41c2b06b852f89e151e", 0x53}, {&(0x7f0000002180)="86a96220f058b46aedbe5def91fb44a8728d7854f7317ca97aa91957670014b9fb86a6ac32482b93e9e2b7bc44ba", 0x2e}, {&(0x7f00000021c0)}], 0x7, 0x0, 0x0, 0x20004010}, {&(0x7f0000002280), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002300)="a88db89c7a", 0x5}, {&(0x7f0000002340)="cc5e6d26f258b587350201e651", 0xd}, {&(0x7f0000002380)="9e536388aed92b5bc218605cf5455cf68b41d79ba08a83ec0d7211e4ec41a29a8035cc549006c16f98e590be18eb684bd8", 0x31}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="2c0000000000000001000000", @ANYRES32=r530, @ANYRES32=r506, @ANYRES32, @ANYRES32=r531, @ANYRES32=r532, @ANYRES32=r533, @ANYRES32=r534, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r535, @ANYRES32=r536, @ANYRES32=r505, @ANYRES32, @ANYRES32=r508, @ANYRES32=r505, @ANYRES32=r537, @ANYRES32=r538, @ANYBLOB="1c000000000000000100000001000000c70fbd3141f35123a84b4753d9eeacc1a8102aab575395585b3662eda91839c1dbc61f347862d6f75a9b34b2da4be6e0b22afc226d009c8fdaeb6089c4ce8a5ab1317c3b1eef7c2d90f2d286aa05f3a262f1ad06000000000000007a53b7120ff2fa0c2827163acca59ef474a5449cc2ebf62104b5fbbddfb4d07de35cc0ad85c817d8f88d707e92a068cd05d46e9208e339437b6e2000e8a52f35a67895c9df34defec35a038f1f4de4af283fed1861cbfbee5345cdcab4f62655", @ANYRES32=r539, @ANYRES32=r540, @ANYRES32=r541, @ANYBLOB='\x00\x00\x00\x00'], 0x137, 0x20045000}, {&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002600)="2e517c9413f09962631801a2daba35f0018f49ddce4d5d729c4379b674d5d802e429f2f0a3d2aff2d009b2532b8131ff8ef66cb858b858251211b42a0fc7ecfe7c20b7a1ec53811d79e98e1d6efd863d041c9154832d37360f6c714ecbc29072b44e8ab596218df7b2ae3af43aea71936eede7c1db541209259a1c13588be88de15543ff354f03a85d5f5be0eef86487f836ee5a4e07f7f22c3f31b4c924d0e14f5cf209fae95b99f725e30ccf801a40619ed57328c1cc07a00cbe5ba389906908ef430d47a72e759fcca1f412cb1d5c82876e667cd4d631ee5703800dffd537", 0xe0}, {&(0x7f0000002700)="173a367b754e2f61b4127df53188f255cd208feddc9c2fe1b4d6d55d7995450ffc19418b09fc473d12e3c22e750e581be22e12fa5b98028078667b1c26305c3e1ab131342ab2e2e9a0e4d23bd3c8dde66073e010cd98b7be35c32902ed6f114a1a6efce9c55f6c097b559a", 0x6b}, {&(0x7f0000002780)="d94e5bdeee3f6c1cfcf8857a0d695f6f04b0e115795e903216878b1a2722c5b99e9125fec6a73a41882c2243e6f8feda942ddccdfa335b94fd6901a961f22e4137ecc94e4f1b562ea875b9ff80d7a90334d349594f3518b3a13f5acf62096b04b1341468b3fef465211f4ec9ddf108a7bb7b48954131e90e6fc02a05156299e7b04a2db7c5d402084ebf7f7d8ca9e770e888e871f750fdc0", 0x98}, {&(0x7f0000002840)="ed9d62a5702126aebddbb05ac4ebfc4b7c6f5d7e44e7f9119d51c1668e038db5c1b5f12ab988b18dcde521dc66227a6ddca949825a1b9bdc0b4c9318ce5a8f9980aa6cc57f08803d533136289d6291eaaca0b0b956348b110bf2d2181a6f4e17f64ff1540f5d66f365d3ed7a3add83f3ee37ad86cbb1dbf13698232f6dab45d553c86adcfbb27d6656eb5261755c09772fecd61496c250e5517ff7a6c838f5e57bfc3e1e11eb4958ec94e632d8b4b50aeefde210a82ac50a374cd5595b4b3ac93c2db70db96fa521151bdfa7cc012cf4f0f1f0001d", 0xd5}, {&(0x7f0000002940)="4f532591625209e0291ef0fa2d42d78fa02129becb63b3c05f55190af7460b2b1baf2a5cfa3f3d19ce", 0x29}, {&(0x7f0000002980)="14b0193cb296c7314d1c521ccfd6f9fc9c9505337e3df5f1bc62c16f733e3b651f50a555b426e22a6f7e479afd69e467ca852aa6a098037d5fee91e1eab1807b71b11e1be90a22cbcf94cca7d4b725e213af69344fd02668b090b75e0a3c8d8c56851640e7e0504cae607e4a3037dafa50569a78d72801628992f965210132091fce315458b1b54a60caea5f8685fc958ede9c1d4b2926262953426a", 0x9c}, {&(0x7f0000002a40)="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", 0xfd}, {&(0x7f0000002b40)="7c9d0e1bf04f8151c488ba3def0a9bc953d8385e8c787b939c5464f1796045cbf461e4715b989b01da4fbd2a7d34cd98312cc6e8bc3c1ca7269e9b29247c418288d990cfa7a6eed5216ec7", 0x4b}], 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="90316caafcbff837f68600000000683ce1feb63fa025c8c1d8e53283d04a09625e87fce0a427153cb0c5bcfe69ffc6d1fc8dd18e0ff4d94558e9d718dee165e7315faa30182cd87c1cf55e8f56ab4e847ad4b8ab25f4c2ccb0b21553d85160b27d2d90f2df9337361e1678ffcfb2f797b2b26b87a6b88f40261245f1f0de5f36065d2b503d07f33f3cc2ee589bdd48188c4c7807b1da4cf6385e4435fb05a3ea8cf9edc8454604ed96bbec37f3ea345d2f28fd6ff9a1693cf314ce62264273eb106cf2911e02e8d7dc0b29a44d14b9", @ANYRES32=r542, @ANYRES32, @ANYRES32, @ANYRES32=r543], 0x20, 0x810}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002d00)="2efbf35eb03f3da15be1a888b99a71776a8c217255379113afaab83767c6dd856f8c216e61e1806c0c04a75e18a99c97d9069bb6e82bbfc59a9c8219663bfac87af6c15135f171e9ced3546ce4c69daf220a52dea05425cf098758049b235c438e92be136193de3b31ee08a10ac430aba942848b7eb32ff188cacf06b07e06b25362f61006cfe51e7fb954649771587ce75e839f8414d94f865ae226a3d9e0c400a3504f5b08175cc5fd891983345022dc91f544c8216d3b14", 0xb9}, {&(0x7f0000002dc0)="aa4357652982d67f3ca16b107ffbc212adec714cae928a3b2b9737c9a4ffb92139a3c0474926271775e913dfa2169171f8336939a464fda0bf5e71b82ca69af32cb45065c544b09a7f828bc925131a97f9fe752d9426ddc15d85a674d324dad082b6b6da77dea52be897b03d703aa9e89513a5c093a032f4ae92053609889fee3cc3dec724003b81a8deab86ccd49754e3997f82588d4303f9c271c31247f7475aae15b01489cfbdd7e1b531cbf4fa7022", 0xb1}, {&(0x7f0000002e80)="61e0b7fd3693848b7ee0b23384eca51c32", 0x11}, {&(0x7f0000002ec0)="a65469f397cc3bd820005876e1d1750dd15d280a8104410ec0906143903d82cb3cc53f92cbb688cc690bf04c7a9a68de6d367cbf726f398ada77523d604087a781b42bbb1b2a7ca6de6ec691b1b8dbe4dd94ce804c19f44e89ae92f2d9dc69d858590cc49c4e5df16162d03681cd", 0x6e}, {&(0x7f0000002f40)="4b0a862afb593625f14c67b77d73061e85ed6700f56737c27f4dffb3f7de409af37ba574b5a82081d0cf7868b2c8cd899aed482ee71d6e1cb238fcdc9fdfb333823f7d93ab2dd6d95b378246701de3f5f9d1d26eee252014f2e2805eb9e2293b1ce18cea6bfc34963b53ae7e4bebf4423664cda4bbd0b0e1cb257f3d36fb24f468f465dc832b6237ff24ff9e824f18deb70090", 0x93}, {&(0x7f0000003000)="cadc20837e22cdb4b899661a038f1ae6a1131bc8d36ca222aafe4346f7ddd67125d45e40844de31b221f6195481a23ba24efc64e7edf39adc9714c71aeae7a", 0x3f}, {&(0x7f0000003040)="0a22fb80e4cb055ab0a5b486ea302c25e42119f3a8c9e1b4c3b24d3aa17d8cbfe12a7a505c7beeed32a8921f7f7400cb4126d1d9d11caf4baba8cf83b414dd6a761329f8adc23c288bc001083ba712", 0x4f}], 0x7, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r545, r546, r547}}}], 0x38, 0x4000}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="5fc830ff2a6cead25e7470f4144dd79e3a27e72b76e2659caefed433509aab0c295abc89060d80f48f38134333026e85e87f4e10c9a2e3c4076a1174f33e53d3f2307053d3be81429ee6d9e748f329c579b409a28e1065faf9ad334657381c88382e41c04755a2812aac5f15ce1748c68d795a6a9328273fb006e3581b83f0daf5c6ef1d842b57696880dac3a09d556cf2247c1b2b2cbe03f031fafc42fd207f6f87abcb970230545feacb8042c09b69fc98811abb3ab366aa8434c7d25bc1cd3daf19033188b0b1756994a95819f03d3456f691cc3f", 0xd6}, {&(0x7f0000003380)="33880ba130115622a3a1b4892d28fb77b522688f5c7f9ce792dec0", 0x1b}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003400)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004e40)=[@rights={{0x28, 0x1, 0x1, [r548, r549, r550, r551, r505, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r507]}}, @rights={{0x14, 0x1, 0x1, [r505]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r553, r554, r555}}}, @rights={{0x18, 0x1, 0x1, [r556, r505]}}, @rights={{0x2c, 0x1, 0x1, [r557, r558, r559, r505, r560, r561, r506]}}], 0xd8, 0x10}, {&(0x7f0000004f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005280)=[{&(0x7f0000004fc0)="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", 0xfb}, {&(0x7f00000050c0)="5f611b5dd820f8e1c4f14423555d7c8bf367f13627cf832bc33ca03a10b12b91b2250b08c165cb8fbc748de66696f2b879c99a21b6a2b30870c77f1d18031dd5a95de29ebbc09b22de918314d68711c63b6991e09d1ede514f8aae9a93d533dc5d6c70673aa43d687c7929bcf75a1705ed2a429f578c33cc6ae6bca8f53c345daf829c21cae18f930b2c8db5e31a0049631757e7401b76d8c3ac01273690367613d00906b2e5205aaade1c6ab98321ed509e947814a50e858b047f73a317071be7e2acc78dc4ecd85ada208204112575f7267b1d9ab4ced0a9edd280542375563f711a8bc7ad9d4835cdae5eecbc4a52cd6d3511", 0xf4}, {&(0x7f00000051c0)="1495263896ec1ce1d6a3d57b55fa1ce760b4a38ffba1d0a6419bf5b78c3119889b79e278436a1dd1cea2bba35dee565de35ef6aba4f8110827451080c405c4bb2ab33155595c84e9fa7892a7c4aad3b4c1d0bfa1643c394ffd697993aef4bec8f321fff5c8b7686379c1b1a2cff47d4ee33c11ae26c84d576f16e0763a7fff39bc03bde7a6d5c0a47e17da28c1dc1c27b2d85fd3435406ba98c6d66b2af77f4c0ba9c3955ea5f9826277a26a074a34d41560eddd3c651efaec6b90", 0xbb}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f00000052c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f0000005340)="911a6eff80af8194e191c46c2fe40443e691b5b637ff5070142198d9d98a3637898268a61d11ac3b4eab24067e8abdb5c5d8fca108c0b75f3f679d09d201934f5cd2cb9bdc665d5142a4c3e9a98bfa50da71f8bfd67683cf84f43c9ebe745e043892166b6d4a90966ee7801b57f6e5d8128a0018b8ffaa8d04dbcd904846a91c1e87b9adf3fdf233409f6e5d6c0976279b2309b03f352dae5e84d76bceeca08ce466224a2633f356e1b2e8ca9f77a91220dc4cbed8f4de099522e838a04b8ef53190a34d3dc8781e48", 0xc9}], 0x1, &(0x7f0000005480)}, {&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005700)=[{&(0x7f0000005540)="2886249f0e87701299fb5758dcf850f5d6d9e3b333012421e47a7358e72db213897da9b04e", 0x25}, {&(0x7f0000005580)}, {&(0x7f00000055c0)="167db38e4dbf771070734798d13748b4886c09d9f54f62fae48baa9f375487c00c57b2d7ec9fe46893e143b52429ae08", 0x30}, {&(0x7f0000005600)="b1aee0871f53db466eb3e4814433ee6b50ad9664542bfbf3fcd1fceb7af60011d6528c4507f20a136a8ee2a1d008897348c8f53f1aa5c1e9ecd4025178fb3aece6e6045b3f43571ea6cad5d39609bcf4697a54692bca2b1fab80e576c9a31511098557881a6f5caa8d67f70196118510d620fc5b0708cb8144d0e01b241a15e6eefc5b76422686ea00d127c2f0b0ef77a6b11851f4571bbcb925966f45dd8a5769e6b385c32a91f58ed44931826f6ed87885730cc2354e3550be69081137cf1778502e93dca19bdad6e5c663914e80a809ce3b3c56088492176af54cd40781a8", 0xe0}], 0x4, 0x0, 0x0, 0xc000}], 0xa, 0x20000000) sendmmsg$unix(r2, &(0x7f0000007e00)=[{&(0x7f0000003f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004000)="de69fe3cfeb716f59852b65f5007d86e59f56aa6012831d9c5b4336cf8b09e134527404543e79b3fac448e2adf0c2dbc1e8a175ee8c5e0516754633fa88f8a3a0d440ffb0765f8d38cd47ef934a9a724d520095e9e6a31d4e9b8a134ce755a65e0ae573bdb3be552770083d202b3f9148953c95f9a0759ca90f2e2056f6ccd62707592d7a80880bfe25942a1cb258f7113f9d4c15be50eddde0c63aec2b69eec35", 0xa1}, {&(0x7f00000040c0)="c2c81a4455499eca501b8589f3b1a16c9e796bd6564acb534a217e534af76c701630a6441b39b6a8e09cff0f134f4cd83cbecd8ac8bdbd2a337cda688a49242095eba7a04bfc038ac3abe1ffa48367ecbcdc10bd40a08d989ed92586f096481c11fa53b4d8cda81bd1efbd5878cbfee4b491b1ffd12065a26d15a152bf3142671e1786e8ce57ed822116e564d99662c978d9b33fc0094ed7449d4b452c53672ddb17e3c1225bcb4932e714d8e755382f5e5f81f5f81319cd7865661d1bd1180a4449c6e2e0d7ee1bb1fefba926c1be5f34a9e40ad191b55f929e4c00d817183d52d2ea4cd6ef27b684760a358ed1bda85e8ecd7ec1afb8", 0xf7}, {&(0x7f00000041c0)="c7364bd025e348cd17841f781a3bddd04f70a964ddd489666c71cd2ec8f2878c651f801afc7bc584906a126f39a9a8372fa82778", 0x34}, {&(0x7f0000004200)="53b4b7e976596e88c86d971a96bbef059d61a36d1e4d0c3652970a33ef1335d789b8c269f70798682904c7c4110992a78233401810773d8dfa5a49649d37e504b33c7edc7b4e926f3ab6e8398823b2f5ab40ddfdcaaa2c22e4c4db5e706368917bf6e1b3061dc1c5c52c5fd62407a2735c28f26ed0138dbf014fc3681e79df5a51eeb937abefd8e7fc89f342e69136e674541a48af726ad551d3c01286781a3276238c961344e7cc4f1141d166060247cfe9914e60bc946cc05b6a8aef760002322452a0392fd0460fb0177a9ecdc50d56625a52", 0xd4}], 0x4, 0x0, 0x0, 0x4}, {&(0x7f0000004340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f00000043c0)="b9106eb9e3715100caa680a0ee73497996821e4e215cf574a8157699a01db95050eb551297102c18249317398190ee5717d5137b3fb0d1cd10c3d53eccc8cfe6d5fdf1cd0d0b08c258b4eeb2f879657ea70c1359898ae463c15f0c4ea540d00e4d16aaf757b892232f2e6f4aca3886605f71c336089bbaf5dea8fd4c4e248390f954391c42ddb690e16ca6c4d1e33e11c47f831a6992fb69b267e4873f59b03b", 0xa0}, {&(0x7f0000004480)="06c686e0c7c1c7a45502bf41ca45c89874263bae52df7f76a493f155ee9632b95ff2e4839666feb1b4ebd8342f7edcfa0fa99a9d370032b70688bef21d5117e6f447ae6b8261b85be7986db2cd2b248e4c5a6d6c0d22530d10746d6f5f730d155c81d82bdc5ee7ace15cf1dd61d462f5788a7426b09368f28179068c86cb696d6b241084acf91e20ab2871db61aedfb9d3d447c92963595a4d8452b6d19fe4ec979ab8cb0cabe01345e830a6a4", 0xad}, {&(0x7f0000004540)="639b3bd4fb49e4190e321275e0432c9d7d6bf8c48d0cf88fb4751de8b3e3a0cb61e1ce1100acf79c066460f47665fdd267a427e9c72b303f087f3d37b868820cfb863ae54ff90a716e89e2ecd0b846b3c433790939f6adc12eecdd90963f3e162ce242d57237fc7e8d8e", 0x6a}, {&(0x7f00000045c0)="c0f1087671f1e6da75c34351020355bd8011289a12f801455b2b2a118a10dfd6a2db05ed7e79ae2bf702817b6ea638d177a3069f2bf39e436a5e414e297efee9b4a079a9950ae0d6e27326cd22fae58991ea31a1f2951d13a8aef9eeb2c3f8e0a8a44b86c7eb31bb1c54c35d0b687c8c88fe8ec00b5e3f54f208cf3826c63ea06e0541142613f1b6d056b1f7a4d9817a1f1986edd45c65b4bde3174363ead05fb4def64dd4ec3c9ea1c98508827c8c0b63627bbed9616d6ca382922fd22f6d399e38b362720de63694c3301d9752b70b4b7978121875f5f98a006f0bd04f240db65a4f19078efc3d03e8bd6ae7ee6194dccb9f3c", 0xf4}], 0x4, &(0x7f0000004780)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, r26}}}], 0x20, 0x8000}, {&(0x7f00000047c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000004840)="25c42174d84bc4653366517d0379af0a790155e707c60d6da902c57ad603d20fd1dace2beae0154e5add6e7092f4981fbf30361aa8eff58d2bb137d9f353c85db6a2f53054508eaf87e5816c7b7687a60ef166d2ebf7b02860f7eb033a3b6492321e1700b38db10eeb1bd11b3512ec4dd332bb02acc7869dfbcf924ba609c9c407816b19803218f06df3dc6d6c370adabb57eccfb93becea2bdade484c6f88801892fffd9c88b1ada8aa4d55", 0xac}, {&(0x7f0000004900)="dd45ffb336162f5559571bcae0c18497f4732459bbb48d2c082aa6c07c575b139bb137afef02b1e2cfe5a97db0dadfbe2b7865d4df59e1f3458c4ef9626ce69ddde1bd383e4bd32613b04cb33b4f7686ea4b6a87cd412d3da0f725f870bef354531a5fa66f2b27854cc1e8dcbb7929314943e385d3693bb3bfdfb9831aa200b7f015311472ab217164c9c5dee9f3bbfce920a9f74e3957588e664c0169cf7ceb359cd2f7555c25be60170ab30211fd69995751317849aff2e996ee8a7644bad476b8679da55748b3dbf2e3b8cba3857c441920eacf46f768936f40e9bcc5f6811108", 0xe2}, {&(0x7f0000004a00)="14065a3eaebe824c4a89bab298b802f4c9563f1c5f8567552dd066aec6616319d628e6855665ea7ed7b2466306e714b54a39fdb5d9baa69f8c20ea1333b4b6c6e1df8edf5084e0d9e02dd6cb54d08b05ce7e5b9d45ef57d0a2b7d4b95c2df41da1df24a14435c24aaed6714f14cf97b35f00fac44ab73303afa829e7f1fce80d7b76b82beb220c73c966966442c6bc8cb9c38b1b733d4cc1471a59085a99d4346ecdf822a28cc13b73fbe9114050a60b8dbd8f85588feea4833006e0", 0xbc}, {&(0x7f0000004ac0)="a0a63d7a58f480fe2e960b2811fabe46cfa0218af1c66888b67bc108e29bad38383f571d9bec5b68617a16caa550879288866c960eb860544bc03ba53b74503a93bf3b849445a619dd108e5437b3fd74480ca3b6e1242f2afdc3d22fc9a3fe8bedec7a7ea0134a88a290916299ccdd6117a78736d1a128812091c3001996c1eac07cd0d6f8846c054da856e4f1949ece36f8f9cffcd22cf24c10ea089222419f4441ba6886772337a3402a37ed4c5b2a90a5538ccc4c928a2d4c90b3b74fc806aee2b45a52df1597f487479c9d0b4bb79c9aa87ee2d1ab9f63cedc0248", 0xdd}, {&(0x7f0000004bc0)="bf3e9b9371c4f0ee26a10646d16d2f782e16621284709cee2d2210d8cbcf788ff1deb3d13fd20ccb3d1b0a1a514b71f21ecde4de727dedf0bd21eb5f4371a02d72f7266d4bd9a22401e0ad0a4bc62081a274f316fc546f760b613107dfd765f93ea9f7d160d397494706bc25c5e56c9e73ea17caeae04610e859fbc3f00aaa53d06ecb03ceecd7313bfb2c6b871ad477d49dde64158f9ec1cd5c65081a006a83b95f5b6229b55af324a50d071a39819130b7e56446", 0xb5}, {&(0x7f0000004c80)="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", 0x1000}], 0x6, &(0x7f0000006280)=[@cred={{0x1c, 0x1, 0x2, {r71, r124, r125}}}, @rights={{0x1c, 0x1, 0x1, [r0, r126, r128]}}, @rights={{0x24, 0x1, 0x1, [r129, r131, r0, r132, r1]}}, @cred={{0x1c, 0x1, 0x2, {r147, r193, r196}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r211, 0x0, r278}}}, @cred={{0x1c, 0x1, 0x2, {r311, r312, r313}}}, @cred={{0x1c, 0x1, 0x2, {r330, r372, r373}}}], 0x100, 0xacbb1799f087a6fc}, {&(0x7f0000006380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006400), 0x0, &(0x7f00000067c0)=[@cred={{0x1c, 0x1, 0x2, {r388, r434, r459}}}, @cred={{0x1c, 0x1, 0x2, {r493, r494, r495}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r496, r497, r498}}}], 0x90, 0x80}, {&(0x7f0000006880)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007cc0)=[{&(0x7f0000006900)="ae353fb938cec18cc6db1389d6bfa30d446e0ef5dadff5b0110dc4117bcab6231fa5f2e608457cc29c6e02eb48bc1a9b5912b85e954d", 0x36}, {&(0x7f0000006940)="059e20d1f86ada63d0215979dcd6801e5021d0", 0x13}, {&(0x7f0000006980)="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", 0xfa}, {&(0x7f0000006a80)="fc66cf5b47c5b8f66e0c055ccdb47cff6e709b8573ebe8ceb1c90f98749fe860a030f62085b780b8748b326fa6c1476f0fb558c77de8918c7bc15fca717cecf2b02e2ed665162774358da91da65aed59d7e46c38d3810f6fcd4c0a8e93bc4f4ad431a6e1dd3fda89cd", 0x69}, {&(0x7f0000006b00)="0aab8c7f1f3b09ab9c010c4d94619b6dc689", 0x12}, {&(0x7f0000006b40)="8f934441d686bed6bd3a6f4d1896dcb1a2f431c9bcd887fa77e541d518b241679ef69ee5cc8d1cdb4dfb9373a28ea635e38c7ffbe8c35b452dd5dae9bc5d575f601e62f1f0e06eb32652513d4a2249564427fe3fc691c9ff3014b53c5238940a8f8dd36f56cd7131de933048386e4a3075005ab0a6bd1f55212c0765812f97192f454a7114c2c3", 0x87}, {&(0x7f0000006c00)="f65fbb4dd7f4899d7e91877ff0c43099cb37e13e53bf117ddff482e1c3aea67921a639b0642a565415c5779d88fdf04ecedda8ac902b2951b1da354626da7e6673cf109dbdeb1b0991a78670a1510b0dc86dc82a4a27d1e802ac9a9792a560ce9857da8824f805a2f4f639d564034e38217e988f65e906616eab079340cf2f18591bc56805", 0x85}, {&(0x7f0000006cc0)="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", 0x1000}], 0x8, &(0x7f0000007dc0)=[@rights={{0x18, 0x1, 0x1, [r1, r499]}}, @cred={{0x1c, 0x1, 0x2, {r500, r504, r513}}}], 0x38, 0x1}], 0x5, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}}, 0x0) [ 1542.858719][ T2980] bridge48: port 1(syz_tun) entered blocking state [ 1542.881334][ T2980] bridge48: port 1(syz_tun) entered disabled state [ 1542.899595][ T2980] device syz_tun entered promiscuous mode [ 1542.907332][ T2988] bridge48: port 2(erspan0) entered blocking state [ 1542.914640][ T2988] bridge48: port 2(erspan0) entered disabled state [ 1542.923299][ T2988] device erspan0 entered promiscuous mode [ 1542.933964][ T3003] device erspan0 left promiscuous mode [ 1542.944516][ T3003] bridge48: port 2(erspan0) entered disabled state 11:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xd1030000}, 0x0) 11:01:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xf00000000000000) [ 1543.059220][ T3003] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe1c}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:18 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket(0x40000000015, 0x805, 0x0) getsockopt(r36, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r37 = socket(0x40000000015, 0x805, 0x0) getsockopt(r37, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r38 = socket(0x0, 0x805, 0x0) getsockopt(r38, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r39 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r39, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r40, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x7}}]}, 0x20}}, 0x0) 11:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xe3020000}, 0x0) 11:01:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x3f00000000000000) 11:01:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7}}]}, 0x20}}, 0x0) [ 1543.565228][ T3042] device syz_tun left promiscuous mode 11:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x4000000000000000) 11:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1543.608035][ T3042] bridge48: port 1(syz_tun) entered disabled state [ 1543.768597][ T3042] bridge49: port 1(syz_tun) entered blocking state [ 1543.775599][ T3042] bridge49: port 1(syz_tun) entered disabled state [ 1543.789705][ T3042] device syz_tun entered promiscuous mode 11:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x4, 0x5, 0x100, 0x3, 0x3e, 0x1, 0x1d2, 0x40, 0x3af, 0x7fff, 0x1, 0x38, 0x2, 0x893, 0x8, 0x2}, [{0x6, 0x2, 0x80, 0x4, 0x7, 0x7, 0x7fff, 0x800}, {0x3, 0x3df, 0x8, 0xf8bc, 0x9, 0x70ce, 0x4, 0x3f}], "6fc4c97d357a251cf7b73063136b2a1a0e8e81aa57fddb555751bcf7a9f9bf098802560d2ef14be0f4d1e39f50e3ffc9ebd2e6c4d9f614dd7fb889ad73840e1cd68ea84f20cdb4eddf87231e6bebc7c8daddf12330008c1c3d5dc55188b590424efa137b3413fe19a88063e79e80024917d4ba3a439c289ffbaacf24e5b016f49d", [[], [], [], [], [], [], [], [], [], []]}, 0xb31) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800110300000000000080000a000000fe0000000000004014000500000000000000000000000000000001c69ce8b91b3c9cc8afdd07"], 0x30}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)={'syz1', "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"}, 0x103) [ 1543.812772][ T3055] bridge49: port 2(erspan0) entered blocking state [ 1543.833115][ T3055] bridge49: port 2(erspan0) entered disabled state [ 1543.843099][ T3055] device erspan0 entered promiscuous mode 11:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x6000000000000000) 11:01:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x7}}]}, 0x20}}, 0x0) [ 1543.907798][ T3072] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1543.925060][ T3061] device erspan0 left promiscuous mode [ 1543.943197][ T3061] bridge49: port 2(erspan0) entered disabled state 11:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfc000000}, 0x0) [ 1544.129056][ T3061] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1544.139434][ T3074] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe1d}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa, 0x7}}]}, 0x20}}, 0x0) 11:01:19 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket(0x40000000015, 0x805, 0x0) getsockopt(r36, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r37 = socket(0x40000000015, 0x805, 0x0) getsockopt(r37, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x0, 0x805, 0x0) r38 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r38, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r39, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x9effffff00000000) 11:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfe800000}, 0x0) 11:01:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@ipv6_newroute={0x34, 0x18, 0x311, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x5, 0xfe}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_MARK={0x8, 0x10, 0x100}]}, 0x34}}, 0x0) 11:01:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) accept4$x25(r4, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80800) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{}, 0x1, 0x3, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1544.514934][ T3102] device syz_tun left promiscuous mode [ 1544.533633][ T3102] bridge49: port 1(syz_tun) entered disabled state 11:01:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xe, 0x7}}]}, 0x20}}, 0x0) 11:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xf0ffffff00000000) [ 1544.738555][ T3102] bridge50: port 1(syz_tun) entered blocking state [ 1544.746282][ T3102] bridge50: port 1(syz_tun) entered disabled state [ 1544.759325][ T3102] device syz_tun entered promiscuous mode [ 1544.771223][ T3110] bridge50: port 2(erspan0) entered blocking state [ 1544.778689][ T3110] bridge50: port 2(erspan0) entered disabled state 11:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfec00000}, 0x0) [ 1544.790756][ T3110] device erspan0 entered promiscuous mode [ 1544.803813][ T3115] device erspan0 left promiscuous mode [ 1544.816547][ T3115] bridge50: port 2(erspan0) entered disabled state [ 1544.949219][ T3115] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1544.960795][ T3122] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf, 0x7}}]}, 0x20}}, 0x0) 11:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xf815000000000000) [ 1544.994150][ T3117] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe1e}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:20 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket(0x40000000015, 0x805, 0x0) getsockopt(r36, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r37 = socket(0x40000000015, 0x805, 0x0) getsockopt(r37, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r38 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r38, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r39, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xff000000}, 0x0) 11:01:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0) sendto(r2, &(0x7f0000000140)="c693249354d1e04fbe2bf55f944d32150f6450764b4162301398fc8555e9b3f653b88c3c90b0e703be3e8952a01a196187109a3231a97d5a08a3c903accfe3880e56826d130cc2fd93964f3188b466040bc39c48480829466d1d8cfbc7fbb948a0c6b62304c6fcab7ccbe79519fdbb52a8ec0485cba0294150d224336f", 0x7d, 0x56f9e84c507e10b7, &(0x7f0000000200)=@nl=@unspec, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x60, 0x7}}]}, 0x20}}, 0x0) 11:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xffffff7f00000000) [ 1545.447074][ T3149] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf0, 0x7}}]}, 0x20}}, 0x0) 11:01:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xffffffff00000000) 11:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xffffa888}, 0x0) [ 1545.505565][ T3161] device syz_tun left promiscuous mode [ 1545.520759][ T3161] bridge50: port 1(syz_tun) entered disabled state 11:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x80) sendto$inet(r2, &(0x7f0000000140)="3b276b8751377056040033f69abab16a517fbae4a6fad7a2a7e66934e91d88488a44e49a7a8a829504de454d858c78d4e133c8fcbe5bffd3f2329ee940bb771ea85405261aeff0e325817ff6a685f201014eb162b9aac4f4125ad656ba0307660f6b826a", 0x64, 0x6076accac2e779de, &(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1545.679029][ T3161] bridge51: port 1(syz_tun) entered blocking state [ 1545.686422][ T3161] bridge51: port 1(syz_tun) entered disabled state [ 1545.697013][ T3161] device syz_tun entered promiscuous mode [ 1545.705205][ T3160] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1545.715871][ T3154] bridge51: port 2(erspan0) entered blocking state [ 1545.732556][ T3154] bridge51: port 2(erspan0) entered disabled state [ 1545.746717][ T3154] device erspan0 entered promiscuous mode [ 1545.764363][ T3169] device erspan0 left promiscuous mode 11:01:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x300, 0x7}}]}, 0x20}}, 0x0) [ 1545.793524][ T3169] bridge51: port 2(erspan0) entered disabled state 11:01:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0xfffffffffffff000) [ 1545.918926][ T3169] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1545.933084][ T3180] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe21}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) 11:01:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa00, 0x7}}]}, 0x20}}, 0x0) 11:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="30000000180011030000005d5a00000000000a000000fe000000000000001400"/48], 0x30}}, 0x0) 11:01:21 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket(0x40000000015, 0x805, 0x0) getsockopt(r36, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r37 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r37, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r38, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696cb90afd91e3d19db61e48882bbb088307fb966d69a65876a5b9aa2964eb3f5d2ede8b36f0e634d3fae785b1310000000000000000000000005e9d1caa97932f8bc9c139bc6952f6a200c142a6eb22c2a9e3eeb3468b3e3d9db5be3862626fe6c7bc3100"/123], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000000)=0xffff, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) setsockopt(r2, 0x7ccf, 0x4, &(0x7f00000002c0)="3e342cffb3e699c6368a4831c0563e581ab80e0ffc6b0daa4153f049cb58d139e587b9b58c95b2fb58ce828b504a0eeb4f6308f0557a8a70c0da6c543c7fb7714ceb245f7050f4ba5484bf35a9a3c64d1abfc816e2fd60571b5696fa8fcfa56e7049c095be4b5ac156a42d06c8ae18af3093cd1381a2f2d1e89af605e514f770d61ab899eb4a410edb06ad6d21353abb65bdae020b51ac3f5c1677afa2f5f1cb6b8570d76fbe04353e21f1bd43a96cab920bae230afaf9c655776b", 0xbb) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 11:01:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xe00, 0x7}}]}, 0x20}}, 0x0) 11:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000187ef7dae709dfe0840000000a000000fe0000000000000014000500e5ff00000000000000000000000001c63612d0e6d050e5cfe6e9db8fb0221cdd27f08bae3a49626c13cdbd9b2f158cdf4088b5b0f5fa4e43a179dc5dc7ab881354112e4a"], 0x30}}, 0x0) 11:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1546.394918][ T3202] device syz_tun left promiscuous mode [ 1546.409828][ T3202] bridge51: port 1(syz_tun) entered disabled state [ 1546.548631][ T3202] bridge52: port 1(syz_tun) entered blocking state [ 1546.561464][ T3202] bridge52: port 1(syz_tun) entered disabled state [ 1546.579385][ T3202] device syz_tun entered promiscuous mode [ 1546.597455][ T3212] bridge52: port 2(erspan0) entered blocking state [ 1546.607019][ T3212] bridge52: port 2(erspan0) entered disabled state [ 1546.615636][ T3212] device erspan0 entered promiscuous mode [ 1546.624722][ T3220] device erspan0 left promiscuous mode [ 1546.634092][ T3220] bridge52: port 2(erspan0) entered disabled state 11:01:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf00, 0x7}}]}, 0x20}}, 0x0) [ 1546.759562][ T3220] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1546.966302][ T3238] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe22}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:22 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket(0x40000000015, 0x805, 0x0) getsockopt(r36, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r37 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r37, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r38, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1576, 0x7}}]}, 0x20}}, 0x0) 11:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 11:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x304, 0x1, 0x1, 0x2, 0x9, @remote}, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800110304000000000000000a000000fefb19c41509700000000000000014000500000000000008000000008227253710b081dc07c0321c4ea759d405ce74e82b5e17b8863013bcfb72cbc2fc500ff35701f5c3c34cdcd8875867c05cf97361f35cb537167dcd4f1622a3033aa2c7cb27e8d46fa077d9832e3b04050dd2c77155fe8e1ec504407c1faafe4e42648676bd6f16e0"], 0x30}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0x7, 0x2, 0xfad, 0x180}, 0x10) 11:01:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1050, r3, 0x102, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7fff}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x315}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210200000000f90000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) 11:01:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f00, 0x7}}]}, 0x20}}, 0x0) [ 1547.309242][ T3256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1547.335010][ T3262] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 11:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 1547.371573][ T3264] device syz_tun left promiscuous mode [ 1547.378796][ T3264] bridge52: port 1(syz_tun) entered disabled state 11:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r4, 0x100}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r5, 0xba, "574e00bbd37c4a902b31d07a1fa6e4554946934c94e50d3df3eb5b1833179cec9c08f4025ad267ce8175871520ff4f1b6abf6bd9584fd2f674596e2d447ed970189374f2e4d315e881dcf6a6a777d6e1ffc98f33f4f5fc1663e7ba8179c22d890f07d82b465c8f061634f2e430e8072c195924a90973c8c90e253394b5e835a47eff3fcedbfa06a079619c1b5a37e969d4e130715e88f2ba57844458e2b74dde3ff5d814fe5ea639d3dad04456fa6dfc7fbecbcf0a6bbef58feb"}, &(0x7f0000000100)=0xc2) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1547.510103][ T3264] bridge53: port 1(syz_tun) entered blocking state [ 1547.517232][ T3264] bridge53: port 1(syz_tun) entered disabled state [ 1547.526476][ T3264] device syz_tun entered promiscuous mode [ 1547.540845][ T3258] bridge53: port 2(erspan0) entered blocking state [ 1547.547841][ T3258] bridge53: port 2(erspan0) entered disabled state [ 1547.557484][ T3258] device erspan0 entered promiscuous mode [ 1547.567308][ T3272] device erspan0 left promiscuous mode [ 1547.578145][ T3272] bridge53: port 2(erspan0) entered disabled state [ 1547.708405][ T3272] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1547.719211][ T3276] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4000, 0x7}}]}, 0x20}}, 0x0) 11:01:23 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r36, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r37, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1547.750510][ T3274] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1547.927042][ T3283] device syz_tun left promiscuous mode [ 1547.939631][ T3283] bridge53: port 1(syz_tun) entered disabled state [ 1548.069706][ T3283] bridge54: port 1(syz_tun) entered blocking state [ 1548.076630][ T3283] bridge54: port 1(syz_tun) entered disabled state [ 1548.098173][ T3283] device syz_tun entered promiscuous mode [ 1548.113001][ T3289] bridge54: port 2(erspan0) entered blocking state [ 1548.122384][ T3289] bridge54: port 2(erspan0) entered disabled state [ 1548.131584][ T3289] device erspan0 entered promiscuous mode [ 1548.143490][ T3292] device erspan0 left promiscuous mode [ 1548.150900][ T3292] bridge54: port 2(erspan0) entered disabled state [ 1548.278493][ T3292] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:23 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket(0x40000000015, 0x805, 0x0) getsockopt(r35, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r36 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r36, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r37, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6000, 0x7}}]}, 0x20}}, 0x0) 11:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="5ded69d90ab042417cfd6acf76a377013a684d068bfc1bb98b5388af936c0c2f5f32e646f8cd52a9fe1ad8a79acfe5b94c118c8a094aa239a62ffa07a7b177a1486c386c4859b362cd97461ecc34a971ab9e6d0761aa", 0x56}, {&(0x7f0000000100)="d67acb0cb2a2a9db826bf8c70952f9ab362695f9957bb75d1007f961064e11e007680b9221ee2579f2db75d4a3c6b825ca73d084c730183ca7e72cbb9bc2cf0ed14c5612d9c1d38044b7e9", 0x4b}], 0x2, 0xfff) 11:01:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2102080000000f0000000100080008000300d2ef3193bb2030f113a2d6bc667be5d0719b6d330c82e6773333c8a962a7b11eed3b02e5acd2663f45bf232bbf4951c3ac09f9fa616f3d9f471629b21fcdb1c0a98e9f3797c95af3bd3541276e60189c5c2c11293217783d9322efe2c9873ac5dc4ac587f5270f0efa5bcd6d772e1a47e561788a5a9e17d4d29d65c9bc008df29baa7aca21c0ff27", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) 11:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) 11:01:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe23}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1548.421431][ T3303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.434916][ T3305] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1548.507829][ T3305] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1548.528118][ T3315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.548676][ T3314] device syz_tun left promiscuous mode 11:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7615, 0x7}}]}, 0x20}}, 0x0) 11:01:24 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1548.565982][ T3314] bridge54: port 1(syz_tun) entered disabled state [ 1548.728841][ T3314] bridge55: port 1(syz_tun) entered blocking state [ 1548.738089][ T3314] bridge55: port 1(syz_tun) entered disabled state [ 1548.747377][ T3314] device syz_tun entered promiscuous mode [ 1548.758536][ T3308] bridge55: port 2(erspan0) entered blocking state 11:01:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0x3e3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast2, @in=@loopback, 0x4e24, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x0, r4, r5}, {0x3, 0x6, 0x8, 0x4, 0x4, 0x5, 0x200, 0x5}, {0x2c5, 0x100000001, 0x100000001, 0x6e9}, 0x55, 0x6e6bb7, 0x0, 0x1, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x2b}, 0xa, @in=@broadcast, 0x3501, 0x1, 0x1, 0x81, 0x2a4, 0x8, 0xfffffffe}}, 0xe8) pipe(&(0x7f0000000000)) [ 1548.774923][ T3308] bridge55: port 2(erspan0) entered disabled state [ 1548.795503][ T3308] device erspan0 entered promiscuous mode [ 1548.848526][ T3324] device erspan0 left promiscuous mode [ 1548.855375][ T3324] bridge55: port 2(erspan0) entered disabled state 11:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 1548.968560][ T3324] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1548.979272][ T3328] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1549.006958][ T3328] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:24 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r35 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r35, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r36, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf000, 0x7}}]}, 0x20}}, 0x0) 11:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000000000fe00deff045bffff13000500004266f16f450000000000000000000000010001c6"], 0x30}}, 0x0) 11:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x34000, 0x7}}]}, 0x20}}, 0x0) 11:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) 11:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0xffffff74, 0x18, 0x311, 0x0, 0x2, {0xa, 0x0, 0x20, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1549.229735][ T3347] device syz_tun left promiscuous mode [ 1549.248608][ T3347] bridge55: port 1(syz_tun) entered disabled state [ 1549.408705][ T3347] bridge56: port 1(syz_tun) entered blocking state [ 1549.416594][ T3347] bridge56: port 1(syz_tun) entered disabled state [ 1549.425697][ T3347] device syz_tun entered promiscuous mode [ 1549.433744][ T3351] bridge56: port 2(erspan0) entered blocking state [ 1549.440777][ T3351] bridge56: port 2(erspan0) entered disabled state [ 1549.449185][ T3351] device erspan0 entered promiscuous mode [ 1549.458132][ T3357] device erspan0 left promiscuous mode 11:01:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe24}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1549.479108][ T3357] bridge56: port 2(erspan0) entered disabled state 11:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x400300, 0x7}}]}, 0x20}}, 0x0) [ 1549.608578][ T3357] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:25 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket(0x40000000015, 0x805, 0x0) getsockopt(r34, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r35 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r35, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r36, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000f759ffcb7c7b8a7c25a9327c87b619788d052b7373beb43a67a5a61ec27ba7dfc1b8fe97cd9642753f13a84562df07d21e", @ANYRES16=r2, @ANYBLOB="2102000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040) 11:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) 11:01:25 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0xa010, r2, 0x72420000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r8], 0x2}}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe0, 0x0) r13 = accept4(r12, &(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000009c0)=0x80, 0x800) r14 = socket$inet_sctp(0x2, 0x5, 0x84) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r16}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000001bc0)=@assoc_value={r16, 0x6}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc3ff030000000000007f00df", @ANYRES32=r10], 0x2}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001e80)={0x0, @can={0x1d, 0x0}, @ax25={0x3, @null, 0x8}, @rc={0x1f, {0x3, 0x48, 0x57, 0x6, 0xf4, 0x20}, 0x40}, 0x101, 0x0, 0x0, 0x0, 0x101, &(0x7f0000001e40)='hsr0\x00', 0x3, 0xe67, 0x48dc}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84200408}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="30002cbd7000fcdbdf25010000000c009900060000000400000008000300", @ANYRES32=r8, @ANYBLOB="0c009900ff070000020000000c00990001000000ffffffff08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r17, @ANYBLOB="0c00990001000000000000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4401a}, 0x20000000) 11:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0) 11:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf0ffff, 0x7}}]}, 0x20}}, 0x0) [ 1549.929008][ T3388] device syz_tun left promiscuous mode [ 1549.959871][ T3388] bridge56: port 1(syz_tun) entered disabled state [ 1550.128743][ T3388] bridge57: port 1(syz_tun) entered blocking state [ 1550.135597][ T3388] bridge57: port 1(syz_tun) entered disabled state [ 1550.144592][ T3388] device syz_tun entered promiscuous mode [ 1550.158553][ T3397] bridge57: port 2(erspan0) entered blocking state 11:01:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2c, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 1550.178493][ T3397] bridge57: port 2(erspan0) entered disabled state [ 1550.186463][ T3397] device erspan0 entered promiscuous mode [ 1550.200146][ T3401] device erspan0 left promiscuous mode [ 1550.207727][ T3401] bridge57: port 2(erspan0) entered disabled state 11:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 1550.348525][ T3401] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1550.378420][ T3406] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1000000, 0x7}}]}, 0x20}}, 0x0) [ 1550.403616][ T3406] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe25}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x16, 0x800, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:26 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) socket(0x40000000015, 0x805, 0x0) r34 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1550.589383][ T3420] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0) 11:01:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2000000, 0x7}}]}, 0x20}}, 0x0) 11:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000a000000fe0000000000000014000500000000000000000000000000000001c6a3f51a86c535d3404c0187ff8828c186d41da1"], 0x30}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r3, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x21c, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb99e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff2b}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x15b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc3fa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe3d0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x19}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x28e1298f}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) 11:01:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r5, 0x7, 0x5, 0x8, 0x1f, 0x3, 0x8, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x1}}, 0x4, 0x4, 0x10000, 0x0, 0x7}}, &(0x7f0000000000)=0xb0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1550.782399][ T3430] device syz_tun left promiscuous mode [ 1550.808529][ T3430] bridge57: port 1(syz_tun) entered disabled state [ 1550.920039][ T3430] bridge58: port 1(syz_tun) entered blocking state [ 1550.926954][ T3430] bridge58: port 1(syz_tun) entered disabled state [ 1550.936077][ T3430] device syz_tun entered promiscuous mode [ 1550.947935][ T3438] bridge58: port 2(erspan0) entered blocking state [ 1550.956067][ T3438] bridge58: port 2(erspan0) entered disabled state [ 1550.969001][ T3438] device erspan0 entered promiscuous mode [ 1550.989735][ T3443] device erspan0 left promiscuous mode 11:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xa00000000000000}, 0x0) 11:01:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3000000, 0x7}}]}, 0x20}}, 0x0) 11:01:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x0, 0x5, 0x64) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/133, 0x85}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f0000000680)=""/4, 0x4}], 0x8}, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@ipv6_deladdr={0x50, 0x15, 0x20, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x311f5dd61df72c2b, 0xc9, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @empty}}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffffb, 0x400}}, @IFA_FLAGS={0x8, 0x8, 0x44}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet6(0xa, 0xa, 0x1f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000031c0)={0x0, 0x70, &(0x7f0000003140)=[@in6={0xa, 0x4e21, 0xfb4, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x31}, 0xa253}, @in6={0xa, 0x4e23, 0x6, @rand_addr="a9e6a36c1f527c554eb492152b98a97b", 0x82f}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}]}, &(0x7f0000003200)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000003100)={r6, 0x1}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001e80)={r7, 0x22, "e4391a5453b12b642a3983a637766c07509fff2f77840c9cdfd6af23fb7e2d39bb70"}, &(0x7f0000001ec0)=0x2a) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r8 = socket(0x10, 0x80001, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) [ 1551.012793][ T3443] bridge58: port 2(erspan0) entered disabled state [ 1551.172558][ T3443] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:26 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r34 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4000000, 0x7}}]}, 0x20}}, 0x0) [ 1551.411840][ T3474] device syz_tun left promiscuous mode [ 1551.420543][ T3474] bridge58: port 1(syz_tun) entered disabled state 11:01:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe26}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xb00000000000000}, 0x0) 11:01:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0xffffffdd}}, 0x0) 11:01:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa000000, 0x7}}]}, 0x20}}, 0x0) [ 1551.528577][ T3474] bridge59: port 1(syz_tun) entered blocking state [ 1551.535272][ T3474] bridge59: port 1(syz_tun) entered disabled state [ 1551.543998][ T3474] device syz_tun entered promiscuous mode [ 1551.551779][ T3479] bridge59: port 2(erspan0) entered blocking state [ 1551.566136][ T3479] bridge59: port 2(erspan0) entered disabled state [ 1551.603593][ T3479] device erspan0 entered promiscuous mode 11:01:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8fce, 0x3}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r4, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1551.652974][ T3483] device erspan0 left promiscuous mode [ 1551.681439][ T3483] bridge59: port 2(erspan0) entered disabled state [ 1551.798514][ T3483] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xe000000, 0x7}}]}, 0x20}}, 0x0) 11:01:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000100)=0x344, 0x80800) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2d02000017e995b9c31672ca000800030000", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) 11:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xc00000000000000}, 0x0) 11:01:27 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r34 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2b, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r6, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x3f000000}, 0x8) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@empty, 0x0, 0x6, 0x4e21, 0x0, 0x0, 0x190, 0x80, 0x0, 0x0, r7}, {0x1c993630, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x6, 0x6e6bba, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d4}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0xa7f8935fca5fa15b, 0x3cef14a422163db1, 0x2, 0x0, 0x0, 0xd2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in=@empty, 0x4e22, 0x401, 0x4e22, 0x8000, 0xa, 0x80, 0x120, 0x2f, 0x0, r7}, {0x2, 0x7f800, 0x100000001, 0x100000000, 0x100, 0x1, 0xff, 0x99c}, {0x6, 0xffff, 0x2, 0x49f}, 0xe6c, 0x6e6bb9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d2, 0xff}, 0x1, @in, 0x3507, 0x3, 0x0, 0x5, 0x1f, 0xff, 0x800}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@broadcast, 0x4e23, 0x83, 0x4e21, 0x5, 0xa, 0x80, 0x90, 0x1d, 0x0, r7}, {0x8, 0x2, 0x7, 0x6, 0x6f, 0x100000001, 0x2, 0x100}, {0x80000000, 0xb3, 0x4, 0x10000}, 0x6, 0x6e6bb4, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x8, @in6=@rand_addr="b7677c1b8b9f67513a0073d337d3d023", 0x0, 0xf13d7da3df0727ef, 0x0, 0x0, 0x5, 0xc3fc, 0x8}}, 0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@updsa={0x15c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfb, {{@in=@multicast2, @in6=@rand_addr="18885c4ebff9fdedf42a1a0d4305843e", 0x4e24, 0x723, 0x4e23, 0xfff9, 0xa, 0x1a0, 0x63315b05e2727c61, 0xc, r3, r7}, {@in=@remote, 0x4d3, 0x3c}, @in=@empty, {0x6, 0x3, 0x0, 0x1fb, 0x300000000000000, 0x6, 0x34a5, 0x8}, {0x9, 0x81, 0xffffffff, 0x3}, {0x9, 0x1, 0x200}, 0x70bd28, 0x0, 0xa, 0x2, 0x4, 0x6}, [@address_filter={0x28, 0x1a, {@in6=@empty, @in6=@rand_addr="e8e5b9385f868789649d894b33c62b55", 0xa, 0x8, 0x5}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd26, 0xdf}}, @lifetime_val={0x24, 0x9, {0x4, 0x7fff, 0x9, 0x3}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2c, 0xfff}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x8000) [ 1551.975010][ T3513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xe00000000000000}, 0x0) 11:01:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf000000, 0x7}}]}, 0x20}}, 0x0) [ 1552.100421][ T3516] device syz_tun left promiscuous mode [ 1552.101232][ T3522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1552.106109][ T3516] bridge59: port 1(syz_tun) entered disabled state [ 1552.295069][ T3516] bridge60: port 1(syz_tun) entered blocking state [ 1552.302441][ T3516] bridge60: port 1(syz_tun) entered disabled state [ 1552.312563][ T3516] device syz_tun entered promiscuous mode [ 1552.321384][ T3528] bridge60: port 2(erspan0) entered blocking state [ 1552.337757][ T3528] bridge60: port 2(erspan0) entered disabled state [ 1552.347192][ T3528] device erspan0 entered promiscuous mode [ 1552.361355][ T3531] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1552.375721][ T3532] device erspan0 left promiscuous mode [ 1552.392204][ T3532] bridge60: port 2(erspan0) entered disabled state [ 1552.558437][ T3532] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe27}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000a00)=0xe8) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0xffffffffffffffed, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000180)={@sco={0x1f, {0xf8, 0x5e, 0xf7, 0x1f, 0xff, 0x20}}, {&(0x7f0000000000)=""/28, 0x1c}, &(0x7f0000000040), 0x1}, 0xa0) 11:01:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3f000000, 0x7}}]}, 0x20}}, 0x0) 11:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xf00000000000000}, 0x0) 11:01:28 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r33, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r34, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r3}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r8, 0x60, "4cb722b8dbd73d24e14d9d719fff2ad8acce29839a18f6aa948c3e6d0256c29d326737565006a048716d8e54a9f0dbc578f58971b8465d8f413e36ff3b562b26c1d95db395e442d5d46ac0152e988cc41d73d63dcf2e750d03bf41acbda38c44"}, &(0x7f0000000040)=0x68) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r9, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x13}, 0xffff}}}, 0x84) 11:01:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x40000000, 0x7}}]}, 0x20}}, 0x0) 11:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 1552.880785][ T3570] device syz_tun left promiscuous mode [ 1552.912660][ T3570] bridge60: port 1(syz_tun) entered disabled state 11:01:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/41) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 1553.118630][ T3570] bridge61: port 1(syz_tun) entered blocking state [ 1553.126822][ T3570] bridge61: port 1(syz_tun) entered disabled state [ 1553.150116][ T3570] device syz_tun entered promiscuous mode [ 1553.172535][ T3582] bridge61: port 2(erspan0) entered blocking state [ 1553.207826][ T3582] bridge61: port 2(erspan0) entered disabled state [ 1553.242113][ T3582] device erspan0 entered promiscuous mode [ 1553.257684][ T3585] device erspan0 left promiscuous mode [ 1553.292734][ T3585] bridge61: port 2(erspan0) entered disabled state 11:01:28 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r33, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r34, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1553.438529][ T3585] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1553.439262][ T3595] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x1100000000000000}, 0x0) 11:01:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x60000000, 0x7}}]}, 0x20}}, 0x0) 11:01:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300a83dec14c08e891213f4851b84b48b400417cefff786563c4355a3d19ccc6de5a17b00e24e0295d1c22ee9216142f566808f06db6072d56a86f7bfc98b1601031932bc1a95582a1be4f5d375f6d770c5e28f36d8177877719805ae2d9147c1099b49cc26330e77673b878d295168b7b2e54ad27258dc79b2c90487d76c4f72572d9f8ed9c3e4faf947e7acda222ee0d0678a26e7df257b8705f377622be838cd8b9cbbfc7251d85cdfd2369cee0916248eefde7fb8", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000491}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000440)=r4) getsockname(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000240)=0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x3c, "7c6119a51df633cbcf8559efd904be53be266aebe2c062aeab56a24a2fb4ca73798f0577322d72e4775acbb13ef392b5f75644b3ff374423791eda11"}, &(0x7f0000000300)=0x44) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000340)={r7, 0x8}, &(0x7f00000003c0)=0x8) 11:01:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe28}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1553.664391][ T3601] device syz_tun left promiscuous mode [ 1553.697504][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1553.705030][ T3601] bridge61: port 1(syz_tun) entered disabled state 11:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) [ 1553.858519][ T3601] bridge62: port 1(syz_tun) entered blocking state [ 1553.865431][ T3601] bridge62: port 1(syz_tun) entered disabled state [ 1553.875119][ T3601] device syz_tun entered promiscuous mode 11:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x1200000000000000}, 0x0) 11:01:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x76150000, 0x7}}]}, 0x20}}, 0x0) [ 1553.899533][ T3616] bridge62: port 2(erspan0) entered blocking state [ 1553.921193][ T3616] bridge62: port 2(erspan0) entered disabled state [ 1553.975097][ T3616] device erspan0 entered promiscuous mode [ 1554.011311][ T3623] device erspan0 left promiscuous mode [ 1554.013109][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1554.021536][ T3623] bridge62: port 2(erspan0) entered disabled state [ 1554.158522][ T3623] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1554.170148][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 11:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x1300000000000000}, 0x0) 11:01:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r3], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x105}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000440)={{0x4, 0x0, @reserved="786954ba5f767826309e00ae64add2c7c81b02143dd07eb29dc9c118bb236f43"}, 0x1000, [], "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"}) 11:01:29 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r32 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r32, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r33, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9effffff, 0x7}}]}, 0x20}}, 0x0) 11:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000140)=0x1f6f, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x1400000000000000}, 0x0) [ 1554.404224][ T3657] IPv6: NLM_F_REPLACE set, but no existing node found! 11:01:29 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") 11:01:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf0ffffff, 0x7}}]}, 0x20}}, 0x0) [ 1554.456157][ T3660] device syz_tun left promiscuous mode [ 1554.476467][ T3660] bridge62: port 1(syz_tun) entered disabled state [ 1554.658866][ T3660] bridge63: port 1(syz_tun) entered blocking state [ 1554.667859][ T3660] bridge63: port 1(syz_tun) entered disabled state [ 1554.680391][ T3660] device syz_tun entered promiscuous mode [ 1554.688150][ T3668] bridge63: port 2(erspan0) entered blocking state [ 1554.698252][ T3668] bridge63: port 2(erspan0) entered disabled state 11:01:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x8, 0x2) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x890}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa0, r4, 0x220, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xfffffe8a, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x0, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x0, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0xffffffffffffffb4, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x0, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x74}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x80) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000040)={@remote, @local, @loopback}, 0xc) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000440)=@v2={0x2, @adiantum, 0x3, [], "a7c365b1c516d7e2051937e6788b2bda"}) 11:01:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe29}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 1554.706543][ T3668] device erspan0 entered promiscuous mode [ 1554.718735][ T3673] device erspan0 left promiscuous mode [ 1554.739002][ T3673] bridge63: port 2(erspan0) entered disabled state 11:01:30 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r33, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r34, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1554.868386][ T3673] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff000, 0x7}}]}, 0x20}}, 0x0) 11:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x320e000000000000}, 0x0) 11:01:30 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r32, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r33, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1555.023111][ T3705] device syz_tun left promiscuous mode [ 1555.029031][ T3705] bridge2: port 1(syz_tun) entered disabled state [ 1555.218580][ T3705] bridge4: port 1(syz_tun) entered blocking state [ 1555.225450][ T3705] bridge4: port 1(syz_tun) entered disabled state [ 1555.234918][ T3705] device syz_tun entered promiscuous mode [ 1555.244829][ T3713] device erspan0 left promiscuous mode [ 1555.253952][ T3713] bridge2: port 2(erspan0) entered disabled state [ 1555.398541][ T3713] bridge4: port 2(erspan0) entered blocking state [ 1555.405328][ T3713] bridge4: port 2(erspan0) entered disabled state [ 1555.414643][ T3713] device erspan0 entered promiscuous mode [ 1555.440006][ T3718] device syz_tun left promiscuous mode [ 1555.445945][ T3718] bridge63: port 1(syz_tun) entered disabled state 11:01:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x0, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1555.578790][ T3718] bridge64: port 1(syz_tun) entered blocking state [ 1555.585565][ T3718] bridge64: port 1(syz_tun) entered disabled state [ 1555.594497][ T3718] device syz_tun entered promiscuous mode [ 1555.602927][ T3717] device erspan0 left promiscuous mode [ 1555.618924][ T3717] bridge4: port 2(erspan0) entered disabled state 11:01:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000800)={@multicast2, @remote, 0x0}, &(0x7f0000000840)=0xc) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc008000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000424}, 0x20000000) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x5, 0x6}, 0xc) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") recvfrom$rose(r1, &(0x7f0000000000)=""/92, 0x5c, 0x20, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @bcast}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r9, 0x0, r11, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000c80)={r10}) r14 = socket(0x10, 0x80002, 0x0) ioctl(r14, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f0000000d00)={0x0, @rand_addr, @local}, &(0x7f0000000d40)=0xc) sendmsg$nl_route_sched(r13, &(0x7f0000001640)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f0000000d80)=@deltclass={0x868, 0x29, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x1c, 0xfffb}, {0x1b42c60ad73fb29f, 0x10}, {0x1, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @tclass_kind_options=@c_sfb={0x8, 0x1, 'sfb\x00'}, @TCA_RATE={0x6, 0x5, {0xdc, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x0, 0x23}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x80c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x5, 0x4, 0x80, 0x8, 0xfffffffb, 0x100, 0x400, 0x0, 0x8158, 0x400, 0xcabb, 0xda, 0x6, 0x71, 0x8001, 0x3, 0xac0, 0xb3, 0x8001, 0x3, 0x9, 0x1, 0x9, 0x9, 0x7a21, 0x1, 0x401, 0x7fff, 0x7fff, 0xd0, 0x41d2, 0x80000000, 0x101, 0x3f, 0x800, 0x1, 0x8, 0x5, 0x7, 0x1, 0xfffffff8, 0x7ff, 0x2, 0x0, 0x3, 0x9, 0x12, 0x3, 0x1, 0x5, 0xe6, 0x1, 0x20, 0xfffeffff, 0xffffffff, 0x80, 0x151, 0x80a, 0x1, 0x5, 0x8000, 0x2, 0x8, 0x4, 0xfff, 0x80, 0x6, 0x8, 0x81, 0x101, 0x4b59, 0x2652, 0xe19, 0x3f, 0x8, 0x9, 0x0, 0xfff, 0x0, 0x3, 0x7f, 0x3, 0x9, 0x1ff, 0x1, 0x9, 0x6, 0x7, 0x1, 0x1, 0x1, 0x80, 0x1, 0x7f, 0x7ff, 0xcfa, 0x0, 0x5, 0x401, 0x400, 0x0, 0xc9, 0x6, 0x3ff, 0x7f, 0x8, 0x40000000, 0x7fffffff, 0x8001, 0x1, 0xfffffff9, 0x7, 0x1a, 0x1000, 0x400, 0x7, 0x8, 0x1ff, 0x6, 0x9, 0xeefa, 0x3, 0x1, 0x9, 0x3, 0x6, 0x1f, 0x3, 0x2, 0x7, 0x5, 0x8074, 0x2, 0x4, 0x5c022ddc, 0x6, 0x800, 0x65, 0x80, 0x9, 0xd0f, 0x71, 0x6, 0x20, 0x8, 0x3, 0x1, 0xaf, 0x6, 0x974c, 0x9, 0x9, 0x3ff, 0x6, 0x7, 0x8c9, 0x6ad, 0xfff, 0x3, 0x3, 0x1, 0x1ff, 0x7ff, 0x4, 0x100, 0xaa, 0x10000, 0xfffffffa, 0x3, 0x8, 0x5, 0x40, 0x0, 0x5, 0x800, 0x2, 0x212, 0x8, 0x3f, 0x7fffffff, 0x954, 0xf4a3, 0xad, 0x9898, 0x81, 0x7, 0xbca9, 0x1000, 0x1ff, 0x800, 0x1, 0x9, 0x101, 0x0, 0x5, 0x0, 0x8, 0x40, 0x10001, 0x6d, 0x78087eeb, 0x4, 0x81, 0x6, 0x2, 0x2, 0x0, 0x9, 0x73d, 0x7, 0x655, 0x4, 0x0, 0x7, 0x1, 0x5, 0x1, 0x7, 0x10001, 0x1c97b4c7, 0x5, 0x1, 0x1, 0x7, 0x5, 0x9, 0x1000, 0x5, 0x8, 0x3, 0x0, 0x20, 0xbc, 0x5, 0x1ff, 0xf8d, 0x81, 0x8, 0x3, 0xfffffff7, 0x6, 0x7, 0x4, 0x80000000, 0x9, 0xa2, 0x3ac, 0x69b, 0xfffff000, 0x6, 0x6, 0x8, 0xdc88000, 0x0, 0x0, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x2, 0x4, 0x2af, 0x2, 0x6, 0x9, 0x8, 0x3ff, 0x1000, 0xfff, 0x401, 0xa0c, 0x4, 0x0, 0xc9f7, 0x7, 0xd4d, 0x9, 0x100, 0x1, 0x7, 0x7a177fa6, 0x3, 0x7f, 0x311, 0xf1, 0x6, 0x9, 0xffff, 0x0, 0x2, 0x7f, 0x71, 0x7fff, 0xd31, 0x81, 0x1f, 0x9, 0x5, 0x4, 0x9, 0x3, 0x7ff, 0x8, 0x7, 0x7fffffff, 0x9, 0x10001, 0x80, 0x8, 0x1f, 0x81, 0x20, 0x1, 0xe4, 0x2e3, 0x4, 0x0, 0x4, 0xce58, 0xffffffe0, 0x4, 0x1ff, 0x6, 0x4, 0x8, 0x415f, 0x3f, 0x0, 0x2, 0x1, 0x8, 0x7fff, 0x4, 0x800, 0xff, 0x100, 0x8, 0x6, 0x5, 0x5, 0x1ff, 0x40, 0x400, 0x3, 0x3, 0xffffffc1, 0x3ff, 0x4, 0x694, 0x2, 0x400, 0x2cbd6260, 0xfffff000, 0x20, 0xffffffff, 0x7, 0x16c7f397, 0x7, 0x5, 0x1f, 0x8, 0x101, 0xb518, 0x607b, 0x8001, 0x80, 0x2, 0x2, 0x1, 0x0, 0x2, 0xfffffffe, 0x1, 0x2, 0x4, 0x7, 0x49e5, 0x8, 0x7, 0x4, 0x8, 0x0, 0x3, 0x0, 0x8, 0x6, 0x5, 0x2, 0x5, 0x1, 0x7, 0x6, 0x0, 0x3f, 0xd5c6, 0x7ff, 0x4, 0x1, 0x3, 0xa42, 0x1, 0x163, 0x5, 0x9c8, 0xfffffff9, 0x7, 0x8, 0xffff, 0x1000000, 0x4, 0x5, 0x591, 0xdf, 0xd25, 0x6, 0xffff, 0x8001, 0x6, 0x100, 0x80000001, 0x4, 0x6, 0x800, 0x8001, 0xfffffff8, 0xc108, 0x6b53, 0x1, 0x7fff, 0x7f, 0x401, 0x1, 0x7fffffff, 0x3f, 0x7, 0x6, 0xa99a, 0x9, 0xffffffff, 0xffff948b, 0x812, 0x9, 0x10000, 0x1, 0xffffffff, 0x10001, 0x7f, 0x0, 0x10000, 0x1, 0x9, 0xffffd6d1, 0x3, 0x8, 0x7, 0x7, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc62e, 0x44, 0x1, 0x9, 0x3, 0x80000001, 0x7fffffff, 0x44, 0xffff7fff, 0x0, 0x3ff, 0x80000000, 0x9, 0x80000001, 0x6, 0xabd, 0x10001, 0x0, 0x10000, 0x0, 0x9, 0x6, 0x5, 0xfffff000, 0xfffffffc, 0x8000, 0x7fff, 0x1, 0x2, 0x8, 0xb1e, 0xc1, 0x9, 0x2, 0x3f, 0x1, 0xfa14, 0x33c3d43d, 0x0, 0x77eb, 0x793c, 0x0, 0x1, 0x80000001, 0x1d14, 0x2, 0x35d3, 0x9, 0x2, 0x3, 0x6, 0x7]}]}}, @tclass_kind_options=@c_mq={0x7, 0x1, 'mq\x00'}]}, 0x868}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="3d136e0a07cdb202385cf86544d4ed8024ec3c1a782e3dd53e896aa45aa6b2beca7c40bec96c18406c2d8cee9c9ae29000bce31210583a9ac8ba6a2642646df8f5f46b1bc635e37d69c79ae8cec542fd421d0b96a2f7a5b4852e7a963c5c73f3f8f3c94348bec984a8348fdcdc153c5f17616b10211b903e8a46f2dba66009bba543c27a86e9df98820c7898f4deda61ab4c407ef04f3e357ac631a1a4211d72c19ebedfa7fb4f4f76c082bdc18bc00e8c66a2f14b384221bb95130a56b99098b590a4b9ebdefd7476c63a764e38ea24316d977feb375922c6bf7eb6ffe1", @ANYBLOB="219d36e59612be3d5200000008000800257b", @ANYRES32=r12, @ANYBLOB="0c0099000300000002000000"], 0x5}}, 0x1005) 11:01:31 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r33, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r34, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1555.788685][ T3720] bridge64: port 2(erspan0) entered blocking state [ 1555.795576][ T3720] bridge64: port 2(erspan0) entered disabled state [ 1555.808217][ T3720] device erspan0 entered promiscuous mode [ 1555.817547][ T3721] device erspan0 left promiscuous mode [ 1555.823935][ T3721] bridge64: port 2(erspan0) entered disabled state [ 1555.948375][ T3721] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff7f, 0x7}}]}, 0x20}}, 0x0) 11:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 11:01:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2a}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1556.011465][ T3742] device syz_tun left promiscuous mode [ 1556.029405][ T3742] bridge4: port 1(syz_tun) entered disabled state 11:01:31 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r32, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r33, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1556.210162][ T3742] bridge5: port 1(syz_tun) entered blocking state [ 1556.217293][ T3742] bridge5: port 1(syz_tun) entered disabled state [ 1556.226813][ T3742] device syz_tun entered promiscuous mode [ 1556.247150][ T3767] device syz_tun left promiscuous mode 11:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x4000000000000000}, 0x0) [ 1556.258745][ T3767] bridge64: port 1(syz_tun) entered disabled state 11:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe29}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1556.430397][ T3767] bridge65: port 1(syz_tun) entered blocking state [ 1556.437076][ T3767] bridge65: port 1(syz_tun) entered disabled state [ 1556.447180][ T3767] device syz_tun entered promiscuous mode [ 1556.466808][ T3765] bridge65: port 2(erspan0) entered blocking state [ 1556.473514][ T3765] bridge65: port 2(erspan0) entered disabled state 11:01:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff9e, 0x7}}]}, 0x20}}, 0x0) [ 1556.485552][ T3765] device erspan0 entered promiscuous mode [ 1556.495331][ T3770] device erspan0 left promiscuous mode [ 1556.501445][ T3770] bridge65: port 2(erspan0) entered disabled state 11:01:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x44) 11:01:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff0, 0x7}}]}, 0x20}}, 0x0) [ 1556.678479][ T3770] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:32 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r31 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r31, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x4800000000000000}, 0x0) [ 1556.866068][ T3793] device syz_tun left promiscuous mode [ 1556.878904][ T3793] bridge65: port 1(syz_tun) entered disabled state [ 1556.998509][ T3793] bridge66: port 1(syz_tun) entered blocking state [ 1557.005662][ T3793] bridge66: port 1(syz_tun) entered disabled state [ 1557.014464][ T3793] device syz_tun entered promiscuous mode [ 1557.035233][ T3797] bridge66: port 2(erspan0) entered blocking state 11:01:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x7}}]}, 0x20}}, 0x0) 11:01:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2b}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 1557.050047][ T3797] bridge66: port 2(erspan0) entered disabled state [ 1557.066352][ T3797] device erspan0 entered promiscuous mode [ 1557.075724][ T3799] device erspan0 left promiscuous mode [ 1557.109599][ T3799] bridge66: port 2(erspan0) entered disabled state 11:01:32 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r32, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r33, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1557.258779][ T3799] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x6000000000000000}, 0x0) 11:01:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xc}}]}, 0x20}}, 0x0) 11:01:32 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r31, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1557.377519][ T3814] device syz_tun left promiscuous mode [ 1557.383490][ T3814] bridge5: port 1(syz_tun) entered disabled state 11:01:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x3, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006740)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f00000000c0)=""/22, 0x1}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/205, 0xcd}], 0x8, &(0x7f00000003c0)=""/35, 0x23}, 0x401}, {{&(0x7f0000000700)=@phonet, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/148, 0x94}, {&(0x7f00000018c0)=""/81, 0x51}, {&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002a40)=""/113, 0x71}, 0x119}, {{&(0x7f0000002ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b40)=""/55, 0x37}, {&(0x7f0000002b80)=""/23, 0x17}, {&(0x7f0000002bc0)=""/170, 0xaa}, {&(0x7f0000006580)=""/97, 0x61}], 0x4, &(0x7f0000002d40)=""/76, 0x4c}, 0xf2}, {{&(0x7f0000002dc0)=@nfc_llcp, 0x80, &(0x7f0000003300)=[{&(0x7f0000002e40)=""/223, 0xdf}, {&(0x7f0000002f40)=""/255, 0xff}, {&(0x7f0000003040)=""/212, 0xd4}, {&(0x7f0000003140)=""/78, 0x4e}, {&(0x7f00000031c0)=""/84, 0x54}, {&(0x7f0000003240)=""/75, 0x4b}, {&(0x7f00000032c0)=""/21, 0x15}], 0x7, &(0x7f0000003380)=""/103, 0x67}, 0x2}, {{&(0x7f0000003400)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003480)=""/240, 0xf0}, {&(0x7f0000003580)=""/31, 0x1f}, {&(0x7f00000035c0)=""/75, 0x4b}, {&(0x7f0000003640)=""/181, 0xb5}], 0x4, &(0x7f0000003740)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004740)=""/121, 0x79}, {&(0x7f00000047c0)=""/94, 0x5e}, {&(0x7f0000004840)=""/138, 0x8a}, {&(0x7f0000004900)=""/129, 0x81}, {&(0x7f00000049c0)=""/44, 0x2c}, {&(0x7f0000004a00)=""/217, 0xd9}, {&(0x7f0000004b00)=""/178, 0xb2}], 0x7, &(0x7f0000004c40)=""/201, 0xc9}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000004d40)=""/25, 0x19}, {&(0x7f00000069c0)=""/181, 0xb5}, {&(0x7f0000004e40)=""/114, 0x72}, {&(0x7f0000004ec0)=""/215, 0xd7}, {&(0x7f0000004fc0)=""/163, 0xa3}, {&(0x7f0000005080)=""/70, 0x46}, {&(0x7f0000005100)=""/4096, 0x1000}], 0x7, &(0x7f0000006180)=""/248, 0xf8}, 0x401}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006280)=""/203, 0xcb}, {&(0x7f0000006380)=""/246, 0xf6}], 0x2, &(0x7f00000064c0)=""/158, 0x9e}}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006580)}, {&(0x7f00000065c0)}], 0x2, &(0x7f0000006640)=""/201, 0xc9}, 0x41}], 0x9, 0xb6da94f25169327c, &(0x7f0000006980)={0x77359400}) [ 1557.507589][ T3814] bridge6: port 1(syz_tun) entered blocking state [ 1557.529260][ T3814] bridge6: port 1(syz_tun) entered disabled state [ 1557.547519][ T3814] device syz_tun entered promiscuous mode 11:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x6558000000000000}, 0x0) [ 1557.556666][ T3821] bridge6: port 2(erspan0) entered blocking state [ 1557.563439][ T3821] bridge6: port 2(erspan0) entered disabled state [ 1557.577890][ T3821] device erspan0 entered promiscuous mode [ 1557.633847][ T3827] device erspan0 left promiscuous mode [ 1557.645668][ T3827] bridge6: port 2(erspan0) entered disabled state 11:01:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff000, 0x7}}]}, 0x20}}, 0x0) [ 1557.769395][ T3831] device syz_tun left promiscuous mode [ 1557.775421][ T3831] bridge66: port 1(syz_tun) entered disabled state [ 1557.918530][ T3831] bridge67: port 1(syz_tun) entered blocking state [ 1557.918619][ T3831] bridge67: port 1(syz_tun) entered disabled state [ 1557.933629][ T3831] device syz_tun entered promiscuous mode [ 1557.941866][ T3833] bridge67: port 2(erspan0) entered blocking state [ 1557.952345][ T3833] bridge67: port 2(erspan0) entered disabled state [ 1557.960699][ T3833] device erspan0 entered promiscuous mode 11:01:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b2700"/248], 0x10094) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) 11:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x6800000000000000}, 0x0) 11:01:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xd}}]}, 0x20}}, 0x0) [ 1557.984241][ T3826] device erspan0 left promiscuous mode [ 1558.010195][ T3826] bridge67: port 2(erspan0) entered disabled state [ 1558.190495][ T3826] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2c}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:33 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket(0x40000000015, 0x805, 0x0) getsockopt(r31, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r32 = socket(0x40000000015, 0x805, 0x0) getsockopt(r32, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r33 = socket(0x40000000015, 0x805, 0x0) getsockopt(r33, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r34 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r34, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r35, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xe}}]}, 0x20}}, 0x0) 11:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 11:01:33 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r30, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r31, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 1558.503290][ T3867] device syz_tun left promiscuous mode [ 1558.521555][ T3867] bridge67: port 1(syz_tun) entered disabled state 11:01:34 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1558.688458][ T3867] bridge68: port 1(syz_tun) entered blocking state [ 1558.695244][ T3867] bridge68: port 1(syz_tun) entered disabled state [ 1558.709235][ T3867] device syz_tun entered promiscuous mode [ 1558.716946][ T3860] device syz_tun left promiscuous mode [ 1558.723256][ T3860] bridge6: port 1(syz_tun) entered disabled state [ 1558.861387][ T3860] bridge7: port 1(syz_tun) entered blocking state [ 1558.867992][ T3860] bridge7: port 1(syz_tun) entered disabled state [ 1558.880917][ T3860] device syz_tun entered promiscuous mode [ 1558.892079][ T3874] bridge68: port 2(erspan0) entered blocking state [ 1558.901519][ T3874] bridge68: port 2(erspan0) entered disabled state [ 1558.914275][ T3874] device erspan0 entered promiscuous mode [ 1558.924753][ T3876] bridge7: port 2(erspan0) entered blocking state [ 1558.934500][ T3876] bridge7: port 2(erspan0) entered disabled state [ 1558.943957][ T3876] device erspan0 entered promiscuous mode [ 1558.952373][ T3879] device erspan0 left promiscuous mode [ 1558.958012][ T3879] bridge68: port 2(erspan0) entered disabled state 11:01:34 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r30, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r31, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1559.078358][ T3879] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1559.088833][ T3880] device erspan0 left promiscuous mode [ 1559.097662][ T3880] bridge7: port 2(erspan0) entered disabled state 11:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 11:01:34 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r31, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1559.267180][ T3889] device syz_tun left promiscuous mode [ 1559.281109][ T3889] bridge68: port 1(syz_tun) entered disabled state 11:01:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xf}}]}, 0x20}}, 0x0) 11:01:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0xf, 0x80000, 0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r7, 0xe70, 0x20}, &(0x7f0000000040)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x300, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0xfffffffffffffff8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd34, 0x2}}]}, 0x28}}, 0x0) [ 1559.478766][ T3889] bridge69: port 1(syz_tun) entered blocking state [ 1559.488534][ T3889] bridge69: port 1(syz_tun) entered disabled state [ 1559.511187][ T3889] device syz_tun entered promiscuous mode 11:01:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x2be, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x273}, 0x28}}, 0x0) 11:01:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2d}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1559.534651][ T3891] bridge69: port 2(erspan0) entered blocking state [ 1559.547118][ T3891] bridge69: port 2(erspan0) entered disabled state [ 1559.555978][ T3891] device erspan0 entered promiscuous mode [ 1559.569109][ T3888] device erspan0 left promiscuous mode [ 1559.575807][ T3888] bridge69: port 2(erspan0) entered disabled state [ 1559.602707][ T3912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:01:35 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1559.698460][ T3888] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1559.716865][ T3903] device syz_tun left promiscuous mode [ 1559.725388][ T3903] bridge7: port 1(syz_tun) entered disabled state [ 1559.870411][ T3903] bridge8: port 1(syz_tun) entered blocking state [ 1559.877232][ T3903] bridge8: port 1(syz_tun) entered disabled state [ 1559.885281][ T3903] device syz_tun entered promiscuous mode [ 1559.896796][ T3908] bridge8: port 2(erspan0) entered blocking state [ 1559.903547][ T3908] bridge8: port 2(erspan0) entered disabled state [ 1559.912092][ T3908] device erspan0 entered promiscuous mode [ 1559.921048][ T3910] device erspan0 left promiscuous mode [ 1559.926967][ T3910] bridge8: port 2(erspan0) entered disabled state 11:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x8000000000000000}, 0x0) [ 1560.081730][ T3924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.097608][ T3920] device syz_tun left promiscuous mode 11:01:35 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket(0x40000000015, 0x805, 0x0) getsockopt(r29, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r30 = socket(0x40000000015, 0x805, 0x0) getsockopt(r30, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r31 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r31, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1560.138074][ T3920] bridge69: port 1(syz_tun) entered disabled state 11:01:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x10}}]}, 0x20}}, 0x0) [ 1560.239051][ T3920] bridge70: port 1(syz_tun) entered blocking state [ 1560.245767][ T3920] bridge70: port 1(syz_tun) entered disabled state [ 1560.254378][ T3920] device syz_tun entered promiscuous mode [ 1560.268521][ T3922] bridge70: port 2(erspan0) entered blocking state [ 1560.275469][ T3922] bridge70: port 2(erspan0) entered disabled state [ 1560.324339][ T3922] device erspan0 entered promiscuous mode [ 1560.344684][ T3923] device erspan0 left promiscuous mode [ 1560.353227][ T3923] bridge70: port 2(erspan0) entered disabled state [ 1560.468581][ T3923] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1560.494275][ T3932] device syz_tun left promiscuous mode 11:01:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="0e000000ca2d09d3568896060178b3fa1df5da", @ANYRES16=r1, @ANYBLOB="2102000000000000000065396347c754d59a", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x5}}, 0x0) 11:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x8100000000000000}, 0x0) 11:01:36 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1560.518664][ T3932] bridge8: port 1(syz_tun) entered disabled state 11:01:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0xffffffffffffff39}}, 0x0) 11:01:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1560.698967][ T3932] bridge9: port 1(syz_tun) entered blocking state [ 1560.719971][ T3932] bridge9: port 1(syz_tun) entered disabled state [ 1560.740286][ T3932] device syz_tun entered promiscuous mode [ 1560.752812][ T3933] bridge9: port 2(erspan0) entered blocking state [ 1560.773582][ T3933] bridge9: port 2(erspan0) entered disabled state 11:01:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x11}}]}, 0x20}}, 0x0) [ 1560.805897][ T3933] device erspan0 entered promiscuous mode [ 1560.827425][ T3937] device erspan0 left promiscuous mode [ 1560.852416][ T3937] bridge9: port 2(erspan0) entered disabled state 11:01:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2e}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:36 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1561.032495][ T3954] device syz_tun left promiscuous mode [ 1561.046087][ T3954] bridge70: port 1(syz_tun) entered disabled state [ 1561.209451][ T3954] bridge71: port 1(syz_tun) entered blocking state [ 1561.217564][ T3954] bridge71: port 1(syz_tun) entered disabled state [ 1561.225732][ T3954] device syz_tun entered promiscuous mode [ 1561.234662][ T3955] bridge71: port 2(erspan0) entered blocking state [ 1561.241338][ T3955] bridge71: port 2(erspan0) entered disabled state [ 1561.249859][ T3955] device erspan0 entered promiscuous mode 11:01:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300e0ff0200000097037f1bfec7efd6cd0b9c5e082e1b683c60957ae0010e041f3d109e0c9778d9fd7252d45c3347cb579675ad02473841c73919e96f74e07163c1caef037ffee77a2f97c4084b94dc4425927535b756b2101551cbdd4295d378ed311998e21eff9eab415d78fe99"], 0x28}}, 0x0) [ 1561.257787][ T3960] device erspan0 left promiscuous mode [ 1561.263793][ T3960] bridge71: port 2(erspan0) entered disabled state 11:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x8602000000000000}, 0x0) [ 1561.388444][ T3960] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1561.410691][ T3971] device syz_tun left promiscuous mode 11:01:36 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1561.434898][ T3971] bridge9: port 1(syz_tun) entered disabled state [ 1561.588747][ T3971] bridge10: port 1(syz_tun) entered blocking state [ 1561.595569][ T3971] bridge10: port 1(syz_tun) entered disabled state [ 1561.604122][ T3971] device syz_tun entered promiscuous mode [ 1561.612726][ T3972] bridge10: port 2(erspan0) entered blocking state [ 1561.620182][ T3972] bridge10: port 2(erspan0) entered disabled state [ 1561.629160][ T3972] device erspan0 entered promiscuous mode [ 1561.637867][ T3974] device erspan0 left promiscuous mode [ 1561.644923][ T3974] bridge10: port 2(erspan0) entered disabled state 11:01:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x12}}]}, 0x20}}, 0x0) 11:01:37 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1561.796520][ T3987] device syz_tun left promiscuous mode [ 1561.821119][ T3987] bridge71: port 1(syz_tun) entered disabled state [ 1561.978472][ T3987] bridge72: port 1(syz_tun) entered blocking state [ 1561.986147][ T3987] bridge72: port 1(syz_tun) entered disabled state [ 1561.994825][ T3987] device syz_tun entered promiscuous mode [ 1562.004496][ T3988] bridge72: port 2(erspan0) entered blocking state [ 1562.012015][ T3988] bridge72: port 2(erspan0) entered disabled state [ 1562.021540][ T3988] device erspan0 entered promiscuous mode [ 1562.030470][ T3989] device erspan0 left promiscuous mode [ 1562.036218][ T3989] bridge72: port 2(erspan0) entered disabled state 11:01:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b1310000000000000000006250b87578ba41089def5b2b91c9de37a46e75b14f4ab6186426662096879994fe535a248130d064b31234d93a9f19d53e0c0baa91813fa394d10221100c632f311c2b695de10f72f9fb55dece7298c9db15bbfad08749ee6fe85efcc15b3ad5f962ab43e3147b9a9cf02cefa42ac3db891fdd01161e7403ae74"], 0x59) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @initdev}, &(0x7f0000000040)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r10, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040026bd7000fddbdf250100000008000300", @ANYRES32=r11, @ANYBLOB="0074d5cd3600d2cd42bc0c4700000000a35e58eb4c4d2a825fc435778d2659626f62ee62536a275051c294b2bc84a9cbc8b34cf2c5bbc92c3198a727ab8146b63345598fd777ab85575d240101605908edb3131f16446e1e7ac3d73b895a210ab41d7dc62e2e3cccf083b86d28518437"], 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r14, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r14, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept$packet(r14, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x1ce) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x250b3ce723196288}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa, 0x6, @random='i>\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048}, 0x10045020) [ 1562.168409][ T3989] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1562.204928][ T3998] device syz_tun left promiscuous mode 11:01:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe2f}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) [ 1562.248514][ T3998] bridge10: port 1(syz_tun) entered disabled state 11:01:37 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1562.449395][ T3998] bridge11: port 1(syz_tun) entered blocking state [ 1562.455967][ T3998] bridge11: port 1(syz_tun) entered disabled state [ 1562.468856][ T3998] device syz_tun entered promiscuous mode [ 1562.477276][ T3999] bridge11: port 2(erspan0) entered blocking state [ 1562.493045][ T3999] bridge11: port 2(erspan0) entered disabled state [ 1562.504663][ T3999] device erspan0 entered promiscuous mode [ 1562.513032][ T4000] device erspan0 left promiscuous mode [ 1562.523552][ T4000] bridge11: port 2(erspan0) entered disabled state 11:01:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x13}}]}, 0x20}}, 0x0) 11:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1562.689703][ T4018] device syz_tun left promiscuous mode [ 1562.708528][ T4018] bridge72: port 1(syz_tun) entered disabled state 11:01:38 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1562.878551][ T4018] bridge73: port 1(syz_tun) entered blocking state [ 1562.885283][ T4018] bridge73: port 1(syz_tun) entered disabled state [ 1562.895981][ T4018] device syz_tun entered promiscuous mode [ 1562.906819][ T4020] bridge73: port 2(erspan0) entered blocking state [ 1562.913793][ T4020] bridge73: port 2(erspan0) entered disabled state [ 1562.923343][ T4020] device erspan0 entered promiscuous mode [ 1562.932201][ T4022] device erspan0 left promiscuous mode [ 1562.937789][ T4022] bridge73: port 2(erspan0) entered disabled state 11:01:38 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1563.048484][ T4022] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1563.063835][ T4035] device syz_tun left promiscuous mode [ 1563.078819][ T4035] bridge11: port 1(syz_tun) entered disabled state 11:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xd103000000000000}, 0x0) 11:01:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r10], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000001580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000024}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x221, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x175, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1563.228861][ T4035] bridge12: port 1(syz_tun) entered blocking state [ 1563.253598][ T4035] bridge12: port 1(syz_tun) entered disabled state [ 1563.254904][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1563.274649][ T4035] device syz_tun entered promiscuous mode [ 1563.290968][ T4036] bridge12: port 2(erspan0) entered blocking state [ 1563.297686][ T4036] bridge12: port 2(erspan0) entered disabled state [ 1563.312257][ T4036] device erspan0 entered promiscuous mode [ 1563.320724][ T4037] device erspan0 left promiscuous mode [ 1563.326535][ T4037] bridge12: port 2(erspan0) entered disabled state 11:01:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x14}}]}, 0x20}}, 0x0) [ 1563.487186][ T4047] device syz_tun left promiscuous mode [ 1563.495156][ T4047] bridge73: port 1(syz_tun) entered disabled state 11:01:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe30}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:39 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r9, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r13 = getpid() write$cgroup_pid(r12, &(0x7f0000000100)=r13, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r14, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r15 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r14, r15}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r16 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r16}, 0xc) r17 = socket(0x40000000015, 0x805, 0x0) getsockopt(r17, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r17, 0x8903, &(0x7f0000000780)) r18 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r18}, 0xc) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r21 = openat$cgroup_procs(r20, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r22 = getpid() write$cgroup_pid(r21, &(0x7f0000000100)=r22, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r23, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r24 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r23, r24}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r25 = socket(0x40000000015, 0x805, 0x0) getsockopt(r25, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1563.648797][ T4047] bridge74: port 1(syz_tun) entered blocking state [ 1563.655558][ T4047] bridge74: port 1(syz_tun) entered disabled state [ 1563.674834][ T4047] device syz_tun entered promiscuous mode [ 1563.685791][ T4051] bridge74: port 2(erspan0) entered blocking state [ 1563.697150][ T4051] bridge74: port 2(erspan0) entered disabled state [ 1563.698692][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1563.712797][ T4051] device erspan0 entered promiscuous mode [ 1563.723247][ T4052] device erspan0 left promiscuous mode [ 1563.731513][ T4052] bridge74: port 2(erspan0) entered disabled state 11:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xe302000000000000}, 0x0) 11:01:39 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r27, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x15}}]}, 0x20}}, 0x0) [ 1563.868362][ T4052] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1563.896600][ T4064] device syz_tun left promiscuous mode [ 1563.910832][ T4064] bridge12: port 1(syz_tun) entered disabled state [ 1564.088623][ T4064] bridge13: port 1(syz_tun) entered blocking state [ 1564.095427][ T4064] bridge13: port 1(syz_tun) entered disabled state [ 1564.103802][ T4064] device syz_tun entered promiscuous mode [ 1564.113356][ T4065] bridge13: port 2(erspan0) entered blocking state [ 1564.120001][ T4065] bridge13: port 2(erspan0) entered disabled state [ 1564.128208][ T4065] device erspan0 entered promiscuous mode 11:01:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xb74071871ceb57e7, &(0x7f0000000000)={&(0x7f0000000380)={0x28, r1, 0x221, 0xfffffffe, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1564.145341][ T4079] device syz_tun left promiscuous mode [ 1564.151334][ T4079] bridge74: port 1(syz_tun) entered disabled state 11:01:39 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r9, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r13 = getpid() write$cgroup_pid(r12, &(0x7f0000000100)=r13, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r14, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r15 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r14, r15}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r16 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r16}, 0xc) r17 = socket(0x40000000015, 0x805, 0x0) getsockopt(r17, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r17, 0x8903, &(0x7f0000000780)) r18 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r18}, 0xc) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r21 = openat$cgroup_procs(r20, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r22 = getpid() write$cgroup_pid(r21, &(0x7f0000000100)=r22, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r23, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r24 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r23, r24}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r25 = socket(0x40000000015, 0x805, 0x0) getsockopt(r25, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1564.288706][ T4079] bridge75: port 1(syz_tun) entered blocking state [ 1564.295616][ T4079] bridge75: port 1(syz_tun) entered disabled state [ 1564.304083][ T4079] device syz_tun entered promiscuous mode [ 1564.318039][ T4077] bridge75: port 2(erspan0) entered blocking state 11:01:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x16}}]}, 0x20}}, 0x0) 11:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1564.336938][ T4077] bridge75: port 2(erspan0) entered disabled state [ 1564.345738][ T4077] device erspan0 entered promiscuous mode [ 1564.357291][ T4088] device erspan0 left promiscuous mode [ 1564.405455][ T4088] bridge75: port 2(erspan0) entered disabled state 11:01:40 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r27, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1564.538493][ T4088] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1564.552486][ T4092] device syz_tun left promiscuous mode [ 1564.563879][ T4092] bridge13: port 1(syz_tun) entered disabled state 11:01:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="543895f5", @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) [ 1564.718490][ T4092] bridge14: port 1(syz_tun) entered blocking state [ 1564.725264][ T4092] bridge14: port 1(syz_tun) entered disabled state [ 1564.734963][ T4092] device syz_tun entered promiscuous mode [ 1564.743619][ T4094] device erspan0 left promiscuous mode [ 1564.757098][ T4094] bridge13: port 2(erspan0) entered disabled state 11:01:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1564.893271][ T4094] bridge14: port 2(erspan0) entered blocking state [ 1564.901313][ T4094] bridge14: port 2(erspan0) entered disabled state [ 1564.915288][ T4094] device erspan0 entered promiscuous mode [ 1564.945740][ T4109] device syz_tun left promiscuous mode 11:01:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe31}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x17}}]}, 0x20}}, 0x0) 11:01:40 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r9, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r13 = getpid() write$cgroup_pid(r12, &(0x7f0000000100)=r13, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r14, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r15 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r14, r15}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r16 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r16}, 0xc) r17 = socket(0x40000000015, 0x805, 0x0) getsockopt(r17, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r17, 0x8903, &(0x7f0000000780)) r18 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r18}, 0xc) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r21 = openat$cgroup_procs(r20, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r22 = getpid() write$cgroup_pid(r21, &(0x7f0000000100)=r22, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r23, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r24 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r23, r24}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r25 = socket(0x40000000015, 0x805, 0x0) getsockopt(r25, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfc00000000000000}, 0x0) [ 1564.976991][ T4109] bridge75: port 1(syz_tun) entered disabled state [ 1565.138471][ T4109] bridge76: port 1(syz_tun) entered blocking state [ 1565.147327][ T4109] bridge76: port 1(syz_tun) entered disabled state [ 1565.162501][ T4109] device syz_tun entered promiscuous mode [ 1565.173139][ T4110] bridge76: port 2(erspan0) entered blocking state [ 1565.182171][ T4110] bridge76: port 2(erspan0) entered disabled state [ 1565.192428][ T4110] device erspan0 entered promiscuous mode [ 1565.202699][ T4111] device erspan0 left promiscuous mode [ 1565.209629][ T4111] bridge76: port 2(erspan0) entered disabled state 11:01:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x100, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1565.338390][ T4111] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1565.363041][ T4135] device syz_tun left promiscuous mode [ 1565.380908][ T4135] bridge14: port 1(syz_tun) entered disabled state 11:01:40 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) socket(0x40000000015, 0x805, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r3], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x30b, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r1, 0x221, 0xfffffffc, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0x1}]}, 0x24}}, 0x0) [ 1565.533003][ T4149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1565.538580][ T4135] bridge15: port 1(syz_tun) entered blocking state [ 1565.559332][ T4135] bridge15: port 1(syz_tun) entered disabled state [ 1565.568003][ T4135] device syz_tun entered promiscuous mode [ 1565.578100][ T4136] device erspan0 left promiscuous mode [ 1565.585547][ T4136] bridge14: port 2(erspan0) entered disabled state [ 1565.708652][ T4136] bridge15: port 2(erspan0) entered blocking state [ 1565.715532][ T4136] bridge15: port 2(erspan0) entered disabled state [ 1565.724908][ T4136] device erspan0 entered promiscuous mode 11:01:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x18}}]}, 0x20}}, 0x0) 11:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfe80000000000000}, 0x0) 11:01:41 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1565.768121][ T4150] device syz_tun left promiscuous mode [ 1565.801918][ T4150] bridge76: port 1(syz_tun) entered disabled state [ 1565.822073][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1565.968520][ T4150] bridge77: port 1(syz_tun) entered blocking state [ 1565.975281][ T4150] bridge77: port 1(syz_tun) entered disabled state [ 1565.986119][ T4150] device syz_tun entered promiscuous mode [ 1565.994159][ T4151] bridge77: port 2(erspan0) entered blocking state [ 1566.001086][ T4151] bridge77: port 2(erspan0) entered disabled state [ 1566.011142][ T4151] device erspan0 entered promiscuous mode [ 1566.019505][ T4152] device erspan0 left promiscuous mode [ 1566.025405][ T4152] bridge77: port 2(erspan0) entered disabled state 11:01:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) socket$inet6(0xa, 0x80000, 0x0) [ 1566.158411][ T4152] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x19}}]}, 0x20}}, 0x0) [ 1566.208577][ T4167] device syz_tun left promiscuous mode [ 1566.226203][ T4167] bridge15: port 1(syz_tun) entered disabled state 11:01:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe32}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfec0000000000000}, 0x0) 11:01:41 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1566.429078][ T4167] bridge16: port 1(syz_tun) entered blocking state [ 1566.450883][ T4167] bridge16: port 1(syz_tun) entered disabled state [ 1566.461652][ T4167] device syz_tun entered promiscuous mode [ 1566.472081][ T4168] device erspan0 left promiscuous mode [ 1566.478122][ T4168] bridge15: port 2(erspan0) entered disabled state [ 1566.608618][ T4168] bridge16: port 2(erspan0) entered blocking state [ 1566.622697][ T4168] bridge16: port 2(erspan0) entered disabled state [ 1566.635207][ T4168] device erspan0 entered promiscuous mode 11:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xff00000000000000}, 0x0) [ 1566.659296][ T4191] device syz_tun left promiscuous mode [ 1566.676660][ T4191] bridge77: port 1(syz_tun) entered disabled state 11:01:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1a}}]}, 0x20}}, 0x0) 11:01:42 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4) sendmmsg$inet(r4, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5dae60dcb56970a9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="020026bd70007ddbdc6039149deaa50449c6b3df2501000bd0c5b9080004000000000000000c00080004000000000000000c4b21afd00cfb4b349025ac45c80e000400080000000000000008000100000000000c000400af0f0000000000000c00040008000000000000000c00080001800000000000005b508aa1572e0e59aa4c909c268123dffea190b5d868f93ca9cd9146cc850f57149d5864e46e4c4b0d9dabaa42faa3daf9ba19be3833b1358cd02a502724c289b81791f9f812410aedba5e5c1476680987a25c11ba380839c1258ef7b40fe58893e0f12cc2b56a3f51136ab4b775ae6d6efb80746626fc03158b4d0c67902c9a46ea6530d1231d16560ea61a8ecde48218afc92ae8432af6f3b249cebb4b55e61ab2428fcc662ec4ab8e55cad19382f7f966fb1a4d56224b91057e797f3aff1b130aaf7f711cb1e86281dd4a8bace722b74947d797e475faaafb1939a8334be048096db5cb28ba94b9750461681ad832ccd51911c47f5a4cef5e3b1c06cfa89eebf935a5419542a03f9efa0a5347"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r8, 0x520, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe46d}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @rand_addr=0x4}, {0x2, 0x4e22, @empty}, 0x420, 0x0, 0x0, 0x0, 0xd268, 0x0, 0x143, 0x200000080000000}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, &(0x7f00000000c0)=0x14) [ 1566.868624][ T4191] bridge78: port 1(syz_tun) entered blocking state [ 1566.883621][ T4191] bridge78: port 1(syz_tun) entered disabled state [ 1566.911662][ T4191] device syz_tun entered promiscuous mode [ 1566.927871][ T4192] bridge78: port 2(erspan0) entered blocking state [ 1566.934805][ T4192] bridge78: port 2(erspan0) entered disabled state [ 1566.944324][ T4192] device erspan0 entered promiscuous mode [ 1566.953312][ T4193] device erspan0 left promiscuous mode [ 1566.961530][ T4193] bridge78: port 2(erspan0) entered disabled state 11:01:42 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1567.088436][ T4193] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1567.110070][ T4207] device syz_tun left promiscuous mode [ 1567.125237][ T4207] bridge16: port 1(syz_tun) entered disabled state [ 1567.239056][ T4207] bridge17: port 1(syz_tun) entered blocking state [ 1567.245746][ T4207] bridge17: port 1(syz_tun) entered disabled state [ 1567.256300][ T4207] device syz_tun entered promiscuous mode [ 1567.265408][ T4209] device erspan0 left promiscuous mode [ 1567.271942][ T4209] bridge16: port 2(erspan0) entered disabled state [ 1567.400316][ T4209] bridge17: port 2(erspan0) entered blocking state [ 1567.407058][ T4209] bridge17: port 2(erspan0) entered disabled state [ 1567.416166][ T4209] device erspan0 entered promiscuous mode 11:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 11:01:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1b}}]}, 0x20}}, 0x0) [ 1567.446874][ T4218] device syz_tun left promiscuous mode [ 1567.452718][ T4218] bridge78: port 1(syz_tun) entered disabled state 11:01:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe33}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:43 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) socket(0x40000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1567.598794][ T4218] bridge79: port 1(syz_tun) entered blocking state [ 1567.620597][ T4218] bridge79: port 1(syz_tun) entered disabled state [ 1567.653521][ T4218] device syz_tun entered promiscuous mode [ 1567.671595][ T4219] bridge79: port 2(erspan0) entered blocking state [ 1567.684080][ T4219] bridge79: port 2(erspan0) entered disabled state [ 1567.695047][ T4219] device erspan0 entered promiscuous mode [ 1567.712048][ T4220] device erspan0 left promiscuous mode [ 1567.718834][ T4220] bridge79: port 2(erspan0) entered disabled state [ 1567.858446][ T4220] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1567.883963][ T4235] device syz_tun left promiscuous mode 11:01:43 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) getuid() r25 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r26, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1567.904217][ T4235] bridge17: port 1(syz_tun) entered disabled state [ 1568.048720][ T4235] bridge18: port 1(syz_tun) entered blocking state [ 1568.056888][ T4235] bridge18: port 1(syz_tun) entered disabled state [ 1568.073135][ T4235] device syz_tun entered promiscuous mode [ 1568.086424][ T4237] device erspan0 left promiscuous mode [ 1568.118632][ T4237] bridge17: port 2(erspan0) entered disabled state [ 1568.259465][ T4237] bridge18: port 2(erspan0) entered blocking state [ 1568.266114][ T4237] bridge18: port 2(erspan0) entered disabled state [ 1568.301915][ T4237] device erspan0 entered promiscuous mode [ 1568.332773][ T4243] device syz_tun left promiscuous mode [ 1568.348557][ T4243] bridge79: port 1(syz_tun) entered disabled state 11:01:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1c}}]}, 0x20}}, 0x0) 11:01:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 11:01:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8696071") sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = accept(r4, 0x0, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xe3c4aaab9f1d6407}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="068fc30b0678e64792de24d5e5e19143"}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8003}, 0x20008000) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="d123c25f0a4d52f0a658fa5cc7dc59be"}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x16}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20012810) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0xfffffffffffffffe, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x0, 0x1, 0xffffffffffffffff}]}, 0x28}}, 0x0) 11:01:43 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1568.488625][ T4243] bridge80: port 1(syz_tun) entered blocking state [ 1568.499747][ T4243] bridge80: port 1(syz_tun) entered disabled state [ 1568.510652][ T4243] device syz_tun entered promiscuous mode [ 1568.523468][ T4244] bridge80: port 2(erspan0) entered blocking state [ 1568.537192][ T4244] bridge80: port 2(erspan0) entered disabled state [ 1568.556322][ T4244] device erspan0 entered promiscuous mode [ 1568.583653][ T4245] device erspan0 left promiscuous mode [ 1568.599875][ T4245] bridge80: port 2(erspan0) entered disabled state 11:01:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe35}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:44 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r26, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1568.718548][ T4245] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1568.739889][ T4263] device erspan0 left promiscuous mode [ 1568.745758][ T4263] bridge18: port 2(erspan0) entered disabled state 11:01:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 1569.064797][ T4262] device syz_tun left promiscuous mode [ 1569.076671][ T4262] bridge18: port 1(syz_tun) entered disabled state 11:01:44 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) accept(0xffffffffffffffff, &(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000024c0)=0x80) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1569.229705][ T4262] bridge19: port 1(syz_tun) entered blocking state [ 1569.236591][ T4262] bridge19: port 1(syz_tun) entered disabled state [ 1569.244887][ T4262] device syz_tun entered promiscuous mode [ 1569.259537][ T4272] device syz_tun left promiscuous mode [ 1569.268698][ T4272] bridge80: port 1(syz_tun) entered disabled state [ 1569.388479][ T4272] bridge81: port 1(syz_tun) entered blocking state [ 1569.395228][ T4272] bridge81: port 1(syz_tun) entered disabled state [ 1569.403430][ T4272] device syz_tun entered promiscuous mode [ 1569.412012][ T4273] bridge81: port 2(erspan0) entered blocking state [ 1569.420055][ T4273] bridge81: port 2(erspan0) entered disabled state [ 1569.433415][ T4273] device erspan0 entered promiscuous mode [ 1569.441660][ T4274] device erspan0 left promiscuous mode [ 1569.453302][ T4274] bridge81: port 2(erspan0) entered disabled state 11:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1d}}]}, 0x20}}, 0x0) [ 1569.578573][ T4274] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1569.613666][ T4284] device syz_tun left promiscuous mode 11:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) 11:01:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @remote}}, 0x5, 0x8, 0xffffffe1, 0x7ff, 0x49, 0x6, 0x8}, &(0x7f0000000000)=0xfffffffffffffec9) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x3f, 0x1, 0x400, 0xfffffe01, r4}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000500)='threaded\x00', 0x9) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000000c0)={0x7, 'bridge_slave_0\x00', {0x8}, 0x5}) r7 = socket(0x5209628487a0fc36, 0x2, 0x6) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r10 = accept(r9, &(0x7f00000002c0)=@nl=@unspec, &(0x7f0000000340)=0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x53, "0560a0e3ae6ff546b777b85a6d338b8ad3eed753b5549756d7ea36d64ab416faa28382f959f96895e52adfbf2940cc7852798df220c0ef6ae83a6eec3ca02ad0956cef4fa176bd657d68a19a3f864fcef34534"}, &(0x7f00000003c0)=0x5b) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0xfe, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0xffffffffffffff96, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4da00000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x7fffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8000004) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x3, &(0x7f0000000140)=0x31, 0xfea1) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SIOCGETNODEID(r12, 0x89e1, &(0x7f0000000600)={0x4}) connect$inet(r11, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r11}) getsockopt$TIPC_SRC_DROPPABLE(r13, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1569.634370][ T4284] bridge19: port 1(syz_tun) entered disabled state 11:01:45 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r24, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1569.808554][ T4284] bridge20: port 1(syz_tun) entered blocking state [ 1569.826555][ T4284] bridge20: port 1(syz_tun) entered disabled state [ 1569.838182][ T4284] device syz_tun entered promiscuous mode [ 1569.847518][ T4285] bridge20: port 2(erspan0) entered blocking state [ 1569.854449][ T4285] bridge20: port 2(erspan0) entered disabled state [ 1569.866060][ T4285] device erspan0 entered promiscuous mode [ 1569.875062][ T4286] device erspan0 left promiscuous mode [ 1569.884419][ T4286] bridge20: port 2(erspan0) entered disabled state 11:01:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe36}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1570.023294][ T4299] IPv6: Can't replace route, no match found [ 1570.044605][ T4302] device syz_tun left promiscuous mode [ 1570.054102][ T4302] bridge81: port 1(syz_tun) entered disabled state 11:01:45 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket(0x40000000015, 0x805, 0x0) getsockopt(r28, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r29 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r29, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r30, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1570.209505][ T4302] bridge82: port 1(syz_tun) entered blocking state [ 1570.217611][ T4302] bridge82: port 1(syz_tun) entered disabled state [ 1570.226673][ T4302] device syz_tun entered promiscuous mode [ 1570.234900][ T4304] bridge82: port 2(erspan0) entered blocking state [ 1570.242310][ T4304] bridge82: port 2(erspan0) entered disabled state [ 1570.251128][ T4304] device erspan0 entered promiscuous mode [ 1570.259546][ T4305] device erspan0 left promiscuous mode [ 1570.265198][ T4305] bridge82: port 2(erspan0) entered disabled state [ 1570.388604][ T4305] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1e}}]}, 0x20}}, 0x0) 11:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 11:01:45 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) r24 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r24, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1570.433967][ T4314] device syz_tun left promiscuous mode [ 1570.447134][ T4314] bridge20: port 1(syz_tun) entered disabled state 11:01:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept4$netrom(r2, &(0x7f0000000000)={{0x3, @default}, [@null, @rose, @bcast, @bcast, @rose, @default, @default, @null]}, &(0x7f00000000c0)=0x48, 0x80800) [ 1570.619162][ T4314] bridge21: port 1(syz_tun) entered blocking state [ 1570.632675][ T4314] bridge21: port 1(syz_tun) entered disabled state [ 1570.656098][ T4314] device syz_tun entered promiscuous mode [ 1570.671012][ T4315] bridge21: port 2(erspan0) entered blocking state [ 1570.678069][ T4315] bridge21: port 2(erspan0) entered disabled state [ 1570.687073][ T4315] device erspan0 entered promiscuous mode [ 1570.696301][ T4316] device erspan0 left promiscuous mode [ 1570.708395][ T4316] bridge21: port 2(erspan0) entered disabled state 11:01:46 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r28 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1570.840337][ T4325] IPv6: Can't replace route, no match found [ 1570.857528][ T4327] device syz_tun left promiscuous mode [ 1570.868668][ T4327] bridge82: port 1(syz_tun) entered disabled state [ 1570.988627][ T4327] bridge83: port 1(syz_tun) entered blocking state [ 1570.995387][ T4327] bridge83: port 1(syz_tun) entered disabled state [ 1571.004094][ T4327] device syz_tun entered promiscuous mode [ 1571.012048][ T4332] bridge83: port 2(erspan0) entered blocking state [ 1571.024630][ T4332] bridge83: port 2(erspan0) entered disabled state [ 1571.033010][ T4332] device erspan0 entered promiscuous mode [ 1571.044420][ T4334] device erspan0 left promiscuous mode [ 1571.052004][ T4334] bridge83: port 2(erspan0) entered disabled state [ 1571.188426][ T4334] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x21}}]}, 0x20}}, 0x0) 11:01:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe37}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1571.233828][ T4341] device syz_tun left promiscuous mode [ 1571.272229][ T4341] bridge21: port 1(syz_tun) entered disabled state 11:01:46 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r22, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1571.439930][ T4341] bridge22: port 1(syz_tun) entered blocking state [ 1571.446957][ T4341] bridge22: port 1(syz_tun) entered disabled state [ 1571.457190][ T4341] device syz_tun entered promiscuous mode [ 1571.464951][ T4342] bridge22: port 2(erspan0) entered blocking state 11:01:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e22, @local}}, 0x5, 0x4, 0x101, 0x5, 0x8, 0xb1, 0x6}, 0x9c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r5, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="219c93de5a1e1cf93481998400000001", @ANYBLOB="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", @ANYBLOB="0c0099000300000002000000"], 0x5}}, 0x0) [ 1571.488529][ T4342] bridge22: port 2(erspan0) entered disabled state [ 1571.496863][ T4342] device erspan0 entered promiscuous mode [ 1571.515684][ T4343] device erspan0 left promiscuous mode 11:01:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x44dcaf13b3eb2087) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1571.557264][ T4343] bridge22: port 2(erspan0) entered disabled state 11:01:47 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket(0x40000000015, 0x805, 0x0) getsockopt(r27, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r28 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r28, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r29, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1571.713081][ T4356] IPv6: Can't replace route, no match found [ 1571.736438][ T4352] IPv6: Can't replace route, no match found [ 1571.746884][ T4358] device syz_tun left promiscuous mode 11:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1571.762398][ T4358] bridge83: port 1(syz_tun) entered disabled state [ 1571.918532][ T4358] bridge84: port 1(syz_tun) entered blocking state [ 1571.928579][ T4358] bridge84: port 1(syz_tun) entered disabled state [ 1571.936948][ T4358] device syz_tun entered promiscuous mode [ 1571.944800][ T4360] bridge84: port 2(erspan0) entered blocking state [ 1571.955600][ T4360] bridge84: port 2(erspan0) entered disabled state [ 1571.964395][ T4360] device erspan0 entered promiscuous mode [ 1571.980165][ T4364] device erspan0 left promiscuous mode [ 1571.985816][ T4364] bridge84: port 2(erspan0) entered disabled state 11:01:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x22}}]}, 0x20}}, 0x0) [ 1572.108435][ T4364] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1572.131143][ T4375] device syz_tun left promiscuous mode [ 1572.145885][ T4375] bridge22: port 1(syz_tun) entered disabled state 11:01:47 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r22, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:47 executing program 5: accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@default, @bcast, @netrom, @default, @remote, @default]}, &(0x7f0000000040)=0x40, 0x100000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000000200000099b86ead0bb741969b68e29a4259ca30656d51376110c61648fb77b5faf3252de32f36fd8991bc10e745c9524d96f11739eeafc9c0a7d3398918329561ca96e8007e301bb03141bc5665c1c2df53aff9d63104f95406e505727bc209cadea41341a30c4906a70a8c"], 0x28}}, 0x0) [ 1572.288887][ T4375] bridge23: port 1(syz_tun) entered blocking state [ 1572.298553][ T4375] bridge23: port 1(syz_tun) entered disabled state [ 1572.320262][ T4375] device syz_tun entered promiscuous mode 11:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1572.334535][ T4376] IPv6: Can't replace route, no match found [ 1572.341261][ T4377] bridge23: port 2(erspan0) entered blocking state [ 1572.348135][ T4377] bridge23: port 2(erspan0) entered disabled state [ 1572.365217][ T4377] device erspan0 entered promiscuous mode [ 1572.395281][ T4378] device erspan0 left promiscuous mode [ 1572.405655][ T4378] bridge23: port 2(erspan0) entered disabled state 11:01:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe38}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:48 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x805, 0x0) r27 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r27, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1572.537189][ T4388] device syz_tun left promiscuous mode [ 1572.557033][ T4388] bridge84: port 1(syz_tun) entered disabled state [ 1572.688852][ T4388] bridge85: port 1(syz_tun) entered blocking state [ 1572.695815][ T4388] bridge85: port 1(syz_tun) entered disabled state [ 1572.705197][ T4388] device syz_tun entered promiscuous mode [ 1572.714228][ T4390] bridge85: port 2(erspan0) entered blocking state [ 1572.725743][ T4390] bridge85: port 2(erspan0) entered disabled state 11:01:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21fa5ab26700080003000000000000000000000000000000abf9df074d427d9bf96941ed3e0bd42a5d259c2552bdd66fa1118e78779e43f546d8b1f2bf255d2ba8eb5403f90eac9378119b12a9b4931d1c15c30e306eeb270255369f1b07581c410988f0d57144d4446bcf2bb8332bdaaba4c940e90b9a767266a04464e59ba0dcbbbe9d56ea3d4bbda51eb94f6b96cf0fa2e6d43c6a1b13594726ac9aaf3724ba62c89ef2957899", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) [ 1572.736026][ T4390] device erspan0 entered promiscuous mode [ 1572.746267][ T4392] device erspan0 left promiscuous mode [ 1572.757277][ T4392] bridge85: port 2(erspan0) entered disabled state 11:01:48 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1572.898545][ T4392] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1572.909272][ T4398] IPv6: Can't replace route, no match found [ 1572.928400][ T4406] device syz_tun left promiscuous mode [ 1572.934144][ T4406] bridge23: port 1(syz_tun) entered disabled state 11:01:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x23}}]}, 0x20}}, 0x0) [ 1573.098902][ T4406] bridge24: port 1(syz_tun) entered blocking state [ 1573.105715][ T4406] bridge24: port 1(syz_tun) entered disabled state [ 1573.114060][ T4406] device syz_tun entered promiscuous mode [ 1573.123201][ T4408] bridge24: port 2(erspan0) entered blocking state [ 1573.130979][ T4408] bridge24: port 2(erspan0) entered disabled state [ 1573.139454][ T4408] device erspan0 entered promiscuous mode [ 1573.148060][ T4412] device erspan0 left promiscuous mode [ 1573.154515][ T4412] bridge24: port 2(erspan0) entered disabled state 11:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) 11:01:48 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket(0x40000000015, 0x805, 0x0) getsockopt(r26, 0x114, 0x1000000002711, 0x0, &(0x7f00000000c0)) r27 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r27, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1573.293540][ T4420] device syz_tun left promiscuous mode [ 1573.316175][ T4420] bridge85: port 1(syz_tun) entered disabled state [ 1573.478958][ T4420] bridge86: port 1(syz_tun) entered blocking state [ 1573.485671][ T4420] bridge86: port 1(syz_tun) entered disabled state [ 1573.493915][ T4420] device syz_tun entered promiscuous mode [ 1573.502502][ T4421] bridge86: port 2(erspan0) entered blocking state [ 1573.510867][ T4421] bridge86: port 2(erspan0) entered disabled state [ 1573.519057][ T4421] device erspan0 entered promiscuous mode 11:01:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r8], 0x2}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x40}]}, @NL80211_ATTR_MESH_ID={0x41, 0x18, "14715e179d00aee1b5c7a334aad7051ae062c11106fcf420ad6af4fca86c0868f2d903148d6204c300800fe17e5dbaa7ab575a85c7b83e82467f9af42d"}]}, 0x78}, 0x1, 0x0, 0x0, 0x10008021}, 0x2000000) socket$inet_dccp(0x2, 0x6, 0x0) [ 1573.527091][ T4422] device erspan0 left promiscuous mode [ 1573.536871][ T4422] bridge86: port 2(erspan0) entered disabled state 11:01:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x24}}]}, 0x20}}, 0x0) [ 1573.679313][ T4422] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1573.713261][ T4432] IPv6: Can't replace route, no match found [ 1573.722667][ T4433] device syz_tun left promiscuous mode 11:01:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe39}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:49 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1573.753104][ T4433] bridge24: port 1(syz_tun) entered disabled state [ 1573.918778][ T4433] bridge25: port 1(syz_tun) entered blocking state [ 1573.927376][ T4433] bridge25: port 1(syz_tun) entered disabled state [ 1573.936258][ T4433] device syz_tun entered promiscuous mode [ 1573.944538][ T4434] bridge25: port 2(erspan0) entered blocking state [ 1573.951295][ T4434] bridge25: port 2(erspan0) entered disabled state [ 1573.959662][ T4434] device erspan0 entered promiscuous mode [ 1573.967426][ T4435] device erspan0 left promiscuous mode [ 1573.976086][ T4435] bridge25: port 2(erspan0) entered disabled state 11:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 1574.117373][ T4449] device syz_tun left promiscuous mode [ 1574.136196][ T4449] bridge86: port 1(syz_tun) entered disabled state 11:01:49 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) socket(0x40000000015, 0x805, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1574.268634][ T4449] bridge87: port 1(syz_tun) entered blocking state [ 1574.275452][ T4449] bridge87: port 1(syz_tun) entered disabled state [ 1574.283812][ T4449] device syz_tun entered promiscuous mode [ 1574.296856][ T4451] bridge87: port 2(erspan0) entered blocking state [ 1574.303635][ T4451] bridge87: port 2(erspan0) entered disabled state [ 1574.312984][ T4451] device erspan0 entered promiscuous mode [ 1574.321119][ T4452] device erspan0 left promiscuous mode [ 1574.332956][ T4452] bridge87: port 2(erspan0) entered disabled state 11:01:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x25}}]}, 0x20}}, 0x0) 11:01:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="260200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) [ 1574.458656][ T4452] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1574.479178][ T4459] IPv6: Can't replace route, no match found [ 1574.496713][ T4462] device syz_tun left promiscuous mode 11:01:50 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) getgid() r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1574.518891][ T4462] bridge25: port 1(syz_tun) entered disabled state [ 1574.648743][ T4462] bridge26: port 1(syz_tun) entered blocking state [ 1574.668703][ T4462] bridge26: port 1(syz_tun) entered disabled state [ 1574.676726][ T4462] device syz_tun entered promiscuous mode 11:01:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21020000000200000000010000000c009900ff000000010000000c0099000300000002000000bb51708a7923c61f1ddc45887addff93443c050835fd87862d6cf1f84974496918a930ddc318fd3ac0e03c9ad5d6c61e616ed446d6439cc5e7"], 0x2c}}, 0x0) [ 1574.695087][ T4463] bridge26: port 2(erspan0) entered blocking state [ 1574.704379][ T4463] bridge26: port 2(erspan0) entered disabled state [ 1574.713177][ T4463] device erspan0 entered promiscuous mode [ 1574.722540][ T4464] device erspan0 left promiscuous mode [ 1574.728206][ T4464] bridge26: port 2(erspan0) entered disabled state 11:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) 11:01:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x26}}]}, 0x20}}, 0x0) [ 1574.881920][ T4476] device syz_tun left promiscuous mode [ 1574.905375][ T4476] bridge87: port 1(syz_tun) entered disabled state 11:01:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe3a}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:50 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1575.159228][ T4476] bridge88: port 1(syz_tun) entered blocking state [ 1575.165992][ T4476] bridge88: port 1(syz_tun) entered disabled state [ 1575.174697][ T4476] device syz_tun entered promiscuous mode [ 1575.184050][ T4478] bridge88: port 2(erspan0) entered blocking state [ 1575.194192][ T4478] bridge88: port 2(erspan0) entered disabled state [ 1575.210118][ T4478] device erspan0 entered promiscuous mode [ 1575.219688][ T4481] device erspan0 left promiscuous mode [ 1575.225376][ T4481] bridge88: port 2(erspan0) entered disabled state 11:01:50 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1575.358510][ T4481] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1575.369016][ T4487] IPv6: Can't replace route, no match found [ 1575.383518][ T4497] device syz_tun left promiscuous mode [ 1575.392057][ T4497] bridge26: port 1(syz_tun) entered disabled state [ 1575.528445][ T4497] bridge27: port 1(syz_tun) entered blocking state [ 1575.535173][ T4497] bridge27: port 1(syz_tun) entered disabled state [ 1575.543743][ T4497] device syz_tun entered promiscuous mode [ 1575.551950][ T4498] bridge27: port 2(erspan0) entered blocking state [ 1575.561752][ T4498] bridge27: port 2(erspan0) entered disabled state [ 1575.570117][ T4498] device erspan0 entered promiscuous mode 11:01:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f00000000c0)="640034e5aa3243cc133ddaa0277306027b31fd687b3490b541131cdd4eb5f02e5f7913e5a3b796bd352c8d326230b1", &(0x7f0000000180)=""/197}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100040008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) [ 1575.589590][ T4500] device erspan0 left promiscuous mode [ 1575.595241][ T4500] bridge27: port 2(erspan0) entered disabled state 11:01:51 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r24, r25}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1, 0x8}, {0x3, 0x0, 0x0, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r26, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1575.755226][ T4505] device syz_tun left promiscuous mode [ 1575.763971][ T4505] bridge88: port 1(syz_tun) entered disabled state 11:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x28}}]}, 0x20}}, 0x0) 11:01:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1575.898490][ T4505] bridge89: port 1(syz_tun) entered blocking state [ 1575.905531][ T4505] bridge89: port 1(syz_tun) entered disabled state [ 1575.937676][ T4505] device syz_tun entered promiscuous mode [ 1575.945857][ T4506] bridge89: port 2(erspan0) entered blocking state [ 1575.953889][ T4506] bridge89: port 2(erspan0) entered disabled state [ 1575.962390][ T4506] device erspan0 entered promiscuous mode [ 1575.972072][ T4507] device erspan0 left promiscuous mode [ 1575.977881][ T4507] bridge89: port 2(erspan0) entered disabled state [ 1576.118438][ T4507] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1576.150341][ T4521] IPv6: Can't replace route, no match found [ 1576.156446][ T4522] device syz_tun left promiscuous mode 11:01:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe3b}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x7}}, 0x0) 11:01:51 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1576.163921][ T4522] bridge27: port 1(syz_tun) entered disabled state 11:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0xf}}, 0x0) [ 1576.358656][ T4522] bridge28: port 1(syz_tun) entered blocking state [ 1576.371439][ T4522] bridge28: port 1(syz_tun) entered disabled state [ 1576.397059][ T4522] device syz_tun entered promiscuous mode 11:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x14}}, 0x0) [ 1576.406740][ T4523] bridge28: port 2(erspan0) entered blocking state [ 1576.418654][ T4523] bridge28: port 2(erspan0) entered disabled state [ 1576.427612][ T4523] device erspan0 entered promiscuous mode [ 1576.437864][ T4524] device erspan0 left promiscuous mode [ 1576.444444][ T4524] bridge28: port 2(erspan0) entered disabled state 11:01:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0xc0}}, 0x0) 11:01:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000100000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) 11:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xa}, 0x0) 11:01:52 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) getuid() r25 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r26, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1576.628511][ T4540] device syz_tun left promiscuous mode [ 1576.634394][ T4540] bridge89: port 1(syz_tun) entered disabled state [ 1576.799020][ T4540] bridge90: port 1(syz_tun) entered blocking state [ 1576.806153][ T4540] bridge90: port 1(syz_tun) entered disabled state [ 1576.818992][ T4540] device syz_tun entered promiscuous mode [ 1576.826660][ T4543] bridge90: port 2(erspan0) entered blocking state [ 1576.833826][ T4543] bridge90: port 2(erspan0) entered disabled state [ 1576.842164][ T4543] device erspan0 entered promiscuous mode [ 1576.850957][ T4546] device erspan0 left promiscuous mode [ 1576.858467][ T4546] bridge90: port 2(erspan0) entered disabled state [ 1576.998475][ T4546] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1577.022143][ T4561] IPv6: Can't replace route, no match found [ 1577.028211][ T4562] device syz_tun left promiscuous mode 11:01:52 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 1577.047134][ T4562] bridge28: port 1(syz_tun) entered disabled state [ 1577.169415][ T4562] bridge29: port 1(syz_tun) entered blocking state [ 1577.176239][ T4562] bridge29: port 1(syz_tun) entered disabled state [ 1577.185333][ T4562] device syz_tun entered promiscuous mode [ 1577.193876][ T4563] bridge29: port 2(erspan0) entered blocking state [ 1577.203684][ T4563] bridge29: port 2(erspan0) entered disabled state [ 1577.214809][ T4563] device erspan0 entered promiscuous mode [ 1577.224795][ T4564] device erspan0 left promiscuous mode [ 1577.234456][ T4564] bridge29: port 2(erspan0) entered disabled state 11:01:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0xff84, r1, 0x221, 0x70bd2d, 0x0, {}, [@NL80211_ATTR_IFINDEX={0xfffffffffffffddb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) 11:01:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe3c}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0xec0}}, 0x0) [ 1577.394871][ T4574] device syz_tun left promiscuous mode [ 1577.456721][ T4574] bridge90: port 1(syz_tun) entered disabled state 11:01:52 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r24, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r25 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r26, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040401}, 0x4001) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4b1fa23a6e2796cc9dc525b60fb240541b2dbf6002f3755f4a5475821b2656f2a8370f3d7ad575f32edf95058d0e8e44b16b9a11d0f141d55f83160a2c2a3dba250a0eab70ea23eb21d099bd52a03c0d03764031549787b20e69f1e8ef155605ea6b69e19ed0b7efe2ff0322856a79a169170800000086ea2ecdd607b67a631a6800afabbd4c099f4efa04af533274c320c7eb381455f3080b723129972c6b885bab995a7c279e0eefa7a749", @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="000099001b000000ffffffff"], 0x28}}, 0x0) 11:01:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300bf57c808c91c516dc787047982aa000002000000"], 0x28}}, 0x0) [ 1577.648483][ T4574] bridge91: port 1(syz_tun) entered blocking state [ 1577.655496][ T4574] bridge91: port 1(syz_tun) entered disabled state [ 1577.673569][ T4574] device syz_tun entered promiscuous mode [ 1577.683165][ T4575] IPv6: Can't replace route, no match found [ 1577.704551][ T4576] bridge91: port 2(erspan0) entered blocking state [ 1577.713574][ T4576] bridge91: port 2(erspan0) entered disabled state [ 1577.724296][ T4576] device erspan0 entered promiscuous mode [ 1577.750549][ T4577] device erspan0 left promiscuous mode [ 1577.757954][ T4577] bridge91: port 2(erspan0) entered disabled state 11:01:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x33fe0}}, 0x0) 11:01:53 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) getgid() r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1577.888503][ T4577] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1577.905978][ T4595] device syz_tun left promiscuous mode [ 1577.912626][ T4595] bridge29: port 1(syz_tun) entered disabled state [ 1578.058739][ T4595] bridge30: port 1(syz_tun) entered blocking state [ 1578.065589][ T4595] bridge30: port 1(syz_tun) entered disabled state [ 1578.074305][ T4595] device syz_tun entered promiscuous mode [ 1578.082680][ T4597] bridge30: port 2(erspan0) entered blocking state [ 1578.091907][ T4597] bridge30: port 2(erspan0) entered disabled state [ 1578.101745][ T4597] device erspan0 entered promiscuous mode 11:01:53 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xfdf3, 0x3, [0x0, 0x9, 0x5c52]}, &(0x7f0000000100)=0xe) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r3, 0x7e, "565c586a4ba0d126de0475cafe8b63278716683313c711e3f7379faf0d33c3eb2b3e3d842134b28192dc8feee45c559c1284e05615fb69d13552a9335ee79cc4cda4a79ec830d232badc3c5b609021961f289bf8dc9471e426d12367d2254e9d5922c991f8c87f71335ed7a888db1cbd116fad1c0b6cd34c63f395aacbeb"}, &(0x7f0000000180)=0x86) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x40}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) 11:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 1578.118800][ T4600] device erspan0 left promiscuous mode [ 1578.147717][ T4600] bridge30: port 2(erspan0) entered disabled state 11:01:53 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r24, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1578.325607][ T4609] device syz_tun left promiscuous mode [ 1578.337102][ T4609] bridge91: port 1(syz_tun) entered disabled state [ 1578.469686][ T4609] bridge92: port 1(syz_tun) entered blocking state [ 1578.476460][ T4609] bridge92: port 1(syz_tun) entered disabled state [ 1578.485656][ T4609] device syz_tun entered promiscuous mode [ 1578.493596][ T4610] bridge92: port 2(erspan0) entered blocking state [ 1578.504650][ T4610] bridge92: port 2(erspan0) entered disabled state [ 1578.513440][ T4610] device erspan0 entered promiscuous mode [ 1578.522595][ T4613] device erspan0 left promiscuous mode [ 1578.528492][ T4613] bridge92: port 2(erspan0) entered disabled state [ 1578.638389][ T4613] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1578.650503][ T4621] IPv6: Can't replace route, no match found [ 1578.658895][ T4620] veth0_vlan: mtu less than device minimum 11:01:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x200003a0}}, 0x0) 11:01:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe3d}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:54 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1578.683394][ T4628] device syz_tun left promiscuous mode [ 1578.697230][ T4628] bridge30: port 1(syz_tun) entered disabled state 11:01:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x7ffff000}}, 0x0) 11:01:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0xfffffdef}}, 0x0) [ 1578.878607][ T4628] bridge31: port 1(syz_tun) entered blocking state [ 1578.888950][ T4628] bridge31: port 1(syz_tun) entered disabled state 11:01:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x2}, 0x0) [ 1578.922358][ T4628] device syz_tun entered promiscuous mode [ 1578.940793][ T4629] bridge31: port 2(erspan0) entered blocking state [ 1578.954153][ T4629] bridge31: port 2(erspan0) entered disabled state [ 1578.971897][ T4629] device erspan0 entered promiscuous mode [ 1578.980940][ T4630] device erspan0 left promiscuous mode [ 1578.986704][ T4630] bridge31: port 2(erspan0) entered disabled state 11:01:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}}, 0x8040041) socket$caif_stream(0x25, 0x1, 0x3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0xfff6, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0xffffffffffffff28, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x74}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10002083}, 0x4008040) [ 1579.129572][ T4620] veth0_vlan: mtu less than device minimum [ 1579.155211][ T4646] device syz_tun left promiscuous mode 11:01:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xe}, 0x0) 11:01:54 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r22 = openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r23 = getpid() write$cgroup_pid(r22, &(0x7f0000000100)=r23, 0x12) r24 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r24, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r25, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1579.185247][ T4646] bridge92: port 1(syz_tun) entered disabled state [ 1579.348469][ T4646] bridge93: port 1(syz_tun) entered blocking state [ 1579.355293][ T4646] bridge93: port 1(syz_tun) entered disabled state [ 1579.364875][ T4646] device syz_tun entered promiscuous mode [ 1579.372851][ T4651] bridge93: port 2(erspan0) entered blocking state [ 1579.382911][ T4651] bridge93: port 2(erspan0) entered disabled state [ 1579.392493][ T4651] device erspan0 entered promiscuous mode 11:01:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @in={0x2, 0x4e20, @local}, @vsock={0x28, 0x0, 0xffffffff, @local}, @can={0x1d, 0x0}, 0x4, 0x0, 0x0, 0x0, 0x43, &(0x7f0000000280)='nr0\x00', 0xfffffffffffffff9, 0x5, 0x3}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r6], 0x2}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r8], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x6c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x57e1, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4010050) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1579.401792][ T4653] device erspan0 left promiscuous mode [ 1579.407725][ T4653] bridge93: port 2(erspan0) entered disabled state 11:01:55 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1579.558570][ T4653] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1579.578781][ T4666] device syz_tun left promiscuous mode [ 1579.585090][ T4666] bridge31: port 1(syz_tun) entered disabled state [ 1579.728492][ T4666] bridge32: port 1(syz_tun) entered blocking state [ 1579.735619][ T4666] bridge32: port 1(syz_tun) entered disabled state [ 1579.744465][ T4666] device syz_tun entered promiscuous mode [ 1579.752728][ T4667] IPv6: Can't replace route, no match found [ 1579.759545][ T4668] bridge32: port 2(erspan0) entered blocking state [ 1579.766189][ T4668] bridge32: port 2(erspan0) entered disabled state [ 1579.774515][ T4668] device erspan0 entered promiscuous mode [ 1579.782867][ T4672] device erspan0 left promiscuous mode [ 1579.793791][ T4672] bridge32: port 2(erspan0) entered disabled state 11:01:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x8}, 0x0) 11:01:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe3e}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1579.954136][ T4678] device syz_tun left promiscuous mode [ 1579.965308][ T4678] bridge93: port 1(syz_tun) entered disabled state 11:01:55 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r22, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1580.118706][ T4678] bridge94: port 1(syz_tun) entered blocking state [ 1580.125603][ T4678] bridge94: port 1(syz_tun) entered disabled state [ 1580.134064][ T4678] device syz_tun entered promiscuous mode [ 1580.142640][ T4679] bridge94: port 2(erspan0) entered blocking state [ 1580.149416][ T4679] bridge94: port 2(erspan0) entered disabled state [ 1580.157837][ T4679] device erspan0 entered promiscuous mode 11:01:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) 11:01:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x221}, 0x14}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000440)={r10, @in={{0x2, 0x4e20, @local}}, 0xff, 0xdd0, 0x0, 0xfff, 0x10001}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0xa3d}, 0xc) [ 1580.180826][ T4681] device erspan0 left promiscuous mode [ 1580.194465][ T4681] bridge94: port 2(erspan0) entered disabled state 11:01:55 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) socket(0x40000000015, 0x805, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1580.408525][ T4681] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1580.431365][ T4692] device syz_tun left promiscuous mode [ 1580.437117][ T4692] bridge32: port 1(syz_tun) entered disabled state [ 1580.588671][ T4692] bridge33: port 1(syz_tun) entered blocking state [ 1580.595445][ T4692] bridge33: port 1(syz_tun) entered disabled state [ 1580.604476][ T4692] device syz_tun entered promiscuous mode [ 1580.612305][ T4695] bridge33: port 2(erspan0) entered blocking state [ 1580.622728][ T4695] bridge33: port 2(erspan0) entered disabled state [ 1580.631374][ T4695] device erspan0 entered promiscuous mode [ 1580.640302][ T4698] device erspan0 left promiscuous mode [ 1580.646129][ T4698] bridge33: port 2(erspan0) entered disabled state 11:01:56 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r21, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r22, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1580.779473][ T4701] IPv6: Can't replace route, no match found [ 1580.814452][ T4708] device syz_tun left promiscuous mode 11:01:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x300}, 0x0) [ 1580.860080][ T4708] bridge94: port 1(syz_tun) entered disabled state [ 1581.018540][ T4708] bridge95: port 1(syz_tun) entered blocking state [ 1581.025224][ T4708] bridge95: port 1(syz_tun) entered disabled state [ 1581.033920][ T4708] device syz_tun entered promiscuous mode [ 1581.043482][ T4709] bridge95: port 2(erspan0) entered blocking state [ 1581.050258][ T4709] bridge95: port 2(erspan0) entered disabled state [ 1581.058048][ T4709] device erspan0 entered promiscuous mode [ 1581.067244][ T4710] device erspan0 left promiscuous mode [ 1581.073273][ T4710] bridge95: port 2(erspan0) entered disabled state 11:01:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1581.198949][ T4710] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1581.225646][ T4718] device syz_tun left promiscuous mode [ 1581.234135][ T4718] bridge33: port 1(syz_tun) entered disabled state 11:01:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvfrom$l2tp6(r2, &(0x7f0000000280)=""/144, 0x90, 0x20, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendto$l2tp(r0, &(0x7f0000000180)="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", 0x220, 0x4000000, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0xb92e294c, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21020f005d67a1d300000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009d0003000000020000004ccf1168813bcd7a24a9064d1fdf197078d1dbef5652b766d59b4d3b36798785471535a193a407cf8a833e8b6bbe41fd8a7f23dc00066cb166a3ebdd244986213c0155dc41288592e1e7bb503ce6f0978f1755abc28a484b461fb875b78b31008461b929f646fdb3e72b6ce8063245c60080d872d9b9d4ce8154e32e8c2e9b47bb8b782ad38051173c3d46050059ed944b2bfc1711d18a1f434b71043ed56a0c16c88a539c6cca86d641869e8d1400f54e7e03f4c2d783993f823cccc223c7611ccd6f08454c40b4ab5e674d641d5dcb9c8f1ad23c5f33d06b74f79dc7e156b0c181ed052c3e9b95eb9371ad966e368c7563fde207ed20b4707bbfba91938abfd9fa2ee565cba11b48c615dbad5d86c2000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x47}, &(0x7f00000003c0)=0xffffffff7fffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x2}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r5}, 0xc) 11:01:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe41}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:56 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1581.408652][ T4718] bridge34: port 1(syz_tun) entered blocking state [ 1581.428481][ T4718] bridge34: port 1(syz_tun) entered disabled state [ 1581.454391][ T4718] device syz_tun entered promiscuous mode [ 1581.464543][ T4719] bridge34: port 2(erspan0) entered blocking state [ 1581.475740][ T4719] bridge34: port 2(erspan0) entered disabled state [ 1581.484680][ T4734] netlink: 'syz-executor.5': attribute type 157 has an invalid length. [ 1581.484926][ T4719] device erspan0 entered promiscuous mode [ 1581.504190][ T4720] device erspan0 left promiscuous mode [ 1581.510312][ T4720] bridge34: port 2(erspan0) entered disabled state 11:01:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0xffffff1f}, 0x0) 11:01:57 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1581.645155][ T4730] IPv6: Can't replace route, no match found [ 1581.658162][ T4737] device syz_tun left promiscuous mode [ 1581.667779][ T4737] bridge95: port 1(syz_tun) entered disabled state 11:01:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x2}, 0x0) [ 1581.848692][ T4737] bridge96: port 1(syz_tun) entered blocking state [ 1581.859002][ T4737] bridge96: port 1(syz_tun) entered disabled state [ 1581.867253][ T4737] device syz_tun entered promiscuous mode [ 1581.875293][ T4738] bridge96: port 2(erspan0) entered blocking state [ 1581.885873][ T4738] bridge96: port 2(erspan0) entered disabled state [ 1581.895915][ T4738] device erspan0 entered promiscuous mode [ 1581.904007][ T4739] device erspan0 left promiscuous mode [ 1581.912811][ T4739] bridge96: port 2(erspan0) entered disabled state 11:01:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x0) 11:01:57 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getgid() r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1582.038700][ T4739] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1582.060828][ T4750] device syz_tun left promiscuous mode [ 1582.073118][ T4750] bridge34: port 1(syz_tun) entered disabled state 11:01:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800a94ad5e1931000", @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002700)={0x44, r4, 0x1, 0x0, 0x0, {0x2d}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x140, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x140}, 0x1, 0x0, 0x0, 0x400}, 0x12048084) [ 1582.202345][ T4750] bridge35: port 1(syz_tun) entered blocking state [ 1582.215845][ T4750] bridge35: port 1(syz_tun) entered disabled state [ 1582.244489][ T4750] device syz_tun entered promiscuous mode [ 1582.257136][ T4751] bridge35: port 2(erspan0) entered blocking state [ 1582.268757][ T4751] bridge35: port 2(erspan0) entered disabled state [ 1582.279039][ T4751] device erspan0 entered promiscuous mode [ 1582.287166][ T4752] device erspan0 left promiscuous mode [ 1582.295291][ T4766] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1582.305522][ T4752] bridge35: port 2(erspan0) entered disabled state 11:01:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x3}, 0x0) 11:01:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe42}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1582.449197][ T4760] IPv6: Can't replace route, no match found [ 1582.461857][ T4765] device syz_tun left promiscuous mode [ 1582.471521][ T4765] bridge96: port 1(syz_tun) entered disabled state 11:01:58 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r20}, 0xc) r21 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r21, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1582.608601][ T4765] bridge97: port 1(syz_tun) entered blocking state [ 1582.623419][ T4765] bridge97: port 1(syz_tun) entered disabled state [ 1582.632444][ T4765] device syz_tun entered promiscuous mode [ 1582.640501][ T4767] bridge97: port 2(erspan0) entered blocking state [ 1582.647195][ T4767] bridge97: port 2(erspan0) entered disabled state [ 1582.655959][ T4767] device erspan0 entered promiscuous mode [ 1582.668126][ T4768] device erspan0 left promiscuous mode [ 1582.675333][ T4768] bridge97: port 2(erspan0) entered disabled state [ 1582.828469][ T4768] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x12}, 0x0) 11:01:58 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1582.871273][ T4780] device syz_tun left promiscuous mode [ 1582.899861][ T4780] bridge35: port 1(syz_tun) entered disabled state 11:01:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21020000007665d726f22795c5806a00000000120000000584080000", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x81}, 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1) [ 1583.071983][ T4780] bridge36: port 1(syz_tun) entered blocking state [ 1583.083203][ T4780] bridge36: port 1(syz_tun) entered disabled state [ 1583.097278][ T4795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1583.112457][ T4780] device syz_tun entered promiscuous mode [ 1583.126588][ T4781] bridge36: port 2(erspan0) entered blocking state [ 1583.133488][ T4781] bridge36: port 2(erspan0) entered disabled state [ 1583.141780][ T4781] device erspan0 entered promiscuous mode [ 1583.153462][ T4782] device erspan0 left promiscuous mode [ 1583.159997][ T4782] bridge36: port 2(erspan0) entered disabled state 11:01:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x4}, 0x0) 11:01:58 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) getgid() r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1583.293984][ T4790] IPv6: Can't replace route, no match found [ 1583.310895][ T4791] device syz_tun left promiscuous mode [ 1583.316798][ T4791] bridge97: port 1(syz_tun) entered disabled state [ 1583.538632][ T4791] bridge98: port 1(syz_tun) entered blocking state [ 1583.545644][ T4791] bridge98: port 1(syz_tun) entered disabled state [ 1583.554049][ T4791] device syz_tun entered promiscuous mode [ 1583.562449][ T4792] bridge98: port 2(erspan0) entered blocking state [ 1583.569491][ T4792] bridge98: port 2(erspan0) entered disabled state [ 1583.578531][ T4792] device erspan0 entered promiscuous mode [ 1583.587383][ T4796] device erspan0 left promiscuous mode [ 1583.593858][ T4796] bridge98: port 2(erspan0) entered disabled state [ 1583.718635][ T4796] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1583.745674][ T4807] device syz_tun left promiscuous mode 11:01:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe43}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x13}, 0x0) [ 1583.765074][ T4807] bridge36: port 1(syz_tun) entered disabled state 11:01:59 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) getuid() r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:01:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r5], 0x2}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x98d528bf368b74b9}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0xffffffffffffffae, r3, 0x1cfe8dc71b3c378f, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2e}}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x400000, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, [{0x8, 0x0, 0xd5}, {0x8, 0x0, 0x10000}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x138, 0x7d, [@NL80211_BAND_6GHZ={0x13, 0x3, "39fdf0dd1ebb3ec331c58e111833b8"}, @NL80211_BAND_60GHZ={0x94, 0x2, "4447fa0a7c1629b0169af2d056cdc38e5531366a06a917784a543add3109c86c026a6dfcf20949ecf80a373d1348ec8cecf9430c65205212d9d5fe2dc52cb650a3d638fbb52fa55dc2356d5f9f9a467336ffd0cde7efd64a6ff8c51981db3186870165029d8fa0c2b341c09003b5b7d0b68111b8d0fbf6ad6bafce7cec9117f797dd21ffc10bbb3c55f4736db50b4718"}, @NL80211_BAND_2GHZ={0x1b, 0x0, "380d21ce8b327539a31c0acb61d0e530526f1980453f87"}, @NL80211_BAND_5GHZ={0x70, 0x1, "1105946c883bf341dea144d1cee9f58634ef618a0480a0c7303010d701dec088635ed6d2e8bbc13debde48a87f72c41ed2c3e4877987c8a7e184e9e4a81a50e440d6991b01bd493d541e22a6d8f73e6886f14d1ff35651812034fb649353ba862521bdb94b1582cad5ffd59d"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x137, 0x2a, "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"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2c3a610a513a60a3}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x34f5a7d30c61cf14, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x2800) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1583.918629][ T4807] bridge37: port 1(syz_tun) entered blocking state [ 1583.925217][ T4807] bridge37: port 1(syz_tun) entered disabled state [ 1583.945756][ T4807] device syz_tun entered promiscuous mode [ 1583.963393][ T4808] bridge37: port 2(erspan0) entered blocking state [ 1583.970329][ T4808] bridge37: port 2(erspan0) entered disabled state [ 1583.983089][ T4808] device erspan0 entered promiscuous mode [ 1583.992051][ T4809] device erspan0 left promiscuous mode [ 1584.005218][ T4809] bridge37: port 2(erspan0) entered disabled state 11:01:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xa}, 0x0) 11:01:59 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1584.177319][ T4819] IPv6: Can't replace route, no match found [ 1584.199179][ T4822] device syz_tun left promiscuous mode [ 1584.236346][ T4822] bridge98: port 1(syz_tun) entered disabled state [ 1584.360918][ T4822] bridge99: port 1(syz_tun) entered blocking state [ 1584.367641][ T4822] bridge99: port 1(syz_tun) entered disabled state [ 1584.376743][ T4822] device syz_tun entered promiscuous mode [ 1584.385414][ T4823] bridge99: port 2(erspan0) entered blocking state [ 1584.395633][ T4823] bridge99: port 2(erspan0) entered disabled state [ 1584.403967][ T4823] device erspan0 entered promiscuous mode [ 1584.413253][ T4827] device erspan0 left promiscuous mode [ 1584.424434][ T4827] bridge99: port 2(erspan0) entered disabled state 11:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) [ 1584.548432][ T4827] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xe}, 0x0) 11:02:00 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1584.590683][ T4838] device syz_tun left promiscuous mode [ 1584.614662][ T4838] bridge37: port 1(syz_tun) entered disabled state [ 1584.768604][ T4838] bridge38: port 1(syz_tun) entered blocking state [ 1584.775402][ T4838] bridge38: port 1(syz_tun) entered disabled state [ 1584.784280][ T4838] device syz_tun entered promiscuous mode [ 1584.795539][ T4839] bridge38: port 2(erspan0) entered blocking state [ 1584.804784][ T4839] bridge38: port 2(erspan0) entered disabled state 11:02:00 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = accept(0xffffffffffffffff, &(0x7f0000001700)=@xdp, &(0x7f00000003c0)=0x80) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x2f7, &(0x7f0000000400)={&(0x7f0000001780)={0x28, r0, 0x221, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY]}, 0x28}}, 0x0) [ 1584.815019][ T4839] device erspan0 entered promiscuous mode [ 1584.826037][ T4840] device erspan0 left promiscuous mode [ 1584.835853][ T4840] bridge38: port 2(erspan0) entered disabled state 11:02:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000012966e5f6b011520130e000000", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) 11:02:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe44}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1584.958591][ T4847] IPv6: Can't replace route, no match found [ 1584.975946][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:02:00 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1585.020525][ T4852] device syz_tun left promiscuous mode [ 1585.048647][ T4852] bridge99: port 1(syz_tun) entered disabled state [ 1585.168461][ T4852] bridge100: port 1(syz_tun) entered blocking state [ 1585.175254][ T4852] bridge100: port 1(syz_tun) entered disabled state [ 1585.184313][ T4852] device syz_tun entered promiscuous mode [ 1585.192461][ T4853] bridge100: port 2(erspan0) entered blocking state [ 1585.203479][ T4853] bridge100: port 2(erspan0) entered disabled state [ 1585.213885][ T4853] device erspan0 entered promiscuous mode [ 1585.225340][ T4854] device erspan0 left promiscuous mode [ 1585.231557][ T4854] bridge100: port 2(erspan0) entered disabled state [ 1585.378519][ T4854] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1585.408922][ T4870] device syz_tun left promiscuous mode [ 1585.414784][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 11:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x0) 11:02:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf}, 0x0) [ 1585.429498][ T4870] bridge38: port 1(syz_tun) entered disabled state 11:02:00 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1585.548539][ T4870] bridge39: port 1(syz_tun) entered blocking state [ 1585.555249][ T4870] bridge39: port 1(syz_tun) entered disabled state [ 1585.578422][ T4870] device syz_tun entered promiscuous mode [ 1585.586468][ T4871] bridge39: port 2(erspan0) entered blocking state [ 1585.594050][ T4871] bridge39: port 2(erspan0) entered disabled state [ 1585.602718][ T4871] device erspan0 entered promiscuous mode [ 1585.611490][ T4872] device erspan0 left promiscuous mode [ 1585.617781][ T4872] bridge39: port 2(erspan0) entered disabled state 11:02:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) 11:02:01 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r19}, 0xc) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r21, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1585.768486][ T4883] IPv6: Can't replace route, no match found [ 1585.786367][ T4884] device syz_tun left promiscuous mode [ 1585.796809][ T4884] bridge100: port 1(syz_tun) entered disabled state [ 1585.949508][ T4884] bridge101: port 1(syz_tun) entered blocking state [ 1585.956277][ T4884] bridge101: port 1(syz_tun) entered disabled state [ 1585.969699][ T4884] device syz_tun entered promiscuous mode [ 1585.977176][ T4885] bridge101: port 2(erspan0) entered blocking state [ 1585.986195][ T4885] bridge101: port 2(erspan0) entered disabled state [ 1585.995008][ T4885] device erspan0 entered promiscuous mode [ 1586.003888][ T4886] device erspan0 left promiscuous mode [ 1586.009983][ T4886] bridge101: port 2(erspan0) entered disabled state [ 1586.138709][ T4886] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x60}, 0x0) 11:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 11:02:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe45}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1586.185110][ T4896] device syz_tun left promiscuous mode 11:02:01 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1586.225928][ T4896] bridge39: port 1(syz_tun) entered disabled state [ 1586.379299][ T4896] bridge40: port 1(syz_tun) entered blocking state [ 1586.386069][ T4896] bridge40: port 1(syz_tun) entered disabled state [ 1586.395261][ T4896] device syz_tun entered promiscuous mode [ 1586.404620][ T4897] bridge40: port 2(erspan0) entered blocking state [ 1586.411675][ T4897] bridge40: port 2(erspan0) entered disabled state [ 1586.420438][ T4897] device erspan0 entered promiscuous mode [ 1586.428466][ T4898] device erspan0 left promiscuous mode [ 1586.434346][ T4898] bridge40: port 2(erspan0) entered disabled state 11:02:02 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) getgid() r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1586.574390][ T4911] IPv6: Can't replace route, no match found [ 1586.586999][ T4912] device syz_tun left promiscuous mode [ 1586.594560][ T4912] bridge101: port 1(syz_tun) entered disabled state 11:02:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r1, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x5}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1fec8f7240dcb2b}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40010) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x4) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000100)=""/174) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 1586.719017][ T4912] bridge102: port 1(syz_tun) entered blocking state [ 1586.733556][ T4912] bridge102: port 1(syz_tun) entered disabled state [ 1586.741620][ T4912] device syz_tun entered promiscuous mode [ 1586.751036][ T4914] bridge102: port 2(erspan0) entered blocking state [ 1586.757685][ T4914] bridge102: port 2(erspan0) entered disabled state [ 1586.765754][ T4914] device erspan0 entered promiscuous mode [ 1586.773941][ T4915] device erspan0 left promiscuous mode [ 1586.780238][ T4915] bridge102: port 2(erspan0) entered disabled state 11:02:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf0}, 0x0) 11:02:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 1586.908388][ T4915] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1586.936556][ T4920] device syz_tun left promiscuous mode [ 1586.949104][ T4920] bridge40: port 1(syz_tun) entered disabled state 11:02:02 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1587.093545][ T4920] bridge41: port 1(syz_tun) entered blocking state [ 1587.110223][ T4920] bridge41: port 1(syz_tun) entered disabled state [ 1587.118063][ T4920] device syz_tun entered promiscuous mode [ 1587.126454][ T4924] bridge41: port 2(erspan0) entered blocking state [ 1587.137047][ T4924] bridge41: port 2(erspan0) entered disabled state [ 1587.146002][ T4924] device erspan0 entered promiscuous mode [ 1587.154830][ T4926] device erspan0 left promiscuous mode [ 1587.160589][ T4926] bridge41: port 2(erspan0) entered disabled state 11:02:02 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) ioctl$sock_FIOGETOWN(r18, 0x8903, &(0x7f0000000780)) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1587.283892][ T4936] device syz_tun left promiscuous mode [ 1587.308597][ T4936] bridge102: port 1(syz_tun) entered disabled state [ 1587.449698][ T4936] bridge103: port 1(syz_tun) entered blocking state [ 1587.456402][ T4936] bridge103: port 1(syz_tun) entered disabled state [ 1587.470139][ T4936] device syz_tun entered promiscuous mode [ 1587.477883][ T4937] IPv6: Can't replace route, no match found [ 1587.487686][ T4935] IPv6: Can't replace route, no match found [ 1587.497029][ T4940] bridge103: port 2(erspan0) entered blocking state 11:02:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x68}, 0x0) 11:02:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe46}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1587.524237][ T4940] bridge103: port 2(erspan0) entered disabled state [ 1587.553629][ T4940] device erspan0 entered promiscuous mode 11:02:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffed6, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000ffdb02000000220000400300", @ANYRES32=0x0, @ANYBLOB="0c00990003000000ffffffff"], 0x28}}, 0x0) [ 1587.574670][ T4941] device erspan0 left promiscuous mode [ 1587.601711][ T4941] bridge103: port 2(erspan0) entered disabled state 11:02:03 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)=""/142, &(0x7f0000000000)=0x8e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="e3ffffff", @ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=r0]], 0x5}, 0x1, 0x0, 0x0, 0x4041804}, 0x0) 11:02:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x300}, 0x0) [ 1587.748485][ T4941] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1587.775028][ T4947] device syz_tun left promiscuous mode [ 1587.787702][ T4947] bridge41: port 1(syz_tun) entered disabled state 11:02:03 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1587.918692][ T4947] bridge42: port 1(syz_tun) entered blocking state [ 1587.930081][ T4947] bridge42: port 1(syz_tun) entered disabled state [ 1587.938107][ T4947] device syz_tun entered promiscuous mode [ 1587.947027][ T4948] bridge42: port 2(erspan0) entered blocking state [ 1587.957687][ T4948] bridge42: port 2(erspan0) entered disabled state [ 1587.965984][ T4948] device erspan0 entered promiscuous mode [ 1587.974518][ T4949] device erspan0 left promiscuous mode [ 1587.980449][ T4949] bridge42: port 2(erspan0) entered disabled state 11:02:03 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket(0x40000000015, 0x805, 0x0) getsockopt(r18, 0x0, 0x1000000002711, 0x0, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1588.110202][ T4961] IPv6: Can't replace route, no match found [ 1588.131112][ T4973] device syz_tun left promiscuous mode [ 1588.147024][ T4973] bridge103: port 1(syz_tun) entered disabled state [ 1588.278463][ T4973] bridge104: port 1(syz_tun) entered blocking state [ 1588.285265][ T4973] bridge104: port 1(syz_tun) entered disabled state [ 1588.294375][ T4973] device syz_tun entered promiscuous mode [ 1588.304503][ T4974] bridge104: port 2(erspan0) entered blocking state [ 1588.314931][ T4974] bridge104: port 2(erspan0) entered disabled state [ 1588.324933][ T4974] device erspan0 entered promiscuous mode [ 1588.337881][ T4975] device erspan0 left promiscuous mode [ 1588.345874][ T4975] bridge104: port 2(erspan0) entered disabled state 11:02:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x28}}, 0x0) 11:02:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xa00}, 0x0) 11:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x6c}, 0x0) [ 1588.468411][ T4975] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1588.489162][ T4957] IPv6: Can't replace route, no match found [ 1588.547059][ T4981] device syz_tun left promiscuous mode 11:02:04 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1588.598541][ T4981] bridge42: port 1(syz_tun) entered disabled state [ 1588.740763][ T4981] bridge43: port 1(syz_tun) entered blocking state [ 1588.747383][ T4981] bridge43: port 1(syz_tun) entered disabled state [ 1588.756173][ T4981] device syz_tun entered promiscuous mode [ 1588.765493][ T4982] bridge43: port 2(erspan0) entered blocking state [ 1588.775243][ T4982] bridge43: port 2(erspan0) entered disabled state [ 1588.786308][ T4982] device erspan0 entered promiscuous mode [ 1588.796484][ T4983] device erspan0 left promiscuous mode [ 1588.805380][ T4983] bridge43: port 2(erspan0) entered disabled state 11:02:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe47}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:04 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) socket(0x40000000015, 0x805, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1588.956093][ T4997] IPv6: Can't replace route, no match found [ 1588.966697][ T4998] device syz_tun left promiscuous mode [ 1588.980190][ T4998] bridge104: port 1(syz_tun) entered disabled state 11:02:04 executing program 5: socketpair(0x1d, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280)=0x7, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000001880)="8bce6422011103a134b28426085946c709be59d287379279e3eee3b24658ebf4e90755d82b54a30de86bc9fa84f886479dc0509e3909c4cca0f6938668a3ed5e2f5da16eacfeff50ba6e73d81f005fb0df9d9860", 0x54) r3 = socket(0x11, 0xa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000001800)={0x2, 'syz_tun\x00', {0x10001}, 0x7fff}) r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bind$pptp(r7, &(0x7f0000001840)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000380)=0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634e8f86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmsg(r8, &(0x7f00000005c0)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/192, 0xc0}, {&(0x7f00000003c0)}], 0x6}, 0x162) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000017c0)='tls\x00', 0x4) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe0, 0x0) setsockopt$sock_void(r12, 0x1, 0xe06c481212b54d27, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000020cb479e341bf765a4114d434ad8bc784b5d34ae6da89e3af64f8202a08bbf56d57a799a175940428227a72572efa429ce9cb4a277266f533119ec86a068dbfec8606541db19082d0fa431d14d83e4733ccc0a8bf70a13f101eecb5bdf22c809010f3d3d166e6ec032fbac257eba568f38fef80180cad5de4ad244b0da7bf101b43fe03ba21e12707b686a26807f0cfeaf9ff59b5558c143922f5e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r13, 0x6}, 0x8) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f00000003c0)=0x8, 0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r15 = accept(0xffffffffffffffff, &(0x7f0000000600)=@ipx, &(0x7f0000000000)=0x80) sendmsg$NL80211_CMD_GET_WIPHY(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="21000000000000000000010000000800030069d50498ab54addf89eff7feb01ae984ca6d634415e1f361e9ee85ddc668c52461cf9417e9651b69e3b2b90719cf39238cecfa9429c78358d27cf65303305e642399e06069b9ec5beea9fabe513f5c4891c5ce9770f65ec7a488fe7a7eb66c2ccdaa9e3239493f21174840586fa265", @ANYRES32=0x0, @ANYBLOB="0c0099000580000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x28000040}, 0x0) [ 1589.171936][ T5012] can: request_module (can-proto-0) failed. [ 1589.248630][ T4998] bridge105: port 1(syz_tun) entered blocking state [ 1589.255670][ T4998] bridge105: port 1(syz_tun) entered disabled state [ 1589.269473][ T4998] device syz_tun entered promiscuous mode [ 1589.277595][ T4999] bridge105: port 2(erspan0) entered blocking state [ 1589.290960][ T4999] bridge105: port 2(erspan0) entered disabled state [ 1589.299707][ T4999] device erspan0 entered promiscuous mode [ 1589.307493][ T5000] device erspan0 left promiscuous mode [ 1589.315766][ T5000] bridge105: port 2(erspan0) entered disabled state 11:02:04 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1589.448484][ T5000] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1589.478055][ T5014] device syz_tun left promiscuous mode [ 1589.489904][ T5014] bridge43: port 1(syz_tun) entered disabled state 11:02:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xe00}, 0x0) 11:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 1589.635182][ T5014] bridge44: port 1(syz_tun) entered blocking state [ 1589.643042][ T5014] bridge44: port 1(syz_tun) entered disabled state [ 1589.655928][ T5014] device syz_tun entered promiscuous mode [ 1589.664938][ T5016] bridge44: port 2(erspan0) entered blocking state [ 1589.674297][ T5016] bridge44: port 2(erspan0) entered disabled state [ 1589.682483][ T5016] device erspan0 entered promiscuous mode [ 1589.691034][ T5018] device erspan0 left promiscuous mode [ 1589.696713][ T5018] bridge44: port 2(erspan0) entered disabled state 11:02:05 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r17}, 0xc) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1589.818910][ T5019] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1589.837971][ T5032] device syz_tun left promiscuous mode [ 1589.848914][ T5032] bridge105: port 1(syz_tun) entered disabled state 11:02:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1589.970265][ T5032] bridge106: port 1(syz_tun) entered blocking state [ 1589.978513][ T5032] bridge106: port 1(syz_tun) entered disabled state [ 1589.999459][ T5032] device syz_tun entered promiscuous mode [ 1590.007610][ T5033] IPv6: Can't replace route, no match found [ 1590.016451][ T5034] bridge106: port 2(erspan0) entered blocking state [ 1590.031811][ T5034] bridge106: port 2(erspan0) entered disabled state [ 1590.053293][ T5034] device erspan0 entered promiscuous mode [ 1590.063684][ T5035] device erspan0 left promiscuous mode [ 1590.069983][ T5035] bridge106: port 2(erspan0) entered disabled state 11:02:05 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf00}, 0x0) 11:02:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe48}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1590.198567][ T5035] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1590.224096][ T5041] device syz_tun left promiscuous mode [ 1590.233520][ T5041] bridge44: port 1(syz_tun) entered disabled state [ 1590.378624][ T5041] bridge45: port 1(syz_tun) entered blocking state [ 1590.385248][ T5041] bridge45: port 1(syz_tun) entered disabled state [ 1590.405353][ T5041] device syz_tun entered promiscuous mode [ 1590.414304][ T5043] bridge45: port 2(erspan0) entered blocking state [ 1590.421259][ T5043] bridge45: port 2(erspan0) entered disabled state 11:02:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x7a}, 0x0) [ 1590.432241][ T5043] device erspan0 entered promiscuous mode [ 1590.440889][ T5046] device erspan0 left promiscuous mode [ 1590.446524][ T5046] bridge45: port 2(erspan0) entered disabled state 11:02:06 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) getgid() r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1590.604484][ T5054] device syz_tun left promiscuous mode [ 1590.617675][ T5054] bridge106: port 1(syz_tun) entered disabled state [ 1590.729782][ T5054] bridge107: port 1(syz_tun) entered blocking state [ 1590.736631][ T5054] bridge107: port 1(syz_tun) entered disabled state [ 1590.745204][ T5054] device syz_tun entered promiscuous mode [ 1590.753659][ T5058] bridge107: port 2(erspan0) entered blocking state [ 1590.761634][ T5058] bridge107: port 2(erspan0) entered disabled state [ 1590.772277][ T5058] device erspan0 entered promiscuous mode [ 1590.781143][ T5059] device erspan0 left promiscuous mode [ 1590.790007][ T5059] bridge107: port 2(erspan0) entered disabled state 11:02:06 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x70000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) recvmmsg(r2, &(0x7f0000002100)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f00000012c0)=""/192, 0xc0}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000002340)=""/254, 0xfa}], 0x8, &(0x7f0000001700)=""/69, 0x45}, 0x401}, {{&(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/210, 0xd2}, {&(0x7f0000001a40)=""/35, 0x23}, {&(0x7f0000001a80)=""/77, 0x4d}], 0x5, &(0x7f0000001b80)=""/123, 0x7b}, 0x800}, {{&(0x7f0000001c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/226, 0xe2}], 0x1, &(0x7f0000001dc0)=""/227, 0xe3}, 0x5}, {{&(0x7f0000001ec0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001f40), 0x0, 0x0, 0xffffff32}}, {{&(0x7f0000001f80)=@nfc_llcp, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000002040)=""/170, 0xaa}, 0x1}], 0x5, 0x10000, &(0x7f0000002240)) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002280)={0x0, 0x9, 0x0, 0x6}, &(0x7f00000022c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000002300)={r5, 0x6}, 0x8) 11:02:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000002a00)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r10 = socket(0x10, 0x80002, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYRES64=r7, @ANYRES32=r2, @ANYRESOCT=r9, @ANYRES32=r10, @ANYRES16=r0, @ANYRESOCT, @ANYRES64=r11], 0x163) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r15, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r16 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r16, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r16, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r16, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_FIOGETOWN(r16, 0x8903, &(0x7f0000002a80)=0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r18, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed76299befb58def79e48436f0e634dbf86fb0b1310000000000000000005df11c49ad66825156000000004516ac3bcc17e9a8f21f82118c6da21252c2faaedf2f8b119cbafecce4631858a107d4c3d0a2cc9c76685042669d9318683fbadfbdba535929cf1e092ddc368f5be7e0215efb1d3a4eda4841274a5fe4bcbb4e620ebe36ff35c6dce8f06a066c00000000"], 0x59) write$binfmt_misc(r18, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r20 = socket$inet_udp(0x2, 0x2, 0x0) close(r20) splice(r19, 0x0, r20, 0x0, 0x4ffe0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1804020}, 0xc, &(0x7f0000002b40)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fcdbdf25310000000800db00", @ANYRES32=r13, @ANYBLOB="0c00990073790000040000000c009900010400000300000008000100020000000c009900ff0f0000010000000800db00", @ANYRES32=r15, @ANYBLOB='\b\x00R\x00', @ANYRES32=r17, @ANYBLOB="08000100ffffffff0800db00", @ANYRES32=r18, @ANYBLOB="0800db00", @ANYRES32=r19, @ANYBLOB="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"], 0xd}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) 11:02:06 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1590.970540][ T5059] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1590.984633][ T5064] IPv6: Can't replace route, no match found [ 1591.002646][ T5068] device syz_tun left promiscuous mode [ 1591.013910][ T5068] bridge45: port 1(syz_tun) entered disabled state [ 1591.179361][ T5068] bridge46: port 1(syz_tun) entered blocking state [ 1591.186525][ T5068] bridge46: port 1(syz_tun) entered disabled state [ 1591.195090][ T5068] device syz_tun entered promiscuous mode [ 1591.202804][ T5069] bridge46: port 2(erspan0) entered blocking state [ 1591.212603][ T5069] bridge46: port 2(erspan0) entered disabled state [ 1591.223655][ T5069] device erspan0 entered promiscuous mode 11:02:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x1576}, 0x0) [ 1591.244072][ T5071] device erspan0 left promiscuous mode [ 1591.250159][ T5071] bridge46: port 2(erspan0) entered disabled state 11:02:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 11:02:06 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r15, r16}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1591.405143][ T5084] device syz_tun left promiscuous mode [ 1591.416293][ T5084] bridge107: port 1(syz_tun) entered disabled state [ 1591.560627][ T5084] bridge108: port 1(syz_tun) entered blocking state [ 1591.567656][ T5084] bridge108: port 1(syz_tun) entered disabled state [ 1591.576782][ T5084] device syz_tun entered promiscuous mode [ 1591.585525][ T5086] bridge108: port 2(erspan0) entered blocking state [ 1591.594980][ T5086] bridge108: port 2(erspan0) entered disabled state [ 1591.604750][ T5086] device erspan0 entered promiscuous mode 11:02:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe49}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1591.619630][ T5089] device erspan0 left promiscuous mode [ 1591.625262][ T5089] bridge108: port 2(erspan0) entered disabled state 11:02:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xa4, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000400", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040082}, 0x0) [ 1591.748526][ T5089] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1591.771740][ T5100] IPv6: Can't replace route, no match found 11:02:07 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1591.806038][ T5101] device syz_tun left promiscuous mode [ 1591.828746][ T5101] bridge46: port 1(syz_tun) entered disabled state [ 1591.928978][ T5101] bridge47: port 1(syz_tun) entered blocking state [ 1591.936427][ T5101] bridge47: port 1(syz_tun) entered disabled state [ 1591.944511][ T5101] device syz_tun entered promiscuous mode [ 1591.952549][ T5102] bridge47: port 2(erspan0) entered blocking state [ 1591.960012][ T5102] bridge47: port 2(erspan0) entered disabled state [ 1591.967955][ T5102] device erspan0 entered promiscuous mode [ 1591.976639][ T5104] device erspan0 left promiscuous mode [ 1591.986044][ T5104] bridge47: port 2(erspan0) entered disabled state 11:02:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x3f00}, 0x0) 11:02:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xfc}, 0x0) 11:02:07 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) getuid() r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1592.135390][ T5115] device syz_tun left promiscuous mode [ 1592.153763][ T5115] bridge108: port 1(syz_tun) entered disabled state [ 1592.318842][ T5115] bridge109: port 1(syz_tun) entered blocking state [ 1592.325834][ T5115] bridge109: port 1(syz_tun) entered disabled state [ 1592.334548][ T5115] device syz_tun entered promiscuous mode [ 1592.342698][ T5116] bridge109: port 2(erspan0) entered blocking state [ 1592.353056][ T5116] bridge109: port 2(erspan0) entered disabled state [ 1592.363923][ T5116] device erspan0 entered promiscuous mode [ 1592.372814][ T5117] device erspan0 left promiscuous mode [ 1592.378775][ T5117] bridge109: port 2(erspan0) entered disabled state [ 1592.489763][ T5117] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1592.518093][ T5128] IPv6: Can't replace route, no match found [ 1592.529376][ T5129] device syz_tun left promiscuous mode 11:02:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x4000}, 0x0) 11:02:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendto$l2tp(r4, &(0x7f0000000440)="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", 0x1000, 0x20000000, &(0x7f0000000200)={0x2, 0x0, @broadcast, 0x2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) 11:02:08 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) socket(0x10, 0x80002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1592.543584][ T5129] bridge47: port 1(syz_tun) entered disabled state [ 1592.692944][ T5129] bridge48: port 1(syz_tun) entered blocking state [ 1592.702324][ T5129] bridge48: port 1(syz_tun) entered disabled state [ 1592.720988][ T5129] device syz_tun entered promiscuous mode [ 1592.728970][ T5130] bridge48: port 2(erspan0) entered blocking state [ 1592.736118][ T5130] bridge48: port 2(erspan0) entered disabled state [ 1592.744457][ T5130] device erspan0 entered promiscuous mode [ 1592.753239][ T5131] device erspan0 left promiscuous mode [ 1592.760038][ T5131] bridge48: port 2(erspan0) entered disabled state 11:02:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x286}, 0x0) 11:02:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4a}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1592.918198][ T5144] device syz_tun left promiscuous mode [ 1592.931806][ T5144] bridge109: port 1(syz_tun) entered disabled state 11:02:08 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r15, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1593.078656][ T5144] bridge110: port 1(syz_tun) entered blocking state [ 1593.085540][ T5144] bridge110: port 1(syz_tun) entered disabled state [ 1593.094398][ T5144] device syz_tun entered promiscuous mode [ 1593.102314][ T5146] bridge110: port 2(erspan0) entered blocking state [ 1593.115251][ T5146] bridge110: port 2(erspan0) entered disabled state [ 1593.124721][ T5146] device erspan0 entered promiscuous mode [ 1593.133435][ T5148] device erspan0 left promiscuous mode [ 1593.139329][ T5148] bridge110: port 2(erspan0) entered disabled state 11:02:08 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1593.259027][ T5148] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 1593.304951][ T5160] IPv6: Can't replace route, no match found [ 1593.319817][ T5161] device syz_tun left promiscuous mode [ 1593.348884][ T5161] bridge48: port 1(syz_tun) entered disabled state 11:02:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1593.509328][ T5161] bridge49: port 1(syz_tun) entered blocking state [ 1593.521658][ T5161] bridge49: port 1(syz_tun) entered disabled state [ 1593.530539][ T5161] device syz_tun entered promiscuous mode [ 1593.538135][ T5162] bridge49: port 2(erspan0) entered blocking state [ 1593.547182][ T5162] bridge49: port 2(erspan0) entered disabled state [ 1593.557393][ T5162] device erspan0 entered promiscuous mode [ 1593.566016][ T5163] device erspan0 left promiscuous mode [ 1593.573028][ T5163] bridge49: port 2(erspan0) entered disabled state 11:02:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2e3}, 0x0) 11:02:09 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1593.723566][ T5170] device syz_tun left promiscuous mode [ 1593.747997][ T5170] bridge110: port 1(syz_tun) entered disabled state [ 1593.918871][ T5170] bridge111: port 1(syz_tun) entered blocking state [ 1593.926305][ T5170] bridge111: port 1(syz_tun) entered disabled state [ 1593.941123][ T5170] device syz_tun entered promiscuous mode [ 1593.953866][ T5174] bridge111: port 2(erspan0) entered blocking state 11:02:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000000000)="3235a6dda9dc05b3b6c1f60c6f93a59b9ae303d0575c24ac679edca1e52201f2c82f6feca8a1732a54893c417502486406eddb281a51586280b194", 0x3b) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r0, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1593.968466][ T5174] bridge111: port 2(erspan0) entered disabled state [ 1593.985970][ T5174] device erspan0 entered promiscuous mode [ 1594.031049][ T5175] device erspan0 left promiscuous mode [ 1594.036727][ T5175] bridge111: port 2(erspan0) entered disabled state [ 1594.158524][ T5175] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1594.193892][ T5184] IPv6: Can't replace route, no match found 11:02:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4b}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x7615}, 0x0) [ 1594.208712][ T5185] device syz_tun left promiscuous mode [ 1594.214565][ T5185] bridge49: port 1(syz_tun) entered disabled state 11:02:09 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1594.379978][ T5185] bridge50: port 1(syz_tun) entered blocking state [ 1594.387377][ T5185] bridge50: port 1(syz_tun) entered disabled state [ 1594.400098][ T5185] device syz_tun entered promiscuous mode [ 1594.407901][ T5186] bridge50: port 2(erspan0) entered blocking state [ 1594.416746][ T5186] bridge50: port 2(erspan0) entered disabled state [ 1594.425145][ T5186] device erspan0 entered promiscuous mode [ 1594.433738][ T5187] device erspan0 left promiscuous mode [ 1594.443815][ T5187] bridge50: port 2(erspan0) entered disabled state 11:02:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) 11:02:10 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() gettid() r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1594.598268][ T5204] device syz_tun left promiscuous mode [ 1594.619547][ T5204] bridge111: port 1(syz_tun) entered disabled state 11:02:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf000}, 0x0) [ 1594.759073][ T5204] bridge112: port 1(syz_tun) entered blocking state [ 1594.778673][ T5204] bridge112: port 1(syz_tun) entered disabled state [ 1594.787516][ T5204] device syz_tun entered promiscuous mode [ 1594.798183][ T5205] bridge112: port 2(erspan0) entered blocking state 11:02:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x221, 0x2}, 0xe}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x400000) [ 1594.805672][ T5205] bridge112: port 2(erspan0) entered disabled state [ 1594.819123][ T5205] device erspan0 entered promiscuous mode [ 1594.845099][ T5206] device erspan0 left promiscuous mode [ 1594.867391][ T5206] bridge112: port 2(erspan0) entered disabled state 11:02:10 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1595.028795][ T5206] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1595.039072][ T5212] IPv6: Can't replace route, no match found [ 1595.054622][ T5218] device syz_tun left promiscuous mode [ 1595.063275][ T5218] bridge50: port 1(syz_tun) entered disabled state [ 1595.198495][ T5218] bridge51: port 1(syz_tun) entered blocking state [ 1595.205317][ T5218] bridge51: port 1(syz_tun) entered disabled state [ 1595.214433][ T5218] device syz_tun entered promiscuous mode [ 1595.222406][ T5219] bridge51: port 2(erspan0) entered blocking state [ 1595.233577][ T5219] bridge51: port 2(erspan0) entered disabled state [ 1595.242320][ T5219] device erspan0 entered promiscuous mode [ 1595.251682][ T5223] device erspan0 left promiscuous mode [ 1595.257382][ T5223] bridge51: port 2(erspan0) entered disabled state 11:02:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x3d1}, 0x0) 11:02:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x34000}, 0x0) 11:02:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4c}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:10 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) getgid() r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1595.410299][ T5230] device syz_tun left promiscuous mode [ 1595.480019][ T5230] bridge112: port 1(syz_tun) entered disabled state 11:02:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xc}}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffefc, &(0x7f0000000000)={&(0x7f0000000380)={0x28, r6, 0x221, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) [ 1595.668529][ T5230] bridge113: port 1(syz_tun) entered blocking state [ 1595.675374][ T5230] bridge113: port 1(syz_tun) entered disabled state [ 1595.684288][ T5230] device syz_tun entered promiscuous mode [ 1595.706089][ T5231] bridge113: port 2(erspan0) entered blocking state [ 1595.732870][ T5231] bridge113: port 2(erspan0) entered disabled state [ 1595.749139][ T5231] device erspan0 entered promiscuous mode [ 1595.765556][ T5232] device erspan0 left promiscuous mode [ 1595.789943][ T5232] bridge113: port 2(erspan0) entered disabled state 11:02:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1595.908519][ T5232] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1595.926445][ T5246] IPv6: Can't replace route, no match found [ 1595.933631][ T5247] device syz_tun left promiscuous mode [ 1595.949056][ T5247] bridge51: port 1(syz_tun) entered disabled state 11:02:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x400300}, 0x0) 11:02:11 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1596.078563][ T5247] bridge52: port 1(syz_tun) entered blocking state [ 1596.087777][ T5247] bridge52: port 1(syz_tun) entered disabled state [ 1596.113983][ T5247] device syz_tun entered promiscuous mode [ 1596.133560][ T5248] bridge52: port 2(erspan0) entered blocking state [ 1596.142115][ T5248] bridge52: port 2(erspan0) entered disabled state [ 1596.156095][ T5248] device erspan0 entered promiscuous mode [ 1596.166144][ T5249] device erspan0 left promiscuous mode [ 1596.172331][ T5249] bridge52: port 2(erspan0) entered disabled state 11:02:11 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000740)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1596.317118][ T5262] IPv6: Can't replace route, no match found [ 1596.325987][ T5263] device syz_tun left promiscuous mode [ 1596.335079][ T5263] bridge113: port 1(syz_tun) entered disabled state 11:02:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf0ffff}, 0x0) [ 1596.438710][ T5263] bridge114: port 1(syz_tun) entered blocking state [ 1596.445541][ T5263] bridge114: port 1(syz_tun) entered disabled state [ 1596.454425][ T5263] device syz_tun entered promiscuous mode [ 1596.463436][ T5264] bridge114: port 2(erspan0) entered blocking state [ 1596.470602][ T5264] bridge114: port 2(erspan0) entered disabled state [ 1596.478827][ T5264] device erspan0 entered promiscuous mode 11:02:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 11:02:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4d}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:12 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1596.539948][ T5272] device syz_tun left promiscuous mode 11:02:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = accept4(r0, &(0x7f0000000180)=@generic, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) r3 = socket(0x26, 0x3, 0x3) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="027df323b100990000000000"], 0x28}}, 0x0) [ 1596.608170][ T5272] bridge52: port 1(syz_tun) entered disabled state [ 1596.671678][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1596.760328][ T5272] bridge53: port 1(syz_tun) entered blocking state [ 1596.767490][ T5272] bridge53: port 1(syz_tun) entered disabled state [ 1596.779690][ T5272] device syz_tun entered promiscuous mode [ 1596.787449][ T5273] bridge53: port 2(erspan0) entered blocking state [ 1596.796618][ T5273] bridge53: port 2(erspan0) entered disabled state [ 1596.805579][ T5273] device erspan0 entered promiscuous mode [ 1596.814212][ T5271] device erspan0 left promiscuous mode [ 1596.825818][ T5271] bridge53: port 2(erspan0) entered disabled state 11:02:12 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r14 = getpid() write$cgroup_pid(r13, &(0x7f0000000100)=r14, 0x12) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1596.953407][ T5287] device syz_tun left promiscuous mode [ 1596.959526][ T5287] bridge114: port 1(syz_tun) entered disabled state [ 1597.088601][ T5287] bridge115: port 1(syz_tun) entered blocking state [ 1597.095571][ T5287] bridge115: port 1(syz_tun) entered disabled state [ 1597.106122][ T5287] device syz_tun entered promiscuous mode [ 1597.115814][ T5290] device erspan0 left promiscuous mode [ 1597.121623][ T5290] bridge114: port 2(erspan0) entered disabled state [ 1597.258581][ T5290] bridge115: port 2(erspan0) entered blocking state [ 1597.265373][ T5290] bridge115: port 2(erspan0) entered disabled state [ 1597.278118][ T5290] device erspan0 entered promiscuous mode [ 1597.286583][ T5292] IPv6: Can't replace route, no match found [ 1597.297410][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:02:12 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1597.299779][ T5289] IPv6: Can't replace route, no match found [ 1597.323585][ T5297] device syz_tun left promiscuous mode [ 1597.344802][ T5297] bridge53: port 1(syz_tun) entered disabled state 11:02:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x1000000}, 0x0) 11:02:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 1597.528593][ T5297] bridge54: port 1(syz_tun) entered blocking state [ 1597.535368][ T5297] bridge54: port 1(syz_tun) entered disabled state [ 1597.545571][ T5297] device syz_tun entered promiscuous mode [ 1597.557018][ T5298] bridge54: port 2(erspan0) entered blocking state [ 1597.563760][ T5298] bridge54: port 2(erspan0) entered disabled state [ 1597.572757][ T5298] device erspan0 entered promiscuous mode [ 1597.581968][ T5299] device erspan0 left promiscuous mode [ 1597.587567][ T5299] bridge54: port 2(erspan0) entered disabled state [ 1597.706684][ T5308] device syz_tun left promiscuous mode [ 1597.721859][ T5308] bridge115: port 1(syz_tun) entered disabled state 11:02:13 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4e}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0xffffffff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)=""/230, &(0x7f00000002c0)=0xe6) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r5, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8081000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1500f900", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf250b00000009000700bd22c854740000000800370000000000240050000500020000000000040006000500090002000000040006000800070004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r8, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r9, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) write$binfmt_script(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="3ad0e0ead70a161585b9e15d3d1febf431df82db4d4b04b2caea72d76bad5c9f5c552da6d9bd084edd9c8e418af99d40d79a6a7cef9646f1b12751a5ae751b00"/79, @ANYRES16=r10], 0x100000191) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000914a037c7a851194ee19", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000340)={r14, 0x3ff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000600)={r15, 0x0, 0x2}, &(0x7f0000000640)=0x8) [ 1597.855075][ T5308] bridge116: port 1(syz_tun) entered blocking state [ 1597.866972][ T5308] bridge116: port 1(syz_tun) entered disabled state [ 1597.883370][ T5308] device syz_tun entered promiscuous mode 11:02:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x2000000}, 0x0) [ 1597.906404][ T5312] device erspan0 left promiscuous mode [ 1597.914381][ T5312] bridge115: port 2(erspan0) entered disabled state [ 1597.978472][ C0] [ 1597.980862][ C0] ===================================== [ 1597.986601][ C0] WARNING: bad unlock balance detected! [ 1597.992129][ C0] 5.5.0-rc5-syzkaller #0 Not tainted [ 1597.997696][ C0] ------------------------------------- [ 1598.003330][ C0] syz-executor.4/9561 is trying to release lock (&dev->qdisc_xmit_lock_key) at: [ 1598.012470][ C0] [] sch_direct_xmit+0x3fa/0xd30 [ 1598.019997][ C0] but there are no more locks to release! [ 1598.025711][ C0] [ 1598.025711][ C0] other info that might help us debug this: [ 1598.033761][ C0] 4 locks held by syz-executor.4/9561: [ 1598.039206][ C0] #0: ffffc90000007d50 ((&n->timer)){+.-.}, at: call_timer_fn+0xe0/0x780 [ 1598.047866][ C0] #1: ffffffff899a3ec0 (rcu_read_lock_bh){....}, at: __dev_queue_xmit+0x20a/0x35c0 [ 1598.057238][ C0] #2: ffff8880908e3250 (&dev->qdisc_tx_busylock_key#25){+...}, at: __dev_queue_xmit+0x2412/0x35c0 [ 1598.068335][ C0] #3: ffff8880908e3138 (&dev->qdisc_running_key#25){+...}, at: dev_queue_xmit+0x18/0x20 [ 1598.078601][ C0] [ 1598.078601][ C0] stack backtrace: [ 1598.084603][ C0] CPU: 0 PID: 9561 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 1598.093867][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1598.103912][ C0] Call Trace: [ 1598.107341][ C0] [ 1598.110198][ C0] dump_stack+0x197/0x210 [ 1598.114532][ C0] ? sch_direct_xmit+0x3fa/0xd30 [ 1598.119487][ C0] print_unlock_imbalance_bug.cold+0x114/0x123 [ 1598.125809][ C0] ? sch_direct_xmit+0x3fa/0xd30 [ 1598.130766][ C0] lock_release+0x5f2/0x960 [ 1598.136057][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1598.142508][ C0] ? lock_downgrade+0x920/0x920 [ 1598.147626][ C0] ? dev_hard_start_xmit+0x345/0x9b0 [ 1598.153219][ C0] _raw_spin_unlock+0x16/0x40 [ 1598.158005][ C0] sch_direct_xmit+0x3fa/0xd30 [ 1598.162768][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1598.169091][ C0] ? dev_watchdog+0xca0/0xca0 [ 1598.173788][ C0] ? lock_acquire+0x120/0x410 [ 1598.178460][ C0] __dev_queue_xmit+0x2707/0x35c0 [ 1598.183473][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1598.188740][ C0] ? arp_xmit+0x226/0x3f0 [ 1598.193236][ C0] ? find_held_lock+0x35/0x130 [ 1598.197993][ C0] ? arp_xmit+0x226/0x3f0 [ 1598.202309][ C0] ? __clusterip_config_find+0x310/0x310 [ 1598.207925][ C0] ? lock_downgrade+0x920/0x920 [ 1598.212818][ C0] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1598.218746][ C0] dev_queue_xmit+0x18/0x20 [ 1598.223254][ C0] ? dev_queue_xmit+0x18/0x20 [ 1598.227931][ C0] arp_xmit+0xdf/0x3f0 [ 1598.232022][ C0] ? arp_error_report+0x1c0/0x1c0 [ 1598.237034][ C0] ? arp_create+0xa90/0xa90 [ 1598.241517][ C0] ? arp_create+0x722/0xa90 [ 1598.246015][ C0] arp_send_dst.part.0+0x202/0x290 [ 1598.251121][ C0] ? arp_xmit+0x3f0/0x3f0 [ 1598.255454][ C0] ? __kasan_check_read+0x11/0x20 [ 1598.260467][ C0] arp_solicit+0x748/0x1370 [ 1598.264970][ C0] ? arp_send+0xb0/0xb0 [ 1598.269126][ C0] ? __kasan_check_write+0x14/0x20 [ 1598.274357][ C0] ? __skb_clone+0x5c8/0x820 [ 1598.278946][ C0] ? arp_send+0xb0/0xb0 [ 1598.283098][ C0] neigh_probe+0xd0/0x120 [ 1598.287412][ C0] neigh_timer_handler+0x59d/0x10e0 [ 1598.292606][ C0] call_timer_fn+0x1ac/0x780 [ 1598.297180][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 1598.302364][ C0] ? msleep_interruptible+0x150/0x150 [ 1598.307724][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 1598.313099][ C0] ? trace_hardirqs_on+0x67/0x240 [ 1598.318127][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 1598.323312][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 1598.328491][ C0] run_timer_softirq+0x6c3/0x1790 [ 1598.333499][ C0] ? add_timer+0x930/0x930 [ 1598.337900][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1598.344045][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1598.349575][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1598.355537][ C0] ? trace_hardirqs_on+0x67/0x240 [ 1598.360541][ C0] __do_softirq+0x262/0x98c [ 1598.365023][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 1598.369852][ C0] irq_exit+0x19b/0x1e0 [ 1598.373990][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 1598.379515][ C0] apic_timer_interrupt+0xf/0x20 [ 1598.384438][ C0] [ 1598.387373][ C0] RIP: 0010:_raw_spin_unlock_irq+0x4f/0x80 [ 1598.393185][ C0] Code: c0 e8 34 93 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d 02 f4 be 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 97 49 7c f9 65 8b 05 88 dd 2d 78 85 c0 74 06 41 [ 1598.412782][ C0] RSP: 0018:ffffc900021179d8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 1598.421199][ C0] RAX: 1ffffffff132669d RBX: ffff8880658fc500 RCX: 0000000000000000 [ 1598.429257][ C0] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880658fcd94 [ 1598.437212][ C0] RBP: ffffc900021179e0 R08: ffff8880658fc500 R09: 0000000000000000 [ 1598.445174][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae837340 [ 1598.453128][ C0] R13: ffff888060e26340 R14: 0000000000000000 R15: 0000000000000001 [ 1598.461093][ C0] ? _raw_spin_unlock_irq+0x23/0x80 [ 1598.466291][ C0] finish_task_switch+0x147/0x750 [ 1598.472249][ C0] ? finish_task_switch+0x119/0x750 [ 1598.477428][ C0] __schedule+0x93c/0x1f90 [ 1598.481852][ C0] ? __sched_text_start+0x8/0x8 [ 1598.486709][ C0] ? do_wait+0x594/0xa10 [ 1598.490951][ C0] ? preempt_schedule+0x4b/0x60 [ 1598.495885][ C0] preempt_schedule_common+0x4f/0xe0 [ 1598.501160][ C0] preempt_schedule+0x4b/0x60 [ 1598.505842][ C0] ___preempt_schedule+0x16/0x18 [ 1598.510764][ C0] _raw_read_unlock+0x3c/0x40 [ 1598.515423][ C0] do_wait+0x594/0xa10 [ 1598.519494][ C0] ? wait_consider_task+0x3ae0/0x3ae0 [ 1598.524845][ C0] ? __might_fault+0x12b/0x1e0 [ 1598.529597][ C0] kernel_wait4+0x171/0x290 [ 1598.534082][ C0] ? __ia32_sys_waitid+0x140/0x140 [ 1598.539173][ C0] ? task_stopped_code+0x180/0x180 [ 1598.544303][ C0] __do_sys_wait4+0x147/0x160 [ 1598.549084][ C0] ? kernel_wait4+0x290/0x290 [ 1598.553857][ C0] ? _copy_to_user+0x118/0x160 [ 1598.558727][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1598.565217][ C0] ? put_timespec64+0xda/0x140 [ 1598.569966][ C0] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1598.575673][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1598.581112][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1598.586561][ C0] ? do_syscall_64+0x26/0x790 [ 1598.591219][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1598.597280][ C0] ? do_syscall_64+0x26/0x790 [ 1598.601942][ C0] __x64_sys_wait4+0x97/0xf0 [ 1598.606513][ C0] do_syscall_64+0xfa/0x790 [ 1598.611011][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1598.616883][ C0] RIP: 0033:0x414d8a [ 1598.620874][ C0] Code: 0f 83 6a 18 00 00 c3 66 0f 1f 84 00 00 00 00 00 8b 05 ee 36 66 00 85 c0 75 36 45 31 d2 48 63 d2 48 63 ff b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 d4 ff ff ff f7 [ 1598.640463][ C0] RSP: 002b:00007ffe33e559e8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1598.648873][ C0] RAX: ffffffffffffffda RBX: 00000000001861e2 RCX: 0000000000414d8a [ 1598.656838][ C0] RDX: 0000000040000001 RSI: 00007ffe33e55a20 RDI: ffffffffffffffff [ 1598.664790][ C0] RBP: 0000000000001891 R08: 0000000000000001 R09: 0000000001c00940 [ 1598.672755][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1598.680706][ C0] R13: 00007ffe33e55a20 R14: 00000000001861cc R15: 00007ffe33e55a30 [ 1598.748427][ T5312] bridge116: port 2(erspan0) entered blocking state [ 1598.755198][ T5312] bridge116: port 2(erspan0) entered disabled state [ 1598.763224][ T5312] device erspan0 entered promiscuous mode [ 1598.770605][ T5313] IPv6: Can't replace route, no match found [ 1598.789008][ T5323] device syz_tun left promiscuous mode 11:02:14 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1598.795137][ T5323] bridge54: port 1(syz_tun) entered disabled state [ 1598.898444][ T5323] bridge55: port 1(syz_tun) entered blocking state [ 1598.905060][ T5323] bridge55: port 1(syz_tun) entered disabled state [ 1598.912534][ T5323] device syz_tun entered promiscuous mode [ 1598.921190][ T5327] bridge55: port 2(erspan0) entered blocking state [ 1598.928648][ T5327] bridge55: port 2(erspan0) entered disabled state [ 1598.939870][ T5327] device erspan0 entered promiscuous mode 11:02:14 executing program 5: r0 = socket(0x27, 0x0, 0x8) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x6}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1598.948029][ T5331] device erspan0 left promiscuous mode [ 1598.954512][ T5331] bridge55: port 2(erspan0) entered disabled state 11:02:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe4f}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0) 11:02:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x3000000}, 0x0) 11:02:14 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 1599.154459][ T5351] IPv6: Can't replace route, no match found [ 1599.181896][ T5343] device syz_tun left promiscuous mode [ 1599.193870][ T5343] bridge116: port 1(syz_tun) entered disabled state [ 1599.338452][ T5343] bridge117: port 1(syz_tun) entered blocking state [ 1599.345231][ T5343] bridge117: port 1(syz_tun) entered disabled state [ 1599.353172][ T5343] device syz_tun entered promiscuous mode [ 1599.362211][ T5344] device erspan0 left promiscuous mode [ 1599.371494][ T5344] bridge116: port 2(erspan0) entered disabled state 11:02:15 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x178, r1, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7f}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, [@NL80211_BAND_6GHZ={0x2c, 0x3, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xc9e, 0xfff, 0x852, 0x5, 0x1, 0xff00]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, "f81b4b989aa8f1"}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x1, 0x81, 0x7f, 0x3, 0x7f, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, "503b086a2aacefe716a01fd2e0fd9fdc5c67eb"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3, 0xba7f, 0x7, 0xff01, 0x0, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, "8bd805a09eab9efc90a7845a978173f1376d"}, @NL80211_TXRATE_HT={0x47, 0x2, "a797df695ab54c203f90ed62a6c7a9dc0cf98291c2e6b0adcc430bc41e4023bdbc4f12a3a1b1c1808ace668c10bfd3e2d5b65c124d45880f80c730a2062a1b77e02f01"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x2, 0x7ff, 0xff, 0x59b, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3384, 0xca, 0x800, 0x8, 0xa26c, 0x68, 0x0, 0x5]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x55}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x41}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7c}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf250a000000080005000300000008000400050000002800030014000600ff0200000000000000000000000000010800010001000000060007004e2200005400010008000500030000000600020032000000090006006e6f6e6500000000060002000300000014000300000000000000000000000000000000010800050002000000060004004e22000008000800feffffff0c000300060004000000000004000200080005008100000008000600000000800c000100080005000000000008000500f0090000"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x1) [ 1599.508375][ T5344] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1599.532875][ T5364] device syz_tun left promiscuous mode [ 1599.546684][ T5364] bridge55: port 1(syz_tun) entered disabled state [ 1599.678486][ T5364] bridge56: port 1(syz_tun) entered blocking state [ 1599.686949][ T5364] bridge56: port 1(syz_tun) entered disabled state [ 1599.694580][ T5364] device syz_tun entered promiscuous mode [ 1599.703438][ T5365] IPv6: Can't replace route, no match found [ 1599.709714][ T5366] bridge56: port 2(erspan0) entered blocking state [ 1599.716267][ T5366] bridge56: port 2(erspan0) entered disabled state 11:02:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x4000000}, 0x0) 11:02:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c3681279900000002000000"], 0x28}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r7, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x8000) write$binfmt_script(r4, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1befaf5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r9, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04f325bd7000fddbc0250100000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000400000003000000"], 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r11, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r12 = accept4$inet6(r11, 0x0, &(0x7f0000002380), 0xc00) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f00000023c0)={0x0, 0xcc, 0x30}, &(0x7f0000002400)=0xc) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r14], 0x2}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x60012000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x13f, r8, 0x200, 0x70bd28, 0x25dfdbfd}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x4004044) [ 1599.725801][ T5366] device erspan0 entered promiscuous mode [ 1599.747647][ T5376] device syz_tun left promiscuous mode 11:02:15 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) getpid() r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1599.818835][ T5376] bridge117: port 1(syz_tun) entered disabled state [ 1599.857653][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1599.978431][ T5376] bridge118: port 1(syz_tun) entered blocking state [ 1599.985347][ T5376] bridge118: port 1(syz_tun) entered disabled state [ 1599.994499][ T5376] device syz_tun entered promiscuous mode [ 1600.001567][ T5378] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1600.014580][ T5394] device erspan0 left promiscuous mode 11:02:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 11:02:15 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1600.025154][ T5394] bridge56: port 2(erspan0) entered disabled state [ 1600.204424][ T5389] device syz_tun left promiscuous mode [ 1600.211258][ T5389] bridge56: port 1(syz_tun) entered disabled state 11:02:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe50}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 1600.338402][ T5389] bridge57: port 1(syz_tun) entered blocking state [ 1600.345562][ T5389] bridge57: port 1(syz_tun) entered disabled state [ 1600.354822][ T5389] device syz_tun entered promiscuous mode [ 1600.362640][ T5392] bridge57: port 2(erspan0) entered blocking state [ 1600.373996][ T5392] bridge57: port 2(erspan0) entered disabled state [ 1600.381901][ T5392] device erspan0 entered promiscuous mode 11:02:15 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1600.402554][ T5401] device syz_tun left promiscuous mode [ 1600.414546][ T5401] bridge118: port 1(syz_tun) entered disabled state [ 1600.538394][ T5401] bridge119: port 1(syz_tun) entered blocking state [ 1600.545267][ T5401] bridge119: port 1(syz_tun) entered disabled state [ 1600.554725][ T5401] device syz_tun entered promiscuous mode [ 1600.562349][ T5402] IPv6: Can't replace route, no match found [ 1600.571104][ T5403] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xa000000}, 0x0) 11:02:16 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1600.596044][ T5412] device syz_tun left promiscuous mode [ 1600.603714][ T5412] bridge57: port 1(syz_tun) entered disabled state 11:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0xffffffffffffff69, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r4], 0x2}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00040074b3c17eaec4e6069523b6db09d4a9fed925982b4cefc03dedfde52b6ba11f4829dd408aa3100a9f073808f7533a3888494f7fde6e4c50df5145818dfa5e124d8988437f4c2cc70632e191d2b85ba58626bcc24a1ed91c5f979cebdee02332cf0270e9491a48832ccada75073121b58a84bb8f1bb59f8f15190ed6919844cc87e2deb777eed92cfbc78d0929c6fc5f5fc75ad550b3bb9eb1c8800d83", @ANYRES16=r2, @ANYBLOB="d9112bbd7000fedbdf251d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 11:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x800, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xfffffffffffffefd, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1600.748637][ T5412] bridge58: port 1(syz_tun) entered blocking state [ 1600.762145][ T5412] bridge58: port 1(syz_tun) entered disabled state [ 1600.775384][ T5412] device syz_tun entered promiscuous mode [ 1600.784389][ T5413] device erspan0 left promiscuous mode 11:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r2 = accept4(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1600.792804][ T5413] bridge57: port 2(erspan0) entered disabled state 11:02:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 1600.919212][ T5413] bridge58: port 2(erspan0) entered blocking state [ 1600.925963][ T5413] bridge58: port 2(erspan0) entered disabled state [ 1600.933366][ T5413] device erspan0 entered promiscuous mode [ 1600.949813][ T5410] device erspan0 left promiscuous mode [ 1600.955392][ T5410] bridge58: port 2(erspan0) entered disabled state 11:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xe000000}, 0x0) 11:02:16 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1601.102406][ T5425] bridge120: port 1(erspan0) entered blocking state [ 1601.128979][ T5425] bridge120: port 1(erspan0) entered disabled state [ 1601.136949][ T5425] device erspan0 entered promiscuous mode [ 1601.147731][ T5429] device erspan0 left promiscuous mode [ 1601.188702][ T5429] bridge120: port 1(erspan0) entered disabled state 11:02:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe51}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:16 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf000000}, 0x0) [ 1601.308453][ T5429] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1601.318602][ T5437] IPv6: Can't replace route, no match found [ 1601.333800][ T5446] device syz_tun left promiscuous mode [ 1601.347924][ T5446] bridge58: port 1(syz_tun) entered disabled state [ 1601.458785][ T5446] bridge59: port 1(syz_tun) entered blocking state [ 1601.465747][ T5446] bridge59: port 1(syz_tun) entered disabled state [ 1601.473041][ T5446] device syz_tun entered promiscuous mode [ 1601.481331][ T5447] bridge59: port 2(erspan0) entered blocking state [ 1601.487963][ T5447] bridge59: port 2(erspan0) entered disabled state [ 1601.495451][ T5447] device erspan0 entered promiscuous mode 11:02:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') epoll_create1(0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c589900031000000200000039dbacf2ae7d331550eb05909447e5f15462bf4b79334943c0bbb3a61cefe6b19ce5878a16e8819757bc8e5143ab5a243732cbd29c9367d1aada552cc019c30af94d29bed0a599901436a5fbc711e60dadbeeb820ef90559dabdebe2b31eb4bbcfb2461ffee4a05b5049bed949ea39beba"], 0x28}}, 0x0) [ 1601.509688][ T5449] device erspan0 left promiscuous mode [ 1601.515299][ T5449] bridge59: port 2(erspan0) entered disabled state [ 1601.551201][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:02:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 11:02:17 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1601.707065][ T5461] bridge121: port 1(erspan0) entered blocking state [ 1601.725469][ T5461] bridge121: port 1(erspan0) entered disabled state [ 1601.767090][ T5461] device erspan0 entered promiscuous mode [ 1601.782771][ T5462] device erspan0 left promiscuous mode [ 1601.790121][ T5462] bridge121: port 1(erspan0) entered disabled state 11:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x3f000000}, 0x0) [ 1601.928559][ T5462] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1601.964195][ T5473] IPv6: Can't replace route, no match found 11:02:17 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/175, 0xaf}, {&(0x7f0000000240)=""/139, 0x8b}], 0x2, &(0x7f0000000100)=""/16, 0x10}, 0x2000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1d91f057ffca07d5}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x58, 0x1, 0x8, 0x4, 0x70bd29, 0x25dfdbfb, {0x59deaaa56405e3f2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xa76f}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x9c7631ecd6a81f82}]}, 0x58}, 0x1, 0x0, 0x0, 0xce3237579a64b751}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r4, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1601.983101][ T5474] device syz_tun left promiscuous mode [ 1601.994918][ T5474] bridge59: port 1(syz_tun) entered disabled state [ 1602.148408][ T5474] bridge60: port 1(syz_tun) entered blocking state [ 1602.155739][ T5474] bridge60: port 1(syz_tun) entered disabled state [ 1602.164018][ T5474] device syz_tun entered promiscuous mode [ 1602.172078][ T5475] bridge60: port 2(erspan0) entered blocking state [ 1602.181349][ T5475] bridge60: port 2(erspan0) entered disabled state [ 1602.188925][ T5475] device erspan0 entered promiscuous mode [ 1602.196543][ T5476] device erspan0 left promiscuous mode [ 1602.202860][ T5476] bridge60: port 2(erspan0) entered disabled state 11:02:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xe32}, 0x0) 11:02:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x40000000}, 0x0) 11:02:17 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) socket(0x10, 0x80002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1602.341662][ T5487] bridge122: port 1(erspan0) entered blocking state [ 1602.356525][ T5487] bridge122: port 1(erspan0) entered disabled state [ 1602.402182][ T5487] device erspan0 entered promiscuous mode [ 1602.433207][ T5488] device erspan0 left promiscuous mode [ 1602.441521][ T5488] bridge122: port 1(erspan0) entered disabled state 11:02:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe52}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:18 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1602.558392][ T5488] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x2}}]}, 0x28}}, 0x0) [ 1602.601517][ T5501] IPv6: Can't replace route, no match found 11:02:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1602.653604][ T5502] device syz_tun left promiscuous mode [ 1602.680221][ T5502] bridge60: port 1(syz_tun) entered disabled state [ 1602.848476][ T5502] bridge61: port 1(syz_tun) entered blocking state [ 1602.855171][ T5502] bridge61: port 1(syz_tun) entered disabled state [ 1602.862794][ T5502] device syz_tun entered promiscuous mode [ 1602.871285][ T5503] bridge61: port 2(erspan0) entered blocking state [ 1602.880866][ T5503] bridge61: port 2(erspan0) entered disabled state [ 1602.888072][ T5503] device erspan0 entered promiscuous mode 11:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x60000000}, 0x0) 11:02:18 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) socket(0x10, 0x80002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1602.900793][ T5513] device syz_tun left promiscuous mode [ 1602.906612][ T5513] bridge119: port 1(syz_tun) entered disabled state 11:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0xfffffffffffffe3d, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x0, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xa, 0x99, {0x3, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000040}, 0x4004080) 11:02:18 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1603.040695][ T5520] IPv6: Can't replace route, no match found [ 1603.047983][ T5521] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1603.063693][ T5528] device syz_tun left promiscuous mode [ 1603.073434][ T5528] bridge61: port 1(syz_tun) entered disabled state 11:02:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r11, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x8b0) 11:02:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 1603.188469][ T5528] bridge62: port 1(syz_tun) entered blocking state [ 1603.196724][ T5528] bridge62: port 1(syz_tun) entered disabled state [ 1603.204322][ T5528] device syz_tun entered promiscuous mode [ 1603.218415][ T5527] device erspan0 left promiscuous mode 11:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x76150000}, 0x0) [ 1603.232852][ T5527] bridge61: port 2(erspan0) entered disabled state [ 1603.378450][ T5527] bridge62: port 2(erspan0) entered blocking state [ 1603.386455][ T5527] bridge62: port 2(erspan0) entered disabled state [ 1603.395706][ T5527] device erspan0 entered promiscuous mode [ 1603.403381][ T5535] device erspan0 left promiscuous mode [ 1603.409133][ T5535] bridge62: port 2(erspan0) entered disabled state 11:02:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe53}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:19 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:19 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r10, &(0x7f0000000200)={{}, [@default, @bcast, @remote, @default, @rose, @rose, @default, @rose]}, &(0x7f0000000280)=0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x9effffff}, 0x0) [ 1603.539627][ T5544] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1603.560509][ T5553] IPv6: Can't replace route, no match found 11:02:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 11:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 11:02:19 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1603.736173][ T5570] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1603.746754][ T5566] device syz_tun left promiscuous mode [ 1603.756972][ T5566] bridge62: port 1(syz_tun) entered disabled state [ 1603.878467][ T5566] bridge63: port 1(syz_tun) entered blocking state [ 1603.885868][ T5566] bridge63: port 1(syz_tun) entered disabled state [ 1603.895366][ T5566] device syz_tun entered promiscuous mode [ 1603.903937][ T5575] bridge63: port 2(erspan0) entered blocking state [ 1603.914152][ T5575] bridge63: port 2(erspan0) entered disabled state [ 1603.921492][ T5575] device erspan0 entered promiscuous mode 11:02:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696cb9c8ab0a290042ffe6fb94c719125a837bc70afd91e3d19db61e48882bbbeec60049867e1d615876a5bfd92964eb3f5d2ede8bed763eb6ad835d1aef148436f0e634dbf86fb0b131000000000000000000"], 0x59) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040)=0x4, 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r4], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r1, 0x221}, 0x14}}, 0x0) [ 1603.930075][ T5578] IPv6: Can't replace route, no match found [ 1603.936374][ T5581] device erspan0 left promiscuous mode [ 1603.942205][ T5581] bridge63: port 2(erspan0) entered disabled state 11:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xfffff000}, 0x0) 11:02:19 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1604.088403][ T5585] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1300}, 0x0) [ 1604.134655][ T5586] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xffffff7f}, 0x0) [ 1604.191248][ T5596] device syz_tun left promiscuous mode [ 1604.202327][ T5596] bridge63: port 1(syz_tun) entered disabled state [ 1604.318469][ T5596] bridge64: port 1(syz_tun) entered blocking state [ 1604.325427][ T5596] bridge64: port 1(syz_tun) entered disabled state [ 1604.332935][ T5596] device syz_tun entered promiscuous mode [ 1604.340991][ T5602] bridge64: port 2(erspan0) entered blocking state [ 1604.348575][ T5602] bridge64: port 2(erspan0) entered disabled state [ 1604.357346][ T5602] device erspan0 entered promiscuous mode [ 1604.365000][ T5606] IPv6: Can't replace route, no match found [ 1604.372975][ T5607] device erspan0 left promiscuous mode [ 1604.378995][ T5607] bridge64: port 2(erspan0) entered disabled state 11:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe54}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:20 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xffffff9e}, 0x0) 11:02:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 11:02:20 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 1604.636537][ T5615] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1604.691313][ T5623] device syz_tun left promiscuous mode [ 1604.697129][ T5623] bridge64: port 1(syz_tun) entered disabled state 11:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x1, 0x5}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl(r3, 0x0, &(0x7f00000001c0)="e85be8244b696285d12033b9ab182d52fc29d2817a2a682c4ace18706aaa1e6a7fd1b13680b064b4fae33bebe5242175bdef17bd9b285233fb4bf9b800cd15e98830254c805f3f53e7ded1d8a706f522e38c5f3de1ff8fade8677f50ac67e63d17d5aae898683af02b5403b5a45784b1a6c68cbbc35d46d582af92565992eb0b74aa6ca46786a0e3659dee186870ee95e72a6fe7f183a5f2aeb043") setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="09001fac", @ANYRES16=r2, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) socketpair(0x1, 0x1, 0x6, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x9fc0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000340)={0xf76d, 0x202, 0x1, 0x6, r5}, &(0x7f00000003c0)=0x10) [ 1604.828509][ T5623] bridge65: port 1(syz_tun) entered blocking state [ 1604.854240][ T5623] bridge65: port 1(syz_tun) entered disabled state [ 1604.871829][ T5623] device syz_tun entered promiscuous mode 11:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210200000000fdffffff01000000080001000400000008000f00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="bbb0c8a5c8cab39eae79881d630883b6bd9b2f348faaab93cd8fee45ec5d0236535d3dcfd8647aa8762ede4a822dac61742215eb93d231d1cb0966639362f1406be04aa1b70299de2b62cae8217bede50b60bb8c7b4bad1344aede9c128e3697bb08f4e8f918558218849c12f9a96344a4860986dcc63ce45fa540d37267fc145c202c5f121840cddf3d41439ad78f4bc2b1f6f222f28ab7b3045700d22fe19cb73d3a6818ba4d7732fc031c00bc1bf5af5dcf311a19338567d110d640a5fa4b2163a7a36c44b7ece06ec520a6baff1db847c9ac5a2c53268e1af2eee9ee856ca1509ad0f7e871130200"/249], 0x2c}}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000580)={0x4, 0x8, 0x1, 0x0, 0x8, [{0x101, 0x1aa, 0x80000000, [], 0x100}, {0x0, 0x4, 0x9, [], 0xa01}, {0x757d, 0x6, 0x3}, {0x7fff, 0x9, 0x100000000, [], 0x1200}, {0x1, 0x8, 0x6, [], 0x5fee63cdcd6a4805}, {0x0, 0x1, 0x8}, {0xcd6, 0x7, 0x4, [], 0x1}, {0x4, 0x91, 0x2, [], 0x5}]}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000a80)={@initdev, @local, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xa832ad39c15d8037}, 0x4) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, @generic={0x26, "ebb77ae234d3c4e8d0d0bcd78b6d"}, @nfc={0x27, 0x1, 0x1, 0x1}, @l2={0x1f, 0x8, {0x7, 0x73, 0x1, 0x0, 0x7, 0x9}, 0x0, 0x81}, 0x8, 0x0, 0x0, 0x0, 0x401, 0x0, 0x9, 0x80000000, 0x7fff}) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x3d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240100002a00798bc387000700000010000000df", @ANYRES32=r9], 0x2}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x28e, &(0x7f0000000400)={&(0x7f0000000040)={0x28, r3, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x0, 0x3, r9}, @NL80211_ATTR_WDEV={0xfffffffffffffeeb, 0x99, {0x422f, 0x2}}]}, 0xffffff87}, 0x1, 0x0, 0x0, 0x49008}, 0x0) [ 1604.879568][ T5615] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1604.892152][ T5629] bridge65: port 2(erspan0) entered blocking state [ 1604.900853][ T5629] bridge65: port 2(erspan0) entered disabled state 11:02:20 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 1604.929946][ T5629] device erspan0 entered promiscuous mode [ 1604.947601][ T5630] IPv6: Can't replace route, no match found [ 1604.959564][ T5631] device erspan0 left promiscuous mode [ 1604.967397][ T5631] bridge65: port 2(erspan0) entered disabled state 11:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="00aca267", @ANYRES16=r1, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000002000000"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x22c, r2, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x144, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x797f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x287}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62651d55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41ae3250}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={r7}, 0x8) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300), 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_bt_hci(r9, 0x400448de, &(0x7f0000000680)="7ce58eab05383ef8106fedd763d7e1b66c1d9bf114b76fd3fe220e45e1eb57d58a22f1879361a38252f8b29a2b9c54ab79c3baef296fbadec36687a4f7462d654fa3eba2317a04d7f56dd6d630a28de8aab044b3d946ef756f58b39bb95e2424a4069632fe5302c70fac28855c3d17f756ea754dcb1abcd502fa7da2e05594dc335f3e70463f7a07eeaea589771ed9c975def891f8fba7b42f69a91738becefb5e2a5aae6d25a093") sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100098}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x0, 0x8, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xacbc8301c2ae7c03}, 0x20099) 11:02:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 11:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) [ 1605.159810][ T5648] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1605.200668][ T5646] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1605.222590][ T5657] IPv6: Can't replace route, no match found 11:02:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe55}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:20 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 11:02:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x320e}, 0x0) 11:02:20 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:20 executing program 5: r0 = socket(0x8, 0x6, 0x80) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5dae60dcb56970a9}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x80, r2, 0xcee09e91b4a4c85a, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xdc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r4, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1605.435444][ T5670] IPv6: Can't replace route, no match found 11:02:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x100000000000000}, 0x0) 11:02:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x97a101ccd4a898fe}, 0x4000080) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000001580)={'filter\x00'}, &(0x7f0000001600)=0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210200000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0000f9ff00000000010000"], 0x28}}, 0x0) [ 1605.487541][ T5669] device syz_tun left promiscuous mode [ 1605.496152][ T5669] bridge65: port 1(syz_tun) entered disabled state 11:02:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) [ 1605.628418][ T5669] bridge66: port 1(syz_tun) entered blocking state [ 1605.635198][ T5669] bridge66: port 1(syz_tun) entered disabled state [ 1605.644160][ T5669] device syz_tun entered promiscuous mode [ 1605.651709][ T5681] bridge66: port 2(erspan0) entered blocking state [ 1605.664159][ T5681] bridge66: port 2(erspan0) entered disabled state [ 1605.674314][ T5681] device erspan0 entered promiscuous mode [ 1605.705315][ T5692] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1605.721240][ T5696] IPv6: Can't replace route, no match found 11:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) 11:02:21 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:21 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = accept(r1, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r0, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) [ 1605.912514][ T5710] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave 11:02:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe56}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:21 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) 11:02:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210200000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0c00990003000000020000ee"], 0x28}}, 0x0) 11:02:21 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) [ 1606.344511][ T5724] IPv6: Can't replace route, no match found [ 1606.344975][ T5723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1606.366366][ T5725] device syz_tun left promiscuous mode [ 1606.374089][ T5725] bridge66: port 1(syz_tun) entered disabled state [ 1606.508515][ T5725] bridge67: port 1(syz_tun) entered blocking state [ 1606.515240][ T5725] bridge67: port 1(syz_tun) entered disabled state [ 1606.522844][ T5725] device syz_tun entered promiscuous mode [ 1606.538500][ T5735] device erspan0 left promiscuous mode [ 1606.538777][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:02:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 11:02:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xa00000000000000}, 0x0) [ 1606.544151][ T5735] bridge66: port 2(erspan0) entered disabled state 11:02:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000040)=0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r6, 0x2}, &(0x7f0000000180)=0xfec9) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getpeername$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x2c}}, 0x0) 11:02:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 11:02:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xe00000000000000}, 0x0) [ 1606.708666][ T5735] bridge67: port 2(erspan0) entered blocking state [ 1606.715336][ T5735] bridge67: port 2(erspan0) entered disabled state [ 1606.722598][ T5735] device erspan0 entered promiscuous mode [ 1606.730175][ T5737] bond1: (slave erspan0): slave is up - this may be due to an out of date ifenslave [ 1606.749276][ T5747] IPv6: Can't replace route, no match found [ 1606.871583][ T5756] IPv6: Can't replace route, no match found 11:02:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0xe57}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x2}}], 0x400000000000008, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:02:22 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:22 executing program 3: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 11:02:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x7}}]}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 11:02:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x2, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 11:02:22 executing program 5: r0 = socket$nl_gene