0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:44 executing program 5: 17:29:44 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x800, 0x8, 0x103, 0x7}, 0x8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@rose) 17:29:44 executing program 5: 17:29:44 executing program 0: 17:29:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x13000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 784.305184][T21636] IPVS: ftp: loaded support on port[0] = 21 [ 784.311574][T21633] bridge129: port 1(erspan0) entered blocking state [ 784.343362][T21633] bridge129: port 1(erspan0) entered disabled state 17:29:44 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmmsg(r5, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/212, 0xd4}], 0x1, &(0x7f0000000480)=""/37, 0x25}, 0x9}, {{&(0x7f00000004c0)=@tipc=@name, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, &(0x7f0000000640)=""/62, 0x3e}, 0x20}, {{&(0x7f0000000680)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/156, 0x9c}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/9, 0x9}, {&(0x7f0000001900)=""/74, 0x4a}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/107, 0x6b}, {&(0x7f0000002a00)=""/206, 0xce}, {&(0x7f0000002b00)=""/207, 0xcf}], 0xa}, 0xf5e}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/122, 0x7a}, {&(0x7f0000003dc0)=""/126, 0x7e}, {&(0x7f0000003e40)=""/15, 0xf}, {&(0x7f0000003e80)=""/86, 0x56}, {&(0x7f0000003f00)=""/219, 0xdb}], 0x6, &(0x7f0000004080)=""/9, 0x9}, 0xfffffc01}, {{&(0x7f00000040c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004140)=""/248, 0xf8}, {&(0x7f0000004240)=""/251, 0xfb}, {&(0x7f0000004340)=""/226, 0xe2}, {&(0x7f0000004440)=""/81, 0x51}], 0x4, &(0x7f0000004500)=""/4096, 0x1000}, 0x81}], 0x5, 0x40010020, &(0x7f0000005640)) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f00000056c0), &(0x7f0000005680)=0xfffffffffffffde4) connect$x25(r2, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:29:44 executing program 0: [ 784.450998][T21633] device erspan0 entered promiscuous mode 17:29:44 executing program 5: [ 784.502773][T21644] device erspan0 left promiscuous mode [ 784.588197][T21644] bridge129: port 1(erspan0) entered disabled state 17:29:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:45 executing program 5: 17:29:45 executing program 0: 17:29:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x14000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:45 executing program 0: 17:29:45 executing program 5: 17:29:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x20000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 785.333598][T21669] bridge130: port 1(erspan0) entered blocking state [ 785.350837][T21669] bridge130: port 1(erspan0) entered disabled state [ 785.397989][T21672] IPVS: ftp: loaded support on port[0] = 21 [ 785.445603][T21669] device erspan0 entered promiscuous mode 17:29:45 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe55cdee0ab29eadf}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2b}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff3486}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xab4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x60}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x61070000}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4fca6ae53775797f}, 0x80) 17:29:45 executing program 0: 17:29:45 executing program 5: [ 785.530912][T21682] device erspan0 left promiscuous mode [ 785.547642][T21682] bridge130: port 1(erspan0) entered disabled state 17:29:45 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6(0xa, 0x80004, 0x5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendto$inet6(r4, &(0x7f00000002c0)="b5", 0xfffffffffffffead, 0x0, &(0x7f0000000300)={0xa, 0xfffe, 0x0, @ipv4={[], [], @broadcast}, 0x5}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:29:46 executing program 5: 17:29:46 executing program 0: 17:29:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3f000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:46 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:46 executing program 5: 17:29:46 executing program 0: 17:29:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x40000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 786.433398][T21709] bridge131: port 1(erspan0) entered blocking state [ 786.447124][T21713] IPVS: ftp: loaded support on port[0] = 21 [ 786.470348][T21709] bridge131: port 1(erspan0) entered disabled state 17:29:46 executing program 5: [ 786.542811][T21709] device erspan0 entered promiscuous mode [ 786.613381][T21723] device erspan0 left promiscuous mode 17:29:46 executing program 0: 17:29:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x58000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 786.656990][T21723] bridge131: port 1(erspan0) entered disabled state 17:29:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x80, 0x7, 0x82}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 17:29:47 executing program 5: 17:29:47 executing program 0: 17:29:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x60000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 787.248594][T21750] bridge132: port 1(erspan0) entered blocking state [ 787.262120][T21750] bridge132: port 1(erspan0) entered disabled state [ 787.280158][T21750] device erspan0 entered promiscuous mode [ 787.359374][T21758] device erspan0 left promiscuous mode [ 787.365072][T21758] bridge132: port 1(erspan0) entered disabled state 17:29:47 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:47 executing program 5: 17:29:47 executing program 0: 17:29:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x65580000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:48 executing program 0: 17:29:48 executing program 5: [ 787.859000][T21766] bridge133: port 1(erspan0) entered blocking state [ 787.898670][T21769] IPVS: ftp: loaded support on port[0] = 21 [ 787.904141][T21766] bridge133: port 1(erspan0) entered disabled state [ 787.977384][T21766] device erspan0 entered promiscuous mode [ 788.014780][T21776] device erspan0 left promiscuous mode 17:29:48 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r1, &(0x7f0000000040)="a37283b0221bee1867f42e22c40ad3f818c7ea13eed6900a85c9c5d8c76d3f539832f2fd48f0a1d814f6bf22445ce88bd4123a1c1549ee27fa2c9d8cb81d348546a789a4756f837ae3ea637f36ed21e91309c7106c889b9dc5efbf19bcc73050f2f41291a065259dc4ddf7896a73a38be74270fd398b1d85ca84df2001efcbbeffc5ee346c28d24c46f5593c81c28bd7a7c537cd80504692024ac1f5ed6472df1fb79e80ee3d0b2565e83768d30652c609e4af836b317d19215e22efe9cbcc5965c6bd676c20813d", 0xc8, 0x801, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote, 0x10001}, 0x1c) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) 17:29:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x81000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:48 executing program 0: [ 788.044461][T21776] bridge133: port 1(erspan0) entered disabled state 17:29:48 executing program 0: 17:29:48 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8906, 0x0) 17:29:49 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:49 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8906, 0x0) 17:29:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x88a8ffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:49 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0xe4, "4bd810b93e12e373e9f94c78cb63117bff58e5b77b6e2da3c07955f595ca0fccb7a3210d056c003fbb5fe162f220947003294f5699c8d4686f85581907beea396c30040c135b54322684df239f9cca3b3807bb4782e25dd1c189824ab89f89de160d31dc940ed844560275e14457357e9cd0e94d8f9dbea30c92ce410bf14a8719055584970d09d9af1cc2a3eb9ad21831b46a40d225474751748d39cdbe40ac126943cab6aa5e4c034542e48b33c5a8ca8de6d9c3cb18e83dee1fe63a407173bfa45800b721641f4d6e3d1a8ac2da25333f00b6c235aeb157b4e4398873ea2610e51317"}, &(0x7f0000000280)=0x108) 17:29:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) 17:29:49 executing program 0: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x1, 0x301}, 0x14}}, 0x0) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000080)="53ca6d03d651bc01893e3748b80f720123eeb3", 0x13}, {&(0x7f0000001200)="7ff17c6f2f23e80ac489d7885f46f865efb801f8306e1bed986c1ebe8ed574a9d52fce35d40ba4c8e263847dfa3fb65d00a2747a45790d53400955ebdf3cc2875e8f74d1fde3604dc83426e51b797509c19ddf2859757daa7bfc82218fe62c769f3b6083a70ff438f632cf88a98dd593b98aeacd69c4a823ec206ab37848c18b5316a30af24891d223445952c34f05bd6105d45cb5f14b79be3a233fbdc1d0880c61ea55579806", 0xa7}, {&(0x7f00000012c0)="ab7af48edafc0c528d4b59d0894f3f1d7401acccbccad1d17e56a5f83e33f0fa127b9f1e3b53aeab88d812fac824a02d36b7a2ba96a3c62d99f97e3d375f1ce4421e67b137c011a5e1fdec26d4433b117a1abde020007882018032e5d6dad51a007c5fec2d545cd479b072f11893c22e6434abc04370017ed630b5354dc447bbfa01ef47d81bcba141918e0a", 0x8c}, {&(0x7f0000001380)="4b0a224f7ad5863fd8c8a46ceaccd0ad45d0a58e10b6f5c2edce17d60749196e69d3a08f68a9c5d415b50aabb7083f613dcd17ffa7b959acb24d3578e957092c06646f47717c7c2beebd8e103998070026d7b62226b5", 0x56}, {&(0x7f0000001400)="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", 0xfa}, {&(0x7f0000001500)="7c1ea06803081d8dd9115611b7f3e5ad13afc3cb66e064e818c44f5a629a6cbeb88a686c3c3077a589805084c1c6939ac45c01fad746741bfaa3cedb328f51fa9270e4f6a4babd7cff2d16d87e2c8910d5e89f47ae5a60fca8a51d16797ce2365c4408bf92dd7c086dddc548cbf9a1c5372f9891d6aadb0a22896aadc963f4227d270dc00163488be00d74af0db59ddcff8e37d8e94bab2351dae9d427380e02220b73ca8f51948e6391e3b7a1a948d083d22085dc8ba1d8f5339890ce37d54f296dde55198242276983e8c4d35846", 0xcf}, {&(0x7f0000000100)="894849e5c3ffd059d14d93712aa6140a60efcf", 0x13}, {&(0x7f0000001600)="d43c077b9df329f8ce175305c31bc78beb5da680eba3c58e1c31c90d762bcf77088677d3d3d884840f55e645d5edd5ed3a1ee1fc9fc7a9da70007ddaa16d2a7e568198efeaca433192ce407217f339b606c6", 0x52}, {&(0x7f0000001680)="6980ec4676a93673c19e7d4700073e23a40ccd26802d7307de52c47d2505cdfba5e2a85ecf519c4b49aaf0251dec3e0d2f73cfbea127c3b98deb00d6cf10a5afee1ec366af5fd011b9ad4c0a75126d282f3cd91ca76103d45b7656370614587892376fd83c4a49a713d00ce8149016b2a0334c3785e85ffb1e0038306b9f1b89ded516", 0x83}], 0xa) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4, 0x7, 0x1}, 0x14}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x1, 0x301}, 0x14}}, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 17:29:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9effffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:49 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000001340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001380)=0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000013c0)={r4, 0x0, 0x1, 0x9, 0x8, 0x3}, 0x14) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0xa}) recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/47, 0x2f}], 0x32c, &(0x7f0000001180)=""/251, 0xfb}, 0xfffffff8}], 0x1, 0x10000, &(0x7f00000012c0)={0x0, 0x989680}) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000001300)={0x42}) [ 788.985208][T21805] bridge134: port 1(erspan0) entered blocking state [ 789.011253][T21812] IPVS: ftp: loaded support on port[0] = 21 [ 789.020197][T21805] bridge134: port 1(erspan0) entered disabled state [ 789.082108][T21805] device erspan0 entered promiscuous mode 17:29:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) write(r0, &(0x7f0000000480)="26e099bd087d9d2ff50493f2032ecb8c6932d9b35d978575ede27806115b84cd7013874838fe6a653eb9584e7785438e2b2f4a20f6c20ab24be2da25940a8be6d7e9ab194dc0bf628757a9e434d3e793056ea101a9f84bc9b0b69a802b99e696e6e94ed85bdded92a18955d4039993652c5764e24695e53dc2b2bb5d30ad22e68fbdac2a781203c6be56e0c34b42a65d199a8cb09959a2962b27b326ebc8c5054e72d7bc6f84d2169c02d0a22429ca1dc62d070dddf21e658a92a9ba2f743d1ea97dbf18335a372de52c50e09bfe622e802e0a190bac2e869b7f321be5d15ef7e25df1258e7c4be7d22d025309cd115b2bef69d032fb992c0c8d1dbf93948dd0eddea9fbfdf144e99a41684cb7daaa03130f0ba874eab2d973610fd6b6415bff4f7b5b663f4a8efe179be4170638b574992deec181d784e180802b36cc2f72f576219323d085d1d6ce21caf058b6894be1b2c227bba9a35e672877738bd5c59f5a7cd8873355ea38391b52544d5a676f1027a3e99e5c807d902eb83111f27d7695e65e9d3959797639b934cf908794063af300a4d19990f04621fced4cbd6b7dd3c620cd812bebead6c775d393c6791de362e6151d4e6fb9bb21b9b8261db4322cddabab4b9dd23d78f39ecd271b3f2e993dc987f44f1d31c4a35f92f45aa8d6012f32436a63391e5e4ef472f112b27552824a07842cb0f267c6dc0c1138ab62f0f56b09af39a045c146dbcf33f89f464954dce55ba22831c95e7eb0af359cf311fa8ec9453b63adc3e383ae2a7246670c9b1cc27a4c5b1e0967611ba4b54fbc8cd7d878e0ce72e0604b53e9e67b79f41e29c0869591bac350cfbaa7dd6004af2c7a70caa558d99963fb1a7ba257622fd2332f351fb9cad71bb22263b0d227d8829770dce708c1bf36e87c2fb65581a8a6e007545f430bc45814dec9da1b6e6cf0e50d4e6490fb1847ef0531c0335070eb75c7c9c5cdf59ca17147a06c795d6006313a42f20ae0104311f6bd51ba83e08991c0f24131db95f03451ce7a4a02cfeb4567429af815dc87a467aad49bb7c1708ddfcc9d0cfa64451174df3ab71701e8293fba8b57424cf438690135db557190f70249fcce9e2bd86b000b44711749c3086d103f92d00e5e193f19ae11641d221b14997573c2ff2df6ff6880886929c4fdc0ab3fc5342d4c0bbb6ae8b5107aabf5a70a7379fb7f6d7e0be77d734c67d2c825be77d97b5404b91c7282886318bf3823e5b557324cfa72d2d0bcfe57b2aa2e996f7faeb7e172ffca289c6547c1057059f1b36cea4240621f485f284bf8ca3903d7da301ad9e52305377f63674f1fb30cc8f708ef6341bf63910785d2abedc3fdfa1eb0052fb8f3c595fad4e96d88aa1ad99e7388713ffb4307b0ce3019c7e72ef94bbaa7154e2404e1560e503dc2ebea38db2ae85bfd8491b36840188b88915b61f888f6d12bbae508a6b4d4fb63cf3e5d08fb10fe6eaef0901eea0e814e3ba34ee7ce0b171f76382827839fb0868d8f615f5dc494b1bdac347457e7654c555f7efdaf91204d2168f17b32fdbbac0f0545d7efb89cf42918cca39318017017fe574314bfbdc5494d3fe01dba95bcafae8161a00b44b3826acca71e7c75124d0168201905f5307e21fc430366634dc6f114bcdacdc049d31a6fdeeb21d398dde839c0264c4b8d934c06c3d91d6a218bbf986994f36ba99fcae298841393c98f7db221d0a1525f5b3a05e869b5a5de1df91cb4e88820e2da57756822ac6c05f88602e26033be59bb2bf95d3277d7f9ce3c8d3d567e00292deddefdc47a4122cf3a4ec9d743304b03b651e6b9b10300505a212eee249742735a52820315db2c9e113167e90c530f646b424aa1cb97120f2de47fc264fc4c7045b3732a528bf6edcf295a75394b39186881cf2b1958f32c22fc8af813d632c201a3a89334e6e5ebc9919c193cacd45d2a4da8f805a8f97260fb25e23f9828c65492b0f7667d9d29bfed1431ae695df39c18dd0b3b9e9127e776dbe21832ec2fe7a184ac2c2a610e7230daf00819cc043e0324ef66cdc840e85cb3bba5bac9997bca7a0f41f032464a3772e4e9f825c5114d6afb9cd3cbed743309531d9cc5312cf704401b5fd3788c78ca6bcafa20ad03f3daafe3b2dc5ee93a6fcca2732179038a22a92a4210fda517be572f64232e656d41651399f42f983157b83a85efae95bdd7b9649fc7fe4a78d1331edc8b070855266b719d864777b0a4ef5a4b4f536c1c107bba927f4008789f27d8b32050529bc1c4671577e026aa5442d137d0caccd1c1e7b7a1e94e8e1a8481c93f9117caa7587d8e97b62449d28cad17aa5ac5ed4838b77953e39dc147ca31f95e0f61ee7c1550a8ec0a2d8b1f4bd8c560270a271070c57088f4f0a5e4266d036653542162d48268d83967544920928cfc42e4d1e1973df1d6e4c7982b7073796b0417d85be834a5fd9fe0c8abd77e289d7a8f91b96ce671af21cd56954c0f494d1ae62d6ffa6aa36926c48d4853982b14ce3a1ce2dffc827c90c598a960bb1730076e7fc7643f134bced0960fabb2c2d804ee11fdf255f8dd2972e2b902f90b9ae02ab37e278c5e43bcc11afe61595400b7e27d7077d3d777950c495911d8aeb4077b4cca4e8852b460bcce45ce1e2702e10e2e50603c058ae5b12ff08198731c3b861cb28a73ebb7f1446fbc09a9180bb3ec694cab6e59bb36c755b0bb9901270fc60738e9034e8c631181400a2e2e46cf541462a668dc9edada57e5958524fe79908bf63c891e63b516ec2fdc3a44352854f8c9f508694dc403f8f0625c3e615a6d327ada9ce5eb4945c2be0daf0ca13159a988524eb242275fcedcdc86e8869017a86fc4a78502d6084432786541357d0188b21c2794057898f467395bb1f8190d3e41d146c94bbd78214c640676e1ca8238f9d7a52f4692180808f395aae89e163b7cf98e28c4cb9ea5eb0d2095d0cb0d22b7be42ec31bc4939e56a2c5474adbad657205b86b4d67e47b926b44bd02e0a066f7378cb63b106d38d9dfe834b31467b70b573d6f9ba7de387a9bc1d63cad044f46bef12b3b53cbd41f02786a313bc4190b71d0bdf02ae78faa016e5507a7be218b3a495cecd6b892167e3e14e9621f0d6260e7e537f0184ab2866bcf5c945614cdef32b08b2433171b1a679d54df3fc504784a01f720dd6859d7a07992647b56a3153f0c8880a8c8cef070e1b0320d5bfd9fa3bbc6fb37e1ab5a2e60f90b8271935353079f27ced6a9f7bcb948a9e645c3485ffce6ccce214f9c658f4dcebefd57ec21dae1255a492c0de717af8a2de202e7ca2cf275ac4e0861b32257730cfa7636a3e49922133f2fa566dafb7f97d1d2162ac13f549928d7d964023afc99cb554a2d716796f28a7743ee5533eadd26aae87c3993347157f3f60d7873942446dc5ae51ff6c9c37e680b456fe8d7e4f6b81ca33cf74d03b1e9b44283d86902db9638f95a1ec4c078ad24fcaecccc74530a00658f68b9bb158408fe5c25dc47150132c986305aff106449c82f87be6f7ecc0c9aa1d4c22003b1bc9b12dc1b63fa7bea13fd6e6c7be921e9fa1165f2e809f6d80e053d90a4b97bb1d4ddd7018827c27b5991597c699139fd9a15f9f1baf63a25398e690dfabcaa4e3b1f4e983685a659dd3c3d264bd44713827b2610e65c97163ad66f3d513b242cc7fa2d3a22b306fe0beca2ef637a0666ea1c33c209f944fe86c1552d653ab573c8cebb13fab9a44b66725abeab0cbe92e8e5930ed0a6efc1eed948f9bbb8caeeb1fafd677a7a90fdece56b23b500815ea48769e74be3efcee731c9d118844061585220caf350dad6dfbef18aeb5a54aefb9d6f85ce84d14ea436b2033052e3e1e1ff8f7d236b9a86b6909fc5e294f57c3da1609d93526c4e92652e1e8369ac262ff4dc8bfda63dcd27c60590963f062a16dc4e90247f7c5ca8042845fc25ea803ef1c9141463344034fadbf632bb37a9d6ce4ff60eea88aa50919161b72c27a5bcf6aa401678d56ce5b4b29c2515c701eb9fee7e5d4b0de05bc45d1a8ea5bbf78d14efa1778971d612b3671806203b950e883c2a961042baa9d2e7ead10ec434c7e317b6439d4ca7f625f913f41f22722d11789159bdf1f4384d4f28dffa99141236b4420c2883119cc00ea332e7b6b1f661851b498d626b2aef6b1761bd623470fc0a66e1b21a83b37053ed103839b73c53c1b89cc57705a80f139aa3b323b8b13689f94123cefeb00bdda48db7a6c23725ea6c93ce5406c059c5112de68af2f4b13584e46fad415e992ef19cfb74e19608ccb182a5b2e0fa1f1319528ff358bdef35516bcaa865a6c6d8e8ce994ae72efbce3d772e7399cf9da4971bb6b435f60caa870b101d523090ec80822b75efd534a519ced285701eba86d2afd6c26224b7ab5268d93511edca30d8f3b08fa608e317c7bb7e618fdb50540bd171d21072e589b452589bac5c034f517c1afc6e4ac1e4c2ac7dc286366f33e3d09e5d6d917ba9af26f017df2075739afd270e2b9f48579aae934ecdf80c0d5fee57048ebc13aba7de508b6e57cdcece8178145c50a4ce146036a0a155089db917d5bbf275f767cc723110ed87f2cdce9762461cae44455aa030e5add80905896d589658bd248d64e724cc30ec2b7d8a11bf353f7a5e988178c43e8473287a4775dd5ccd43c6c3c0126d8c929ffba9fe73b73efee61d64f3d63d095c9c68ca094bb27b3cd6be68e19901a53a3a6f63972c0132f1d7569a3dd9675ebfb75ebf7ffa2e5195e4a1c0a2b00cafad46245b2d01a5f0d94e6347dfc1d525dd1606102cfeee30cea7c2072c2aefbea67aa74686b7192bb8eeb2db989eeb02ec3ded75067d93b0b954f5120b4b71eaa83ae90b5909a7a038fd8fea06ea24e073937d900230b91e8b307ef9df24107951815f24038029fc1306e84e31c8211b35313fb8afdd55acec4f685b01a1acdea6d74e2c91d84a57e903fe98b17a7435492ac71badb930765853528641833342827dd6ac3861240a8cca424fd6f2498fe7105732ef3783e3b62b84c58a339347f204c7158a8faf849911057f609589632491b3865da1a77fe0257016b627a52bc9586a0d47b0e274b252c11b0cbfed187583ff70917db6f427a31ceb8ead86b8bd48d6504c6b6f1fe79eb153535872ed99cc593dadacf50ebec873c4a39a7a4acca3eefedec649d56fca75ff8e5aae898e442f4e524d7b4f11b58949e6a8bc3d338d1a7df721e38385fe0a0ee0ddc0e1f952c1bbab2fcc19c4f098d242d01f36ce3dd45683b2c06f277e4836a54d959044b1d55af585623a7ef8909c909a53cd6738708124bad9b3f7be343b077f743305160b31fd3025a7e954bd9dbfb1924355ceae6218c4c75c15a0bafd34d4c1f13a8e8b369a9f75a2b6a065ea1e377da7d7b4ef15c4675bd0345ae99925b0e434acfaa2802d603ba20a8088c1f1a1a666eb275f822", 0xf21) close(r0) [ 789.177761][T21816] device erspan0 left promiscuous mode [ 789.183446][T21816] bridge134: port 1(erspan0) entered disabled state 17:29:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e001000090000000900000009000000000000000900000004801000048010000480100004801000048010000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000900000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff0200000000000000000000000000016e6c6d6f6e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) [ 789.374322][T21834] x_tables: duplicate underflow at hook 3 [ 789.385938][T21835] x_tables: duplicate underflow at hook 3 17:29:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000010020000000000009000000000000000000000000000000078010000780100007801000078010000780100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c21100000000000000000000010000000000a800e8000000000000000000000000000000000000000000380073746174697374696300000000000000000000000000000000000000000000000100ffffffff00000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000040000000000672f2b0000000000000000080000002178a7370000feffffff"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 789.641810][T21843] x_tables: duplicate underflow at hook 3 [ 789.654101][T21843] x_tables: duplicate underflow at hook 3 17:29:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xf0ffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x1900, {0x0, 0x8}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}}, 0x0) 17:29:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x50}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 17:29:50 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c01000001070302000000000000000003fcffff87010700080002000004000008000100ba370a2ca46ba3e16acd9b93626af6076eeffd9d0de24ffc9d6c9d7e25723d18", @ANYPTR, @ANYBLOB="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"], 0x19c}}, 0x0) 17:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x4, 0x2, @void}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 789.968234][T21861] IPVS: ftp: loaded support on port[0] = 21 [ 789.974970][T21860] bridge135: port 1(erspan0) entered blocking state 17:29:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfcffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 790.014610][T21860] bridge135: port 1(erspan0) entered disabled state [ 790.025880][T21865] netlink: 371 bytes leftover after parsing attributes in process `syz-executor.5'. [ 790.068744][T21860] device erspan0 entered promiscuous mode 17:29:50 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @in={0x2, 0x0, @remote}, @l2, @in={0x2, 0x0, @multicast2}}) [ 790.232139][T21869] device erspan0 left promiscuous mode [ 790.261998][T21869] bridge135: port 1(erspan0) entered disabled state 17:29:50 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002540)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002640)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002680)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000026c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000027c0)=0xe8) r9 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r9}, 0xc) r10 = socket$caif_seqpacket(0x25, 0x5, 0x4) sendmsg$unix(r1, &(0x7f00000028c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000140)="bbe777462ff9d5e7cf314b62a5ac6e18fe579d20535904067829e3e5f600022d7782c0c1cdbc3c583e73c2b93da1410468fd71bae646dd5b20441effceddb47959eec6e8efc84d8a7a38a2bf73474761fb9a5c8e006ef93e4020894eb49f3d21584f0e50a95b0e55aafa66f7890a8552cc6551e6e85ae353bc94ba6c353e4e691a469cce6965c5251a8c55d47534ec6e858773cb57c7d3f1ee9db1a3f15df0ef47c3e11d35ff8ef649ab40ad488282bec780c233ba5e9c56a06d8ad2beae15", 0xbf}, {&(0x7f0000000240)="ef16df905aee21f21266f9e23b4b55bdf75d79d0f59d7ab4bfa8c04492b38e93549a98b002b3f29493c0e83658de0aaac12f167a27efca9a91ec7e0528cf9b3c14dd9d565334e216b0d721e56f7bea785ad17ccdce12f2bfc4d1a311b1754f0f78bc86beabacce8b28461b3b98", 0x6d}, {&(0x7f00000002c0)="f69916e57b48ded281a14bda81880449f5a09caf50943062cc58d918a7", 0x1d}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="01948b2a9e4fa16dd54db4f61af0d515275885c0421fe8b5926c05443f7725d3145599722cf826ee9d", 0x29}, {&(0x7f0000001340)="c4c1229ba0bcf683920564b2c5e90868654735db390ded5a70cc534c747b3d9eb7fada45b16901690385142ee05d49ab338221ba7ced295713a4e823abc9f4cb2ac13bfe540d69c8bde8c5f89965e46fbb07ab8066adb5ab3048332bade73e6e82fa2e3cb9288fea73b41509c5559f3bc38495439c84e2f83d32bd24245e156cfde833d52439076e9cac0d7ca93dd3ebb57da1374bd22c7599f5f608c3358dfe0a41f7557890f99846fe0251c3b9069ef6", 0xb1}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="5606d010dfb8dd1d8fb52430c5e89623c4bc6fafc1ae137de4bd2f575db1c70762310f238278d4f0466ecdc0e0b9965a43369884fe80b69cfd2593e4aeb373fd38db4b00cd8288a725157555ca3d21911adecee427809f42a86a31f3331e7550d9ebced99338268a0aa9a6c7a38799f0faa9b961e603182558024698ddb58cf37733779cde964fa720493ad1fae474a47771118cdc9be62788271aa5c403c2ea235e9b84c3d2057641f330a618c320f106c846", 0xb3}], 0x8, &(0x7f0000002800)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x88, 0x400000c}, 0x40) getsockopt$inet6_mreq(r1, 0x29, 0xf, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0x12) 17:29:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffa888}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 790.761619][T21896] bridge136: port 1(erspan0) entered blocking state [ 790.783120][T21896] bridge136: port 1(erspan0) entered disabled state [ 790.814243][T21896] device erspan0 entered promiscuous mode [ 790.865978][T21896] device erspan0 left promiscuous mode [ 790.882281][T21896] bridge136: port 1(erspan0) entered disabled state 17:29:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000030311a6bef8f6af6e00000000000000"], 0x14}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r2, 0x0, r1, 0x0, 0x400000, 0x0) 17:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffff000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:51 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r7, 0x0, r9, 0x0, 0x4ffe0, 0x0) r10 = socket(0x10, 0x80002, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$binfmt_misc(r1, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESHEX=r8, @ANYRESDEC=r4, @ANYRES64=r6, @ANYRES32=r1], @ANYRESHEX=0x0, @ANYPTR64, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESDEC=r9, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYPTR, @ANYRES16, @ANYBLOB="135405128e2553dced8e88452b677a3e4ae3fb81b3eb10b37bdf966ee3650d0b7d6b75a029e48de6e2339d92d50fc76ad22433b43ed431d943bfeccd13dfac0e29d8a1f44179bd014d3413a1d5d28db903e58ee582c0aceb042475d5cc45daab5a974c19480f4b18c19432107d2c0b2c03be66f9b3cadf896219dbb2954a473f9b652291ea1ae482080337d69c1b5649cbcb5d17345859bdc80a", @ANYRESDEC=r5], @ANYRESHEX=r10, @ANYRES16, @ANYRESOCT, @ANYPTR, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR64, @ANYBLOB="e87ad7470bfc2c31fbfae4ea5a9340cbee9ccf1843c1313779d711489fb4f9e151e5e35f5d877173825c35681627d14c5dfa1c188a33fb99a1fc850d4b800609895d5b5fe1fcb7b44239ce24bd36e7bc6266214c10af4e396418c94e06ee78240ffcdc14778b9cefada3743a6abb49b1880ee6011b135647af2c133a3bd5775f3227f405be8d0d09cd62854f393804", @ANYBLOB="fc788ea9d06df2c48e9546c127f6c61ed9784371039d15849e6ef0e34f956b0bd851a2e336b697e83a28", @ANYRESDEC=r3, @ANYPTR64, @ANYRESOCT=r11, @ANYPTR64]]], 0x89f20e3e) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:29:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffff7f}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 791.195096][T21915] IPVS: ftp: loaded support on port[0] = 21 [ 791.306786][T21918] bridge137: port 1(erspan0) entered blocking state [ 791.330119][T21918] bridge137: port 1(erspan0) entered disabled state [ 791.355414][T21918] device erspan0 entered promiscuous mode 17:29:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:29:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="23ff1f0a8117fb6ad5eb1b3c750c75c5533f018823a16997c30a069cb5b7426835903949421d82255ecefd74147f11a66128af8baad097514187691d92010000009e3db9f1ab586e0a9ce86db57e1d384bfe3042c49ef9134937af481f2b44e023b3884e0efb76d2659a715f3b513e33fd96c9888a50cbbcb8c360a4000000000000000aff7f00000003000000000832ff0769dea9ed32487d2bf1ac37e8b368d4ef58c744b72a12061817b9b9afcf98d817857774004608d60900cc622708000001000000000081f6ffbe890000975597"], 0xd1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8478071") r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x60000, 0x0) 17:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffff9e}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 791.409085][T21918] device erspan0 left promiscuous mode [ 791.434027][T21918] bridge137: port 1(erspan0) entered disabled state 17:29:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffff0}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 791.840344][T21938] bridge138: port 1(erspan0) entered blocking state [ 791.864435][T21938] bridge138: port 1(erspan0) entered disabled state [ 791.932853][T21938] device erspan0 entered promiscuous mode [ 791.995376][T21944] device erspan0 left promiscuous mode [ 792.052721][T21944] bridge138: port 1(erspan0) entered disabled state 17:29:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:29:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc005}, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 17:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffc}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:29:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x58}}, 0x0) [ 792.757264][T21961] bridge139: port 1(erspan0) entered blocking state [ 792.797389][T21961] bridge139: port 1(erspan0) entered disabled state 17:29:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xffffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 792.811868][T21968] IPVS: ftp: loaded support on port[0] = 21 [ 792.851783][T21961] device erspan0 entered promiscuous mode 17:29:53 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x802) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90080080}, 0xc, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="01000000054595ae1b041e7007950c33489898a20b2836714ad955c96a6b979de20b7efd27c0efb473cc014c453891e0d0ac0f84d8df404b683201e262ced6505310d88c0e327633de1cde241b7fc29ff835138534ab538a7f99dcfd3f38ae91a378a5e21e36e1a69549578c8acc00e4f4e207f1643d", @ANYRES16=r3, @ANYBLOB="67842dbd7000fcdbdf254c0000000c000600ffffffffffff0000080098000100000008007700000000000c002c0008000000000208000800eb00f20a000008007700300000000c000600aaaaaaaaaaaa00000400ff00"], 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00'/20, @ANYRES32=r10, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r14, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r14}, @IFLA_HSR_SLAVE1={0x8, 0x1, r17}]}}}]}, 0x48}}, 0x0) r18 = socket(0x10, 0x80002, 0x0) ioctl(r18, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") recvmmsg(r18, &(0x7f0000003ac0)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/82, 0x52}, {&(0x7f0000000180)=""/243, 0xf3}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x4, &(0x7f0000000380)=""/226, 0xe2}, 0x3}, {{&(0x7f0000000480)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/157, 0x9d}], 0x8, &(0x7f0000000b80)=""/64, 0x40}, 0x4}, {{&(0x7f0000000bc0)=@ipx, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/254, 0xfe}, {&(0x7f0000000d40)=""/233, 0xe9}, {&(0x7f0000000e40)=""/97, 0x61}, {&(0x7f0000000ec0)=""/38, 0x26}], 0x4, &(0x7f0000000f40)=""/234, 0xea}, 0x1ff}, {{&(0x7f0000001040)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1}, 0x8}, {{&(0x7f0000002100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002540), 0x0, &(0x7f00000025c0)=""/64, 0x40}, 0x8}, {{&(0x7f0000002600)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/30, 0x1e}, {&(0x7f00000026c0)=""/48, 0x30}, {&(0x7f0000002700)=""/120, 0x78}, {&(0x7f0000002780)=""/127, 0x7f}, {&(0x7f0000002800)=""/109, 0x6d}], 0x5, &(0x7f0000002900)=""/24, 0x18}, 0xfffffffd}, {{&(0x7f0000002940)=@sco, 0x80, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/15, 0xf}, {&(0x7f0000002a00)=""/147, 0x93}, {&(0x7f0000002ac0)=""/50, 0x32}, {&(0x7f0000002b00)=""/134, 0x86}, {&(0x7f0000002bc0)=""/182, 0xb6}, {&(0x7f0000002c80)=""/210, 0xd2}, {&(0x7f0000002d80)=""/183, 0xb7}, {&(0x7f0000002e40)=""/40, 0x28}, {&(0x7f0000002e80)=""/206, 0xce}], 0x9, &(0x7f0000003040)=""/187, 0xbb}, 0x40}, {{&(0x7f0000003100)=@sco, 0x80, &(0x7f0000003240)=[{&(0x7f0000003180)=""/138, 0x8a}], 0x1, &(0x7f0000003280)=""/136, 0x88}, 0x62}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003340)=""/49, 0x31}, {&(0x7f0000003380)=""/213, 0xd5}, {&(0x7f0000003480)=""/168, 0xa8}, {&(0x7f0000003540)=""/34, 0x22}, {&(0x7f0000003580)=""/29, 0x1d}, {&(0x7f00000035c0)=""/250, 0xfa}, {&(0x7f00000036c0)=""/190, 0xbe}, {&(0x7f0000003780)=""/255, 0xff}, {&(0x7f0000003880)=""/29, 0x1d}, {&(0x7f00000038c0)=""/242, 0xf2}], 0xa, &(0x7f0000003a80)=""/37, 0x25}, 0x10001}], 0x9, 0x2, &(0x7f0000003d00)) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000003dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x38, r3, 0x308, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r19}]}, 0x38}, 0x1, 0x0, 0x0, 0x20022000}, 0x804) [ 792.945762][T21969] device erspan0 left promiscuous mode [ 792.976322][T21969] bridge139: port 1(erspan0) entered disabled state 17:29:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 793.111427][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 793.549622][T21995] device bridge36 entered promiscuous mode [ 793.617197][T21995] device bridge35 entered promiscuous mode [ 793.716280][T21995] device bridge36 left promiscuous mode [ 793.776853][T21995] device bridge35 left promiscuous mode 17:29:54 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 794.055490][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 794.091952][T22017] bridge140: port 1(erspan0) entered blocking state 17:29:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 794.102905][T22016] IPVS: ftp: loaded support on port[0] = 21 17:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 794.134422][T22017] bridge140: port 1(erspan0) entered disabled state [ 794.170028][T22017] device erspan0 entered promiscuous mode [ 794.247997][T22019] device erspan0 left promiscuous mode [ 794.253681][T22019] bridge140: port 1(erspan0) entered disabled state 17:29:54 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 794.327828][T22028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:29:54 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 794.629078][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 794.781546][T22043] bridge141: port 1(erspan0) entered blocking state [ 794.814459][T22043] bridge141: port 1(erspan0) entered disabled state [ 794.845142][T22043] device erspan0 entered promiscuous mode [ 794.930439][T22047] device erspan0 left promiscuous mode [ 794.957359][T22047] bridge141: port 1(erspan0) entered disabled state 17:29:55 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:55 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:29:55 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:55 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0xfffffffffffffe66) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000240)=""/4096, &(0x7f00000000c0)=0x1000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = openat$cgroup_ro(r4, &(0x7f0000001380)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f00000013c0)=0x100, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) getsockname(r6, &(0x7f0000001480)=@can={0x1d, 0x0}, &(0x7f0000001500)=0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000001540)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000001400)=0x78) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@local, @in=@multicast2, 0x4e22, 0x6, 0x4e20, 0x6, 0x2, 0x20, 0x80, 0xff, r7, r9}, {0x8000, 0x7, 0x0, 0x2, 0x0, 0x8b7, 0x7, 0x40}, {0x3, 0x2, 0x7, 0xff}, 0x982, 0x6e6bbc, 0x1, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x31}, 0x4d4, 0x33}, 0x22093802c6a8696a, @in=@broadcast, 0x3505, 0x3, 0x1, 0x2, 0x5, 0x1, 0xda15}}, 0xe8) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendto$x25(r1, &(0x7f0000000040)="4ca31a7b6262", 0x6, 0x40000, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) r10 = accept(r3, &(0x7f0000000100)=@ethernet={0x0, @random}, &(0x7f0000000180)=0x80) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000580)=0x80) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r13, 0x65, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x70400c90}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000", @ANYRES16=r14, @ANYBLOB="100025bd70010900002503"], 0x3}}, 0xb0f12da7ed8caacf) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r10, &(0x7f0000001340)={&(0x7f00000001c0), 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x94, r14, 0x301, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:ptmx_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x1b, 0x7, '/usr/sbin/cups-browsed\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x20}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr="23e8a9301573e20abf4c73b6eafbbfe2"}]}, 0x94}, 0x1, 0x0, 0x0, 0x22000000}, 0x44184) 17:29:55 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:29:55 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 795.684810][T22060] bridge142: port 1(erspan0) entered blocking state [ 795.704038][T22060] bridge142: port 1(erspan0) entered disabled state [ 795.704105][T22063] IPVS: ftp: loaded support on port[0] = 21 [ 795.807295][T22060] device erspan0 entered promiscuous mode 17:29:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 795.855818][T22060] device erspan0 left promiscuous mode [ 795.894653][T22060] bridge142: port 1(erspan0) entered disabled state 17:29:56 executing program 5: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x5}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:29:56 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:29:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:29:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:29:56 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 796.606051][T22100] bridge143: port 1(erspan0) entered blocking state [ 796.640645][T22106] IPVS: ftp: loaded support on port[0] = 21 [ 796.649166][T22100] bridge143: port 1(erspan0) entered disabled state [ 796.718553][T22100] device erspan0 entered promiscuous mode [ 796.803377][ T346] tipc: TX() has been purged, node left! [ 796.823381][T22100] device erspan0 left promiscuous mode [ 796.840020][ T346] tipc: TX() has been purged, node left! [ 796.857934][ T346] tipc: TX() has been purged, node left! [ 796.876730][T22100] bridge143: port 1(erspan0) entered disabled state [ 796.887249][ T346] tipc: TX() has been purged, node left! [ 796.907195][ T346] tipc: TX() has been purged, node left! [ 796.914462][ T346] tipc: TX() has been purged, node left! [ 796.931450][ T346] tipc: TX() has been purged, node left! [ 796.944885][ T346] tipc: TX() has been purged, node left! [ 796.959275][ T346] tipc: TX() has been purged, node left! [ 796.972478][ T346] tipc: TX() has been purged, node left! [ 796.991377][ T346] tipc: TX() has been purged, node left! [ 797.006922][ T346] tipc: TX() has been purged, node left! [ 797.057984][ T346] tipc: TX() has been purged, node left! [ 797.066974][ T346] tipc: TX() has been purged, node left! [ 797.207017][ T346] tipc: TX() has been purged, node left! [ 797.386495][ T346] tipc: TX() has been purged, node left! [ 797.536526][ T346] tipc: TX() has been purged, node left! [ 797.706418][ T346] tipc: TX() has been purged, node left! [ 797.866475][ T346] tipc: TX() has been purged, node left! [ 798.026537][ T346] tipc: TX() has been purged, node left! [ 798.196514][ T346] tipc: TX() has been purged, node left! [ 798.366464][ T346] tipc: TX() has been purged, node left! [ 798.526489][ T346] tipc: TX() has been purged, node left! [ 798.696546][ T346] tipc: TX() has been purged, node left! [ 798.866559][ T346] tipc: TX() has been purged, node left! [ 799.046486][ T346] tipc: TX() has been purged, node left! [ 799.217517][ T346] tipc: TX() has been purged, node left! [ 799.396554][ T346] tipc: TX() has been purged, node left! 17:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:30:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:55 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:30:55 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0xf, 0x0, "bcac4864ea743c9502ff79232ff4751f18f050dab86795d58b000ae02d2c3174c5cbb84700e28d20de018cbab9701b42e4ed404aade8dcce557d49f4974d3171ec90073d606851feef74f9c502090edb"}, 0xd8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = openat$cgroup_ro(r3, &(0x7f00000007c0)='rdma.current\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={r9, 0x82, "20ccacb41c4a00365de927d7389d4b1ce22e899096f1be611be866739fbcad2b21643f67e4bc658f788c20948341c5e1cb7a32217a700acb0e37c36ed1aa8e1ce8c81eb78158436da4c472dc53b5eebd17a1fe6c7315b08f51e3d4a75da6fca0bd728ab9697b6078a9c2ddba5b15f117c962ceee22a9404eed463765bbd2dc4b51f4"}, &(0x7f0000000380)=0x8a) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@generic={0x3, 0x4, 0x3}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @identifier="47feb9043b5b57d7d62dcb6cb7cbb7a8"}}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) [ 855.236770][ T346] tipc: TX() has been purged, node left! [ 855.239475][T22144] IPVS: ftp: loaded support on port[0] = 21 [ 855.273874][T22147] bridge144: port 1(erspan0) entered blocking state 17:30:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 17:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) [ 855.388928][T22147] bridge144: port 1(erspan0) entered disabled state [ 855.412056][T22147] device erspan0 entered promiscuous mode [ 855.460747][T22162] device erspan0 left promiscuous mode [ 855.502193][T22162] bridge144: port 1(erspan0) entered disabled state 17:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 17:30:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xa}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 855.909205][T22186] bridge145: port 1(erspan0) entered blocking state [ 855.940002][T22186] bridge145: port 1(erspan0) entered disabled state [ 855.959044][T22186] device erspan0 entered promiscuous mode [ 856.020309][T22186] device erspan0 left promiscuous mode [ 856.060315][T22186] bridge145: port 1(erspan0) entered disabled state 17:30:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:30:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 17:30:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:56 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xb) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x1c737e634961e047) socket$pppoe(0x18, 0x1, 0x0) setsockopt$rose(r6, 0x104, 0x4, &(0x7f00000000c0)=0x80000000, 0x4) 17:30:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xc}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 856.382797][T22209] IPVS: ftp: loaded support on port[0] = 21 [ 856.415096][T22210] bridge146: port 1(erspan0) entered blocking state 17:30:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 856.436526][T22210] bridge146: port 1(erspan0) entered disabled state [ 856.499984][T22210] device erspan0 entered promiscuous mode [ 856.531631][T22220] device erspan0 left promiscuous mode [ 856.541859][T22220] bridge146: port 1(erspan0) entered disabled state 17:30:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:30:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 856.981307][T22237] bridge147: port 1(syz_tun) entered blocking state [ 856.989293][T22237] bridge147: port 1(syz_tun) entered disabled state [ 856.998244][T22237] device syz_tun entered promiscuous mode 17:30:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:30:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 17:30:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:57 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ' \x00'}, {0x20, ' \x00'}, {0x20, ' \x00'}, {}], 0xa, "1a1cb27cfd78a99736a06bc912b533428074292a552439f2791ac867bd7a8d2129d36725372e06b7921e25588dc962c1c2db89b15108db6c27ab759f75aba688f0ce65332cf58e4526892ea9635d3613c9debac358da78c9bf9c27615cc0643323cd6021d54d238682bd40ee78d38a1e805486b3819e2ad7c7cb47514a313c39"}, 0xbf) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmsg$can_j1939(r1, &(0x7f0000002800)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/166, 0xa6}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000001440)=""/21, 0x15}, {&(0x7f0000001480)=""/19, 0x13}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/86, 0x56}, {&(0x7f0000002540)=""/221, 0xdd}], 0x9, &(0x7f0000002700)=""/231, 0xe7}, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) 17:30:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 857.420597][T22255] IPVS: ftp: loaded support on port[0] = 21 [ 857.433947][T22252] device syz_tun left promiscuous mode 17:30:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 857.492392][T22252] bridge147: port 1(syz_tun) entered disabled state 17:30:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:30:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 857.687650][T22252] bridge148: port 1(syz_tun) entered blocking state [ 857.710780][T22252] bridge148: port 1(syz_tun) entered disabled state [ 857.752806][T22252] device syz_tun entered promiscuous mode 17:30:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:30:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 17:30:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:58 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e21, @loopback}}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x13) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 17:30:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:30:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:30:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x11}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:58 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x1}}, 0x12) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x4e) [ 858.551815][T22296] device syz_tun left promiscuous mode [ 858.574908][T22296] bridge148: port 1(syz_tun) entered disabled state [ 858.590951][T22304] IPVS: ftp: loaded support on port[0] = 21 17:30:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:30:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 858.816731][T22296] bridge149: port 1(syz_tun) entered blocking state [ 858.825924][T22296] bridge149: port 1(syz_tun) entered disabled state [ 858.866745][T22296] device syz_tun entered promiscuous mode 17:30:59 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:30:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:30:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x12}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:30:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:30:59 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'caif0\x00', 0x10}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="2000120008000100687372001400020008000200", @ANYRES32=r6, @ANYBLOB="08040100", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r11, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r13}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)={r13, 0x1000, "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"}, &(0x7f0000000280)=0x1008) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001280)={@remote, @remote, @local, 0x5, 0x4, 0x7c, 0x100, 0x73ef, 0x80, r10}) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x5, "934ddcc0587e25c4072a8dd3d2e19968b8fd3c07c73d90a000b6e2cb7c409c1c4f93346a5164530364ecd65f31fd5923f05dcbc6a9de7f6664cf0edd5055f67af61f581fff6ba5789a5f6c57658576583c021a948ee24a65a0bfdcfcf40cbd4e3cacda75b884ca1c456f26b72e570f065b447f68b32fbe17bad59ed18f6551d9"}) r14 = socket(0x10, 0x80002, 0x0) ioctl(r14, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000000340)="7c84461e13705d03d2e6f8c403fd075fbd9e70cbe92ba85b7d4f879d464f9b9488c6d47bd3bba04845cabdb54373", 0x2e) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:30:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) 17:31:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x13}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 859.832592][T22347] device syz_tun left promiscuous mode [ 859.873192][T22350] IPVS: ftp: loaded support on port[0] = 21 [ 859.873811][T22347] bridge149: port 1(syz_tun) entered disabled state 17:31:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) 17:31:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 860.086779][T22347] bridge150: port 1(syz_tun) entered blocking state [ 860.095920][T22347] bridge150: port 1(syz_tun) entered disabled state 17:31:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}]}, 0x7c}}, 0x0) [ 860.129836][T22347] device syz_tun entered promiscuous mode [ 860.179807][T22352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 860.247901][T22352] (unnamed net_device) (uninitialized): HSR: Slave1 device not specified 17:31:01 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_STATUS={0x8, 0x6}]}, 0x7c}}, 0x0) 17:31:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x14}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:01 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f00000001c0)=0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0xff43) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000003a00)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000003a40), 0x2) 17:31:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_STATUS={0x8, 0x6}]}, 0x7c}}, 0x0) [ 860.980425][T22393] device syz_tun left promiscuous mode [ 860.986162][T22393] bridge150: port 1(syz_tun) entered disabled state [ 860.996963][ T346] tipc: TX() has been purged, node left! [ 861.008426][ T346] tipc: TX() has been purged, node left! 17:31:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x58}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:01 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x42}]}, 0x20}}, 0x20040000) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x9) [ 861.043147][T22400] IPVS: ftp: loaded support on port[0] = 21 [ 861.049364][ T346] tipc: TX() has been purged, node left! [ 861.066498][ T346] tipc: TX() has been purged, node left! 17:31:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x7c, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_STATUS={0x8, 0x6}]}, 0x7c}}, 0x0) 17:31:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 861.295158][T22393] bridge151: port 1(syz_tun) entered blocking state [ 861.307849][T22393] bridge151: port 1(syz_tun) entered disabled state [ 861.334897][T22393] device syz_tun entered promiscuous mode 17:31:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x60}}, 0x0) 17:31:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x60}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:02 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="ed471a9fb361c3fc3af187fd9b2f81268f3b45fbd03f4ecaea3cb2a775146bbc9145e60cebc3fa12c65ed8e59bb7ff0f06da61fd520ca72e4bf5c0a38033f59a7d5eb92488191e9ded9b26b8a0fc3b4b8c7a60e58308cd072087ea22", 0x5c}, {&(0x7f00000000c0)="734c133fae9b14d1c2bfc75e4d1b827905a5a57568b38d75fccfcb9415bdf36846876965e459851d1339a03f6ee49b5552963a4b3d2581a483b4636c443e792107c1c0d52988e8e323a670e104d421c277af18c3730183cc690b54be42a3414c6dd1233506a5ee64e61abbf68bede61fdb5311d9fc63a634d736c09ce37a9bf5ac18bad49897e32434293b6c7f16eac459b1b9334b56ab16417d1e713089fd79b1c516283f60e669faf8e6314836ea82eecd7ca695df0b13a238a63e943406b81fcddc383ff51ba92e389a0199f74cb52760d0d8", 0xd4}, {&(0x7f00000001c0)="de392f8a6d4042923579ab0978993561bc17aba2ebb1d6f1ea8d4a68e65c58819b09e623bd797f9e60f2a9999d49a0c9d9f982b42725d45669b7af4e73c37fceae87f1a25e6958cb22718ac209a6cb395779e1063c6523d0939862036433e61fbc94785b10071f871a7141d3b868667cc4a646743b0d2cd606ea79a4c5f0049f4e8b2d5a8ff8498967980ffa77dcaa50a9019b72049a1c3fb7e73462392cd6a53b8bf68f6169d6ff5d9942b256c150a66374d63ebbe8a3f6380377b2e145b843728e35cf55112b88f845258cd5a678168bcbdb967b49dcfebbb9082969bee5a90765f1b4ea1bb03a8c3b5757", 0xec}, {&(0x7f00000002c0)="24f9b92e86e7b8ad0560bb3228f50aa2d6505f966b4bac8ca64b4fc71165ffccafeeb63899e89264df872b3019f86d680967fc423c6c6fbfca4dd7d4650899be1b7dd5fa6d2159a900c5f02def946d89ef93c435345c9d394013fbfd955b5f877ae174e6c988fa2058db294becbf5bb37267a36ea2aabd98196b10f61c27ec4d", 0x80}, {&(0x7f0000000340)="309e13b1045bd3a7eca2b93b713483e52e3097a66d014953fdb8536005d5610d538ba7ab7bc38e0c3d85632a69204c78cc3088c28d84853e519a4693b2f4b9742c36fe46052b51f3d38def7b42f42918d74282f961c4fdf9c34ddc6a2d9b6719ff16d42933ee00a75ee9ffd7294480961f99d91f8b296b8ddd3e2f0eac4a8f2120e840d701cf16e04d3054c4aab5fc2f7acb6a6154a2b2797506c18deec60a799a02ea61975000fd09", 0xa9}], 0x5}}, {{&(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f00000004c0)="585954d1045fe37484a35942b91b547bfbe7a5d1beb57b3901555f611f92cd652e8a89331dcb5e37ce54eaef6874cbd53c2c4c65b310fe530acb8c56d18633c485f5bd708a13455a5380ae83a7b679dd78806ee80da2cdee", 0x58}], 0x1, &(0x7f0000000580)=[@ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x6d, 0x0, 0xc, [0x4, 0xffffff7f, 0x9, 0x7fffffff, 0x116, 0xffffffff, 0x401, 0x40]}, @timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x6, [{@empty, 0x1ce}, {@multicast2, 0x800}, {@remote, 0x848}, {@remote, 0x312}]}, @timestamp_prespec={0x44, 0x24, 0x17, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x1f}, {@multicast1, 0x6}, {@broadcast, 0x10001}, {@broadcast, 0x3}]}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)="0351f3a6704b979975ab173e025b37f614cd8f35dde67e1073b5807c0c9e8aed3c63f1ae5bc01d51bbc270d160d992b437aae35afa353e2f8531d509dc3b1cecaae6e56eab1381019f2c31edff246ccc50b1c9124bfc5a7c1b8177369becbe0810ee47c19315567b6cd5f87549990f633af6f38fad10d1b58ffcd1044e1027431d39ac155852c880048ea2dfa1cb6408d02ac52fc5fe32130469a21b317018b9d0e2ed4279a1c68a3581c8678b7becc9a025b9bdb01abbad2ff2e943b66b8a7a201b3a8be141a7c49505002e", 0xcc}, {&(0x7f0000000700)="124d90e6c279e481623a35ab1dfa6d5c02bcafc9564328523de5821f359994270115f02e15d25685697708c27915377a54561d184704ea36f50f89b7ca1953ccce66dc707ecfdbd874d7a5", 0x4b}], 0x2, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x88}}], 0x3, 0x24000000) 17:31:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x60}}, 0x0) [ 862.069406][T22436] device syz_tun left promiscuous mode [ 862.075104][T22436] bridge151: port 1(syz_tun) entered disabled state 17:31:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x60}}, 0x0) 17:31:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf0}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 862.110963][T22446] IPVS: ftp: loaded support on port[0] = 21 17:31:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x70}}, 0x0) 17:31:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 862.276572][T22436] bridge152: port 1(syz_tun) entered blocking state [ 862.283424][T22436] bridge152: port 1(syz_tun) entered disabled state [ 862.308326][T22436] device syz_tun entered promiscuous mode 17:31:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x70}}, 0x0) [ 862.451079][T22447] device bridge40 entered promiscuous mode [ 862.518135][T22447] device bridge39 entered promiscuous mode [ 862.617412][T22447] device bridge40 left promiscuous mode [ 862.666564][T22447] device bridge39 left promiscuous mode 17:31:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x70}}, 0x0) [ 862.989458][T22485] IPVS: ftp: loaded support on port[0] = 21 [ 863.148366][ T0] NOHZ: local_softirq_pending 08 17:31:03 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0xc) 17:31:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x204}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 863.355339][T22492] device syz_tun left promiscuous mode [ 863.393614][T22492] bridge152: port 1(syz_tun) entered disabled state 17:31:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x300}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:03 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000002700), 0x80000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000002740)=0x20004) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xfffffff9, 0x4) [ 863.556767][T22492] bridge153: port 1(syz_tun) entered blocking state [ 863.567140][T22492] bridge153: port 1(syz_tun) entered disabled state [ 863.578766][T22492] device syz_tun entered promiscuous mode 17:31:04 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x402}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x48}}, 0x0) [ 863.893207][T22528] device syz_tun left promiscuous mode [ 863.930499][T22528] bridge153: port 1(syz_tun) entered disabled state 17:31:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x500}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 863.972123][T22533] IPVS: ftp: loaded support on port[0] = 21 17:31:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x48}}, 0x0) [ 864.126590][T22528] bridge154: port 1(syz_tun) entered blocking state [ 864.137038][T22528] bridge154: port 1(syz_tun) entered disabled state [ 864.175560][T22528] device syz_tun entered promiscuous mode 17:31:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x600}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:05 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x48}}, 0x0) 17:31:05 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @local, @remote, 0xfff, 0x200, 0xaf3, 0x600, 0x4, 0xc4060010}) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="e08d36de31e3bed0846cd5f5516e30008ad5ec76d481c6f05fdb9491", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004e00)={0x0, @multicast2, @broadcast}, &(0x7f0000004e40)=0xc) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000004e80)={@mcast2, @dev={0xfe, 0x80, [], 0x3f}, @rand_addr="c516702e51459b4e797cb20be986528b", 0x0, 0x178, 0x8, 0x480, 0xe7f7, 0x44000000, r5}) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r7, 0x40}, 0x8) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 17:31:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x900}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xa00}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 865.000106][T22573] device syz_tun left promiscuous mode [ 865.013795][T22573] bridge154: port 1(syz_tun) entered disabled state 17:31:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 865.050497][T22578] IPVS: ftp: loaded support on port[0] = 21 [ 865.136790][T22573] bridge155: port 1(syz_tun) entered blocking state [ 865.146589][T22573] bridge155: port 1(syz_tun) entered disabled state [ 865.174083][T22573] device syz_tun entered promiscuous mode 17:31:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb00}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 865.478960][T22604] device syz_tun left promiscuous mode [ 865.500129][T22604] bridge155: port 1(syz_tun) entered disabled state [ 865.656608][T22604] bridge156: port 1(syz_tun) entered blocking state [ 865.663279][T22604] bridge156: port 1(syz_tun) entered disabled state [ 865.675237][T22604] device syz_tun entered promiscuous mode 17:31:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:31:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x30, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x78}}, 0x0) 17:31:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xc00}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:06 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x58}}, 0x0) 17:31:06 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x7, 0x20}, &(0x7f0000000080)=0xc) [ 866.005980][T22631] IPVS: ftp: loaded support on port[0] = 21 17:31:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe00}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 866.094315][T22637] device syz_tun left promiscuous mode 17:31:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x58}}, 0x0) [ 866.166868][T22637] bridge156: port 1(syz_tun) entered disabled state 17:31:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001e00), 0x1, 0x0) 17:31:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x10, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x58}}, 0x0) [ 866.316619][T22637] bridge157: port 1(syz_tun) entered blocking state [ 866.331754][T22637] bridge157: port 1(syz_tun) entered disabled state 17:31:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) [ 866.358522][T22637] device syz_tun entered promiscuous mode 17:31:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf00}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) [ 866.754888][T22668] device syz_tun left promiscuous mode [ 866.761476][T22668] bridge157: port 1(syz_tun) entered disabled state [ 866.906601][T22668] bridge158: port 1(syz_tun) entered blocking state [ 866.913355][T22668] bridge158: port 1(syz_tun) entered disabled state [ 866.922745][T22668] device syz_tun entered promiscuous mode 17:31:07 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 17:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1100}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:07 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) splice(r0, &(0x7f0000000040)=0x2, r1, &(0x7f0000000080)=0x9cb, 0xcb6, 0x8) 17:31:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}, {r0}], 0x2, 0x400080000004c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00526) recvfrom(r1, &(0x7f0000000080)=""/252, 0xfc, 0x2, 0x0, 0x0) shutdown(r1, 0x0) 17:31:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:07 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) 17:31:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) [ 867.357016][T22686] device syz_tun left promiscuous mode 17:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1200}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 867.404664][T22686] bridge158: port 1(syz_tun) entered disabled state 17:31:07 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, 0x1c) [ 867.469149][T22701] IPVS: ftp: loaded support on port[0] = 21 17:31:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)=""/144, 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000c80)=""/235, 0xeb}], 0x1}}], 0x2, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000b80)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001fc0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/205, 0x68}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 867.586670][T22686] bridge159: port 1(syz_tun) entered blocking state [ 867.626580][T22686] bridge159: port 1(syz_tun) entered disabled state [ 867.652976][T22686] device syz_tun entered promiscuous mode 17:31:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1300}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0x110, 0x0, 0x0, "a4b19cd484c677f3d83a47a313d9e18e145d9f7b62cd6323861fff4e249a33e7110fbb7405608ccf421664461b33be72cfdbf26b0feb1a2cf96dd895d386553554d852ddf91ed0d9bbd8a11928bc11b341bad35230076c46a0953b1864e8f7437216b46d9df4c7123b67c8f5da239e92171474a5ed9c36aa0d21cf27b837360c48973123c41c61be06168b28ad522313c67c3d093f2edcc60234300961c39f08affd82b13907dad23c69812b83331f148ad9581b42eda4d121b865758b27ae6ac71f099e680b844f023b55e82fc62b9713e2578ea2229ed16dbf2c9c13ffbeddc5610c4059d45333fa0f755b39f15419c561fdb3666b790964"}], 0x110}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000078030000d801000008010000d80100000000000000000000a8020000a8020000a8020000a8020000a80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b000000000000000000000000000000000000000000000000007f010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000726f73653000000000000000000000006e657464657673696d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000400000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000900000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) 17:31:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1400}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/11, 0xb}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) shutdown(r1, 0x0) [ 868.618818][T22737] x_tables: duplicate underflow at hook 2 [ 868.655492][T22741] IPVS: ftp: loaded support on port[0] = 21 [ 868.658329][T22742] x_tables: duplicate underflow at hook 2 17:31:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3f00}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 868.676271][T22740] device syz_tun left promiscuous mode [ 868.699490][T22740] bridge159: port 1(syz_tun) entered disabled state 17:31:09 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 868.868058][T22740] bridge160: port 1(syz_tun) entered blocking state [ 868.893520][T22740] bridge160: port 1(syz_tun) entered disabled state [ 868.937920][T22740] device syz_tun entered promiscuous mode [ 868.949701][T22755] IPVS: ftp: loaded support on port[0] = 21 17:31:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:09 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = accept4(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r7, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r8, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r9 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001b0018002cbd700000000000e0000001000000000000000000000000ac1414aa0000004e2400074e2000000b0000a03b00"/63, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="00000000000000000300000000000000030000000000000023c50000000000003f0000000000000001000000637938f623fd0ee2000000000000000000000000030000000000000000000000000000000000000000000000faffffffffffffff010000000000000003000200"/120], 0xc0}}, 0x0) r10 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r10}, 0xc) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r12 = accept$unix(r11, &(0x7f0000000ac0), &(0x7f0000000b40)=0x6e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r15 = socket$inet_udp(0x2, 0x2, 0x0) close(r15) splice(r14, 0x0, r15, 0x0, 0x4ffe0, 0x0) r16 = socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r18 = socket$inet_udp(0x2, 0x2, 0x0) close(r18) splice(r17, 0x0, r18, 0x0, 0x4ffe0, 0x0) r19 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r19, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r19, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r20, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r21, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r22 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001b0018002cbd700000000000e0000001000000000000000000000000ac1414aa0000004e2400074e2000000b0000a03b00"/63, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="00000000000000000300000000000000030000000000000023c50000000000003f0000000000000001000000637938f623fd0ee2000000000000000000000000030000000000000000000000000000000000000000000000faffffffffffffff010000000000000003000200"/120], 0xc0}}, 0x0) r23 = getgid() r24 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r24, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r24, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r25, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r26, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r27 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001b0018002cbd700000000000e0000001000000000000000000000000ac1414aa0000004e2400074e2000000b0000a03b00"/63, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="00000000000000000300000000000000030000000000000023c50000000000003f0000000000000001000000637938f623fd0ee2000000000000000000000000030000000000000000000000000000000000000000000000faffffffffffffff010000000000000003000200"/120], 0xc0}}, 0x0) r28 = socket(0x10, 0x80002, 0x0) ioctl(r28, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0, 0x0}, &(0x7f0000001e40)=0xc) r30 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r31 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r32, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r33, &(0x7f0000000000)=ANY=[], 0xfffffecc) r34 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r34, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r34, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r35, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r37 = socket$inet_udp(0x2, 0x2, 0x0) close(r37) splice(r36, 0x0, r37, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r39, &(0x7f0000000000)=ANY=[], 0xfffffecc) r40 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001f40), &(0x7f0000001fc0)=0x60, 0xdf53781c5fb41cce) r41 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000002000), 0x800) r42 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r43 = socket(0x10, 0x80002, 0x0) ioctl(r43, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r44 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r45 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r45, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r45, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r46, 0x0) r47 = getgid() r48 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r48, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r48, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r49, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r50, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r51 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@polexpire={0xc0, 0x1b, 0x18, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r50, r51}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x1}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}}, 0xc0}}, 0x0) r52 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002240)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000002340)=0xe8) r54 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r54}, 0xc) r55 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r55, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r55, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r56, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r57, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_IP_XFRM_POLICY(r57, 0x0, 0x11, &(0x7f0000002380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000002480)=0xe8) r59 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r59}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r61 = socket$inet_udp(0x2, 0x2, 0x0) close(r61) splice(r60, 0x0, r61, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r61, 0x1, 0x11, &(0x7f00000024c0)={0x0}, &(0x7f0000002500)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002540)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000002640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0, 0x0}, &(0x7f00000026c0)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r65, &(0x7f0000000000)=ANY=[], 0xfffffecc) r66 = accept$netrom(r65, &(0x7f0000002700)={{0x3, @netrom}, [@null, @remote, @null, @bcast, @bcast, @null, @default, @rose]}, &(0x7f0000002780)=0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r67, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r69 = socket$inet_udp(0x2, 0x2, 0x0) close(r69) splice(r68, 0x0, r69, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r71 = socket$inet_udp(0x2, 0x2, 0x0) close(r71) splice(r70, 0x0, r71, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r73 = socket$inet_udp(0x2, 0x2, 0x0) close(r73) splice(r72, 0x0, r73, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r74, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r75, &(0x7f0000000000)=ANY=[], 0xfffffecc) r76 = socket$packet(0x11, 0x6, 0x300) r77 = getpid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r78, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r79 = getuid() r80 = socket$nl_route(0x10, 0x3, 0x0) r81 = socket$nl_route(0x10, 0x3, 0x0) r82 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r82, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r82, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r81, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r83, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r84 = socket$nl_route(0x10, 0x3, 0x0) r85 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r85, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r85, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r84, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r86}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r80, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r83}, @IFLA_HSR_SLAVE1={0x8, 0x1, r86}]}}}]}, 0x48}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r87, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r88 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001b0018002cbd700000000000e0000001000000000000000000000000ac1414aa0000004e2400074e2000000b0000a03b00"/63, @ANYRES32=r87, @ANYRES32=r88, @ANYBLOB="00000000000000000300000000000000030000000000000023c50000000000003f0000000000000001000000637938f623fd0ee2000000000000000000000000030000000000000000000000000000000000000000000000faffffffffffffff010000000000000003000200"/120], 0xc0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@polexpire={0x1c0, 0x1b, 0x400, 0x70bd2c, 0x0, {{{@in=@multicast1, @in=@local, 0x4e24, 0x7, 0x4e20, 0x0, 0xb, 0x0, 0xa0, 0x3b, r78, r79}, {0x0, 0x3, 0x3, 0xc523, 0x3f, 0x3}, {0x3, 0x0, 0x3, 0xfffffffffffffffa}, 0x1, 0x0, 0x3, 0x0, 0x2}}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@mcast1, 0x4e22, 0x20, 0x4e23, 0x0, 0x0, 0x20, 0x80, 0x87, r83, r88}, {@in=@remote, 0x4d6, 0x2b}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x7fff, 0x2, 0x8000, 0xf5, 0xfffffffffffffff8, 0x4, 0xffffffffffffffff, 0x400}, {0x3, 0x0, 0x1}, {0x8d21043, 0xffff7fff, 0x7}, 0x70bd27, 0x0, 0x2, 0x1, 0x6, 0x11}}, @ipv6_hthresh={0x6}, @ipv6_hthresh={0x6}, @policy_type={0xa, 0x10, {0x55e6c617328d6cc2}}]}, 0x1c0}}, 0x0) r89 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r89}, 0xc) r90 = getpid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x10, 0x0, 0x0, 0x0, 0xe3000000, 0x0, 0x0, 0x0, 0x0, [], r91, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6}, 0x8, 0x10, 0x0}, 0x78) r92 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001b0018002cbd700000000000e0000001000000000000000000000000ac1414aa0000004e2400074e2000000b0000a03b00"/63, @ANYRES32=r91, @ANYRES32=r92, @ANYBLOB="00000000000000000300000000000000030000000000000023c50000000000003f0000000000000001000000637938f623fd0ee2000000000000000000000000030000000000000000000000000000000000000000000000faffffffffffffff010000000000000003000200"/120], 0xc0}}, 0x0) r93 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r93}, 0xc) sendmmsg$unix(r1, &(0x7f0000003000)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [r3, r0, r0, r4, r0, r5]}}], 0x28, 0x8000}, {&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)="065c33585dd4af3a570fe53017c8b79a81211b06227162a97e98058c18053a90a148546cf98397d5baa3667c398dd5bd299da09d1d1f0e61b5514fbc0547a69039a48133954b19648e0b7ed040097f50be64c23b08bbbed6d2c08774f147804a499bb94db5804ceecb185a858ff56814f9942d6f8051324b06140552a709501187bd5455e0899163fc276bb52b56edd4271f7e8a505006a09310e633efe9efa5ef5976b1defe503eaec389ce84b3b807e0e60e67845ce346", 0xb8}, {&(0x7f0000000a00)="045cecf710a50d2b30435e69eafcb6fea785bae4f63c3cc67557781d815877004dc542fc7fad1e8e2199073a571fd3f61b71ff6b7e56d623a09f0aaf1aa92b9917b9c839ef07c8add9653678bb", 0x4d}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00000000020000000200000000000048c2e4af50c1fc4311e0f27c2c328ed2c36e98a744f4f96bdf6050985dc149ffcf8f84530c36c9b88187f9194bf081624526baa070e00f0f3cbedbe9f63bf303148bc5db5fa0a3e5293800dbf603ae303b9be158a1", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x600c8024}, {&(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="72fb537e6981291b27b816b7cb0bbf26d8c213df676d6c58f5033892028f20a5f1bcc9599d91597e7488be08c167b0dbd117ecc485d19ef06c5bbf6fb67d52bbf349417b4306a0a750a0845ef57748a3d64e1220599cfdbfea94aa645d8653df107ffe2fcb6e4e0041d480d60b379a85c58b4ad4e52aee389e3e809a4969b3bbc4e7ffe14cdd2e261e5fc031eece73087567d17f68f7bd9e069138935797d46f48a4c77bbf6627664ad586ff065eabb69235b108203b53aee5bcf443c7cc15c50ff716cb34fa44c39e702df27dce31d70f9eca327840368e46fb4d2f02b4f33db0c604e6bbf7", 0xe6}, {&(0x7f0000000d80)="4b78325710c5dc3b08c73bf51a5865", 0xf}, {&(0x7f0000000dc0)="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", 0x1000}], 0x3, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {r25, r27, r29}}}, @rights={{0x14, 0x1, 0x1, [r30]}}, @rights={{0x20, 0x1, 0x1, [r0, r31, r32, r33]}}, @cred={{0x1c, 0x1, 0x2, {r35, 0xee01, r38}}}, @rights={{0x20, 0x1, 0x1, [r39, r40, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r41, r0, r42]}}, @rights={{0x34, 0x1, 0x1, [r0, r43, r44, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r46, 0xee01, r47}}}, @cred={{0x1c, 0x1, 0x2, {r49, r51, r52}}}], 0x130, 0x10}, {&(0x7f0000002180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002200), 0x0, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r53, r54}}}, @cred={{0x1c, 0x1, 0x2, {r56, r58, r59}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r62, r63, r64}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r66, r0, r0, r67, r69, r70, r73, r74, r75]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r76]}}, @cred={{0x1c, 0x1, 0x2, {r77, r79, r89}}}], 0xf0, 0x10}, {&(0x7f00000028c0)=@abs={0x3, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)="6fbde4db6569d366c4b01c9442756fab2e359e0c4b5cec167f6833d5af975fa4326e3a66b8b62143729dffe707630363b173582c41ad8a23ddb0891ab242e35674e31eb785cb622de16629b3c7554e41dbf5db388dd9ed2f566ecb7447a32af840484297dab36fb321fbe20f66fa8c54617d8b2d728348f47b31461e727bacb49aa13371738ef1a7b254ed03d2efbca9f765e6b47772cb51c47a2437f18a9322ec50da4fb1d7f2d6287cad8b4892bff62cbc3e9a3c", 0xb5}, {&(0x7f0000002a00)="e5a082e4525585a35a836eb6f91d4a647905b1e4932bef3280daf34b31c02e21e2a2482d90", 0x25}], 0x2, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {r90, r92, r93}}}], 0x20, 0x4000}, {&(0x7f0000002ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002b40)="9f84b4e3e6a2264480e3775cb42c41727c95b981eca83c90c259f2f45f94b30a", 0x20}, {&(0x7f0000002b80)="c886ef500f43c90bc9d2fdd4b3515319584851ffc77ec4aa64dc08b3b3c8dd0089e3bea076f9083cf366acc92cc1a14f6421c0ec5c00ed12400c3aa70e27488cd8c2725da61efb023b575895159d1bb111905baee29103ce8a5c013e01fb0d7a8066959dfff47097e4ff6425f1ce78af33f30125aff6ed4b8b37b98d045ab392aed37abaac1f2934224f12e2adb06ff9c4e7370c6bcea8307509dee1c13ef56b09d09efcb80fad38475f9a921324166c05201c349de61447799294277f3c2d2e58a38fbda946908f9605d3227a1d5ef45462255f986f7c15425d4a301cb01e0b42a37f8d4973d55b", 0xe8}, {&(0x7f0000002c80)="460edcf68c820d0184d5b70e7761b294d8d453fd5871fd766668e85e4e2e11fd36badd50f795d5f1d2d2cd8c6eab02beda0e19759b5e1004749d84b11acdb5ea358bb2247a780925b26b1ade19ae3516616b27742b6d4da6978e3babde2eb673a4750be5fbf680b8bbb16876d124286e3d66e005c432707b7daa93a708ddd91c6202785523628cea6d61873d335f4269c1c57cf6b5333921b38b885143069236b3b8c0b866c36d1d9ec0ab5fa803ab4f5119885e54783fe7883c536b171f1292e497db7435f61ac4bfdd6b1ebe94b5021ce02ccfa82638bef3c2b1f61d5894998e898f0d47e860", 0xe7}, {&(0x7f0000002d80)="f86dfc7c5d6b73fcdcddad14285e71527c1e023531b98ef5a347cea852c3dfb769273bdbfb59e218e6ae1e1430d8a73d58835ef1efc90a199546a7f6a19ba2f0de1b12e76bd3bd8e2a5b824b59c0a76a7e35eb1810cd031b8707f4f986e26c01a07cfb3b768e0bd5106707611a3069324e923bcddb7688de01e0f617158a375ae82e9f3ec2697ddc40f3ae82e5d1c7ff7a7340a321fc218ebaf95e0d846f43fb6e3e0ce4e68ccf2bdf79df07202d61666ac430990b0b958266cb5ad7f3267db3789b924f403a44db014d902836cac3bcbcae9b005b4164ee34396fe4", 0xdc}, {&(0x7f0000002e80)="1a4021f573215094e0a556f49c8bb7c4b34e0303bdf9dbf4ea59dc029c285d6ee9b0fd815512229ee83d21bb1b621a4ba3052d904c8f3f19236cd5a1954c35ca3ffbac930c14127bcdeb0e519f474e7cef64a16f9b768d6d062f52b43f3164768e529ffdf08616484647c49e4b865e44e8806eb118ba8e4ddaed1fb0e471b85817e79378496341eab33992499879142cdfd7fb137623bd9de7cc9cea15629e052141c6f3ed61b34bdbdb5a51f38e7cf320b8365cb13cf9235a2c38898473b8a3958be91f4262fc0b3b", 0xc9}], 0x5}], 0x6, 0x84) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 869.067122][T22756] device syz_tun left promiscuous mode [ 869.073567][T22756] bridge30: port 1(syz_tun) entered disabled state [ 869.236691][T22756] bridge36: port 1(syz_tun) entered blocking state [ 869.252945][T22756] bridge36: port 1(syz_tun) entered disabled state [ 869.281170][T22756] device syz_tun entered promiscuous mode [ 869.323562][T22771] device syz_tun left promiscuous mode [ 869.329744][T22771] bridge160: port 1(syz_tun) entered disabled state 17:31:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 869.476548][T22771] bridge161: port 1(syz_tun) entered blocking state [ 869.491309][T22771] bridge161: port 1(syz_tun) entered disabled state [ 869.504133][T22771] device syz_tun entered promiscuous mode [ 869.627730][T22785] device syz_tun left promiscuous mode [ 869.655203][T22785] bridge36: port 1(syz_tun) entered disabled state 17:31:10 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x5800}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)}], 0x4924924924924fa, 0x48080) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0x74) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000001980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2ee3, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40c2) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="eace300a", @ANYRES16=r5, @ANYBLOB="080028bd7000ffdbdf25020000000800010000000000080002000200000008000200020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r6, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 869.796720][T22790] bridge37: port 1(erspan0) entered blocking state [ 869.812975][T22790] bridge37: port 1(erspan0) entered disabled state [ 869.834702][T22790] device erspan0 entered promiscuous mode [ 869.930806][T22805] IPVS: ftp: loaded support on port[0] = 21 [ 870.070738][T22795] device erspan0 left promiscuous mode [ 870.077402][T22795] bridge37: port 1(erspan0) entered disabled state 17:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x5865}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 870.235810][T22808] device syz_tun left promiscuous mode [ 870.259579][T22808] bridge161: port 1(syz_tun) entered disabled state 17:31:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 870.388458][T22808] bridge162: port 1(syz_tun) entered blocking state [ 870.397013][T22824] IPVS: ftp: loaded support on port[0] = 21 [ 870.403381][T22808] bridge162: port 1(syz_tun) entered disabled state [ 870.418392][T22808] device syz_tun entered promiscuous mode 17:31:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:10 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x3) 17:31:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:11 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x60, 0x0) r2 = accept4(r1, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x81800) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xea6, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, {&(0x7f0000000240)}, &(0x7f0000000280), 0x1}, 0xa0) r3 = socket(0xb, 0xa, 0xa9) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10c04840}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x346c46ddf36ea1e8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x158, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xf3, 0x7, 0x1, 0x0, "9e18468b17541f0919cebaf7e737c12a8f3931c45599eec3fff41d97f59253c175f8858ee21489f068cc7e171b5e452c1910430df48f01787dcc4fdbacf234854562f8484e9632383b9e7e8a4292bcbc86e38d743c7b04bc5acfdc55046e1928058bdc7d5197e83c707627153e9a3f1dd63ecbc84edd8a97aa709e69524649e821de831edc76ae2e428c0ebde05f71e9a800ff2300bcb183482e27b44d63add942b2aefc536e3c5fcf2fc37e9322cd5d69a4e73e0cfaf1a03c78ae8cdf717f738a1b261070f2eeeeeb3ed0f6f16f49e291f577979e366a26620cd3a478181d3644efebf20f2f405c608540112b77e1"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x77d002fbbb546ebd}, 0x4000091) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @local}, 0x1, 0x3, 0x4}}, 0x26) 17:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6558}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 870.850681][T22836] device syz_tun left promiscuous mode [ 870.873789][T22839] IPVS: ftp: loaded support on port[0] = 21 [ 870.957153][T22836] bridge162: port 1(syz_tun) entered disabled state 17:31:11 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0xffffffffffffff42) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = accept$inet(r1, &(0x7f0000000540), &(0x7f0000000580)=0x10) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000005c0)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x250, 0x0, 0x0, 0x0, 0xeca, 0x0, 0x3, 0x0, 0x9}) [ 871.024353][T22848] IPVS: ftp: loaded support on port[0] = 21 [ 871.112766][T22836] bridge163: port 1(syz_tun) entered blocking state [ 871.138824][T22836] bridge163: port 1(syz_tun) entered disabled state [ 871.182835][T22836] device syz_tun entered promiscuous mode 17:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8100}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:11 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x2}}, 0xfffffffffffffcc2) [ 871.529630][T22871] device syz_tun left promiscuous mode [ 871.570448][T22871] bridge163: port 1(syz_tun) entered disabled state [ 871.707750][T22871] bridge164: port 1(syz_tun) entered blocking state [ 871.714517][T22871] bridge164: port 1(syz_tun) entered disabled state [ 871.722725][T22871] device syz_tun entered promiscuous mode 17:31:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 871.963449][T22888] IPVS: ftp: loaded support on port[0] = 21 17:31:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:12 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:31:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 872.531328][T22898] device syz_tun left promiscuous mode [ 872.548523][T22898] bridge164: port 1(syz_tun) entered disabled state [ 872.623200][T22905] IPVS: ftp: loaded support on port[0] = 21 [ 872.736603][T22898] bridge165: port 1(syz_tun) entered blocking state [ 872.743377][T22898] bridge165: port 1(syz_tun) entered disabled state [ 872.779037][T22898] device syz_tun entered promiscuous mode [ 874.916512][ T346] tipc: TX() has been purged, node left! [ 875.076525][ T346] tipc: TX() has been purged, node left! 17:31:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x34000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:15 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x71, "de16408b68edc44bf9e8d78d883944781f09f7fbdb9d621126e45267110ff76930cea62f6153b248b89fcbfbbf3bd0256a0e226c7b3cd29ac1337c32adcd9cb590760ca22c3da9c2c613342d449560c76012d58bb3be3c20eda7dd672150b1c8cfa4fc298ddd2d0bf701604dee22cf4274439d28ceea507b8ea053b35ff2c5a2"}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x30c) 17:31:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 875.293957][ T346] tipc: TX() has been purged, node left! [ 875.343186][T22925] IPVS: ftp: loaded support on port[0] = 21 [ 875.366932][ T346] tipc: TX() has been purged, node left! [ 875.374402][T22926] IPVS: ftp: loaded support on port[0] = 21 [ 875.381205][ T346] tipc: TX() has been purged, node left! 17:31:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x400300}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 875.396642][T22928] device syz_tun left promiscuous mode [ 875.411117][ T346] tipc: TX() has been purged, node left! [ 875.427820][ T346] tipc: TX() has been purged, node left! [ 875.433250][T22931] IPVS: ftp: loaded support on port[0] = 21 [ 875.437294][T22928] bridge165: port 1(syz_tun) entered disabled state 17:31:15 executing program 2: connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'team_slave_0\x00', 0x8}) [ 875.457825][ T346] tipc: TX() has been purged, node left! [ 875.500383][ T346] tipc: TX() has been purged, node left! [ 875.542284][ T346] tipc: TX() has been purged, node left! [ 875.567597][ T346] tipc: TX() has been purged, node left! [ 875.592844][ T346] tipc: TX() has been purged, node left! [ 875.606536][ T346] tipc: TX() has been purged, node left! [ 875.619719][ T346] tipc: TX() has been purged, node left! [ 875.626827][T22928] bridge166: port 1(syz_tun) entered blocking state [ 875.633878][T22928] bridge166: port 1(syz_tun) entered disabled state [ 875.641634][ T346] tipc: TX() has been purged, node left! [ 875.651969][T22928] device syz_tun entered promiscuous mode 17:31:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 875.976452][T22949] device syz_tun left promiscuous mode [ 875.996089][T22949] bridge166: port 1(syz_tun) entered disabled state [ 876.176708][T22949] bridge167: port 1(syz_tun) entered blocking state [ 876.183697][T22949] bridge167: port 1(syz_tun) entered disabled state [ 876.192296][T22949] device syz_tun entered promiscuous mode 17:31:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:16 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x8f) 17:31:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2040000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 876.736516][T22982] device syz_tun left promiscuous mode [ 876.742199][T22982] bridge167: port 1(syz_tun) entered disabled state [ 876.749514][T22981] IPVS: ftp: loaded support on port[0] = 21 17:31:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 876.893501][T22982] bridge168: port 1(syz_tun) entered blocking state [ 876.932693][T22990] IPVS: ftp: loaded support on port[0] = 21 [ 876.946024][T22982] bridge168: port 1(syz_tun) entered disabled state [ 876.986904][T22982] device syz_tun entered promiscuous mode 17:31:17 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:17 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 17:31:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:17 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) socketpair(0x2, 0xa, 0xff, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0xe73cc97d61473847}, 0x10) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 877.457929][T23005] device syz_tun left promiscuous mode [ 877.478435][T23006] IPVS: ftp: loaded support on port[0] = 21 [ 877.503919][T23005] bridge168: port 1(syz_tun) entered disabled state 17:31:17 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = accept4(r0, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/250, &(0x7f0000000200)=0xfa) [ 877.656556][T23005] bridge169: port 1(syz_tun) entered blocking state [ 877.665850][T23005] bridge169: port 1(syz_tun) entered disabled state [ 877.696071][T23005] device syz_tun entered promiscuous mode 17:31:18 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x5000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:18 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x1, 0x800, 0x0, 0xfffffffe, 0x3, [{0x8000, 0x4, 0x2, [], 0x180}, {0x1, 0x100, 0xffffffffffffff01, [], 0x1}, {0x5, 0xffff, 0xf7a, [], 0x1804}]}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7fffffff, 0xffffffffffffff57) 17:31:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 878.084137][T23037] device syz_tun left promiscuous mode [ 878.111581][T23037] bridge169: port 1(syz_tun) entered disabled state [ 878.135569][T23045] IPVS: ftp: loaded support on port[0] = 21 [ 878.276509][T23037] bridge170: port 1(syz_tun) entered blocking state [ 878.283671][T23037] bridge170: port 1(syz_tun) entered disabled state [ 878.325924][T23037] device syz_tun entered promiscuous mode 17:31:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 878.566865][T23060] IPVS: ftp: loaded support on port[0] = 21 17:31:19 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:19 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:19 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000320000008b6e59a05fc3e00406a64973a57afc75d7bbd8a292516cc28ba87cdc3f3774b2ef830c3e82537846a45e7fd806c87151eba75c6e0b5646f49c0053a64d68fa477112fbfeef983f4db09f8c00d547bf09662f04b98b3bee695c18c6fb929728b2cc2dc92afc1c0e1286db85718239dda85a6e553a46249aa97ba0d231bd556e00e0b9cfe54c6608d26f841990130b28b63bdb30ed4e0aca85bca7d6023b42a71c15843b6f99275924c66ad623cd7f44b33b2b24be37149f0886f778126bc50a65c29fbf88678cbe0e0677f6fec12c89f791cabd18"], &(0x7f0000000240)=0x56) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4102}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000880}, 0x2080) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast2}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) epoll_create1(0x1c0000) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 878.896311][T23068] IPVS: ftp: loaded support on port[0] = 21 [ 878.932795][T23067] device syz_tun left promiscuous mode 17:31:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 878.947059][T23067] bridge170: port 1(syz_tun) entered disabled state [ 879.013017][T23073] IPVS: ftp: loaded support on port[0] = 21 [ 879.136505][T23067] bridge171: port 1(syz_tun) entered blocking state [ 879.157676][T23067] bridge171: port 1(syz_tun) entered disabled state [ 879.194639][T23067] device syz_tun entered promiscuous mode 17:31:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x9000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xa000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 879.572515][T23093] device syz_tun left promiscuous mode [ 879.578671][T23093] bridge171: port 1(syz_tun) entered disabled state [ 879.726508][T23093] bridge172: port 1(syz_tun) entered blocking state [ 879.733449][T23093] bridge172: port 1(syz_tun) entered disabled state [ 879.741931][T23093] device syz_tun entered promiscuous mode 17:31:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:20 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)={0x1, 0x800, 0x0, 0xfffffffe, 0x3, [{0x8000, 0x4, 0x2, [], 0x180}, {0x1, 0x100, 0xffffffffffffff01, [], 0x1}, {0x5, 0xffff, 0xf7a, [], 0x1804}]}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7fffffff, 0xffffffffffffff57) [ 880.168104][T23115] device syz_tun left promiscuous mode [ 880.173808][T23115] bridge172: port 1(syz_tun) entered disabled state [ 880.296665][T23115] bridge173: port 1(syz_tun) entered blocking state [ 880.303504][T23115] bridge173: port 1(syz_tun) entered disabled state [ 880.311885][T23115] device syz_tun entered promiscuous mode 17:31:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:20 executing program 2: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xf, 0x40400) socketpair(0x8, 0x800, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000001c0)={{0x0, 0x5, 0x8, 0x0, 0x6, 0x40}, 0x101}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) getpeername$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x9) 17:31:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xc000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:20 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = accept4$inet(r3, 0x0, &(0x7f0000000200), 0x800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) [ 880.522782][T23130] IPVS: ftp: loaded support on port[0] = 21 [ 880.715529][T23141] IPVS: ftp: loaded support on port[0] = 21 17:31:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 880.777241][T23139] device syz_tun left promiscuous mode [ 880.804818][T23139] bridge173: port 1(syz_tun) entered disabled state 17:31:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 880.977076][T23139] bridge174: port 1(syz_tun) entered blocking state [ 880.993960][T23139] bridge174: port 1(syz_tun) entered disabled state [ 881.026655][T23139] device syz_tun entered promiscuous mode [ 881.047402][T23155] IPVS: ftp: loaded support on port[0] = 21 17:31:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 881.400975][T23168] device syz_tun left promiscuous mode [ 881.426778][T23168] bridge174: port 1(syz_tun) entered disabled state 17:31:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcf") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 881.556814][T23168] bridge175: port 1(syz_tun) entered blocking state [ 881.566510][T23168] bridge175: port 1(syz_tun) entered disabled state [ 881.583155][T23168] device syz_tun entered promiscuous mode [ 881.639233][T23181] IPVS: ftp: loaded support on port[0] = 21 17:31:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:22 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0xd6) 17:31:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x11000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x12000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:22 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x4, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) ioctl$sock_proto_private(r10, 0x89e5, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipmr_delroute={0x2e6, 0x19, 0x0, 0x70bd27, 0x25dfdbfe, {0x80, 0x10, 0x10, 0xc2, 0xfc, 0x4, 0xff, 0x0, 0x45c426b906f78ab2}, [@RTA_MARK={0x0, 0x10, 0x1000}, @RTA_PRIORITY={0x0, 0x6, 0xeb}]}, 0x34}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010003b0e000000000000000000faebed", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="2000120008000100687372001400020008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', r6}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 882.227315][T23204] device syz_tun left promiscuous mode [ 882.239656][T23203] IPVS: ftp: loaded support on port[0] = 21 [ 882.251165][T23204] bridge175: port 1(syz_tun) entered disabled state 17:31:22 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 882.406621][T23204] bridge176: port 1(syz_tun) entered blocking state [ 882.413542][T23204] bridge176: port 1(syz_tun) entered disabled state [ 882.438339][T23204] device syz_tun entered promiscuous mode 17:31:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x13000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 882.573457][T23217] IPVS: ftp: loaded support on port[0] = 21 17:31:23 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcf") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 882.878805][T23231] IPVS: ftp: loaded support on port[0] = 21 [ 882.932418][T23226] device syz_tun left promiscuous mode [ 882.947388][T23226] bridge176: port 1(syz_tun) entered disabled state 17:31:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x14000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 883.099973][T23226] bridge177: port 1(syz_tun) entered blocking state [ 883.116903][T23226] bridge177: port 1(syz_tun) entered disabled state [ 883.148183][T23226] device syz_tun entered promiscuous mode 17:31:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 883.743919][T23254] device syz_tun left promiscuous mode [ 883.750183][T23254] bridge177: port 1(syz_tun) entered disabled state [ 883.906488][T23254] bridge178: port 1(syz_tun) entered blocking state [ 883.913229][T23254] bridge178: port 1(syz_tun) entered disabled state [ 883.922903][T23254] device syz_tun entered promiscuous mode 17:31:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:26 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 17:31:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x20000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 886.780421][T23273] IPVS: ftp: loaded support on port[0] = 21 [ 886.806621][T23274] device syz_tun left promiscuous mode 17:31:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3f000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 886.829786][T23274] bridge178: port 1(syz_tun) entered disabled state [ 886.843624][T23280] IPVS: ftp: loaded support on port[0] = 21 [ 887.066575][T23274] bridge179: port 1(syz_tun) entered blocking state [ 887.080409][T23274] bridge179: port 1(syz_tun) entered disabled state [ 887.110743][T23274] device syz_tun entered promiscuous mode 17:31:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x40000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x58000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 887.394558][T23294] device syz_tun left promiscuous mode [ 887.401572][T23294] bridge179: port 1(syz_tun) entered disabled state [ 887.556577][T23294] bridge180: port 1(syz_tun) entered blocking state [ 887.563452][T23294] bridge180: port 1(syz_tun) entered disabled state [ 887.595518][T23294] device syz_tun entered promiscuous mode 17:31:28 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcf") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x60000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:28 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000001340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001380)=0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r2, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000013c0)={r4, 0x0, 0x1, 0x9, 0x8, 0x3}, 0x14) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000040)={0xa}) recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/47, 0x2f}], 0x32c, &(0x7f0000001180)=""/251, 0xfb}, 0xfffffff8}], 0x1, 0x10000, &(0x7f00000012c0)={0x0, 0x989680}) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000001300)={0x42}) 17:31:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x65580000}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 888.573044][T23316] IPVS: ftp: loaded support on port[0] = 21 [ 888.590513][T23317] device syz_tun left promiscuous mode [ 888.603048][T23317] bridge180: port 1(syz_tun) entered disabled state [ 888.660054][T23322] IPVS: ftp: loaded support on port[0] = 21 [ 888.766871][T23317] bridge181: port 1(syz_tun) entered blocking state [ 888.773826][T23317] bridge181: port 1(syz_tun) entered disabled state [ 888.801486][T23317] device syz_tun entered promiscuous mode 17:31:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x81000000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 889.090128][T23337] device syz_tun left promiscuous mode [ 889.095901][T23337] bridge181: port 1(syz_tun) entered disabled state [ 889.291005][T23337] bridge182: port 1(syz_tun) entered blocking state [ 889.305078][T23337] bridge182: port 1(syz_tun) entered disabled state [ 889.343403][T23337] device syz_tun entered promiscuous mode 17:31:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x9effffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcf") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 889.673905][T23358] IPVS: ftp: loaded support on port[0] = 21 [ 889.769750][T23361] device syz_tun left promiscuous mode [ 889.786639][T23361] bridge182: port 1(syz_tun) entered disabled state 17:31:30 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:30 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) r3 = accept4(r2, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80, 0x180c00) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x20000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x17, 0x1, 'vboxnet1wlan0@-+}(\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:30 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r1, &(0x7f0000000040)="a37283b0221bee1867f42e22c40ad3f818c7ea13eed6900a85c9c5d8c76d3f539832f2fd48f0a1d814f6bf22445ce88bd4123a1c1549ee27fa2c9d8cb81d348546a789a4756f837ae3ea637f36ed21e91309c7106c889b9dc5efbf19bcc73050f2f41291a065259dc4ddf7896a73a38be74270fd398b1d85ca84df2001efcbbeffc5ee346c28d24c46f5593c81c28bd7a7c537cd80504692024ac1f5ed6472df1fb79e80ee3d0b2565e83768d30652c609e4af836b317d19215e22efe9cbcc5965c6bd676c20813d", 0xc8, 0x801, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote, 0x10001}, 0x1c) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) [ 889.970064][T23361] bridge183: port 1(syz_tun) entered blocking state [ 890.015676][T23361] bridge183: port 1(syz_tun) entered disabled state [ 890.063850][T23361] device syz_tun entered promiscuous mode [ 890.095799][T23374] IPVS: ftp: loaded support on port[0] = 21 17:31:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfcffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcf") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 890.429539][T23386] IPVS: ftp: loaded support on port[0] = 21 17:31:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffa888}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 890.485523][T23385] device syz_tun left promiscuous mode [ 890.515866][T23385] bridge183: port 1(syz_tun) entered disabled state [ 890.676742][T23385] bridge184: port 1(syz_tun) entered blocking state [ 890.693274][T23385] bridge184: port 1(syz_tun) entered disabled state [ 890.708495][T23385] device syz_tun entered promiscuous mode 17:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffff000}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 891.113166][T23400] device syz_tun left promiscuous mode [ 891.135487][T23400] bridge184: port 1(syz_tun) entered disabled state [ 891.366704][T23400] bridge185: port 1(syz_tun) entered blocking state [ 891.373560][T23400] bridge185: port 1(syz_tun) entered disabled state [ 891.404499][T23400] device syz_tun entered promiscuous mode 17:31:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:31 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'veth1_to_bridge\x00', {0x7f}, 0x1}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 891.835525][T23427] IPVS: ftp: loaded support on port[0] = 21 17:31:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 891.889530][T23436] device syz_tun left promiscuous mode [ 891.895230][T23436] bridge185: port 1(syz_tun) entered disabled state [ 891.945908][T23437] IPVS: ftp: loaded support on port[0] = 21 [ 892.136687][T23436] bridge186: port 1(syz_tun) entered blocking state [ 892.147411][T23436] bridge186: port 1(syz_tun) entered disabled state [ 892.165349][T23436] device syz_tun entered promiscuous mode [ 892.220107][T23441] bridge11: port 1(erspan0) entered blocking state [ 892.230424][T23441] bridge11: port 1(erspan0) entered disabled state [ 892.246004][T23441] device erspan0 entered promiscuous mode [ 892.261044][T23445] device erspan0 left promiscuous mode 17:31:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}}]}, {0x4}}}}]}, 0x48}}, 0x0) 17:31:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 892.274015][T23445] bridge11: port 1(erspan0) entered disabled state [ 892.441895][T23445] bridge5: port 1(erspan0) entered blocking state [ 892.450022][T23445] bridge5: port 1(erspan0) entered disabled state [ 892.459567][T23445] device erspan0 entered promiscuous mode 17:31:32 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0xffffffffffffff22) 17:31:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000020602080000000000400000000000090500050001000000050005000700000004000780"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 892.675311][T23461] device syz_tun left promiscuous mode [ 892.684904][T23461] bridge186: port 1(syz_tun) entered disabled state 17:31:33 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = accept$packet(r1, 0x0, &(0x7f0000001cc0)) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000001d40)={0x5, &(0x7f0000001d00)=[{0x5, 0x9, 0x2}, {0xa907, 0x28, 0x1, 0x6}, {0x5, 0x4, 0x7f, 0xfff}, {0xc03c, 0x1f, 0x81, 0x19b}, {0x1f, 0x1, 0xf7, 0x3f}]}, 0x10) [ 892.863635][T23461] bridge187: port 1(syz_tun) entered blocking state [ 892.874063][T23461] bridge187: port 1(syz_tun) entered disabled state [ 892.889511][T23461] device syz_tun entered promiscuous mode [ 892.919589][T23478] device erspan0 left promiscuous mode [ 892.925553][T23478] bridge5: port 1(erspan0) entered disabled state [ 893.036856][T23478] bridge12: port 1(erspan0) entered blocking state [ 893.043680][T23478] bridge12: port 1(erspan0) entered disabled state [ 893.053408][T23478] device erspan0 entered promiscuous mode [ 893.062620][T23486] device erspan0 left promiscuous mode [ 893.078341][T23486] bridge12: port 1(erspan0) entered disabled state [ 893.227887][T23486] bridge5: port 1(erspan0) entered blocking state [ 893.234669][T23486] bridge5: port 1(erspan0) entered disabled state [ 893.242946][T23486] device erspan0 entered promiscuous mode 17:31:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffffff}}]}, {0x4}}}}]}, 0x48}}, 0x0) [ 893.396570][T23493] device syz_tun left promiscuous mode [ 893.414602][T23493] bridge187: port 1(syz_tun) entered disabled state [ 893.455515][T23497] IPVS: ftp: loaded support on port[0] = 21 [ 893.566526][T23493] bridge188: port 1(syz_tun) entered blocking state [ 893.573719][T23493] bridge188: port 1(syz_tun) entered disabled state [ 893.583792][T23493] device syz_tun entered promiscuous mode 17:31:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:36 executing program 5 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x2}}}}]}, 0x48}}, 0x0) 17:31:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:36 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64, @ANYPTR64, @ANYBLOB="b30e851141ad9cc18abebb8d293253ff617cb4e8e7ca5b2b4b469252d079309b75ec2d6d29", @ANYRES64]], 0xa) connect$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f00000000c0)) 17:31:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 895.992541][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.999567][T23515] IPVS: ftp: loaded support on port[0] = 21 [ 896.038000][T23518] device syz_tun left promiscuous mode [ 896.062069][T23518] bridge188: port 1(syz_tun) entered disabled state [ 896.075646][T23522] IPVS: ftp: loaded support on port[0] = 21 17:31:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x3}}}}]}, 0x48}}, 0x0) [ 896.096026][T23524] FAULT_INJECTION: forcing a failure. [ 896.096026][T23524] name failslab, interval 1, probability 0, space 0, times 0 [ 896.196796][T23518] bridge189: port 1(syz_tun) entered blocking state [ 896.203665][T23518] bridge189: port 1(syz_tun) entered disabled state [ 896.228424][T23518] device syz_tun entered promiscuous mode [ 896.234577][T23524] CPU: 0 PID: 23524 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 896.243281][T23524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.253389][T23524] Call Trace: [ 896.256841][T23524] dump_stack+0x197/0x210 [ 896.261197][T23524] should_fail.cold+0xa/0x15 [ 896.265809][T23524] ? fault_create_debugfs_attr+0x180/0x180 [ 896.271802][T23524] ? ___might_sleep+0x163/0x2c0 [ 896.276801][T23524] __should_failslab+0x121/0x190 [ 896.281760][T23524] should_failslab+0x9/0x14 [ 896.286289][T23524] kmem_cache_alloc_node+0x268/0x740 [ 896.291711][T23524] __alloc_skb+0xd5/0x5e0 [ 896.296063][T23524] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 896.301630][T23524] alloc_skb_with_frags+0x93/0x590 [ 896.306764][T23524] ? process_measurement+0x821/0x1850 [ 896.312244][T23524] sock_alloc_send_pskb+0x7ad/0x920 [ 896.317466][T23524] ? sock_wmalloc+0x120/0x120 [ 896.322170][T23524] ? do_raw_spin_unlock+0x181/0x270 [ 896.327380][T23524] ? _raw_spin_unlock+0x28/0x40 [ 896.332331][T23524] unix_dgram_sendmsg+0x410/0x14e0 [ 896.337601][T23524] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 896.343341][T23524] ? aa_sk_perm+0x346/0xaf0 [ 896.347864][T23524] ? unix_stream_sendpage+0xc00/0xc00 [ 896.353259][T23524] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 896.358831][T23524] unix_seqpacket_sendmsg+0x11e/0x1c0 [ 896.364327][T23524] ? unix_dgram_sendmsg+0x14e0/0x14e0 [ 896.369734][T23524] sock_sendmsg+0xd7/0x130 [ 896.374168][T23524] ____sys_sendmsg+0x358/0x880 [ 896.378927][T23524] ? kernel_sendmsg+0x50/0x50 [ 896.383609][T23524] ? __fget+0x35d/0x550 [ 896.387761][T23524] ? find_held_lock+0x35/0x130 [ 896.392549][T23524] ___sys_sendmsg+0x100/0x170 [ 896.397222][T23524] ? sendmsg_copy_msghdr+0x70/0x70 [ 896.402326][T23524] ? __kasan_check_read+0x11/0x20 [ 896.407387][T23524] ? __fget+0x37f/0x550 [ 896.411553][T23524] ? ksys_dup3+0x3e0/0x3e0 [ 896.416069][T23524] ? find_held_lock+0x35/0x130 [ 896.420833][T23524] ? get_pid_task+0x11d/0x210 [ 896.425503][T23524] ? __fget_light+0x1a9/0x230 [ 896.430168][T23524] ? __fdget+0x1b/0x20 [ 896.434379][T23524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 896.440757][T23524] ? sockfd_lookup_light+0xcb/0x180 [ 896.445991][T23524] __sys_sendmmsg+0x1bf/0x4d0 [ 896.450665][T23524] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 896.455713][T23524] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 896.462085][T23524] ? fput_many+0x12c/0x1a0 [ 896.466499][T23524] ? fput+0x1b/0x20 [ 896.470302][T23524] ? ksys_write+0x1cf/0x290 [ 896.474814][T23524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 896.480293][T23524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 896.485761][T23524] ? do_syscall_64+0x26/0x790 [ 896.490446][T23524] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.496617][T23524] ? do_syscall_64+0x26/0x790 [ 896.501295][T23524] __x64_sys_sendmmsg+0x9d/0x100 [ 896.506345][T23524] do_syscall_64+0xfa/0x790 [ 896.510859][T23524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.516743][T23524] RIP: 0033:0x45aff9 [ 896.520826][T23524] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 896.540544][T23524] RSP: 002b:00007f811b86dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.549066][T23524] RAX: ffffffffffffffda RBX: 00007f811b86e6d4 RCX: 000000000045aff9 [ 896.557030][T23524] RDX: 0000000000000001 RSI: 0000000020001e00 RDI: 0000000000000003 [ 896.564991][T23524] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 896.572961][T23524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 896.581048][T23524] R13: 00000000000008a3 R14: 00000000004c9bd7 R15: 0000000000000000 17:31:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 896.636289][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x5}}}}]}, 0x48}}, 0x0) [ 896.877744][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:37 executing program 5 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:37 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r2) 17:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xe}}}}]}, 0x48}}, 0x0) [ 896.922631][T23540] device syz_tun left promiscuous mode [ 896.949727][T23540] bridge189: port 1(syz_tun) entered disabled state [ 897.096785][T23540] bridge190: port 1(syz_tun) entered blocking state [ 897.107393][T23540] bridge190: port 1(syz_tun) entered disabled state [ 897.150044][T23540] device syz_tun entered promiscuous mode [ 897.165972][T23563] FAULT_INJECTION: forcing a failure. [ 897.165972][T23563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 897.179907][T23563] CPU: 1 PID: 23563 Comm: syz-executor.5 Not tainted 5.5.0-rc5-syzkaller #0 [ 897.188723][T23563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.198832][T23563] Call Trace: [ 897.202138][T23563] dump_stack+0x197/0x210 [ 897.206492][T23563] should_fail.cold+0xa/0x15 [ 897.211107][T23563] ? fault_create_debugfs_attr+0x180/0x180 [ 897.216929][T23563] ? find_held_lock+0x35/0x130 [ 897.221712][T23563] ? percpu_ref_tryget+0xea/0x230 [ 897.226748][T23563] should_fail_alloc_page+0x50/0x60 [ 897.232046][T23563] __alloc_pages_nodemask+0x1a1/0x910 [ 897.237437][T23563] ? find_held_lock+0x35/0x130 [ 897.242363][T23563] ? __alloc_pages_slowpath+0x2920/0x2920 [ 897.248101][T23563] ? __kasan_check_read+0x11/0x20 [ 897.253147][T23563] ? lock_downgrade+0x920/0x920 [ 897.258014][T23563] cache_grow_begin+0x90/0xc60 [ 897.262776][T23563] ? __alloc_skb+0xd5/0x5e0 [ 897.267289][T23563] ? trace_hardirqs_off+0x62/0x240 [ 897.272401][T23563] kmem_cache_alloc_node+0x676/0x740 [ 897.277681][T23563] __alloc_skb+0xd5/0x5e0 [ 897.282017][T23563] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 897.287585][T23563] alloc_skb_with_frags+0x93/0x590 [ 897.292704][T23563] ? process_measurement+0x821/0x1850 [ 897.298076][T23563] sock_alloc_send_pskb+0x7ad/0x920 [ 897.303523][T23563] ? sock_wmalloc+0x120/0x120 [ 897.308207][T23563] ? do_raw_spin_unlock+0x181/0x270 [ 897.313532][T23563] ? _raw_spin_unlock+0x28/0x40 [ 897.313820][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 897.318394][T23563] unix_dgram_sendmsg+0x410/0x14e0 [ 897.318415][T23563] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 897.318430][T23563] ? aa_sk_perm+0x346/0xaf0 [ 897.318453][T23563] ? unix_stream_sendpage+0xc00/0xc00 [ 897.318478][T23563] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 897.354196][T23563] unix_seqpacket_sendmsg+0x11e/0x1c0 [ 897.359694][T23563] ? unix_dgram_sendmsg+0x14e0/0x14e0 [ 897.365110][T23563] sock_sendmsg+0xd7/0x130 [ 897.369543][T23563] ____sys_sendmsg+0x358/0x880 [ 897.374325][T23563] ? kernel_sendmsg+0x50/0x50 [ 897.379022][T23563] ? __fget+0x35d/0x550 [ 897.383192][T23563] ? find_held_lock+0x35/0x130 [ 897.387974][T23563] ___sys_sendmsg+0x100/0x170 [ 897.392664][T23563] ? sendmsg_copy_msghdr+0x70/0x70 [ 897.397877][T23563] ? __kasan_check_read+0x11/0x20 [ 897.403058][T23563] ? __fget+0x37f/0x550 [ 897.407232][T23563] ? ksys_dup3+0x3e0/0x3e0 [ 897.411660][T23563] ? find_held_lock+0x35/0x130 [ 897.416441][T23563] ? get_pid_task+0x11d/0x210 [ 897.421142][T23563] ? __fget_light+0x1a9/0x230 [ 897.425837][T23563] ? __fdget+0x1b/0x20 [ 897.429937][T23563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 897.436208][T23563] ? sockfd_lookup_light+0xcb/0x180 [ 897.441566][T23563] __sys_sendmmsg+0x1bf/0x4d0 [ 897.446265][T23563] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 897.451322][T23563] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 897.457578][T23563] ? fput_many+0x12c/0x1a0 [ 897.462007][T23563] ? fput+0x1b/0x20 [ 897.465842][T23563] ? ksys_write+0x1cf/0x290 [ 897.470533][T23563] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 897.475995][T23563] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 897.481580][T23563] ? do_syscall_64+0x26/0x790 [ 897.486244][T23563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.492308][T23563] ? do_syscall_64+0x26/0x790 [ 897.496985][T23563] __x64_sys_sendmmsg+0x9d/0x100 [ 897.501915][T23563] do_syscall_64+0xfa/0x790 [ 897.506418][T23563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.512293][T23563] RIP: 0033:0x45aff9 [ 897.516187][T23563] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 897.536578][T23563] RSP: 002b:00007f811b88ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 897.544983][T23563] RAX: ffffffffffffffda RBX: 00007f811b88f6d4 RCX: 000000000045aff9 [ 897.552943][T23563] RDX: 0000000000000001 RSI: 0000000020001e00 RDI: 0000000000000003 [ 897.560900][T23563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 897.568877][T23563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 897.576863][T23563] R13: 00000000000008a3 R14: 00000000004c9bd7 R15: 0000000000000001 17:31:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:37 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:31:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xf}}}}]}, 0x48}}, 0x0) 17:31:37 executing program 5 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:37 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 897.809217][T23574] IPVS: ftp: loaded support on port[0] = 21 [ 897.854663][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 897.887440][T23579] device syz_tun left promiscuous mode 17:31:38 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) 17:31:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x10}}}}]}, 0x48}}, 0x0) [ 897.908522][T23579] bridge190: port 1(syz_tun) entered disabled state [ 897.930020][T23584] IPVS: ftp: loaded support on port[0] = 21 17:31:38 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0xffffffffffffffd9, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockname$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$binfmt_misc(r5, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64=0x0], @ANYRESOCT, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYRESOCT, @ANYPTR], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="c46fe7d6af34c3b90f155510ca3a8b64cc8a2c7b33327ac1c0518f80d9f0c6372e18c8328556016d7a46eaac9432531ddc5ba056b7ece9f02fb606883ca21ed495f7295021ea03a25c3823f97752ae5cad32e6566a307bd3e1aed9cf27778770", @ANYRES16=r2, @ANYPTR64, @ANYPTR, @ANYRES64=r0, @ANYRESDEC=r1], @ANYRESDEC=r6, @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYPTR64, @ANYRES64, @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX=r5]], @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r0], @ANYPTR64]], 0x46) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x2, 0x0) [ 898.206515][T23579] bridge191: port 1(syz_tun) entered blocking state [ 898.213191][T23579] bridge191: port 1(syz_tun) entered disabled state [ 898.299389][T23579] device syz_tun entered promiscuous mode [ 898.352454][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x14}}}}]}, 0x48}}, 0x0) [ 898.578760][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x2, 0x0) 17:31:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0xa, 0x0) 17:31:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x34}}}}]}, 0x48}}, 0x0) 17:31:39 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 899.105658][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.111259][T23627] IPVS: ftp: loaded support on port[0] = 21 17:31:39 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f00000004c0)="240000001a005f3814f9b9570009030080002000000000000000cc358f15e2764a0e000007cf01064c6ae34ebe4cd7d499e6ce80a1de001afec431819123de02e7f58f85bce46ae61732252d0728de00424a19b595247f2659be9da0134846c089248bee2fd8bdd4bf25e8d140a6a2bb51c57b10d38dd1e7ed8999955b", 0x7d) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0x805) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x800) connect$x25(r4, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r5 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000300)=0x3dc) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xbb}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x2db411bd, 0x8) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 899.175849][T23628] device syz_tun left promiscuous mode 17:31:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x300, 0x0) 17:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xae}}}}]}, 0x48}}, 0x0) [ 899.217845][T23628] bridge191: port 1(syz_tun) entered disabled state 17:31:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0xa, 0x0) [ 899.426661][T23628] bridge192: port 1(syz_tun) entered blocking state [ 899.448869][T23628] bridge192: port 1(syz_tun) entered disabled state [ 899.468221][T23628] device syz_tun entered promiscuous mode 17:31:39 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 899.534568][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xb2}}}}]}, 0x48}}, 0x0) 17:31:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3) [ 899.718199][T23654] IPVS: ftp: loaded support on port[0] = 21 [ 899.751382][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xb6}}}}]}, 0x48}}, 0x0) [ 899.812339][T23661] device syz_tun left promiscuous mode [ 899.826731][T23661] bridge192: port 1(syz_tun) entered disabled state 17:31:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x4) [ 899.956583][T23661] bridge193: port 1(syz_tun) entered blocking state [ 899.976533][T23661] bridge193: port 1(syz_tun) entered disabled state [ 900.002017][T23661] device syz_tun entered promiscuous mode 17:31:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 900.361104][T23687] device syz_tun left promiscuous mode [ 900.378928][T23687] bridge193: port 1(syz_tun) entered disabled state 17:31:40 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x104}}}}]}, 0x48}}, 0x0) 17:31:40 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e20, @loopback}}) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x11) 17:31:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc0) [ 900.516649][T23687] bridge194: port 1(syz_tun) entered blocking state [ 900.552068][T23700] IPVS: ftp: loaded support on port[0] = 21 [ 900.559011][T23687] bridge194: port 1(syz_tun) entered disabled state [ 900.586200][T23687] device syz_tun entered promiscuous mode 17:31:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x4) 17:31:41 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000002b80)={0x7, &(0x7f0000002a80)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @remote}]}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x48}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000000)=ANY=[], 0xfffffecc) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xe, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xef}, @generic={0x1, 0x6, 0x5, 0x5, 0x2}, @call={0x85, 0x0, 0x0, 0x5c}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ed}, @map={0x18, 0xf989bb8bf87e122b, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x1, 0x7, 0x6, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000100)=""/20, 0x40f00, 0x6, [], r7, 0x1, r11, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x5}, 0x10, 0x0, r12}, 0x78) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r13, 0x4) 17:31:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xe50}}}}]}, 0x48}}, 0x0) 17:31:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x300) [ 901.096274][T23720] __nla_validate_parse: 2 callbacks suppressed [ 901.096285][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x1100) 17:31:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xe54}}}}]}, 0x48}}, 0x0) [ 901.155214][T23729] device syz_tun left promiscuous mode [ 901.175017][T23729] bridge194: port 1(syz_tun) entered disabled state [ 901.341502][T23729] bridge195: port 1(syz_tun) entered blocking state [ 901.351418][T23729] bridge195: port 1(syz_tun) entered disabled state [ 901.362335][T23729] device syz_tun entered promiscuous mode [ 901.433595][T23721] device bridge42 entered promiscuous mode [ 901.488353][T23721] device bridge41 entered promiscuous mode [ 901.577160][T23721] device bridge42 left promiscuous mode [ 901.616780][T23721] device bridge41 left promiscuous mode [ 901.668399][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3e80) 17:31:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001040000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:42 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xe98}}}}]}, 0x48}}, 0x0) [ 901.923162][T23753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 901.949310][T23752] device syz_tun left promiscuous mode 17:31:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3ec0) 17:31:42 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) getpeername(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x80) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000340)={r3, 0x400, 0x4, 0x6, 0x7, 0x1}, 0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x8, 0x9, 0x6938, r3}, 0x10) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="338ace5675a72ba314076dfdd9a508a0cfb55f98373db4254f58c405e7fe13ec05dc5009c46f630ae779bbbee14dbbf6fe7a205b6f24640ee670cb14f851bfd68a5ed19f8515649e82b5", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r6, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r8, 0xe18}, 0x8) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) [ 901.967033][T23752] bridge195: port 1(syz_tun) entered disabled state 17:31:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xea8}}}}]}, 0x48}}, 0x0) [ 902.005896][T23758] IPVS: ftp: loaded support on port[0] = 21 17:31:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3f00) [ 902.157746][T23752] bridge196: port 1(syz_tun) entered blocking state [ 902.175998][T23752] bridge196: port 1(syz_tun) entered disabled state [ 902.210048][T23752] device syz_tun entered promiscuous mode [ 902.238427][T23750] bridge38: port 1(syz_tun) entered blocking state [ 902.249954][T23750] bridge38: port 1(syz_tun) entered disabled state [ 902.270203][T23750] device syz_tun entered promiscuous mode 17:31:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x4000) [ 902.316523][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:42 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xeac}}}}]}, 0x48}}, 0x0) [ 902.557270][T23791] FAULT_INJECTION: forcing a failure. [ 902.557270][T23791] name failslab, interval 1, probability 0, space 0, times 0 [ 902.587544][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 902.610511][T23792] device syz_tun left promiscuous mode [ 902.611272][T23791] CPU: 1 PID: 23791 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 902.619897][T23792] bridge196: port 1(syz_tun) entered disabled state [ 902.624817][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.624825][T23791] Call Trace: [ 902.624850][T23791] dump_stack+0x197/0x210 [ 902.624873][T23791] should_fail.cold+0xa/0x15 [ 902.624889][T23791] ? release_sock+0x156/0x1c0 [ 902.624911][T23791] ? fault_create_debugfs_attr+0x180/0x180 [ 902.664550][T23791] ? ___might_sleep+0x163/0x2c0 [ 902.669508][T23791] __should_failslab+0x121/0x190 [ 902.674551][T23791] should_failslab+0x9/0x14 [ 902.679126][T23791] kmem_cache_alloc_node+0x268/0x740 [ 902.684441][T23791] __alloc_skb+0xd5/0x5e0 [ 902.688801][T23791] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 902.694380][T23791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.700819][T23791] ? netlink_autobind.isra.0+0x223/0x300 [ 902.706790][T23791] netlink_sendmsg+0xa1b/0xea0 [ 902.711580][T23791] ? netlink_unicast+0x7d0/0x7d0 [ 902.716534][T23791] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 902.722104][T23791] ? apparmor_socket_sendmsg+0x2a/0x30 [ 902.727586][T23791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 902.733856][T23791] ? security_socket_sendmsg+0x8d/0xc0 [ 902.740286][T23791] ? netlink_unicast+0x7d0/0x7d0 [ 902.745239][T23791] sock_sendmsg+0xd7/0x130 [ 902.749677][T23791] ____sys_sendmsg+0x753/0x880 [ 902.754844][T23791] ? kernel_sendmsg+0x50/0x50 17:31:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x1e03}}}}]}, 0x48}}, 0x0) [ 902.759530][T23791] ? __fget+0x35d/0x550 [ 902.763695][T23791] ? find_held_lock+0x35/0x130 [ 902.768490][T23791] ___sys_sendmsg+0x100/0x170 [ 902.773184][T23791] ? sendmsg_copy_msghdr+0x70/0x70 [ 902.778307][T23791] ? __kasan_check_read+0x11/0x20 [ 902.783350][T23791] ? __fget+0x37f/0x550 [ 902.787622][T23791] ? ksys_dup3+0x3e0/0x3e0 [ 902.792063][T23791] ? __fget_light+0x1a9/0x230 [ 902.796748][T23791] ? __fdget+0x1b/0x20 [ 902.800832][T23791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 902.807112][T23791] __sys_sendmsg+0x105/0x1d0 [ 902.811710][T23791] ? __sys_sendmsg_sock+0xc0/0xc0 [ 902.816762][T23791] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 902.822236][T23791] ? do_syscall_64+0x26/0x790 [ 902.826927][T23791] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.833120][T23791] ? do_syscall_64+0x26/0x790 [ 902.837823][T23791] __x64_sys_sendmsg+0x78/0xb0 [ 902.842701][T23791] do_syscall_64+0xfa/0x790 [ 902.847323][T23791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.853231][T23791] RIP: 0033:0x45aff9 [ 902.857299][T23791] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 902.877306][T23791] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.885733][T23791] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 902.894563][T23791] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 902.902550][T23791] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:31:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x803e) [ 902.910607][T23791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 902.918587][T23791] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000000 [ 903.026749][T23792] bridge197: port 1(syz_tun) entered blocking state [ 903.036101][T23792] bridge197: port 1(syz_tun) entered disabled state [ 903.066678][T23792] device syz_tun entered promiscuous mode [ 903.111023][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:43 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc000) 17:31:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:43 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x1f03}}}}]}, 0x48}}, 0x0) 17:31:43 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x2, 0x2, 0x600, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_ZONE={0x1, 0x7, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x4, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket(0x1d, 0xc, 0x69) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24018000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x9d, "012c57642a5d89d85cfbbde7972246e2aea568923736574547a23b0f90d8f3466f83d446fcd2e0b380c5e8fd0a4af631779d2ca964aae56a5ade0e5e444a7f73312bd62ccbdaa273cedb0e0a543bc0ee18781e5fe4608f1916850f4af7b3dce304a296a20f7b0da621f7f6c7469acd6b47376b9681895fa35bbb501d29b62f285c0db2baf4a0130d9890df3cb0294b3803ede9addf8f609759015c36fe"}, &(0x7f00000000c0)=0xa5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000580)={0x7, 'syz_tun\x00', {0x102}, 0x3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r6, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r9, 0xfff, 0xfff, 0x3fc}, &(0x7f0000000540)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000340)=""/196, &(0x7f0000000080)=0xc4) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000140)) [ 903.412289][T23825] FAULT_INJECTION: forcing a failure. [ 903.412289][T23825] name failslab, interval 1, probability 0, space 0, times 0 [ 903.436880][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 903.467834][T23825] CPU: 0 PID: 23825 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 903.476755][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.486913][T23825] Call Trace: [ 903.490228][T23825] dump_stack+0x197/0x210 [ 903.494586][T23825] should_fail.cold+0xa/0x15 [ 903.499246][T23825] ? fault_create_debugfs_attr+0x180/0x180 [ 903.505079][T23825] ? ___might_sleep+0x163/0x2c0 [ 903.509974][T23825] __should_failslab+0x121/0x190 [ 903.515219][T23825] should_failslab+0x9/0x14 [ 903.519830][T23825] kmem_cache_alloc_node_trace+0x274/0x750 [ 903.525681][T23825] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 903.531683][T23825] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 903.537601][T23825] __kmalloc_node_track_caller+0x3d/0x70 [ 903.543268][T23825] __kmalloc_reserve.isra.0+0x40/0xf0 [ 903.548661][T23825] __alloc_skb+0x10b/0x5e0 [ 903.553103][T23825] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 903.558183][T23833] IPVS: ftp: loaded support on port[0] = 21 [ 903.559033][T23825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.559052][T23825] ? netlink_autobind.isra.0+0x223/0x300 [ 903.559073][T23825] netlink_sendmsg+0xa1b/0xea0 [ 903.559095][T23825] ? netlink_unicast+0x7d0/0x7d0 [ 903.559118][T23825] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 903.592633][T23825] ? apparmor_socket_sendmsg+0x2a/0x30 [ 903.598177][T23825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.604632][T23825] ? security_socket_sendmsg+0x8d/0xc0 [ 903.610208][T23825] ? netlink_unicast+0x7d0/0x7d0 [ 903.615248][T23825] sock_sendmsg+0xd7/0x130 [ 903.619687][T23825] ____sys_sendmsg+0x753/0x880 [ 903.624475][T23825] ? kernel_sendmsg+0x50/0x50 [ 903.629169][T23825] ? __fget+0x35d/0x550 [ 903.633355][T23825] ? find_held_lock+0x35/0x130 [ 903.638250][T23825] ___sys_sendmsg+0x100/0x170 [ 903.642949][T23825] ? sendmsg_copy_msghdr+0x70/0x70 [ 903.648500][T23825] ? __kasan_check_read+0x11/0x20 [ 903.653646][T23825] ? __fget+0x37f/0x550 [ 903.657812][T23825] ? ksys_dup3+0x3e0/0x3e0 [ 903.662418][T23825] ? __fget_light+0x1a9/0x230 [ 903.667174][T23825] ? __fdget+0x1b/0x20 [ 903.671284][T23825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 903.677636][T23825] __sys_sendmsg+0x105/0x1d0 [ 903.683015][T23825] ? __sys_sendmsg_sock+0xc0/0xc0 [ 903.688054][T23825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 903.693784][T23825] ? do_syscall_64+0x26/0x790 [ 903.698453][T23825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.704541][T23825] ? do_syscall_64+0x26/0x790 [ 903.709245][T23825] __x64_sys_sendmsg+0x78/0xb0 [ 903.714140][T23825] do_syscall_64+0xfa/0x790 [ 903.718676][T23825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.724570][T23825] RIP: 0033:0x45aff9 [ 903.728500][T23825] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 903.749570][T23825] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.757985][T23825] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 17:31:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc03e) [ 903.765967][T23825] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 903.774033][T23825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 903.782023][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 903.789997][T23825] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000001 17:31:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4002}}}}]}, 0x48}}, 0x0) [ 903.826467][T23839] device syz_tun left promiscuous mode [ 903.832214][T23839] bridge197: port 1(syz_tun) entered disabled state 17:31:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x33fe0) 17:31:44 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 903.958129][T23839] bridge198: port 1(syz_tun) entered blocking state [ 903.974796][T23839] bridge198: port 1(syz_tun) entered disabled state [ 903.993098][T23848] IPVS: length: 196 != 24 [ 904.019348][T23839] device syz_tun entered promiscuous mode 17:31:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x34000) [ 904.076153][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 904.101167][T23854] FAULT_INJECTION: forcing a failure. [ 904.101167][T23854] name failslab, interval 1, probability 0, space 0, times 0 [ 904.162778][T23854] CPU: 1 PID: 23854 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 904.171533][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.181587][T23854] Call Trace: [ 904.185010][T23854] dump_stack+0x197/0x210 [ 904.189416][T23854] should_fail.cold+0xa/0x15 [ 904.194020][T23854] ? fault_create_debugfs_attr+0x180/0x180 [ 904.199837][T23854] __should_failslab+0x121/0x190 [ 904.204952][T23854] should_failslab+0x9/0x14 [ 904.209579][T23854] kmem_cache_alloc+0x47/0x710 [ 904.214340][T23854] ? lock_acquire+0x190/0x410 [ 904.219283][T23854] ? netlink_deliver_tap+0x146/0xbe0 [ 904.224575][T23854] skb_clone+0x154/0x3d0 [ 904.228848][T23854] netlink_deliver_tap+0x943/0xbe0 [ 904.233974][T23854] netlink_unicast+0x643/0x7d0 [ 904.238877][T23854] ? netlink_attachskb+0x870/0x870 [ 904.244025][T23854] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 904.249767][T23854] ? __check_object_size+0x3d/0x437 [ 904.255002][T23854] netlink_sendmsg+0x91c/0xea0 [ 904.259780][T23854] ? netlink_unicast+0x7d0/0x7d0 [ 904.264740][T23854] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 904.270294][T23854] ? apparmor_socket_sendmsg+0x2a/0x30 [ 904.275950][T23854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.282253][T23854] ? security_socket_sendmsg+0x8d/0xc0 [ 904.287712][T23854] ? netlink_unicast+0x7d0/0x7d0 [ 904.292658][T23854] sock_sendmsg+0xd7/0x130 [ 904.297098][T23854] ____sys_sendmsg+0x753/0x880 [ 904.301869][T23854] ? kernel_sendmsg+0x50/0x50 [ 904.306630][T23854] ? __fget+0x35d/0x550 [ 904.310792][T23854] ? find_held_lock+0x35/0x130 [ 904.315566][T23854] ___sys_sendmsg+0x100/0x170 [ 904.320942][T23854] ? sendmsg_copy_msghdr+0x70/0x70 [ 904.326069][T23854] ? __kasan_check_read+0x11/0x20 [ 904.331287][T23854] ? __fget+0x37f/0x550 [ 904.335643][T23854] ? ksys_dup3+0x3e0/0x3e0 [ 904.340079][T23854] ? __fget_light+0x1a9/0x230 [ 904.344759][T23854] ? __fdget+0x1b/0x20 [ 904.348831][T23854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 904.355084][T23854] __sys_sendmsg+0x105/0x1d0 [ 904.359687][T23854] ? __sys_sendmsg_sock+0xc0/0xc0 [ 904.364727][T23854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 904.370196][T23854] ? do_syscall_64+0x26/0x790 [ 904.374948][T23854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.381137][T23854] ? do_syscall_64+0x26/0x790 [ 904.385831][T23854] __x64_sys_sendmsg+0x78/0xb0 [ 904.390682][T23854] do_syscall_64+0xfa/0x790 [ 904.395212][T23854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.401226][T23854] RIP: 0033:0x45aff9 [ 904.405130][T23854] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.424854][T23854] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.433388][T23854] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 904.441368][T23854] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 904.449355][T23854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:31:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 904.457351][T23854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 904.465337][T23854] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000002 [ 904.614211][T23848] IPVS: length: 196 != 24 [ 904.680812][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 904.688227][T23866] device syz_tun left promiscuous mode [ 904.695749][T23866] bridge198: port 1(syz_tun) entered disabled state [ 904.856626][T23866] bridge199: port 1(syz_tun) entered blocking state [ 904.863286][T23866] bridge199: port 1(syz_tun) entered disabled state [ 904.872650][T23866] device syz_tun entered promiscuous mode 17:31:45 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4003}}}}]}, 0x48}}, 0x0) 17:31:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x40000) 17:31:45 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) r3 = socket(0x2c, 0xf807024a2b4b933e, 0xa4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r4, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r6}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000180)=0x17c1, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0xfffffffd}, &(0x7f0000000600)=0x8) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4) 17:31:45 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010400004000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 905.009326][T23879] FAULT_INJECTION: forcing a failure. [ 905.009326][T23879] name failslab, interval 1, probability 0, space 0, times 0 [ 905.022672][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 905.056784][T23879] CPU: 1 PID: 23879 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 905.065849][T23879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.076060][T23879] Call Trace: [ 905.079379][T23879] dump_stack+0x197/0x210 [ 905.083718][T23879] should_fail.cold+0xa/0x15 [ 905.088454][T23879] ? fault_create_debugfs_attr+0x180/0x180 [ 905.094278][T23879] ? __nf_conntrack_find_get+0xa6b/0x13a0 [ 905.100002][T23879] __should_failslab+0x121/0x190 [ 905.104964][T23879] should_failslab+0x9/0x14 [ 905.109464][T23879] kmem_cache_alloc+0x47/0x710 [ 905.114252][T23879] ? lock_downgrade+0x920/0x920 [ 905.119097][T23879] ? __nf_conntrack_find_get+0xb2b/0x13a0 [ 905.124815][T23879] __nf_conntrack_alloc+0xdb/0x6c0 [ 905.129955][T23879] nf_conntrack_alloc+0x38/0x50 [ 905.134808][T23879] ctnetlink_create_conntrack+0xd0/0x1460 [ 905.140653][T23879] ? ctnetlink_del_conntrack+0x820/0x820 [ 905.146303][T23879] ? gc_worker+0xdd0/0xdd0 [ 905.150734][T23879] ctnetlink_new_conntrack+0x527/0xe60 [ 905.156219][T23879] ? ctnetlink_create_conntrack+0x1460/0x1460 [ 905.162478][T23879] ? ctnetlink_create_conntrack+0x1460/0x1460 [ 905.168545][T23879] nfnetlink_rcv_msg+0xcf2/0xfb0 [ 905.173487][T23879] ? nfnetlink_bind+0x2c0/0x2c0 [ 905.178395][T23879] ? find_held_lock+0x35/0x130 [ 905.183175][T23879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.189440][T23879] ? apparmor_capable+0x497/0x900 [ 905.194462][T23879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.200804][T23879] ? __kasan_check_read+0x11/0x20 [ 905.205826][T23879] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 905.211306][T23879] netlink_rcv_skb+0x177/0x450 [ 905.216089][T23879] ? nfnetlink_bind+0x2c0/0x2c0 [ 905.221047][T23879] ? netlink_ack+0xb50/0xb50 [ 905.225653][T23879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.231910][T23879] ? ns_capable_common+0x93/0x100 [ 905.236942][T23879] ? ns_capable+0x20/0x30 [ 905.241405][T23879] ? __netlink_ns_capable+0x104/0x140 [ 905.246873][T23879] nfnetlink_rcv+0x1ba/0x460 [ 905.251490][T23879] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 905.256941][T23879] ? netlink_deliver_tap+0x24a/0xbe0 [ 905.262236][T23879] netlink_unicast+0x58c/0x7d0 [ 905.267012][T23879] ? netlink_attachskb+0x870/0x870 [ 905.272257][T23879] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 905.278162][T23879] ? __check_object_size+0x3d/0x437 [ 905.283385][T23879] netlink_sendmsg+0x91c/0xea0 [ 905.288163][T23879] ? netlink_unicast+0x7d0/0x7d0 [ 905.293102][T23879] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 905.298669][T23879] ? apparmor_socket_sendmsg+0x2a/0x30 [ 905.304155][T23879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.310398][T23879] ? security_socket_sendmsg+0x8d/0xc0 [ 905.315877][T23879] ? netlink_unicast+0x7d0/0x7d0 [ 905.320818][T23879] sock_sendmsg+0xd7/0x130 [ 905.325302][T23879] ____sys_sendmsg+0x753/0x880 [ 905.330072][T23879] ? kernel_sendmsg+0x50/0x50 [ 905.334767][T23879] ? __fget+0x35d/0x550 [ 905.338935][T23879] ? find_held_lock+0x35/0x130 [ 905.343912][T23879] ___sys_sendmsg+0x100/0x170 [ 905.348606][T23879] ? sendmsg_copy_msghdr+0x70/0x70 [ 905.353732][T23879] ? __kasan_check_read+0x11/0x20 [ 905.358989][T23879] ? __fget+0x37f/0x550 [ 905.363154][T23879] ? ksys_dup3+0x3e0/0x3e0 [ 905.367692][T23879] ? __fget_light+0x1a9/0x230 [ 905.372496][T23879] ? __fdget+0x1b/0x20 [ 905.376579][T23879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 905.382817][T23879] __sys_sendmsg+0x105/0x1d0 [ 905.387448][T23879] ? __sys_sendmsg_sock+0xc0/0xc0 [ 905.392504][T23879] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 905.397961][T23879] ? do_syscall_64+0x26/0x790 [ 905.402644][T23879] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 905.408787][T23879] ? do_syscall_64+0x26/0x790 [ 905.413582][T23879] __x64_sys_sendmsg+0x78/0xb0 [ 905.418344][T23879] do_syscall_64+0xfa/0x790 [ 905.422877][T23879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 905.428759][T23879] RIP: 0033:0x45aff9 [ 905.432650][T23879] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.452452][T23879] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.462536][T23879] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 905.470730][T23879] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 905.478701][T23879] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 905.486812][T23879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 905.494883][T23879] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000003 17:31:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x6c02}}}}]}, 0x48}}, 0x0) [ 905.538630][T23886] IPVS: ftp: loaded support on port[0] = 21 [ 905.544802][T23885] device syz_tun left promiscuous mode [ 905.566690][T23885] bridge199: port 1(syz_tun) entered disabled state 17:31:45 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 905.716097][T23897] FAULT_INJECTION: forcing a failure. [ 905.716097][T23897] name failslab, interval 1, probability 0, space 0, times 0 [ 905.736701][T23885] bridge200: port 1(syz_tun) entered blocking state [ 905.744648][T23897] CPU: 1 PID: 23897 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 905.753364][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.763544][T23897] Call Trace: [ 905.766539][T23885] bridge200: port 1(syz_tun) entered disabled state [ 905.766846][T23897] dump_stack+0x197/0x210 [ 905.766868][T23897] should_fail.cold+0xa/0x15 [ 905.780078][T23885] device syz_tun entered promiscuous mode [ 905.782425][T23897] ? wait_for_completion+0x440/0x440 [ 905.782450][T23897] ? fault_create_debugfs_attr+0x180/0x180 [ 905.782472][T23897] ? ___might_sleep+0x163/0x2c0 [ 905.782491][T23897] __should_failslab+0x121/0x190 [ 905.782512][T23897] should_failslab+0x9/0x14 [ 905.813830][T23897] kmem_cache_alloc_node+0x268/0x740 [ 905.819148][T23897] __alloc_skb+0xd5/0x5e0 [ 905.823504][T23897] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 905.829324][T23897] netlink_ack+0x25c/0xb50 [ 905.833950][T23897] ? netlink_sendmsg+0xea0/0xea0 [ 905.839009][T23897] ? __kasan_check_read+0x11/0x20 [ 905.844068][T23897] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 905.849671][T23897] netlink_rcv_skb+0x376/0x450 [ 905.854454][T23897] ? nfnetlink_bind+0x2c0/0x2c0 [ 905.859404][T23897] ? netlink_ack+0xb50/0xb50 [ 905.864009][T23897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.870266][T23897] ? ns_capable_common+0x93/0x100 [ 905.875412][T23897] ? ns_capable+0x20/0x30 [ 905.879768][T23897] ? __netlink_ns_capable+0x104/0x140 [ 905.885510][T23897] nfnetlink_rcv+0x1ba/0x460 [ 905.890128][T23897] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 905.895601][T23897] ? netlink_deliver_tap+0x24a/0xbe0 [ 905.900962][T23897] netlink_unicast+0x58c/0x7d0 [ 905.905749][T23897] ? netlink_attachskb+0x870/0x870 [ 905.910999][T23897] ? __sanitizer_cov_trace_cmp8+0x18/0x20 17:31:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x400300) [ 905.916735][T23897] ? __check_object_size+0x3d/0x437 [ 905.922096][T23897] netlink_sendmsg+0x91c/0xea0 [ 905.926970][T23897] ? netlink_unicast+0x7d0/0x7d0 [ 905.931923][T23897] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 905.937512][T23897] ? apparmor_socket_sendmsg+0x2a/0x30 [ 905.942984][T23897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.949265][T23897] ? security_socket_sendmsg+0x8d/0xc0 [ 905.954744][T23897] ? netlink_unicast+0x7d0/0x7d0 [ 905.959698][T23897] sock_sendmsg+0xd7/0x130 [ 905.964275][T23897] ____sys_sendmsg+0x753/0x880 [ 905.969064][T23897] ? kernel_sendmsg+0x50/0x50 [ 905.973770][T23897] ? __fget+0x35d/0x550 [ 905.977939][T23897] ? find_held_lock+0x35/0x130 [ 905.982770][T23897] ___sys_sendmsg+0x100/0x170 [ 905.987696][T23897] ? sendmsg_copy_msghdr+0x70/0x70 [ 905.992830][T23897] ? __kasan_check_read+0x11/0x20 [ 905.997886][T23897] ? __fget+0x37f/0x550 [ 906.002234][T23897] ? ksys_dup3+0x3e0/0x3e0 [ 906.006666][T23897] ? __fget_light+0x1a9/0x230 [ 906.011363][T23897] ? __fdget+0x1b/0x20 [ 906.015423][T23897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 906.021800][T23897] __sys_sendmsg+0x105/0x1d0 [ 906.026385][T23897] ? __sys_sendmsg_sock+0xc0/0xc0 [ 906.031549][T23897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 906.037012][T23897] ? do_syscall_64+0x26/0x790 [ 906.041683][T23897] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.047924][T23897] ? do_syscall_64+0x26/0x790 [ 906.052608][T23897] __x64_sys_sendmsg+0x78/0xb0 [ 906.057484][T23897] do_syscall_64+0xfa/0x790 [ 906.062265][T23897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.068152][T23897] RIP: 0033:0x45aff9 [ 906.072055][T23897] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.091885][T23897] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.100307][T23897] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 906.108507][T23897] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 906.116482][T23897] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 906.124447][T23897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 906.132416][T23897] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000004 17:31:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x1000000) 17:31:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001e", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:46 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) r1 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x1, @rand_addr=0x80000000}}, 0x1e) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x3, @rand_addr=0x1}}, 0x1e) [ 906.181433][T23894] __nla_validate_parse: 1 callbacks suppressed [ 906.181445][T23894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 906.465468][T23922] device syz_tun left promiscuous mode [ 906.471511][T23922] bridge200: port 1(syz_tun) entered disabled state [ 906.646570][T23922] bridge201: port 1(syz_tun) entered blocking state [ 906.653542][T23922] bridge201: port 1(syz_tun) entered disabled state [ 906.662727][T23922] device syz_tun entered promiscuous mode 17:31:49 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x6d02}}}}]}, 0x48}}, 0x0) 17:31:49 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000240)=r4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet6_dccp_buf(r6, 0x21, 0xf, &(0x7f00000000c0)=""/137, &(0x7f0000000180)=0x89) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280)=0x8000, &(0x7f00000002c0)=0x2) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) 17:31:49 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3000000) 17:31:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001e", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 909.770015][T23934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 909.780605][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 909.811770][T23936] FAULT_INJECTION: forcing a failure. [ 909.811770][T23936] name failslab, interval 1, probability 0, space 0, times 0 [ 909.840487][T23936] CPU: 1 PID: 23936 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 909.848173][T23933] device syz_tun left promiscuous mode [ 909.849440][T23936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.849448][T23936] Call Trace: [ 909.849473][T23936] dump_stack+0x197/0x210 [ 909.849504][T23936] should_fail.cold+0xa/0x15 [ 909.868370][T23940] IPVS: ftp: loaded support on port[0] = 21 [ 909.868934][T23936] ? fault_create_debugfs_attr+0x180/0x180 [ 909.868956][T23936] ? ___might_sleep+0x163/0x2c0 [ 909.868979][T23936] __should_failslab+0x121/0x190 [ 909.873737][T23933] bridge201: port 1(syz_tun) entered disabled state [ 909.878061][T23936] should_failslab+0x9/0x14 17:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x11000000) [ 909.878078][T23936] kmem_cache_alloc_node_trace+0x274/0x750 [ 909.878094][T23936] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 909.878108][T23936] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 909.878128][T23936] __kmalloc_node_track_caller+0x3d/0x70 [ 909.878146][T23936] __kmalloc_reserve.isra.0+0x40/0xf0 [ 909.878167][T23936] __alloc_skb+0x10b/0x5e0 [ 909.944290][T23936] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 909.949862][T23936] netlink_ack+0x25c/0xb50 [ 909.954301][T23936] ? netlink_sendmsg+0xea0/0xea0 [ 909.959284][T23936] ? __kasan_check_read+0x11/0x20 [ 909.964331][T23936] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 909.969810][T23936] netlink_rcv_skb+0x376/0x450 [ 909.974596][T23936] ? nfnetlink_bind+0x2c0/0x2c0 [ 909.979478][T23936] ? netlink_ack+0xb50/0xb50 [ 909.984093][T23936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 909.990377][T23936] ? ns_capable_common+0x93/0x100 [ 909.995538][T23936] ? ns_capable+0x20/0x30 [ 909.999924][T23936] ? __netlink_ns_capable+0x104/0x140 [ 910.005323][T23936] nfnetlink_rcv+0x1ba/0x460 [ 910.009982][T23936] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 910.015618][T23936] ? netlink_deliver_tap+0x24a/0xbe0 [ 910.021037][T23936] netlink_unicast+0x58c/0x7d0 [ 910.025816][T23936] ? netlink_attachskb+0x870/0x870 [ 910.030989][T23936] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 910.036742][T23936] ? __check_object_size+0x3d/0x437 [ 910.042749][T23936] netlink_sendmsg+0x91c/0xea0 [ 910.047540][T23936] ? netlink_unicast+0x7d0/0x7d0 [ 910.052491][T23936] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 910.059463][T23936] ? apparmor_socket_sendmsg+0x2a/0x30 [ 910.064930][T23936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 910.071169][T23936] ? security_socket_sendmsg+0x8d/0xc0 [ 910.076651][T23936] ? netlink_unicast+0x7d0/0x7d0 [ 910.081591][T23936] sock_sendmsg+0xd7/0x130 [ 910.086024][T23936] ____sys_sendmsg+0x753/0x880 [ 910.090795][T23936] ? kernel_sendmsg+0x50/0x50 [ 910.095495][T23936] ? __fget+0x35d/0x550 [ 910.099646][T23936] ? find_held_lock+0x35/0x130 [ 910.104576][T23936] ___sys_sendmsg+0x100/0x170 [ 910.109249][T23936] ? sendmsg_copy_msghdr+0x70/0x70 [ 910.114785][T23936] ? __kasan_check_read+0x11/0x20 [ 910.119962][T23936] ? __fget+0x37f/0x550 [ 910.124128][T23936] ? ksys_dup3+0x3e0/0x3e0 [ 910.128543][T23936] ? __fget_light+0x1a9/0x230 [ 910.133229][T23936] ? __fdget+0x1b/0x20 [ 910.137314][T23936] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 910.143582][T23936] __sys_sendmsg+0x105/0x1d0 [ 910.148187][T23936] ? __sys_sendmsg_sock+0xc0/0xc0 [ 910.153229][T23936] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.158700][T23936] ? do_syscall_64+0x26/0x790 [ 910.163385][T23936] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.169454][T23936] ? do_syscall_64+0x26/0x790 [ 910.174134][T23936] __x64_sys_sendmsg+0x78/0xb0 [ 910.179165][T23936] do_syscall_64+0xfa/0x790 [ 910.183813][T23936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.189836][T23936] RIP: 0033:0x45aff9 [ 910.193824][T23936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x7102}}}}]}, 0x48}}, 0x0) [ 910.213433][T23936] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.221843][T23936] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 910.230097][T23936] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 910.238067][T23936] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 910.246028][T23936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 910.254105][T23936] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000005 17:31:50 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3f000000) [ 910.406818][T23933] bridge202: port 1(syz_tun) entered blocking state [ 910.414911][T23933] bridge202: port 1(syz_tun) entered disabled state [ 910.451860][T23933] device syz_tun entered promiscuous mode 17:31:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001e", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 910.522759][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 910.532867][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 910.556639][T23956] FAULT_INJECTION: forcing a failure. [ 910.556639][T23956] name failslab, interval 1, probability 0, space 0, times 0 [ 910.591349][T23956] CPU: 0 PID: 23956 Comm: syz-executor.0 Not tainted 5.5.0-rc5-syzkaller #0 [ 910.600193][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.610257][T23956] Call Trace: [ 910.613570][T23956] dump_stack+0x197/0x210 [ 910.617929][T23956] should_fail.cold+0xa/0x15 [ 910.622540][T23956] ? fault_create_debugfs_attr+0x180/0x180 [ 910.628374][T23956] __should_failslab+0x121/0x190 [ 910.633332][T23956] should_failslab+0x9/0x14 [ 910.638007][T23956] kmem_cache_alloc+0x47/0x710 [ 910.642786][T23956] ? lock_acquire+0x190/0x410 [ 910.647480][T23956] ? netlink_deliver_tap+0x146/0xbe0 [ 910.652778][T23956] skb_clone+0x154/0x3d0 [ 910.657036][T23956] netlink_deliver_tap+0x943/0xbe0 [ 910.662172][T23956] __netlink_sendskb+0x62/0xc0 [ 910.666956][T23956] netlink_unicast+0x6ab/0x7d0 [ 910.671743][T23956] ? netlink_attachskb+0x870/0x870 [ 910.676878][T23956] netlink_ack+0x607/0xb50 [ 910.681313][T23956] ? netlink_sendmsg+0xea0/0xea0 [ 910.686267][T23956] ? __kasan_check_read+0x11/0x20 [ 910.691303][T23956] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 910.696799][T23956] netlink_rcv_skb+0x376/0x450 [ 910.701803][T23956] ? nfnetlink_bind+0x2c0/0x2c0 [ 910.706718][T23956] ? netlink_ack+0xb50/0xb50 [ 910.711352][T23956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 910.717720][T23956] ? ns_capable_common+0x93/0x100 [ 910.723112][T23956] ? ns_capable+0x20/0x30 [ 910.727458][T23956] ? __netlink_ns_capable+0x104/0x140 [ 910.733070][T23956] nfnetlink_rcv+0x1ba/0x460 [ 910.735773][T23962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 910.737684][T23956] ? nfnetlink_rcv_batch+0x17a0/0x17a0 [ 910.737698][T23956] ? netlink_deliver_tap+0x24a/0xbe0 [ 910.737721][T23956] netlink_unicast+0x58c/0x7d0 [ 910.737740][T23956] ? netlink_attachskb+0x870/0x870 [ 910.737756][T23956] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 910.737779][T23956] ? __check_object_size+0x3d/0x437 [ 910.779835][T23956] netlink_sendmsg+0x91c/0xea0 [ 910.784651][T23956] ? netlink_unicast+0x7d0/0x7d0 [ 910.789630][T23956] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 910.795202][T23956] ? apparmor_socket_sendmsg+0x2a/0x30 [ 910.800673][T23956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 910.806923][T23956] ? security_socket_sendmsg+0x8d/0xc0 [ 910.812536][T23956] ? netlink_unicast+0x7d0/0x7d0 [ 910.817498][T23956] sock_sendmsg+0xd7/0x130 [ 910.821935][T23956] ____sys_sendmsg+0x753/0x880 [ 910.826736][T23956] ? kernel_sendmsg+0x50/0x50 [ 910.831424][T23956] ? __fget+0x35d/0x550 [ 910.835592][T23956] ? find_held_lock+0x35/0x130 [ 910.836193][T23964] device syz_tun left promiscuous mode [ 910.840508][T23956] ___sys_sendmsg+0x100/0x170 [ 910.840528][T23956] ? sendmsg_copy_msghdr+0x70/0x70 [ 910.840544][T23956] ? __kasan_check_read+0x11/0x20 [ 910.840564][T23956] ? __fget+0x37f/0x550 [ 910.840584][T23956] ? ksys_dup3+0x3e0/0x3e0 [ 910.840606][T23956] ? __fget_light+0x1a9/0x230 [ 910.846407][T23964] bridge202: port 1(syz_tun) entered disabled state [ 910.850737][T23956] ? __fdget+0x1b/0x20 [ 910.850756][T23956] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 910.850777][T23956] __sys_sendmsg+0x105/0x1d0 [ 910.850797][T23956] ? __sys_sendmsg_sock+0xc0/0xc0 [ 910.900858][T23956] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.906332][T23956] ? do_syscall_64+0x26/0x790 [ 910.911029][T23956] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.917142][T23956] ? do_syscall_64+0x26/0x790 [ 910.921838][T23956] __x64_sys_sendmsg+0x78/0xb0 [ 910.926743][T23956] do_syscall_64+0xfa/0x790 [ 910.931268][T23956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.937167][T23956] RIP: 0033:0x45aff9 [ 910.941072][T23956] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.960793][T23956] RSP: 002b:00007f368252dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.969241][T23956] RAX: ffffffffffffffda RBX: 00007f368252e6d4 RCX: 000000000045aff9 [ 910.977232][T23956] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 910.985222][T23956] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:31:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x8002}}}}]}, 0x48}}, 0x0) [ 910.993205][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 911.001274][T23956] R13: 00000000000008bd R14: 00000000004c9d78 R15: 0000000000000006 [ 911.176595][T23964] bridge203: port 1(syz_tun) entered blocking state [ 911.183293][T23964] bridge203: port 1(syz_tun) entered disabled state [ 911.191335][T23964] device syz_tun entered promiscuous mode 17:31:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x40000000) 17:31:51 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept4(r0, &(0x7f0000002d80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000002e00)=0x80, 0x80000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000003000)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80c1208}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0xd4, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9c64fe25a1889b7e, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8084}, 0x800) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @rose={'rose', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 17:31:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x8003}}}}]}, 0x48}}, 0x0) 17:31:51 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 911.511276][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 911.541891][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:31:51 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x5, 0x4) connect$x25(r0, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xc002}}}}]}, 0x48}}, 0x0) [ 911.571215][T23992] device syz_tun left promiscuous mode [ 911.601739][T23992] bridge203: port 1(syz_tun) entered disabled state [ 911.611836][T23993] IPVS: ftp: loaded support on port[0] = 21 17:31:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x803e0000) 17:31:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 911.756533][T23992] bridge204: port 1(syz_tun) entered blocking state [ 911.763590][T23992] bridge204: port 1(syz_tun) entered disabled state [ 911.814106][T23992] device syz_tun entered promiscuous mode [ 911.833023][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 911.845426][T23995] bridge204: port 2(erspan0) entered blocking state 17:31:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc0000000) 17:31:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 911.873757][T23995] bridge204: port 2(erspan0) entered disabled state [ 911.909986][T23995] device erspan0 entered promiscuous mode [ 912.017848][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 912.045097][T24019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:31:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xc003}}}}]}, 0x48}}, 0x0) 17:31:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:52 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="d70318ac04d3499c81751ab7bb101609878c7840e78920a19fd0699e484686a4ec8edd656c4c6b9b718c674248a340ee885fc26168df69c502e4d691632c67eed43207ac06c579ad4f16d65000342a411721612a02000000b26fd76d6afa192fab527dd71d7baa9e91db66db9751065700d7b0852ec17abd962fd1281bdaf0621a9f0dbf98ac1c35e706856e1c727c2e285e5a7949e81d6d021fa410aaeda7f43bb31e373a39c8ca26cef7f9d3eee1b47f4abec5b47bb1e80da7b163bb27eb2f46ac", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3, 0x7}, &(0x7f0000000080)=0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 17:31:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc03e0000) 17:31:52 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 912.642871][T24035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 912.661651][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.683777][T24031] device syz_tun left promiscuous mode 17:31:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xe03f0300) [ 912.707607][T24031] bridge204: port 1(syz_tun) entered disabled state 17:31:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0xd201}}}}]}, 0x48}}, 0x0) 17:31:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 912.766820][T24044] IPVS: ftp: loaded support on port[0] = 21 17:31:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xeffdffff) [ 912.886744][T24031] bridge205: port 1(syz_tun) entered blocking state [ 912.893691][T24031] bridge205: port 1(syz_tun) entered disabled state [ 912.925455][T24031] device syz_tun entered promiscuous mode 17:31:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 912.948586][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 912.964139][T24042] device erspan0 left promiscuous mode [ 912.973701][T24042] bridge204: port 2(erspan0) entered disabled state 17:31:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xfeffffff) [ 913.137504][T24042] bridge205: port 2(erspan0) entered blocking state [ 913.151100][T24042] bridge205: port 2(erspan0) entered disabled state [ 913.163159][T24065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 913.184646][T24042] device erspan0 entered promiscuous mode 17:31:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 913.229632][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:31:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xfffffdef) 17:31:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 913.678878][T24092] device syz_tun left promiscuous mode [ 913.684746][T24092] bridge31: port 1(syz_tun) entered disabled state 17:31:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4, 0x8}}}}]}, 0x48}}, 0x0) 17:31:53 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xffffff7f) 17:31:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xfffffffe) [ 913.816585][T24092] bridge43: port 1(syz_tun) entered blocking state [ 913.831724][T24092] bridge43: port 1(syz_tun) entered disabled state 17:31:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 913.867728][T24092] device syz_tun entered promiscuous mode [ 913.883684][T24108] IPVS: ftp: loaded support on port[0] = 21 [ 913.908557][T24089] device syz_tun left promiscuous mode [ 913.936911][T24089] bridge205: port 1(syz_tun) entered disabled state 17:31:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x4000000000000) 17:31:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 914.106688][T24089] bridge206: port 1(syz_tun) entered blocking state [ 914.115959][T24089] bridge206: port 1(syz_tun) entered disabled state [ 914.149314][T24089] device syz_tun entered promiscuous mode [ 914.175755][T24093] device erspan0 left promiscuous mode 17:31:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x40030000000000) [ 914.193658][T24093] bridge205: port 2(erspan0) entered disabled state 17:31:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 914.343410][T24093] bridge206: port 2(erspan0) entered blocking state [ 914.359250][T24093] bridge206: port 2(erspan0) entered disabled state [ 914.402570][T24093] device erspan0 entered promiscuous mode [ 914.432797][T24094] bridge43: port 2(erspan0) entered blocking state [ 914.447767][T24094] bridge43: port 2(erspan0) entered disabled state [ 914.476905][T24094] device erspan0 entered promiscuous mode 17:31:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0xf}}, 0x0) 17:31:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x100000000000000) 17:31:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:55 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x300000000000000) 17:31:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x10}}, 0x0) 17:31:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x13}}, 0x0) 17:31:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 915.136107][T24167] IPVS: ftp: loaded support on port[0] = 21 [ 915.154669][T24164] device syz_tun left promiscuous mode 17:31:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x1100000000000000) [ 915.181399][T24164] bridge206: port 1(syz_tun) entered disabled state 17:31:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0xc0}}, 0x0) 17:31:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 915.373093][T24164] bridge207: port 1(syz_tun) entered blocking state [ 915.382855][T24164] bridge207: port 1(syz_tun) entered disabled state [ 915.409375][T24164] device syz_tun entered promiscuous mode [ 915.484047][T24174] device erspan0 left promiscuous mode [ 915.525313][T24174] bridge206: port 2(erspan0) entered disabled state [ 915.656801][T24174] bridge207: port 2(erspan0) entered blocking state [ 915.663478][T24174] bridge207: port 2(erspan0) entered disabled state [ 915.687776][T24174] device erspan0 entered promiscuous mode [ 915.707932][T24185] device syz_tun left promiscuous mode [ 915.713530][T24185] bridge43: port 1(syz_tun) entered disabled state [ 915.856652][T24185] bridge44: port 1(syz_tun) entered blocking state [ 915.863549][T24185] bridge44: port 1(syz_tun) entered disabled state [ 915.872684][T24185] device syz_tun entered promiscuous mode [ 915.880971][T24187] device erspan0 left promiscuous mode [ 915.891453][T24187] bridge43: port 2(erspan0) entered disabled state [ 916.026587][T24187] bridge44: port 2(erspan0) entered blocking state [ 916.033270][T24187] bridge44: port 2(erspan0) entered disabled state [ 916.041310][T24187] device erspan0 entered promiscuous mode 17:31:56 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x3f00000000000000) 17:31:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0xec0}}, 0x0) 17:31:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x11000000) 17:31:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x33fe0}}, 0x0) 17:31:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x803e) 17:31:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x4000000000000000) [ 916.361885][T24208] device syz_tun left promiscuous mode [ 916.361980][T24216] IPVS: ftp: loaded support on port[0] = 21 [ 916.372341][T24208] bridge207: port 1(syz_tun) entered disabled state [ 916.518970][T24229] __nla_validate_parse: 12 callbacks suppressed [ 916.518981][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:31:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x2}, 0x6) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0xfda}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x81}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x3}, @CTA_EXPECT_NAT={0xc, 0xa, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x9004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff}, 0x6) [ 916.596584][T24208] bridge208: port 1(syz_tun) entered blocking state [ 916.609137][T24208] bridge208: port 1(syz_tun) entered disabled state 17:31:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x803e000000000000) [ 916.638655][T24208] device syz_tun entered promiscuous mode [ 916.674015][T24221] device erspan0 left promiscuous mode [ 916.751994][T24221] bridge207: port 2(erspan0) entered disabled state [ 916.916497][T24221] bridge208: port 2(erspan0) entered blocking state [ 916.923267][T24221] bridge208: port 2(erspan0) entered disabled state [ 916.938044][T24221] device erspan0 entered promiscuous mode 17:31:57 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc000000000000000) 17:31:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) ioctl$void(r0, 0x5450) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) 17:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x20000048}}, 0x0) [ 917.229398][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x7ffff000}}, 0x0) [ 917.308334][T24258] device syz_tun left promiscuous mode [ 917.314098][T24258] bridge208: port 1(syz_tun) entered disabled state 17:31:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xc03e000000000000) 17:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0xfffffdef}}, 0x0) [ 917.346910][ T27] audit: type=1804 audit(1579282317.560:173): pid=24257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/461/memory.events" dev="sda1" ino=17220 res=1 [ 917.391773][T24266] IPVS: ftp: loaded support on port[0] = 21 17:31:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 917.451638][ T27] audit: type=1804 audit(1579282317.660:174): pid=24274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/461/memory.events" dev="sda1" ino=17220 res=1 17:31:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x3c25956b) r4 = socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r7, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={r9, 0xcc, &(0x7f0000000340)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x2, @remote, 0x1f}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x18}, 0x3}, @in6={0xa, 0x4e21, 0x400, @loopback, 0x20}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x5}, @in6={0xa, 0x4e23, 0x89f6, @mcast2, 0x3}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e20, 0x6, @local, 0x8001}, @in6={0xa, 0x4e21, 0xffffff0b, @ipv4={[], [], @multicast1}, 0xfe}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0xfffffffa, @remote, 0x80000000}, @in6={0xa, 0x4e20, 0x4, @rand_addr="b182ed346c251a1de48ea9ea21fcf6c0", 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x2}], 0xdc) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0f) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x1f9, 0xfda4) splice(r1, 0x0, r4, 0x0, 0x8001, 0x0) [ 917.506694][T24258] bridge209: port 1(syz_tun) entered blocking state [ 917.568491][T24258] bridge209: port 1(syz_tun) entered disabled state [ 917.618654][T24258] device syz_tun entered promiscuous mode [ 917.639025][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 917.654656][T24268] device erspan0 left promiscuous mode 17:31:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x2}, 0x0) [ 917.675392][T24268] bridge208: port 2(erspan0) entered disabled state [ 917.886835][T24268] bridge209: port 2(erspan0) entered blocking state [ 917.896028][T24268] bridge209: port 2(erspan0) entered disabled state [ 917.909500][T24268] device erspan0 entered promiscuous mode 17:31:58 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xe03f030000000000) 17:31:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x4}, 0x0) 17:31:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 918.195121][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:31:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x8}, 0x0) 17:31:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xeffdffff00000000) 17:31:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 918.248324][T24313] IPVS: ftp: loaded support on port[0] = 21 [ 918.258150][T24311] device syz_tun left promiscuous mode [ 918.283180][T24311] bridge209: port 1(syz_tun) entered disabled state 17:31:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xfeffffff00000000) [ 918.460084][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 918.466615][T24311] bridge210: port 1(syz_tun) entered blocking state [ 918.476606][T24311] bridge210: port 1(syz_tun) entered disabled state [ 918.489225][T24311] device syz_tun entered promiscuous mode 17:31:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2f, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 918.524084][T24316] device erspan0 left promiscuous mode [ 918.544309][T24316] bridge209: port 2(erspan0) entered disabled state 17:31:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0xffffff7f00000000) [ 918.680922][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 918.754921][T24339] IPVS: ftp: loaded support on port[0] = 21 [ 918.756589][T24316] bridge210: port 2(erspan0) entered blocking state [ 918.779981][T24316] bridge210: port 2(erspan0) entered disabled state [ 918.827501][T24316] device erspan0 entered promiscuous mode 17:31:59 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:31:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:31:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$isdn_base(r4, &(0x7f0000000080)={0x22, 0x73, 0xff, 0x1, 0x6}, 0x6) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x108, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:31:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x300}, 0x0) 17:31:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:31:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0xa500}, 0x0) [ 919.332364][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.420973][T24368] device syz_tun left promiscuous mode [ 919.440092][T24368] bridge210: port 1(syz_tun) entered disabled state 17:31:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 919.466179][T24369] IPVS: ftp: loaded support on port[0] = 21 17:31:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004400)={r2}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90080080}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r5, 0x6ddea37407c78467, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xc, 0x6, @broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x8, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, [{0x8, 0x0, 0x80200}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x8, 0xeb, 0xaf2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x30}, @NL80211_ATTR_MAC={0xc, 0x6, @local}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000004500)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x102848}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x3c, r5, 0x100f, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28}, 0x10) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0xffffffffffffff5b, 0x800) getsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg(r0, &(0x7f0000000140), 0x400000000000068, 0x8000) sendmmsg(r1, &(0x7f0000004380)=[{{&(0x7f0000000240)=@generic={0x25, "aa40385b0b9533e4909d1d5af1a484b3b922a99389d5919a1a3d4514737048a8f1bb34f3a17741527b415a4681dcff41eaa999b47cab917e0437416e106b38b98631d408b18fd2f48c25f0e505aa6c9098d7ad5223e98d80008a0e9f6b92706b7ba9338e5ea65421d43088092521d17969fe58399b7f9b002a5af761608a"}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)="0cc3a30ad6de3d7066440206500106aa0a3d8815207ab86483600e78e73be771bbc33027775ad0dce83823b9df7f0b6f7a672407ce059a80db14b678864adb882e5899f9848f4b543fa47b45a679291b82d7f07c53719596964dc05d9ea6fc2747ef89380427d6a07b4adc19a90405a28e096347f0253ff4870bed0baee03117ab1190617427483436702f7f52a3c88c88319a495cc5bb88472f1c248e96bbabe503c42b7610c2f988678db29c40ae9949cfca958e53bc2098f60e2eb0ab73a5ba", 0xc1}, {&(0x7f00000003c0)="74ba61af56640053cfeac68795cc9bfcd8d3e309cf33bd97b104f5414589aef77af709d7992caa5ff4a65a686441da6aa03599c8cf48c0e866edf8c9639cf9bf279f44ee1faf6e7b9b831affbfe7022deb2bd6aefbbdbabfc26fe00842c6d89765cd52cad1306fc2f374eb9420fed04c24d56e8832e53078a539b82c1797ce626496826c2212c4636cd1093a1fd912a2a7e0c0bde9c96990e72fadba78b53b116db82a6852881c05dac1a8685ed6b2701928e7278258bfdb06ce86f210485756b9fa8328ef5f502b6dbc7c1e29d2d52ebd88b27b52e69f74b0759e8229a6a76f37569e8e522e35b0b910f36ad887cacacb085ae698163ca389", 0xf9}, {&(0x7f00000004c0)="a1b0defb8987f0008910de8bc7d40b099c0ff5499d5a7e79f949a5fbfd0f2322932b00808c76f13dfb73b87150d3ae88cb1a1a4912b83d1d4b09755251b0db4e0adc832ce6e190df4aab4802d20f87ac460f2d77c45ee0b2ff8ae72802cd5723b04fb9f7b9101cbbb3a6294b589a1c332b2b535898efdbf13663a0db3d9da87af2c752f220555d78ae54b7a9e2a492f1c89732cf8dbe8de3cdad490fb90c9316fdc3e4e880e4512601ebd0ba91eedab7f700cb5b8b261dadc860000440c232632b8ffd29caea05d05fa6129f5b113d01593550255c537b5f3ca6d7d6754944ab77c2cb5abe09ddf11fcd2b46eeda91205a", 0xf1}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="64733b7ec6c6bb895e13769b9509d6952a91b40b343fbdf8186694fe1e96100cd2d9f8d9c92b2ff15136b42e817f29525bb1c9a4f26bd75ba28a49e917158af05b2ef22461e19b899e796d3d47c552fa9dabb3e4d65167a2c85157fb76571b565a119ab4bb4adcc17b45dce4f1ebd4fcd0fb9971a38b39b3e3a2cdba4f52511f04a6fdb09e0780bcfb", 0x89}, {&(0x7f0000000780)="ebe819f0cdd808bcdb165fa8e38eaffed6a77cd72236878dbf127e933314455de510e93ffa19d4b89967d709710f2d1e87b405bb39", 0x35}, {&(0x7f00000007c0)="84ad387a642bb2eaf7bda2b7f8aae0311246f20e08042d46a62249d228312004d027517d145f9021a6491ab5effc775cb1218c6d39015c6b0406eccbf7257349c18e4bba10c3503c9481266972e557", 0x4f}, {&(0x7f0000000840)="b28b43f00251538d0aa1f1b6b8d1b8fd9fbefc5829c7624a250e369dc3fda929d14190ac47f12fdab47977b80544032e11af3217d38d948ed7564a1937cf1681afc6cf8c53fe5ea1df75f67e78a019b265f2761f078f35d0b9db254cb3428becbf0ca723d44bc4ecf1cccaf2c414e9ae025540509bb9716a7ec289768b8c66873049b49aa063e13e168d4c122107f5482ef7efeb9a2f926237c2697c0b385243ea3aa5c6148f8103e55b517abcd6e06fc0b2031f55e260b06f0d5d6b40c6869bad163177f407d8e7", 0xc8}, {&(0x7f0000000940)="c347fb1d02b82fe958510aa763fc6da078d3e778ee08151295f7962e63164da817b695887390c98bd0dcca6192c7432665f621f754ca749fa3975d8f92821739863cead889855d1f6d", 0x49}, {&(0x7f00000009c0)="d15da3d11a95a9c09536c2b27584801ac547013035d636355fb9f0f969bf8546c8024c2e3396c6e1742f1bf3db9657f11a183cc98598fe96d10a0dd94628e80834370a07aa89acdfd7ab7d590b1e252545dc8bb51e257c6dbadd10425b5255caed3e4c7d9397b67fc00aa4df8939", 0x6e}], 0xa, &(0x7f0000000b00)=[{0x38, 0x10a, 0x8000, "d7e8283339b438fff6f8595cebf74846e61086aeb892d30331c7832e05668082aa"}, {0x78, 0x101, 0x6, "1a23a454d0daa534b2cf74b35b1bdfcd0757a8f1f8ade0f0f1d7d6c7527f23127daa9bbd995728b2243a1fa4270592f9f7823c2958f3dda718a210667dd04ffc607d02d8b9ee637e664e005edfb57bce2fce2e9f528d8e1a32497ac11ab74f31cb97"}, {0xe8, 0x108, 0x8, "f11e65d112134a2243972bc9357a36fda8918858c2cdf2f255d4c48b3394fa72a27d58542d2f3fde44172bd817838a2121123dc6485d4efddb977b7512d529c1bf7b41aa7f95a8d583d280704b541328791bcfa63ffc6ebd894d82307e67b60583d89be5906f3dbcb217ce41a552a5f3284cb06e1dc7e05b1620368a08a92f32b09f10aabe4f611650d61be03f89dede8746bcb3433aac8955cd6ff26c22cba91bfed40e646f63f4ef894b10b37559ea3fe78167fe500b42915b8e1e077e24e9e85a746b4174998658c8e98ae9e6a49caf6057d6"}, {0x108, 0x0, 0xfffffffe, "8a2254b0bebd1280212e9b4f13ee74ac6b9fa53b167b4600a6945966762421933d0915d551e9fb81e6b4575b6c182544fea8d99754da2726e01adac68ee083234eb33d19fbe88b58c2ce1f36575377ba6068c374ac1ea1cfe275a1a7bd5a2ebd115e0beac64ca67cbb60d4064dd2b5a74356693bd7e141481d5a03ed46b74c8448ffb0512e5f30f5d77d0e944b33cb95ea9b49b91014ac6218520a08e859e11b2b8b26e282792aa12783fe286ac113b0d9bb5d7fe7563ca86c3576fb61bdcb3ffc0404b37791547c08dcab975d31b9a05f40d17e9519084fed2da258476b8d66d5852d558378cd132d1a7a84c157bbb724e0e0"}, {0x90, 0x88, 0xfff, "baa8cd76e386db4ab2a9ad4463cae143cade7682b6cbe2616750fbd4d001e3622807877f73436e2437f853744a584dfbe8e5bc2c2752fb84b91b3ddc097fa737c96c043bd38fd616507ed3f881de30f0e9a11e033a7978ea6411b1319e9ca554d59a15e392a47b4d41217004bbda07d4f0d8c9ad3db65ed908c96e69"}, {0x1010, 0x107, 0x0, "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"}, {0x70, 0x100, 0x7f, "7f9d8ecf9432c56439e9c6dd2d6811f2165b4592f92279ec945651991f922e0c5e635b9e1205d1fa16e4f791aad077dc4080b9588c272750ad94f40d7b04ed37884bbee544a04c43e22ee5bf5b026f0ea63b1c0a384df59f86f5b0e391"}, {0x78, 0x103, 0x240, "3d17b12719dfbe965dde11c4aebe7124f2903417a26f118046fbb5420b6c8f8d046a746bd078c77936b5a6916f475e4708825f79db2a6d3909b271f99f339808fcc2a763879d938e8950a460a23bb5abbb2fe9e954acae7e1a268912be2fbb3d6d9f593c9221af"}], 0x1428}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001f40)="e3ae77d8cf686b3fb1426aafe920dd72e298bdec5e573b7e75f4c3dec4cd5ecfa81d90d86ec22e1b38445b2e39b5b71e396a96e78c640213f5e061ea54e8478a2ea91f804f31d74537e679f06dd2a5fca3fc95cc979f3366d375daea0e33dfabbcea5990bdc1ecc229df7d67935ce9dc61315e9f9cd2d3f484277cf1b3ce66f197f6a9b8404f96b09dcecc8fb4374f7c9328eb37", 0x94}, {&(0x7f0000002000)="6dfa1de06589979025ff6f9a3e638f6f83a1bccfb78cd2117f17de5d32a1177268f9b404848f716599ac059c269d47529d1b4883b0e9dd17f76d9230027022611f572eca0f695803881325fa16ce69f34e507823b2435f1389730b9690fa4d1ec02ca8ea7fc7c693cbaf4f937baa2f6074cd212ab4856573eb83cf9c80792d163ff206e7fc99732bc37d39761e531741988a9ac5761bee2f53be8ef990210ac126f49dc11c500ded4655618a20c5bca7057128066a0e622d39ebac216ae51253", 0xc0}, {&(0x7f00000020c0)="d48949603567f21fa7c6", 0xa}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004540)="8542c6d8eb944f64a70dada732fe8408412d95f8836bdcbc8258476569b8ff60e63b34d405f747875e17c91168c2b469c786afbd411518828652436f29f414dad261324724e5686701f588a16bac0a286d", 0x51}, {&(0x7f0000004180)="0a33487b1a46e57582549de44c96c30bc03cbe8d2b18a6518171371fc77da7c4f2c0516fb382dceb16a9bb8bdf201e1a01dda3286eb00be6a761b42bcf67df5c0ecc5661c42838df6cbd75efbed30814c5115482", 0x54}, {&(0x7f0000004200)="40b6d4d8ec4e8a1d6fa44930166d2e28d09f47af4eec255052", 0x19}], 0x8, &(0x7f00000042c0)=[{0x68, 0x11, 0x3, "9457119b81a0842a55fc46079c76e5c8ce33b84d1788e4c5524553196916a22de3edb760e3e5969c449fdd85a63f53e1e504ab1fb50ff424f6a6713a3f3f8729911937b4e14fae2bfed0e241d04dc0fbf04c234126a2"}, {0x30, 0x10a, 0x0, "4d4c4cb5d823e85f3bec83af6cbdf7f36478a1a9dad716c1afb50654f5"}], 0x98}}], 0x2, 0x40000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x800, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x800, 0x20, 0x1, 0x6}]}) 17:31:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0xc0000000}, 0x0) [ 919.609085][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.656987][T24368] bridge211: port 1(syz_tun) entered blocking state [ 919.664097][T24368] bridge211: port 1(syz_tun) entered disabled state 17:31:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 919.706758][T24368] device syz_tun entered promiscuous mode [ 919.767515][T24363] device erspan0 left promiscuous mode [ 919.791174][T24363] bridge210: port 2(erspan0) entered disabled state [ 919.848606][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 919.947985][T24363] bridge211: port 2(erspan0) entered blocking state [ 919.954966][T24363] bridge211: port 2(erspan0) entered disabled state [ 919.963744][T24363] device erspan0 entered promiscuous mode 17:32:00 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x400000000000000, 0x2162, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001b40), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'proc\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000340)={0x4, 0x6, 0x4072e7a0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010067726574617000000c00020008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="186207000000126ec374ee6a55f99fbd370bb1f57135e4ab6a72c90d76416c98cc6cc1656dd0c7483cb61f8eb4eaff4d84e1a14bf6f19dbaa552f5b967722a90d5b5c696a83bd49f47135c94aa6b268b6d53dfb29765e288579700000000c30a9e82f6d6cb10648777f7adddec065ed17dccd7ee9aa112a48154b39b83cc4208109c6755a226c294c79569cbbddd6fcd6fc3094530206dd6d544275a60f31bec3b000644b256c8aa8dc23482a3ca322278747291b229175f8f5724502d92bd12c872331dcb91ffd8d2020c60d2f5ccd9db8cfc48bd8e8a9e13432bef84719cfb2aa0e3c1551d644ed2a50fe0726c779513efc78777e2362a648edec7df1fa29545825dc51190dddce0c85bab01a7efa660263439e30e569e5ceddf534dc2d602702cf8c697e6e972f8e6b7e51eb1c62c64419b3bf0987b40ff119dc040b28923f46c17c3856d58641939f32034c54601a3383ae567a6440acc1ef6108e30f828c84cce0c9840a7e576d4e6ae7925da86b6225ab0dc02783ebab27cd75f4b2c6b2f5b625a6dc64f8e3db62c62c41554c21e80fae555b57090f102a1bf1a979d7ae0414d69790122ed5202ae20b1578ade0c44b4e954001e6a92b291457c66d7d2c689d7cb5bd06b964b2e334ea2cf3c8187a44261317568955dc1898e3e"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000300)=0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x2511, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 17:32:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0xffffff1f}, 0x0) [ 920.334008][T24405] bond3: (slave gretap1): Enslaving as an active interface with an up link 17:32:00 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 920.415289][T24403] bond3 (unregistering): (slave gretap1): Releasing backup interface 17:32:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0xfffffff5}, 0x0) 17:32:00 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = accept4(r0, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80, 0x80000) connect$netlink(r2, &(0x7f0000000100)=@unspec, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x24, 0x0, 0x0, 0x5}, {0x28, 0x1}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001e00), 0x1, 0x0) [ 920.508634][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x2}, 0x0) 17:32:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41050}, 0x20042000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001e00), 0x1, 0x0) 17:32:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 920.611892][T24418] IPVS: ftp: loaded support on port[0] = 21 17:32:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6, 0x0, 0xf9}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6c, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 920.918862][T24403] bond3 (unregistering): Released all slaves [ 921.093914][T24419] device syz_tun left promiscuous mode [ 921.101973][T24419] bridge211: port 1(syz_tun) entered disabled state [ 921.239371][T24419] bridge212: port 1(syz_tun) entered blocking state [ 921.248728][T24419] bridge212: port 1(syz_tun) entered disabled state [ 921.258230][T24419] device syz_tun entered promiscuous mode [ 921.266930][T24421] device erspan0 left promiscuous mode [ 921.272850][T24421] bridge211: port 2(erspan0) entered disabled state [ 921.406579][T24421] bridge212: port 2(erspan0) entered blocking state [ 921.413559][T24421] bridge212: port 2(erspan0) entered disabled state [ 921.425621][T24421] device erspan0 entered promiscuous mode [ 921.993561][T24403] bond3 (unregistering): Released all slaves 17:32:02 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x400000000000000, 0x2162, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001b40), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'proc\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000340)={0x4, 0x6, 0x4072e7a0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010067726574617000000c00020008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="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"], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000300)=0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x2511, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r8}}, 0x20}}, 0x0) 17:32:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = accept(r1, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x80) accept$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000140)=0x10) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000001c0)={0x5, 'macvlan1\x00'}, 0x18) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x74, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x3}, 0x0) 17:32:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:02 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 922.403531][T24459] __nla_validate_parse: 2 callbacks suppressed [ 922.403541][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 922.433704][T24462] IPVS: ftp: loaded support on port[0] = 21 17:32:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x4}, 0x0) [ 922.469224][T24463] device syz_tun left promiscuous mode [ 922.496589][T24463] bridge212: port 1(syz_tun) entered disabled state 17:32:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7a, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:02 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000021c0)={0x0, {{0x2, 0x4e20, @local}}}, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x4, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}, {0x1, 0x2, 0x8, 0x1ff}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x2, &(0x7f0000000380)=""/192, 0xc0}, 0xffffff5e}, {{&(0x7f0000000440)=@tipc=@id, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/179, 0xb3}], 0x100000000000022c}, 0x3}, {{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/165, 0xa5}], 0x2}, 0x8}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)=""/110, 0x6e}, 0x3}, {{&(0x7f0000001900)=@nl=@proc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001980)=""/6, 0x6}, {&(0x7f00000019c0)=""/149, 0x95}, {&(0x7f0000001a80)=""/58, 0x3a}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f0000001b40)=""/214, 0xd6}, {&(0x7f0000001c40)=""/20, 0x14}, {&(0x7f0000001c80)=""/171, 0xab}, {&(0x7f0000001d40)=""/158, 0x9e}], 0x9, &(0x7f0000001ec0)}, 0x3eb}], 0x5, 0x2000, &(0x7f0000002040)={0x77359400}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r4, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket(0x1e, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002140)={r6, 0x94, &(0x7f0000002080)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x101, @mcast1, 0x7}, @in6={0xa, 0x4e22, 0x1000, @ipv4={[], [], @empty}, 0x9}, @in6={0xa, 0x4e21, 0x62ac, @empty, 0x3}]}, &(0x7f0000002180)=0x10) sendmmsg(r1, &(0x7f0000001e00), 0x1, 0x0) [ 922.626637][T24463] bridge213: port 1(syz_tun) entered blocking state [ 922.634715][T24463] bridge213: port 1(syz_tun) entered disabled state [ 922.668204][T24463] device syz_tun entered promiscuous mode [ 922.718270][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 922.726291][T24469] device erspan0 left promiscuous mode [ 922.733576][T24469] bridge212: port 2(erspan0) entered disabled state 17:32:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 922.850049][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 922.899545][T24469] bridge213: port 2(erspan0) entered blocking state [ 922.908250][T24469] bridge213: port 2(erspan0) entered disabled state [ 922.929653][T24469] device erspan0 entered promiscuous mode [ 922.966164][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 923.063367][T24475] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 923.124739][T24478] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 923.141178][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 923.356289][T24478] bond3 (unregistering): Released all slaves 17:32:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x5}, 0x0) 17:32:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x5e2, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:03 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) accept4$phonet_pipe(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800) 17:32:03 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendfile(r4, r1, 0x0, 0xffffffff800) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000180)={{r3}, 0x8}) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 923.770052][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 923.787724][T24514] IPVS: ftp: loaded support on port[0] = 21 17:32:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x6}, 0x0) [ 923.814862][T24523] device syz_tun left promiscuous mode [ 923.821929][ T27] audit: type=1804 audit(1579282324.030:175): pid=24520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/466/memory.events" dev="sda1" ino=16725 res=1 [ 923.846139][T24523] bridge213: port 1(syz_tun) entered disabled state 17:32:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 923.968832][ T27] audit: type=1800 audit(1579282324.060:176): pid=24520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16725 res=0 [ 924.006652][T24523] bridge214: port 1(syz_tun) entered blocking state [ 924.020341][T24523] bridge214: port 1(syz_tun) entered disabled state [ 924.055381][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.067178][T24523] device syz_tun entered promiscuous mode [ 924.097919][ T27] audit: type=1804 audit(1579282324.070:177): pid=24520 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/466/memory.events" dev="sda1" ino=16725 res=1 [ 924.130908][T24513] device erspan0 left promiscuous mode 17:32:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000300)=0x3f, &(0x7f0000000340)=0x2) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x48}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x4, 0x4, 0x10000, {r10, r11/1000+30000}, {r12, r13/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "d0eb5e61a3ad4edd"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 924.146180][T24513] bridge213: port 2(erspan0) entered disabled state 17:32:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 924.296822][T24513] bridge214: port 2(erspan0) entered blocking state [ 924.312055][T24513] bridge214: port 2(erspan0) entered disabled state [ 924.338778][T24513] device erspan0 entered promiscuous mode [ 924.373506][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x8}, 0x0) 17:32:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 924.590908][ T27] audit: type=1804 audit(1579282324.800:178): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/466/memory.events" dev="sda1" ino=16725 res=1 [ 924.633929][T24539] device bridge14 entered promiscuous mode 17:32:04 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$rds(0x15, 0x5, 0x0) write(r2, &(0x7f00000000c0)="90db5ceaf4edc3cafed173dbb398198fe4057937e91f04e2fd29275ce61d193ff7078446e10d6db2071d24a02419728caff5a3b5e570c7de0671e0998222544524be40ec860435f8c486576641c524b938ec6a48fecb290404e939760dac823f9918583b42b1ca0b594710aa6e7688dcedf288e4ada8f42130b1de835845ff3caa0b9ebec1ba647fd2b241ad88e62084752c21b1c553facb3cad82e146da5b7d3c05358c2f6bbd7a0de399542d9b726300fcdc386d40d4128ae6868e236c0bd202706329b8655c926c5cb2c69c7e56f7d48b905de9532da45b9e041ca56deb10866667f943f947796c6e15adba93efaa9677199b42d4781bf9da", 0xfa) socket$packet(0x11, 0x2, 0x300) sendto(r1, &(0x7f0000000280)="0be2ab54ddcf33631cdaa22a1b96ddd479849ae3c47268cc4f1db358e158c2f49c8cce5e7b2450857866f058402c995a1a8332e97f3c909606b7ebdaeff71dfa6b25ff8091e5467fa0d4195277226faede7059a28acdd8e2da587ea667e0414864eeeac91aa4be3c3f4cfbc9c9cfecbbdb60aa9e8ca057434edb0246aea78c85a64368026ad25a70bc03e4cd92992c97e41c45c7c0b4190d0cc8ab5a67", 0x9d, 0x41, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev={[], 0x26}, 'ip6erspan0\x00'}}, 0x80) [ 924.663245][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.703503][ T27] audit: type=1800 audit(1579282324.840:179): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16725 res=0 [ 924.731106][T24539] device bridge13 entered promiscuous mode 17:32:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 924.781978][ T27] audit: type=1804 audit(1579282324.840:180): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/466/memory.events" dev="sda1" ino=16725 res=1 [ 924.868482][T24539] device bridge14 left promiscuous mode [ 924.914304][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.933870][T24539] device bridge13 left promiscuous mode [ 925.033908][T24553] device syz_tun left promiscuous mode [ 925.054036][T24553] bridge214: port 1(syz_tun) entered disabled state [ 925.196557][T24553] bridge215: port 1(syz_tun) entered blocking state [ 925.204679][T24553] bridge215: port 1(syz_tun) entered disabled state [ 925.214440][T24553] device syz_tun entered promiscuous mode [ 925.222783][T24559] device erspan0 left promiscuous mode [ 925.229098][T24559] bridge214: port 2(erspan0) entered disabled state [ 925.366897][T24559] bridge215: port 2(erspan0) entered blocking state [ 925.376646][T24559] bridge215: port 2(erspan0) entered disabled state [ 925.393487][T24559] device erspan0 entered promiscuous mode [ 927.626519][ T346] tipc: TX() has been purged, node left! [ 927.886526][ T346] tipc: TX() has been purged, node left! [ 928.046577][ T346] tipc: TX() has been purged, node left! [ 928.226700][ T346] tipc: TX() has been purged, node left! 17:32:08 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x9}, 0x0) 17:32:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x0, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r11 = socket(0x10, 0x80002, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8000, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{r4}, 0x3f, 0x101, 0x4}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r8, 0x0) r9 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r9}, 0xc) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0)={r8, 0x0, r9}, 0xc) [ 928.407053][ T346] tipc: TX() has been purged, node left! [ 928.482232][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 928.576783][ T346] tipc: TX() has been purged, node left! [ 928.608970][T24583] device syz_tun left promiscuous mode [ 928.614684][T24583] bridge215: port 1(syz_tun) entered disabled state 17:32:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xa}, 0x0) 17:32:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x302, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x37fdce1ff162c966}, 0x40000010) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 928.626948][ T346] tipc: TX() has been purged, node left! [ 928.638961][ T346] tipc: TX() has been purged, node left! [ 928.658131][T24590] IPVS: ftp: loaded support on port[0] = 21 [ 928.668819][ T346] tipc: TX() has been purged, node left! [ 928.695182][ T346] tipc: TX() has been purged, node left! [ 928.737262][ T346] tipc: TX() has been purged, node left! 17:32:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x80c00) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0x8, @remote, 0x3}}}, 0x3a) [ 928.790987][ T346] tipc: TX() has been purged, node left! [ 928.802128][T24603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 928.859157][ T346] tipc: TX() has been purged, node left! [ 928.877126][ T346] tipc: TX() has been purged, node left! [ 928.886924][T24583] bridge216: port 1(syz_tun) entered blocking state [ 928.896190][ T346] tipc: TX() has been purged, node left! [ 928.896709][T24583] bridge216: port 1(syz_tun) entered disabled state [ 928.922004][ T346] tipc: TX() has been purged, node left! [ 928.960175][T24583] device syz_tun entered promiscuous mode [ 928.974434][ T346] tipc: TX() has been purged, node left! [ 928.988535][ T346] tipc: TX() has been purged, node left! [ 929.002280][T24591] device erspan0 left promiscuous mode [ 929.009944][ T346] tipc: TX() has been purged, node left! [ 929.025532][T24591] bridge215: port 2(erspan0) entered disabled state [ 929.033988][T24614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 929.044729][ T346] tipc: TX() has been purged, node left! [ 929.052991][ T346] tipc: TX() has been purged, node left! [ 929.069686][ T346] tipc: TX() has been purged, node left! 17:32:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 929.084240][ T346] tipc: TX() has been purged, node left! [ 929.096076][ T346] tipc: TX() has been purged, node left! [ 929.113447][ T346] tipc: TX() has been purged, node left! [ 929.143050][ T346] tipc: TX() has been purged, node left! [ 929.162911][T24591] bridge216: port 2(erspan0) entered blocking state [ 929.171277][ T346] tipc: TX() has been purged, node left! [ 929.174253][T24591] bridge216: port 2(erspan0) entered disabled state [ 929.196253][ T346] tipc: TX() has been purged, node left! [ 929.200668][T24591] device erspan0 entered promiscuous mode [ 929.204551][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 929.219830][ T346] tipc: TX() has been purged, node left! [ 929.227838][ T346] tipc: TX() has been purged, node left! [ 929.234704][T24586] device syz_tun left promiscuous mode [ 929.243161][T24586] bridge44: port 1(syz_tun) entered disabled state [ 929.263481][ T346] tipc: TX() has been purged, node left! [ 929.272929][ T346] tipc: TX() has been purged, node left! [ 929.288700][ T346] tipc: TX() has been purged, node left! [ 929.303303][ T346] tipc: TX() has been purged, node left! [ 929.313052][ T346] tipc: TX() has been purged, node left! [ 929.335035][ T346] tipc: TX() has been purged, node left! [ 929.345026][ T346] tipc: TX() has been purged, node left! [ 929.353439][ T346] tipc: TX() has been purged, node left! [ 929.359887][ T346] tipc: TX() has been purged, node left! [ 929.367036][ T346] tipc: TX() has been purged, node left! [ 929.373073][ T346] tipc: TX() has been purged, node left! [ 929.379307][T24586] bridge45: port 1(syz_tun) entered blocking state [ 929.386168][T24586] bridge45: port 1(syz_tun) entered disabled state [ 929.394850][ T346] tipc: TX() has been purged, node left! [ 929.399531][T24586] device syz_tun entered promiscuous mode [ 929.409589][ T346] tipc: TX() has been purged, node left! [ 929.417069][ T346] tipc: TX() has been purged, node left! [ 929.423649][T24598] device erspan0 left promiscuous mode [ 929.430316][T24598] bridge216: port 2(erspan0) entered disabled state [ 929.439991][ T346] tipc: TX() has been purged, node left! [ 929.566694][T24600] device erspan0 left promiscuous mode [ 929.572842][T24600] bridge44: port 2(erspan0) entered disabled state [ 929.707025][T24600] bridge45: port 2(erspan0) entered blocking state [ 929.713781][T24600] bridge45: port 2(erspan0) entered disabled state [ 929.722244][T24600] device erspan0 entered promiscuous mode 17:32:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xb}, 0x0) 17:32:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x0, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:11 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept4$inet(r2, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 17:32:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfffe, 0x20, 0x7f23, 0xfffffffffffffffa}, &(0x7f0000000080)=0x18) socket$inet(0x2, 0x2, 0x5) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r4, 0xc8, "0e7fe645545d1f3471601b0c8b686d6afc87141ca3e3f893d204eeafe08f9c0087c9226c2258753854bc8ef844421f69d0c3276f1ccd948ea48f85068bc50ac81ce284a341db61b2f835349ce5b61b2d1207107ec59e6dff07b4be641a8998b7e39b52f54219645c2fc67c25d58f38732826fbc0039092c4fbb50e6b14f10cd93a10bbc37418ccc7786f57a41beb175ffee8e79b1e759f34ec035b2c39f6fe81499edb635b77f00c17f2731a872dfcfbb1a173a207bbfa6b11a70b3e1950b0d895bf3809000e9310"}, &(0x7f00000000c0)=0xd0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev={[], 0x1f}, 'ip6gretap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xc}, 0x0) 17:32:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x1300, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:11 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 931.120364][T24641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 931.147143][T24640] device syz_tun left promiscuous mode [ 931.160112][T24640] bridge216: port 1(syz_tun) entered disabled state [ 931.214672][T24645] IPVS: ftp: loaded support on port[0] = 21 [ 931.332742][T24660] IPVS: ftp: loaded support on port[0] = 21 [ 931.340768][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 931.353507][T24640] bridge217: port 1(syz_tun) entered blocking state [ 931.361794][T24640] bridge217: port 1(syz_tun) entered disabled state 17:32:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x1400, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 931.377696][T24640] device syz_tun entered promiscuous mode [ 931.387179][T24646] bridge217: port 2(erspan0) entered blocking state [ 931.394153][T24646] bridge217: port 2(erspan0) entered disabled state [ 931.405674][T24646] device erspan0 entered promiscuous mode [ 931.415043][T24659] device erspan0 left promiscuous mode [ 931.422521][T24659] bridge217: port 2(erspan0) entered disabled state 17:32:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xe}, 0x0) [ 931.548377][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x0, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 931.876019][T24674] device syz_tun left promiscuous mode [ 931.884428][T24674] bridge217: port 1(syz_tun) entered disabled state [ 932.016803][T24674] bridge218: port 1(syz_tun) entered blocking state [ 932.024737][T24674] bridge218: port 1(syz_tun) entered disabled state [ 932.034050][T24674] device syz_tun entered promiscuous mode [ 932.055748][T24678] bridge218: port 2(erspan0) entered blocking state [ 932.069338][T24678] bridge218: port 2(erspan0) entered disabled state [ 932.079637][T24678] device erspan0 entered promiscuous mode [ 932.090228][T24680] device erspan0 left promiscuous mode [ 932.096187][T24680] bridge218: port 2(erspan0) entered disabled state 17:32:12 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:32:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r5 = socket$inet(0x2, 0x4, 0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001b80)={0x0, 0x7, 0xd87, 0x34}, &(0x7f0000001bc0)=0x10) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001c00)={r6, 0x7}, 0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3}, 0xfffffffffffffdab) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x0, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xf}, 0x0) 17:32:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 932.496198][T24696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x10}, 0x0) 17:32:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2100, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 932.621012][T24706] device syz_tun left promiscuous mode [ 932.662100][T24707] IPVS: ftp: loaded support on port[0] = 21 [ 932.686974][T24706] bridge218: port 1(syz_tun) entered disabled state [ 932.707104][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) [ 932.886679][T24706] bridge219: port 1(syz_tun) entered blocking state [ 932.893359][T24706] bridge219: port 1(syz_tun) entered disabled state [ 932.948923][T24706] device syz_tun entered promiscuous mode [ 932.962362][T24721] IPVS: ftp: loaded support on port[0] = 21 [ 932.983503][T24700] bridge219: port 2(erspan0) entered blocking state 17:32:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x11}, 0x0) [ 932.983841][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 933.009711][T24700] bridge219: port 2(erspan0) entered disabled state 17:32:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3a00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 933.040191][T24700] device erspan0 entered promiscuous mode 17:32:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r5}) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 933.129100][T24717] device erspan0 left promiscuous mode [ 933.175562][T24717] bridge219: port 2(erspan0) entered disabled state 17:32:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:32:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x12}, 0x0) 17:32:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0x530, 0x180, 0xe8, 0x398, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000240), {[{{@ip={@rand_addr=0x4, @broadcast, 0xff000000, 0x100000100, 'ip6gretap0\x00', 'netpci0\x00', {0x101}, {0x101}, 0x62, 0x3, 0x2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2e}}}, {{@ip={@multicast1, @multicast2, 0xff000000, 0xff0000ff, 'team_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xc, 0x4, 0x10}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@remote, @loopback, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'rose0\x00', {0x1fe}, {0x1fe}, 0x1, 0x0, 0x12}, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xffffffff, 0x0, 0xffffff00], @ipv6=@loopback, [0xff000000, 0xffffff00, 0xff, 0xffffff00], 0x4d5, 0x0, 0x3c, 0x0, 0x12, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0xb}, [0xffffff00, 0xff224032f8c1d788, 0xffffff00, 0xff000000], @ipv6=@mcast1, [0x0, 0xffffff00, 0xe1f2b24b94d8c887], 0x4d4, 0x3506, 0x3c, 0x0, 0x19, 0x4}, {@ipv6=@local, [0xffffff00, 0xdf2731d82b7db3d5, 0xffffffff, 0x1ff000100], @ipv4=@loopback, [0x0, 0x46af718227911e06, 0x0, 0xffffff00], 0x4d5, 0x3507, 0x0, 0x3, 0x34, 0xf}, {@ipv4=@rand_addr=0x40, [0x1ffffff01, 0xff000000, 0xffffff00, 0xff], @ipv6=@remote, [0xffffff00, 0xff000000, 0x0, 0xffffff00], 0x4d4, 0x0, 0x35, 0x0, 0x1e, 0x8}], 0x1c, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x13}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xf, "2b1d"}}, @common=@set={{0x40, 'set\x00'}, {{0x0, [0x1, 0x3, 0x0, 0x1, 0x4, 0x7], 0x4, 0x5}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xe7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x628) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x1c4248600cd4f37b, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f00000001c0), 0x4) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) getsockname$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r8, &(0x7f0000001e00), 0x0, 0x40010) 17:32:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x0, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x0, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 936.787397][T24759] __nla_validate_parse: 1 callbacks suppressed [ 936.787407][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 936.833045][T24758] device syz_tun left promiscuous mode [ 936.851847][T24758] bridge219: port 1(syz_tun) entered disabled state 17:32:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x13}, 0x0) 17:32:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 936.879709][T24763] IPVS: ftp: loaded support on port[0] = 21 [ 936.959652][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4800, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 937.016662][T24758] bridge220: port 1(syz_tun) entered blocking state [ 937.027555][T24758] bridge220: port 1(syz_tun) entered disabled state [ 937.049495][T24758] device syz_tun entered promiscuous mode [ 937.075608][T24756] device syz_tun left promiscuous mode [ 937.083404][T24756] bridge45: port 1(syz_tun) entered disabled state [ 937.112167][T24779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4c00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 937.216824][T24756] bridge46: port 1(syz_tun) entered blocking state [ 937.228329][T24756] bridge46: port 1(syz_tun) entered disabled state [ 937.241511][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.254682][T24756] device syz_tun entered promiscuous mode 17:32:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 937.264870][T24764] bridge220: port 2(erspan0) entered blocking state [ 937.273144][T24764] bridge220: port 2(erspan0) entered disabled state [ 937.301645][T24764] device erspan0 entered promiscuous mode [ 937.329266][T24766] device erspan0 left promiscuous mode [ 937.335066][T24766] bridge45: port 2(erspan0) entered disabled state 17:32:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6800, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 937.376216][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.466212][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 937.476698][T24766] bridge46: port 2(erspan0) entered blocking state [ 937.495504][T24766] bridge46: port 2(erspan0) entered disabled state [ 937.516928][T24766] device erspan0 entered promiscuous mode [ 937.526208][T24767] device erspan0 left promiscuous mode [ 937.543019][T24767] bridge220: port 2(erspan0) entered disabled state [ 937.657765][T24775] device erspan0 left promiscuous mode [ 937.663584][T24775] bridge46: port 2(erspan0) entered disabled state [ 937.796515][T24775] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:18 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:32:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6c00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x14}, 0x0) 17:32:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x0, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:18 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:32:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000040)={0x1, 0x6, 0x1000, 0x1000, &(0x7f00000001c0)="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", 0x1000, 0x0, &(0x7f00000011c0)="2cc1ba5b08e6d0a9c2b7b496589f4fc4a441cbb7f1742868be456437b05b95e645c31fa6693d71a83da6b3a2f8868a11cbc492e02ae689f0b0133f40e8c823d3ae04ebf7078192f89466dd7b66bbb235c11b53b6b8f935d57ec1be0731d92df44a9419e5b98efce1a4c18263fd8bcdd1a9d05082ae39976b954b17c4b588db89455517f1fe9b324a040389beb758ca6e424237632f9080b7a504a171b30725392e4272c913166aaa9782a1d16c4784e35e340ce6702c82811997d9ed30a7c05e1d0e220df0a33b5713363966d1dc6868906e1ccf95ed6e804c2a763f648e0a4e6af8b40c2b4d638c0613164ff834a24e95d86787707fccc3cbc7411a342ce25e2725c791fcd3e848215606001f927287e6a15f01a84f1abe0e54d457a735f74a524d9675dadc75fd3f323771dc6158291b363c393a332f3fbb2a56fa41ba2d7e10ab48e341a6a44a78da3237ea43f3180b9b9a67839e23fd7a7820c1c4f477ae228e71adf465db3bfd681262c44c6572e25bb70016756676bd3ca6e4847f368e71334f930d245e2082d28b9689e6daddea31486c7246e5a8e7f09740730efb61143770053a66d7a2f79506c18f723c883d9f5d8242817fdc5f9155cb5d676ef163e5d83f850169a78f44335c25c2e412b3389639a49c3d95e81ba0fcd76b77f7300f0e1a679bc8ce7e824ab928a533bb70c72f108627c705d2ba11c7929cfa1ed41307fff1dd6ad35a80a66c3a1403ad43c279ec75814621b8e61d4e6cfeb92d780a2ff6cb0b88a7973219ee1ca157006a822fff8a80183f19ceecf08f20440cc2a12d0f995df5d131dcaf27b13c0dcf0e321896c8d193597611cdc7a3f1331fd9c5f7a24d5347e6b42f0f796114b91bf0ed4662221cce9980629fc2be5a32aa350202213d881ea41d70de9f6b0e90025304147a7a96150f34c112735eacb988e2d62950ed043f790ec46cfdfc2544bc7c67ee28ff6f3c5663b59c389abc66871c568417103e63239de1f453572a3817c1b36886791d6cfef3a709e9e5014b2967cb2995d5d6e6429972d95755a1daba3967733daae7526dd320f4fdc04edf62fee3914326f1d25e87738c7d0f177f5952e0f9782c745f846b346dd713fa7220bb65d06a90b0d85958f14dee2ad467499c94d9c4e33a8bd4d20d717e7c27f0c2f81f8f5b4dee0d1e52301ee424316fd9e42a289e8e6521c09973f6e354949a34f4d6c41569b11ab4b07d12ed5916791ac038c7a0f16812563a8986b6af585f0c698662203f971a0ecbb8d37c2416834de1723b3d546cc7d9cf736a205a988ca1ae9ce756201ee18ee966f9fcb751c4c5247c3eacee1001b9f22f8631f273d4674bed14e38edaaa3abe75186084002e49e3d4579b8c77b5206044c678d28db9aa4b104775abd83eefd07e3e92cfbfdf365bb0379bdbba7fcd3230b34c665002eef2a96dada4828a4a02d9e2836ffdd61c015b65d3c5a6cd31f0dd3fe9e57e08e33e2b207f79951befc99f919399f70c2659519f7406cd46c075f8ee255aa2cc9758aaaf4160ac090a571cc69a24b0e26089282f168314f3dfd863f7b0811f5043ecec2a1a7bf9387b413fdf30f85741ddf76ec33996b0d3d29bcecb7eeb1244f225f02f92ab7a0faa885377a3580759ca8f9986eda057d634dcb7a8639d692246ef0f81d59b493ef9b57e9b1c5c67679bd4c632b027b37857a0b72e9deeeb709e8a1b1e8c0035f7b6e801a8e845ac8fc554915036ff5d742b9c5d38d6bab7ab644be6f59423aa1bd2913ee4328763900dae608ac10cc1e773b1e3f29d3f8947c10d840025a01a348d929e2daf72ab0c7f55e0d26d1de1d8edff9f127d40d685f3738672761229ca6b13e53096141d96c997a6b29a9ce6940e96d2887695e52174f283e6744bed10df334f5043c7345c05ffcce85929b219dc2b4b1a87e90313e0441a6b560756727b5265e107c70179a324e664568eda7da4b0ae16f32b6b78fd43c7d853e96e0a2bc4e9bcf653535ce087ffb512cd374fe1b7fad2f3ca48c951e91ef5d3dcad762964fa9ccd950c42077118ad103abc0ad76cac62efb0f69c5c7298dc9c61426729d4b2a487b3680631d651bb10f4138b313f6fb85741a5b8f84bb7b18fce1a6b3fe370da5dec3e058dd787234901eb84eb46fc5e3eca14043ea996b6aadfed4fd0daaae0a9ee044e6b3d4b30ee36a1d427bd19cf1f224712586c6ac46147c81b966318ff967d6f2068c8ca21ffeec7492ab0da5e0223cdc8e1dade1c5e72dbd6658dd5655835741b7c242a1ec22fcbbb420fe69bb794ca234eaf6d798ddbb3fc1cb60dce8a85bf20143ba9ee31fdd4876358914ec685d0e4b7cf4565deecaac946434142b0ea3892d14fe23cdf21302f7f23b30e17981febb48b364015bed642a6fe7e94f6a4ada9527a193478e7cf8d4f8c5bab1eece5502ff39b32280973384b174bdc5b47f2d494ca36d2724d341403f7a031909af75a2b2205e4678a04bd1485b612115e9a6f4792d2a552e7a44e48f78cd377c60e84f49c595cbe9340e43969e119bba632afd905dc46de5e5844ef870847ce955fa2d9875bd731242d58bc29650115ccb20c67e9bca1c4bebbf3b8f49beeba4e29d46c4ebd5f44aa0a99db69940ce665b4da7642659f281f594e88498072a5e17c352900244fbedd64594ee13d950e62a049792f81da966eb4a0fcbbc88a0e610ab3949aae1f005ac73f9b49882763e41b9a7b5e81df02c581b96019ccb7d7950bac8454355788cc310f63ce74f7d64bf425ea81748f69c8d8b36df118057df9b78eed6de6703bce5a4bdfb46e63731f6589741658f1c1038717e8fa2e3e08c7bfef175ba389bce1585fd9ecb39684e3f6d8e22ad718b19ed9e6740e57aadd5928ec596687a581005dcdb242945968830915f50d4969977b9d1750e5ccd1c9b1438e2271e179a720c58119a22c90fb379b91782a426bcc44b05e972be1bd42bb84aa581e9b4c6fde29fbd728cef8dbf853b6abf47207612f2ef5dfd8c8d3d7fa6af2840cf8107f156f2a2832292a60a930e8727431138560b18b1667b15db85574f9b6e3f3e3225f8a4a0315bb5f077d81727b5ebcad0ec7a4f1ef75a78b4b30acfd74597bdf52de9be747357f24ed4bb188d1ae73f8865388741f496a2b8ba16f43d458fb016b1cc5f56a7abfa38a3d1accca975c176d0f56bea3710335e843031d58ba7c36de6ccdcd5b2a3cde294059913efa9882abec11d8838cfbca2ea4ceab63186aedd788e180e4f3a34d4f8b037a66739a008d518dad5a0eeeb2464ed33909903f72730ab3e92f9cc22718bc85d759584454c7db34c878b9d3bd2af392c6b37e0faaf6d102c4e34e3ef21cdd2acc3c2ac4ee34132c71f363fb46bfe97d47520551319aa113685ec0f1837909a943f86052d66ed75a5fb2307af8bfc04c0970cd4c6338b3b86eb47c69c6296a62dbe37384b7a1de52423f9f0376ad3051eec139be015718607f5a84828df1ff0b233fdaf9a3ffab2c2330c7a824066a81da88f6fd32d6eaacd6565cde798d2cebe8735632927020bdc2b03204ce0495f0ae6778b75c71344ff2072c98661903dd7f7cda997efc5f252ee727e2147435eddee67452214fddfb74a7f783d11623c9b92cd7a8d4b5af3c4e71fdf821470619f0e84ce3d6cfe79c6d61c87161d2abd7484f62820176fa229ce35ddbcbeed8ac9d32fce200361f3b0eb52c4f58a121cb74f18b96c149d0b776d23bf91c4c44c98432c3d046ee91e1dfb488bc63cac8ff73549b6fe8ac38b9644e2b92bb34bc98ccb5dadafaf634597301dec0762f5a51c534b33919a7e811509a9639ac81ae15bbfa7ebff496cbda2a6a0e98de6f00e7fde234402030860d4058225759875bf28f2f38ea78b96ed655565af109ce3752f34fba0983938776c33d07ba97cf0125a1cc673955f1fa6ac1d76c920c4c86076c0d2325c52415263f67aeb7e496c60152d9f7baec5d98476d64664ccf6025bdbe8c5a6dd875d7521abe11230f7286669e1228d913f17ba5a6c831a0835e61d2e388446451e625a53fde64fe5aa5d5c93002cb99616e43c87dc6203c050b4869eb98cb7f8dec48f7be9ab0f77efc70cd2f8c5c796d4a2a509c69768848a750bf30f7cdc45d977c3f3beda33b02b19d020903940ee2f36021e8011053aa77ba93f124f92ea1d52bfdd22cd59ceb69c1210543435d30eaa9acf59fd989568aac7a51e5be6df307c33cce8d665457c8ec4839023365dbc144ee6c014aa5d162319feaf0820e595013cd8886d152b1c91a41c2c19c1d41364cf62b3fa7cee30131dd0814511edb33433caa60dae33f3d9e74c9a5cb247ddd859581c3ea3ca8e4a2e9412cd29bb99889bb77340c8b5239e10046b48a8c43c322aea8779c8bb03b5e6ed9f545ba4933ae3d55d9cdffa4184f0f3a5b3fa1d5863517ad6b77cb175d8355460b9c4a95c09472b0a5a934b03af826505feaeccf6be7bc9eb61e810ea1c629fa0634302f1d8678c1996297cf4fc041a87ddba3934433e9a0045f050dae89e6516b869684dd15fc0545dcdc42822458c6ed06f965c01039b2ff7c2e3d0c35351391da05a600a1207f3098f5d69a5330ad15b5055b85e8a2f1564ac91e20c85f9dd5711c12147ba93c979305da8efafd55c4ca7c058da987cf674647810c1bdf7575fab5c52a489c90c17954509116ecd787d445b5a60d6ea7b8f8b95240249b57fde6eb5504eac5eda41a43c403d6311979164a54276edf12d126155a898cd44f00be0e1fcb3ae5ecaf31345ab261ff3b412e9aab449e6f14c26bda4c2a20bc1c5d8104c5eaac747f5c235b62de5fd52e3dc588a72d0801d617f17895d6f8b7b2aaccc361a7be027ab0d92ef49408643b22e04821aac22c41f239e6f63022a3c9ede12c89b8ea73c70502b9aae378bae91c04e704c8a592c32581e1e78aec0ff0926d94e6adb8cfd462f6fa2badda64c16f0b474fd0503d8af5b9e19c265a84287ad9129cd7c4249094924d7bbc22d16331e3540f723563aa4dea3d7d9422ec214ef36b51318a7cb4a50332b1422d2123b9d32aa06fd63e3b694bcfdefc0c68d296f4c84d78e3dbfc0d0c4f823f885e9e8a63c1ad9af257c7374aeba6f6a3c1219b88709b68f5f665e423d7df75ca4f95ec1e00456bc16524937d15358c906a148c5f09cdef8049cfefa5ab17ea9fe961e882ffe14b7f2e376998cb3f04c7a00200d97e2131e97f35e3a243b276d63e6c3d3710878355667a173c8a695203e25981dc297ccfe718050ef2deff46405cff088eb6b2bfd097df3ed11a172d38bec5866799a8983a56376c5a321ce0b03d6edb7f3cffcd6a5685f2e4059bf1d7d46bf69f3a65d54812d7ed8d89305d670202031d6d57d0c06528ef999ffc05a3733ceac86831246f3aa987292cc0a1ede8d92848582c626b3d7b30d3403fe77840b3fdbe792b4190566fd45e216a322db97e889c504d361ad43246d72b704a9e253310a776d529432fee5a3d2479a1f3f886eb178dfd45efc45eac2ba5e3fa5440c590a1e32a8e0851279ee7cda64c7868f2e8d115b0db5d2801c8a8f7eb3c86f6e747d4d703cc106dd252ad5dcf1635e11a184b2da68f10fb515cf8fdcd3f4b263f2a4b57dbc1694116ab4c963dcb523e23881b876d1b3ffbdb71e83e0920025cb9800c54a15f3450f3029a33f8770366fc8b0e0ec7b09a106d29e5ef08149763e73b9fe1e3bdd0e5075f20d999a45612f64b3ec0e428028a0511d483ba520130efe330a7254243886b2ba9448275bf8c9041"}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 938.069694][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 938.081578][T24809] IPVS: ftp: loaded support on port[0] = 21 17:32:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x58}, 0x0) 17:32:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 938.119079][T24811] device syz_tun left promiscuous mode [ 938.141097][T24811] bridge220: port 1(syz_tun) entered disabled state [ 938.151078][T24814] IPVS: ftp: loaded support on port[0] = 21 [ 938.315374][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 938.316506][T24811] bridge221: port 1(syz_tun) entered blocking state 17:32:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7a00, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 938.363231][T24811] bridge221: port 1(syz_tun) entered disabled state [ 938.406057][T24811] device syz_tun entered promiscuous mode 17:32:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), 0x4) [ 938.469963][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 938.481387][T24816] bridge221: port 2(erspan0) entered blocking state [ 938.515356][T24816] bridge221: port 2(erspan0) entered disabled state 17:32:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xe205, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 938.580271][T24816] device erspan0 entered promiscuous mode [ 938.616000][T24821] device erspan0 left promiscuous mode 17:32:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x60}, 0x0) [ 938.634042][T24821] bridge221: port 2(erspan0) entered disabled state [ 938.711231][T24835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000200)={r0, r5, 0x20, 0xd3, &(0x7f0000000080)="08b398fcce8ee9304fdea943a139edff3acf9a365d1a272fe71584e6465060bbeee7a56fc5801265069391415bf636bd0ac101ac1841f1f616eac583eacb21ad6bf923c0c31b9fbdfa8d02b28f7275bba040773864df3b3f5d432763452d7c61353edaf23a45b89e60056528ef462a1d0bd62b73bc597fb90be173973ebe3ca946f5a83645d7be3454850cb6bce261a67c99a0faedfea2811789493d649cfc89bd2bbe849e790198741ecd2de32323fbb83158ade5b9959a0ce4ea81ad2d4b9a9e1d1c8200c9a7e71bbcb72b42d037f8d372e0", 0x0, 0x3f, 0x5, 0x6, 0x0, 0x7, 0x23, 'syz0\x00'}) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@default, @null, 0x2, 0x56}) 17:32:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xf0}, 0x0) [ 939.369583][T24863] device syz_tun left promiscuous mode [ 939.376079][T24863] bridge221: port 1(syz_tun) entered disabled state [ 939.506564][T24863] bridge222: port 1(syz_tun) entered blocking state [ 939.513377][T24863] bridge222: port 1(syz_tun) entered disabled state [ 939.523420][T24863] device syz_tun entered promiscuous mode [ 939.546616][T24865] bridge222: port 2(erspan0) entered blocking state [ 939.553399][T24865] bridge222: port 2(erspan0) entered disabled state [ 939.562503][T24865] device erspan0 entered promiscuous mode [ 939.571818][T24860] device erspan0 left promiscuous mode [ 939.578783][T24860] bridge222: port 2(erspan0) entered disabled state 17:32:19 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x204}, 0x0) 17:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:20 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 17:32:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x300}, 0x0) [ 939.865150][T24878] IPVS: ftp: loaded support on port[0] = 21 [ 939.904848][T24879] device syz_tun left promiscuous mode 17:32:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 939.941244][T24884] IPVS: ftp: loaded support on port[0] = 21 [ 939.950511][T24879] bridge222: port 1(syz_tun) entered disabled state 17:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000070a010100000000000000000500000808000a40000000000900cd0073797a30000000000900010073797a300000000008000a40000000030c00064000000000000000090900020073797a32000000000c0003400000000000000003"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 940.154006][T24879] bridge223: port 1(syz_tun) entered blocking state [ 940.164662][T24879] bridge223: port 1(syz_tun) entered disabled state [ 940.193011][T24879] device syz_tun entered promiscuous mode 17:32:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 940.238190][T24885] bridge223: port 2(erspan0) entered blocking state [ 940.246524][T24885] bridge223: port 2(erspan0) entered disabled state [ 940.278864][T24885] device erspan0 entered promiscuous mode [ 940.314759][T24889] device erspan0 left promiscuous mode [ 940.344792][T24889] bridge223: port 2(erspan0) entered disabled state 17:32:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = gettid() r4 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x8, 0x18}, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000840)={0x0, @multicast1, @dev}, &(0x7f0000000880)=0xc) sendto$inet6(r6, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000006c0)={r8, 0xe5, "4a3ee50404b79e3187e97eeb8d3513759984790d074f75b473ca1269c6760c2775dc28166e8b539bf2c47e98b608ac429b27f3ab77ca76db01e808bf3a5d8bef9f50d63e255fdaed8a8b8166c46caa5c4440913ee8db40c492f0926536eb4b90b5a97d5cf986b8ee71233023aa3b21eb4b5fe300f04200e63eb6fb86fddf9979c6eeb5f261640e1df6806b8ef599467373762c2092729e45b4862cb4dc87d984310a72ac7e7a0b65ef8bf8b68dcbee603c2e357863f12435df9f5f43eb5e06b06dc0e7e5ade2e0c5dd8a4a6d4ee54b24d90c3517caf87807e2fa614794ed930bc4b9a0149a"}, &(0x7f00000007c0)=0xed) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000800)={0x53}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa12d442112e85abd}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x388, r9, 0x8, 0x70bd29, 0x6, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x344, 0x80, "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"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x28, 0x49, [0xfac09, 0xfac05, 0x147201, 0xfac0c, 0xfac09, 0xfac0c, 0xfac02, 0xfac00, 0xfac0a]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x388}, 0x1, 0x0, 0x0, 0x10}, 0x40000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5, 0x7f, 0x10}, 0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3) 17:32:21 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140)={0xa, 0x4e23, 0x5, @local, 0x1}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000180)="58f38cf2a95bca9f27b145809b06854d", 0x10}, {&(0x7f0000000200)="975740f5a49841df2a5c52e666c474f85c6a3135270f3ae9b80a3a7acbe12f653ec83bb79ee52395755df9c5b5c48b26f2220771efc0c4327527332f34dfe8c7bcdad80d613e21903d47b99504326e52d4944b6dd3b167d379b01760f37e5067dac0852567ef15dd0e59a2816a503255792b6a30bf66283f109f9924bf9b803d98ceaeea156917b8a49e65293ecda3e5cdabc711ed5e01b7b68ede79bffa087c0ff78138194ad6bc8af92482b103ec2850b1668afb01061f915252fd95457f5c40728a5fb7e6d47985e3f8fa6d2174dd523a6dc881a3739d84149c64531f2ff33fa0f8f6689abcb93575c9273fd85c72ad252aecd33724700a227798c198f291ebf270456e609136774d60c1a993d6048e362b30fc9170453421883a8b317eefcaa69bfd6103c37a52ffaa90369ee2edecd85eb20c756a447405eade59cc3315d592c9076ad4201e55a4cf6830a8401bf0d7d50e97f1dfdd9c6d26c22653d70ac275e86000efb9e64ef5512ab9e10c010dadede56e4e56424ab8c4c079266edb0cca068a481bae3d59a9c7d9ea57d5b348820cdde13763e8f7c4c60487e579b859b36a00e5e05f049be424c813ab2ac75b03cec276fda584f058438b60056805da5ba274fb19ab05868a50369e94b37be4f6d75277ca0818e36a9715386cb2350f89a0b92e04e15c353a7b5b3e8fd8ffc13afa649fb7c1483c7985606c6c1c681463246be6c5f96b358f146e3db2157ec027068be20ed29323287df8ac32254ae758bdcb817eb46605ba40825a8aa6a9b689405c38010436346b0bba2844ba6dfac9a0d733607c1e70b6aefb374c5926be315d682e1b19a1ba5c291d732b3ed77330cd7aa6d9d1093aee548c869a4b3474f3ab0f6f3ad972f089701c0ce9464bc949648ccb92e3cb9f437d7a85044d60fd133bf64b0c4d23648dd8fbb9d21f918d218f6d1b02c8a12fb05aca36f6384e4da5203eb24db3d8b4b344174663120587e12836b28cdbb4dd93daaddb925ae131458c62db2359bca520ae10d21fd14b4a92e0edbb8f82adb74894d6e2dc527fe0d69a8d182fbc97eb14b33b55470be8f6427313ae75734b4261fc366359946d1a7aee206dede48abe878ca9b3bd0e56f14b86bd71b78858771b23ea19210f788555213e6ef51c397aa21f94a1897de649af80a9f7f4bb39abfd924a9285b7679225b5730f57d18641e84f6f9329de44182f76cbc9c05191ee1a1dd3b14a30cc0e9e61c90b171e062bc228e0bd048a16db10f10c1233b42b719a19a7bbeed7322327fc700136d658d08a22d647b81922f2c71ba6cb6b2ba3c834f509a3faee0f696330275ffae0640e5673801e0e00fac33505202e6b3302ce06defef8526420b275c7978409ce256ca25353d44a6d66ab38cfd47e8960b2656cfa9867a8d21ace5670c1241f777a717d4d1bbb5c95ab334bd7806e7734587c0fdcc6e6800e67ebc505e91153f964a485ec5c3bcb5f6fc8bdefea3918f26b140fbe2a3e6638f34dc89dfe887acf6bc20e305c57cc561e01250f4f434f515173f6fd5d247a883e2144131f61b83df7b3305dffb6afeecbcab7919b3908c3061656568c22a9a79f6b1fbb59da9c5374ba6b13ca06d7941825cb6ae348c07e24c16c45836a64ae41a01b6d290d1669e8977d5542eb755bd1fbc4ff2fd17e55470e7f855923a0ded853503049c1e50ce5fff2516935e2d1613f37ddd70031041a5263e2f91a6a4275ee6e44755a07dd248b3f22eae83f9e2e6a1601922967d46e69ea1cd95721ab6b7ae72f1ae1cbadc5403e68b36b863a603b5dc48cc4ecc0a72bcb488411f4aae251548a89cd2150e90bc126222af985954814fbb776ed08d7f77e33c8ef96ad90b4551fca0e92d4978bc21f914a0fb282852eb5598d0b2886b456e41338a94c37f59cb3277fffe73c65263153a430627f819458c195d4047f58af67c1594a1c0846b9d7fe891e92828ea200094931ff98eaf2dc2d1062f4ca8fde562ceb164f1a6d460ad8d864f9f8c7e001e70ce74af7f020c5651ec84f15e62ac7e8c7a2dceef6b1370e86a205962f5eef188201e5f707ca1bf90a1376fb001dc502b365aee000a101e9ee1f382fdd7a439ffea5801d86df7b57a80f324fbfa5e6ded8bf72c156668702c8ffc0a5f88bc0649171449e32958efa860c6f75f935470cad5995a3c36b852386a450cffd9e4c679212ee6e175774b9f401231fefe9c01f758e1a370b0fab7fc04413747a4bd107125dfd59c983299d546f453904855a87391c2a80d8f6efda78058599040272a070ce557f83cd1c219fb357644c42ed18d3b2974e44867e69158e39a805450ba38db9bae5c635a311167c89a6924dcd3e7082244d6188f065a7e0ceb7d9c03aadf94234503f7c964d282ab66cefc53d256195266b3b043f261e5bc0024644297d97b56ea7a5874d71174aa81bec86eb11c12aa05016c324f6955d88316713e7cbd9487dd4ab6a8449a96c44f99c22fdad03ace62039f408886d11f8c9cc14e7d25334916e85559558811d47cf257de4e304704997ee63df4fdf93f16e674b9e7cee7fbbd5dba14286558bbea332df9767d1d588dcdd5bcccfc0d225ae5f12d4a95f14bc844d0ca2d5e795b37c5e96242928bdc87741f89e0b69013485786c39c60d737c65de9c82b3c639acb0654d8684941bb0a6d30e56e942f09c6326736517115848e063403ef4571d663026380dfb3a3a4a6e3ae500b1a4ea131569b2de174e2204a97b16e17d70cf67820ebed47357457a2aecf3a4154d0f671c922118e255c415a70094c6d4fb22db19b2ae0583c8b3beb5607d85d68fa9cc37bdec8f3442c1c38b42f3f035588a28170fbd40d3e12862eb1ab6435daea2650bd99d090a954ea4d741fe592651bd27def394fdaf753022871fbd641cfa86b4762d149667e5e96851620a5ce963568ef28b2d4d51e29d5fbb76dc8a31a58dbb9b1e767f950c52f20ebb58b274def321e55445f0ac69d1d512ebd40f6ad5a83bab081ffbb69a6c5bfb0dcff22417d8772ebbbf79e71fa31740d163c008581709aa4fb2b418968389c7fd48c74beb660f8c4de692dba52b8f53f00ec0ff396a92e07cf83f2058379413f263835420e924189ac439183478a2dc9f6bf05a82f5696b85805f4541acc5fef7091543c9a574b35e8039ec94ed135a2e7efddc6334cbe05ebe51933c839984eb038f9c5219505f848b2bffb7660e241332589816264202d84a6a39161679a267b0036b87640e55d117c36ba0bbb9e0dc8025788111c06d231d129465e3d7c80f6c2f7b67a3a1a1fc18255891853a7e148700f247eb87f60573f9269a60710b26fb25339eea8657be1c238242f3732c02c3e02086d7bdeefa3b1844e0fa3f5b68802d90881c776029ed02ff26e4044a5eec1fd2b70947df79593c6767db79f2e114ea159416bb3c89e71985ee1e5f6623ca18881d11156f9e2190f2ef62b0dd5f92e4a894ece7f177a02268de21afd50b906fec56546e9c85d48a478bb1de8079211fb7942fa6cfb80b05f460f253980c4ef3583465089a26c3974b44ddcd769a6d7355fac965f2196cb98cce86f1d36aebb53386662eb91162a37922bb10893bf5b0c9677da950c1adbec27e914166950cc6507bef80a176e9f91830b663ba74a255219a5d2b721b28a1da48249937469543be2434da5f8e8c4d681955117d7205bc597d700396b34547db4ffc4b8bc16958d3d603f660f5c726b8d0e6cab42b5cea32deadb6b082f7eb8d7403825e19cc9d28173d93a475bf54e8e98e356754bbd6822946fcd20cc6ab1e04c697f0ce6b4590a34fb2d9b2097d26d8e02d1bbfd63ef77b3ff669b48fcdf9c3c5759bb26ffdb950d098ef107257bdd53a1dbca5feb487c5cd83295cfebbaaeba3f1afe43a2a77cf9dd9f5816d249b77eab951e1d499debe44f25581b99e3d77d430bd855b6cadbf8caae1ea598d12c36299e337ed40d51cab7ec97e4b7bd7f2c498aff42c5033bed1e92ed121f2006e438f396fab4f8ff5efa2de21b0d58e0643109239717fb855653e8a306dbcdd5ee1a8843bd53195d875935febb98c04ce287924b0cb9dd27fbf72dce11e7e5df1c89eb33cc5d4df38e459c778b833c7748ac6a63551d46c449e1bd9ce948c50714bcb91cb484704cbb8de90bc9b18e66d230d4aee54ae1d6db03c014605ed457e76d2bdebf49fe47a29a770f5d68bbf194b0d30dfa0f6c5ce392ef1a5ccd3aef30221de1cdfff86d5c731c1dc13717ea1da847ca9c4d16b910cacfc83986523856495d2c4cf4fbf8d8bda63dc9bf212bad751dd1bf95db6efd3b3907711ab8ea028b2904f6903009aa67e21820dc26b347338a473a6da962a8a47039d08920688d04511d113e4e46265a0a23ad61553f2c2dc9c87620384f5fe89c8a2b9fc1a6cd3baabffadc67982bb5757f7eaf98a644fb4136ff008b8fb062fa4c28e33afbfdeb2b41a60940450291034899fe0fdee332e34bf031650cfb886cfb072d1637dd8443a498a726ec96f1136026f6fd4750a8311270e076c38a6186d1d0a03313b7ea1804faaae2b8d7147ef478de03d42ca01932643c875e7708a9c381c8f5ca5e400388cc9d2d57384e9b0e9905a47b175613aaab90716c3696ca68131fb5a0dd741d8387f47fab28ddfb9c32fb76ae91c55643e0a5ff20e40648c6c59c1cbf3e8f210b35af1d9f6e63c6820450a6e5315c364ff4d2253d132968e93d9ca98a65130dda3282d9f64adb4a30159b27eaa79802a4bfc8bb4823b5b220f5e728c3dab13be702040c1c8e7540b8241f673ee9c913f066b5a86062c9d42b084fcbdecfd33eb00afc624637ad0adf03d652574578ea7e16a9453d63958e1557c9f4f417e6c9edf0f920b3f7197a8808601d7a68e6a7eacc843c7d407fa42a3be4dcdb61d8ebfe658a4e0e1cc050326aa0ed159b4a3514cec7d2deb004d290ec6ebd205e17d3e58fb23005a413703556be303e66c8b3589603516738e5db84575e1cb927c072c83f2bed3cfa2f929419917697e1b21302de69db4aaee8f25beb17536e0bbd94059ddeed91cb6b05963f719db160018d1b0aa20bf1224d7e135f3f3fe7174f4df44ffd3f81a02f472a205586c722acedaa17494bfac11aa373c677c37e3404c44f99bbb183f5c9f38be02702d638e882fb8ced730957b78cb1c2dcf969ba02de1a8096cf42c844e205073f0303124a2a692db46f1afab7e6db58344eef5b96960bbc54ff6b877dc93b86acf92111d1af400e293870ac93a39617ca06dab613a692b7342c6832c5ff12c9d48b11d6b31fdb0ef11a0e61171c7915959ceb00c69beb2e1f1cd57fb35d6c8eec4da0634153d426e4bf2b9e010e87526ce61dc2ba6d4c0fbcfff8685c46027b54a56d5168e2f3b8b5ff779e80f163344cb52e81f9b71dbdb112b26f2ddd7b39feeb700e24f00842252d64aa753e875f254bebf1639a49b827f9344fcd5c0728f3aa574d3af9f994b16966186a876a39d606544b403065ae86e464c8bca6e66f3d1665438a48a4f588eca58a3e90b927fcd6415569f3c8aa9a7cd16d2e49810269c22ac5f052d2ecb5d3d26c212e1f91a0b9682610146cfc07aab9e634f7fc76801ee6876e4b55d4679d132149aebf12af70d3e25dc8b1441a45c6f5ed4bc7a57f08f093ca040d585f948f3206f1075295a34ae505731ad7613751ab7be6104f77fcd253fb34b294634c707b0dd8a53683d055972d2f54cd47a8b645089916e76fe75f046aa529d04c3a40780c7681e7483007464d575", 0x1000}, {&(0x7f0000001200)="41c37feb35c0421625078b71e85d5809fd2c731beb9d9f72f4987e21a8fca823ad1781aaa85458f63b2b4a4cc305d199f321a2b41a36535bcd227b003391581ee6385bb0e910bb06df8065e431ecf79d1934dcb1891fdc29b2222d79fe673d32ab8009fc4c03ab5be4642e", 0x6b}], 0x3, &(0x7f00000012c0)=[@dstopts={{0xb0, 0x29, 0x37, {0x0, 0x12, [], [@jumbo={0xc2, 0x4, 0xfa}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @ra, @generic={0x9, 0x7f, "27bc499b8be7449fe42eb4bbde50195eb92ed14c58ee62585a9cc7549459ec7139d8e729f0ea4aee8c30371e494a417926cc4140bf83655a8b5951f7e90df467c220982574e448e674878f9f6e10783ded3ee34395f522fa4f227367d2d8e05c85559e89ea0d0fe4a9d62ab0d5c5dfca47d06671f4056626a06ba561856499"}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x1, 0x3, 0x0, [@ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, @empty, @rand_addr="6317489bdc8d286a20cf22bad267d11f"]}}}], 0x108}, 0x20) mmap(&(0x7f00000c7000/0x4000)=nil, 0x4000, 0x2000001, 0x10010, r2, 0x10bc4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000006d00), 0x400034b, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 17:32:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x402}, 0x0) 17:32:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:21 executing program 4 (fault-call:29 fault-nth:0): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x500}, 0x0) [ 941.276462][T24927] device syz_tun left promiscuous mode [ 941.289116][T24927] bridge223: port 1(syz_tun) entered disabled state [ 941.337261][T24930] IPVS: ftp: loaded support on port[0] = 21 17:32:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 941.468466][T24927] bridge224: port 1(syz_tun) entered blocking state [ 941.480148][T24927] bridge224: port 1(syz_tun) entered disabled state [ 941.520596][T24927] device syz_tun entered promiscuous mode [ 941.542503][ T27] audit: type=1804 audit(1579282341.750:181): pid=24943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir446294004/syzkaller.ByXIkU/475/cgroup.controllers" dev="sda1" ino=17299 res=1 17:32:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r4, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x28}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r6) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x3, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90080080}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r4, 0x6ddea37407c78467, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xc, 0x6, @broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x8, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, [{0x8, 0x0, 0x80200}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x8, 0xeb, 0xaf2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x30}, @NL80211_ATTR_MAC={0xc, 0x6, @local}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r11, @ANYBLOB="15425ebf00000000140012000c00010062726964676500000400c740"], 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0xfffffffffffffeed, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r14}]}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8033048}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4021) [ 941.595413][T24933] bridge224: port 2(erspan0) entered blocking state [ 941.648759][T24933] bridge224: port 2(erspan0) entered disabled state [ 941.668312][T24933] device erspan0 entered promiscuous mode [ 941.710319][T24937] device erspan0 left promiscuous mode [ 941.714055][T24947] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 17:32:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 941.754794][T24937] bridge224: port 2(erspan0) entered disabled state [ 941.761506][T24947] File: /root/syzkaller-testdir446294004/syzkaller.ByXIkU/475/cgroup.controllers PID: 24947 Comm: syz-executor.2 [ 941.852975][T24956] __nla_validate_parse: 7 callbacks suppressed [ 941.852986][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x600}, 0x0) [ 942.066445][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 942.073694][T24960] device bridge17 entered promiscuous mode [ 942.152263][T24934] FAULT_INJECTION: forcing a failure. [ 942.152263][T24934] name failslab, interval 1, probability 0, space 0, times 0 [ 942.185809][T24934] CPU: 1 PID: 24934 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 942.187183][T24960] device bridge16 entered promiscuous mode [ 942.194546][T24934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.210450][T24934] Call Trace: [ 942.213772][T24934] dump_stack+0x197/0x210 [ 942.218231][T24934] should_fail.cold+0xa/0x15 [ 942.222988][T24934] ? fault_create_debugfs_attr+0x180/0x180 [ 942.228816][T24934] ? ___might_sleep+0x163/0x2c0 [ 942.233719][T24934] __should_failslab+0x121/0x190 [ 942.238697][T24934] should_failslab+0x9/0x14 [ 942.243227][T24934] __kmalloc+0x2e0/0x770 [ 942.247572][T24934] ? mark_held_locks+0xf0/0xf0 [ 942.252349][T24934] ? mark_lock+0xc2/0x1220 [ 942.256784][T24934] ? _parse_integer+0x190/0x190 [ 942.261652][T24934] ? tomoyo_realpath_from_path+0xc5/0x660 [ 942.267570][T24934] tomoyo_realpath_from_path+0xc5/0x660 [ 942.273129][T24934] ? tomoyo_path_number_perm+0x193/0x520 [ 942.279038][T24934] tomoyo_path_number_perm+0x1dd/0x520 [ 942.284636][T24934] ? tomoyo_path_number_perm+0x193/0x520 [ 942.290267][T24934] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 942.296155][T24934] ? __f_unlock_pos+0x19/0x20 [ 942.300883][T24934] ? __fget+0x37f/0x550 [ 942.305043][T24934] ? ksys_dup3+0x3e0/0x3e0 [ 942.309465][T24934] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 942.315714][T24934] ? fput_many+0x12c/0x1a0 [ 942.320444][T24934] tomoyo_file_ioctl+0x23/0x30 [ 942.325232][T24934] security_file_ioctl+0x77/0xc0 [ 942.330189][T24934] ksys_ioctl+0x57/0xd0 [ 942.334344][T24934] __x64_sys_ioctl+0x73/0xb0 [ 942.339045][T24934] do_syscall_64+0xfa/0x790 [ 942.343725][T24934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.349704][T24934] RIP: 0033:0x45aff9 [ 942.353605][T24934] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 942.373480][T24934] RSP: 002b:00007f5c19824c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 942.382039][T24934] RAX: ffffffffffffffda RBX: 00007f5c198256d4 RCX: 000000000045aff9 [ 942.390017][T24934] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000007 [ 942.398260][T24934] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 942.406229][T24934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 942.414211][T24934] R13: 00000000000002c4 R14: 00000000004c38e2 R15: 0000000000000000 [ 942.426030][T24934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 942.487200][T24960] device bridge17 left promiscuous mode [ 942.527812][T24960] device bridge16 left promiscuous mode 17:32:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$rds(r2, &(0x7f0000001a00)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/81, 0x51}], 0x6, &(0x7f0000001840)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/4096, 0x1000}, &(0x7f0000000180), 0x12}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000001, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0xfffff000}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f00000015c0)=0x7, &(0x7f0000001600)=0xb344, 0x38f, 0x5, 0x7ff, 0xffffffffffffffe0, 0x20, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/46, 0x2e}, &(0x7f0000001680), 0x14}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}, @fadd={0x58, 0x114, 0x6, {{0x5e, 0x40a}, &(0x7f00000016c0), &(0x7f0000001700)=0x3f, 0x8cb3, 0x3, 0x0, 0x9, 0x30, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x40, 0x7ff}, {&(0x7f0000001740)=""/161, 0xa1}, &(0x7f0000001800), 0x0, 0x5, 0x7}}], 0x1b8, 0x40000000}, 0x8002) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r3 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x4}}) close(r0) 17:32:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x900}, 0x0) [ 942.661116][T24977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 943.031273][T24980] device syz_tun left promiscuous mode [ 943.039407][T24980] bridge224: port 1(syz_tun) entered disabled state [ 943.166472][T24980] bridge225: port 1(syz_tun) entered blocking state [ 943.173376][T24980] bridge225: port 1(syz_tun) entered disabled state [ 943.182273][T24980] device syz_tun entered promiscuous mode [ 943.192602][T24984] bridge225: port 2(erspan0) entered blocking state [ 943.199777][T24984] bridge225: port 2(erspan0) entered disabled state [ 943.208569][T24984] device erspan0 entered promiscuous mode [ 943.226533][T24988] device erspan0 left promiscuous mode [ 943.236776][T24988] bridge225: port 2(erspan0) entered disabled state 17:32:26 executing program 4 (fault-call:29 fault-nth:1): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xa00}, 0x0) 17:32:26 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'syzkaller0\x00', {'veth0_to_team\x00'}, 0x101}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0xd0, "f8901449fbb681a216466d4e51243b90295690a748ce58867c395d84bc9d0de9fa7257dbfc9a51d346175339a7a4ec58fb94c3f540cdea4e0bcc978f6ae992a5204057712cb0c4dd86497f92659e15dae3fc86c5fad3bc429931a58cb43f04c34ca13cbb56f3e52852729dd1432d25be899f4c3a49fe1360549b36809a4865c8cbc19554faef90299debb049becd6543fff4cff88b0efde47466073c8617ecc9ae5427cd1529a278c23874af4bb634082fc5f47e341793f872304b305a6a8c434bc29d44ba70d972312b3413256da52b"}, &(0x7f0000000100)=0xfffffe70) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x3bf0, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000003c0)=0x7a945033142f18a6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x200000000000002a, &(0x7f0000000000)=[{0x1c, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "1bbe94138a7449fb", "2731c9d205451533c5f6692b8035fa6b", "bb746897", "1a38808fc5240cd8"}, 0x28) sendmmsg(r3, &(0x7f0000001e00), 0x1, 0x0) 17:32:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xb00}, 0x0) [ 945.979003][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.045832][T24999] device syz_tun left promiscuous mode [ 946.061194][T25009] IPVS: ftp: loaded support on port[0] = 21 [ 946.068019][T24999] bridge225: port 1(syz_tun) entered disabled state 17:32:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 946.193739][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.196556][T24999] bridge226: port 1(syz_tun) entered blocking state 17:32:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28, 0x0, 0x1}, {0x6, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 946.241783][T24999] bridge226: port 1(syz_tun) entered disabled state [ 946.251333][T24999] device syz_tun entered promiscuous mode [ 946.268602][T25004] device syz_tun left promiscuous mode [ 946.282223][T25004] bridge46: port 1(syz_tun) entered disabled state [ 946.345343][T25027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:26 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpeername(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x8, 0x6, 0xe0a, 0x0, 0x0, {0xe, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28, 0x0, 0x0, 0xf86}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001e00), 0x1, 0x0) 17:32:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 946.466509][T25004] bridge47: port 1(syz_tun) entered blocking state [ 946.473104][T25004] bridge47: port 1(syz_tun) entered disabled state [ 946.526246][T25004] device syz_tun entered promiscuous mode [ 946.532390][T25036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 946.544543][T25010] bridge226: port 2(erspan0) entered blocking state [ 946.559937][T25010] bridge226: port 2(erspan0) entered disabled state [ 946.580809][T25010] device erspan0 entered promiscuous mode [ 946.601264][T25017] device erspan0 left promiscuous mode [ 946.611712][T25017] bridge226: port 2(erspan0) entered disabled state [ 946.730129][T25019] bridge47: port 2(erspan0) entered blocking state [ 946.741395][T25019] bridge47: port 2(erspan0) entered disabled state [ 946.761380][T25019] device erspan0 entered promiscuous mode [ 946.775261][T25022] device erspan0 left promiscuous mode [ 946.797823][T25022] bridge47: port 2(erspan0) entered disabled state [ 946.873775][T25043] FAULT_INJECTION: forcing a failure. [ 946.873775][T25043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 946.887038][T25043] CPU: 0 PID: 25043 Comm: syz-executor.4 Not tainted 5.5.0-rc5-syzkaller #0 [ 946.895709][T25043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.905849][T25043] Call Trace: [ 946.909151][T25043] dump_stack+0x197/0x210 [ 946.913475][T25043] should_fail.cold+0xa/0x15 [ 946.918167][T25043] ? fault_create_debugfs_attr+0x180/0x180 [ 946.923974][T25043] ? __kasan_check_read+0x11/0x20 [ 946.928987][T25043] ? mark_lock+0xc2/0x1220 [ 946.933463][T25043] should_fail_alloc_page+0x50/0x60 [ 946.938732][T25043] __alloc_pages_nodemask+0x1a1/0x910 [ 946.944124][T25043] ? __alloc_pages_slowpath+0x2920/0x2920 [ 946.949906][T25043] ? __kasan_check_read+0x11/0x20 [ 946.954965][T25043] ? fault_create_debugfs_attr+0x180/0x180 [ 946.960776][T25043] cache_grow_begin+0x90/0xc60 [ 946.965546][T25043] ? tomoyo_realpath_from_path+0xc5/0x660 [ 946.971266][T25043] ? trace_hardirqs_off+0x62/0x240 [ 946.976382][T25043] __kmalloc+0x6b2/0x770 [ 946.980617][T25043] ? mark_held_locks+0xf0/0xf0 [ 946.985556][T25043] ? mark_lock+0xc2/0x1220 [ 946.989974][T25043] ? tomoyo_realpath_from_path+0xc5/0x660 [ 946.995795][T25043] tomoyo_realpath_from_path+0xc5/0x660 [ 947.001346][T25043] ? tomoyo_path_number_perm+0x193/0x520 [ 947.006976][T25043] tomoyo_path_number_perm+0x1dd/0x520 [ 947.012415][T25043] ? tomoyo_path_number_perm+0x193/0x520 [ 947.018046][T25043] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 947.024060][T25043] ? __f_unlock_pos+0x19/0x20 [ 947.028868][T25043] ? __fget+0x37f/0x550 [ 947.033280][T25043] ? ksys_dup3+0x3e0/0x3e0 [ 947.037707][T25043] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 947.043944][T25043] ? fput_many+0x12c/0x1a0 [ 947.048358][T25043] tomoyo_file_ioctl+0x23/0x30 [ 947.053108][T25043] security_file_ioctl+0x77/0xc0 [ 947.058224][T25043] ksys_ioctl+0x57/0xd0 [ 947.062364][T25043] __x64_sys_ioctl+0x73/0xb0 [ 947.066937][T25043] do_syscall_64+0xfa/0x790 [ 947.071435][T25043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 947.077309][T25043] RIP: 0033:0x45aff9 [ 947.081224][T25043] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.101111][T25043] RSP: 002b:00007f5c197c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.109530][T25043] RAX: ffffffffffffffda RBX: 00007f5c197c26d4 RCX: 000000000045aff9 [ 947.117502][T25043] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000007 [ 947.126064][T25043] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 947.134015][T25043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 947.141966][T25043] R13: 00000000000002c4 R14: 00000000004c38e2 R15: 0000000000000001 [ 947.177006][T25022] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:27 executing program 4 (fault-call:29 fault-nth:2): unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xb000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xc00}, 0x0) 17:32:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x9, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x2}, {0x3f, 0x9, 0x1, 0xbd1}, {0x3, 0x8, 0x9, 0x1}, {0x3, 0x0, 0x1f, 0x1}, {0x8, 0x8, 0x9, 0xfffffeff}, {0x9, 0x81, 0xed, 0x4}, {0x7fff, 0x3f, 0x1}]}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000080), 0x4) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x40400) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 947.375988][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.399554][T25052] device syz_tun left promiscuous mode 17:32:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xe00}, 0x0) [ 947.423981][T25052] bridge226: port 1(syz_tun) entered disabled state 17:32:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 947.461913][T25057] IPVS: ftp: loaded support on port[0] = 21 17:32:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/166, 0xa6, 0x40000002, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0xffffffff, 0x2, 0x0, {0xa, 0x4e21, 0x3, @mcast2, 0x80000000}}}, 0x80) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x542, {0x4, 0x9, 0x2, 0x1, 0x5, 0x6}, 0x9, 0xd0}, 0xe) [ 947.566540][T25052] bridge227: port 1(syz_tun) entered blocking state [ 947.582213][T25052] bridge227: port 1(syz_tun) entered disabled state [ 947.591236][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.603987][T25052] device syz_tun entered promiscuous mode 17:32:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 947.646676][T25058] device syz_tun left promiscuous mode [ 947.699853][T25058] bridge47: port 1(syz_tun) entered disabled state [ 947.768146][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 947.900884][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.910891][T25058] bridge48: port 1(syz_tun) entered blocking state [ 947.921152][T25058] bridge48: port 1(syz_tun) entered disabled state [ 947.945373][T25058] device syz_tun entered promiscuous mode 17:32:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x11000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 947.955058][T25059] bridge227: port 2(erspan0) entered blocking state [ 947.962393][T25059] bridge227: port 2(erspan0) entered disabled state [ 947.984831][T25059] device erspan0 entered promiscuous mode [ 948.004305][T25066] bridge48: port 2(erspan0) entered blocking state [ 948.021473][T25066] bridge48: port 2(erspan0) entered disabled state [ 948.031223][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 948.057274][T25066] device erspan0 entered promiscuous mode [ 948.081715][T25067] device erspan0 left promiscuous mode [ 948.116758][T25067] bridge227: port 2(erspan0) entered disabled state [ 948.238445][T25071] device erspan0 left promiscuous mode [ 948.247707][T25071] bridge48: port 2(erspan0) entered disabled state [ 948.366582][T25071] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 17:32:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0xf00}, 0x0) 17:32:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x12000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x1100}, 0x0) [ 949.699772][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 949.701607][T25105] device syz_tun left promiscuous mode [ 949.750546][T25105] bridge227: port 1(syz_tun) entered disabled state 17:32:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x13000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x3, "350ea4e5f2501841"}) [ 949.795222][T25114] IPVS: ftp: loaded support on port[0] = 21 [ 949.858141][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x14000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 949.916618][T25105] bridge228: port 1(syz_tun) entered blocking state [ 949.943998][T25105] bridge228: port 1(syz_tun) entered disabled state [ 949.981066][T25105] device syz_tun entered promiscuous mode [ 949.994625][T25127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={{0x1, 0x7f, 0x25, 0x5e, 0x0, 0x7}, 0x97, 0x1f, 0x7}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 950.039416][T25115] device syz_tun left promiscuous mode [ 950.053332][T25115] bridge48: port 1(syz_tun) entered disabled state [ 950.165189][T25135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.226612][T25115] bridge49: port 1(syz_tun) entered blocking state [ 950.235646][T25115] bridge49: port 1(syz_tun) entered disabled state [ 950.253369][T25115] device syz_tun entered promiscuous mode [ 950.269829][T25113] bridge228: port 2(erspan0) entered blocking state [ 950.304796][T25113] bridge228: port 2(erspan0) entered disabled state [ 950.334014][T25113] device erspan0 entered promiscuous mode [ 950.343289][T25117] device erspan0 left promiscuous mode [ 950.349791][T25117] bridge228: port 2(erspan0) entered disabled state [ 950.489193][T25120] bridge49: port 2(erspan0) entered blocking state [ 950.495998][T25120] bridge49: port 2(erspan0) entered disabled state [ 950.513626][T25120] device erspan0 entered promiscuous mode [ 950.550646][T25123] device erspan0 left promiscuous mode [ 950.563200][T25123] bridge49: port 2(erspan0) entered disabled state [ 950.676835][T25123] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:31 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x2) 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x21000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x7}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$unix(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f000094cff4)=@abs={0x1}, 0x6e) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'lo\x00', {0x4}, 0xf800}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f00000000c0)={@remote, @broadcast}, &(0x7f0000000100)=0xc) r6 = socket$inet6(0xa, 0x801, 0x1) socket(0x26, 0x6, 0x81) getpeername$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) 17:32:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x1200}, 0x0) 17:32:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x1300}, 0x0) [ 950.931967][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.951238][T25160] device syz_tun left promiscuous mode [ 950.966795][T25160] bridge228: port 1(syz_tun) entered disabled state 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x2f000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 950.994205][T25162] IPVS: ftp: loaded support on port[0] = 21 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3a000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 951.167660][T25160] bridge229: port 1(syz_tun) entered blocking state [ 951.179924][T25160] bridge229: port 1(syz_tun) entered disabled state [ 951.214109][T25160] device syz_tun entered promiscuous mode [ 951.252731][T25165] device syz_tun left promiscuous mode 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x3f000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 951.265669][T25165] bridge49: port 1(syz_tun) entered disabled state 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x40000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x48000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 951.426500][T25165] bridge50: port 1(syz_tun) entered blocking state [ 951.433092][T25165] bridge50: port 1(syz_tun) entered disabled state [ 951.460865][T25165] device syz_tun entered promiscuous mode [ 951.473182][T25153] bridge229: port 2(erspan0) entered blocking state [ 951.488964][T25153] bridge229: port 2(erspan0) entered disabled state [ 951.503438][T25153] device erspan0 entered promiscuous mode [ 951.533941][T25168] bridge50: port 2(erspan0) entered blocking state [ 951.545859][T25168] bridge50: port 2(erspan0) entered disabled state [ 951.578012][T25168] device erspan0 entered promiscuous mode [ 951.587368][T25174] device erspan0 left promiscuous mode [ 951.594259][T25174] bridge229: port 2(erspan0) entered disabled state [ 951.710754][T25175] device erspan0 left promiscuous mode [ 951.729150][T25175] bridge50: port 2(erspan0) entered disabled state [ 951.799295][T25190] IPVS: ftp: loaded support on port[0] = 21 [ 951.886577][T25175] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:32 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x10) 17:32:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x4c000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x2, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept4$llc(r1, 0x0, &(0x7f0000000040), 0x80800) sendmmsg(r3, &(0x7f0000001e00), 0x2e5, 0x0) 17:32:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x1400}, 0x0) 17:32:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff7f, 0x8000204087ffd, 0x0, 0x138) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770060000000000000004c00000000000000000000000000000000000000020000000300000018034b00000000009000000090000000000000009000000080020000800200008002000080020000800200"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x40008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x300}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") recvfrom$inet(r0, 0x0, 0xffffffffffffffda, 0x10120, 0x0, 0xffffffffffffff73) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000240), &(0x7f00000002c0)=0x40) 17:32:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x3f00}, 0x0) 17:32:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @rand_addr="a048696fa0634ece164f15b01a7f0ecb", 0x80000000}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @remote}, 0xcfb}, @in6={0xa, 0x4e20, 0x9e3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 952.293929][T25207] device bridge51 entered promiscuous mode [ 952.314314][T25216] IPVS: ftp: loaded support on port[0] = 21 [ 952.352971][T25207] team0: Port device bridge51 added [ 952.389309][T25210] device syz_tun left promiscuous mode [ 952.395792][T25210] bridge229: port 1(syz_tun) entered disabled state 17:32:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x68000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r1, &(0x7f0000000000)=@caif=@dbg, &(0x7f0000000080)=0x80, 0x9b32ae7b166c74be) [ 952.485489][T25232] __nla_validate_parse: 6 callbacks suppressed [ 952.485500][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.596879][T25210] bridge230: port 1(syz_tun) entered blocking state [ 952.603170][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.630939][T25210] bridge230: port 1(syz_tun) entered disabled state [ 952.649468][T25210] device syz_tun entered promiscuous mode [ 952.674734][T25219] bridge230: port 2(erspan0) entered blocking state 17:32:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x6c000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 952.705120][T25219] bridge230: port 2(erspan0) entered disabled state [ 952.735906][T25219] device erspan0 entered promiscuous mode [ 952.787222][T25224] device erspan0 left promiscuous mode [ 952.811989][T25224] bridge230: port 2(erspan0) entered disabled state [ 952.884031][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.274776][T25218] IPVS: ftp: loaded support on port[0] = 21 17:32:33 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x4c01) 17:32:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket(0x6, 0x3, 0xf7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r3, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r6, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r8, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x60000b, @rand_addr="534fb4aec4b268b18d920c1cef566e51", 0x2}}, 0x1000, 0x8, 0x9, 0x4, 0x8}, &(0x7f00000001c0)=0x98) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) 17:32:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x4000}, 0x0) 17:32:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0xffffffffffffff7f, 0x8000204087ffd, 0x0, 0x138) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770060000000000000004c00000000000000000000000000000000000000020000000300000018034b00000000009000000090000000000000009000000080020000800200008002000080020000800200"], 0x1) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x40008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x300}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") recvfrom$inet(r0, 0x0, 0xffffffffffffffda, 0x10120, 0x0, 0xffffffffffffff73) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000240), &(0x7f00000002c0)=0x40) [ 953.512436][T25264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x7a000000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x5800}, 0x0) [ 953.621044][T25270] IPVS: ftp: loaded support on port[0] = 21 [ 953.623206][T25265] device syz_tun left promiscuous mode [ 953.664170][T25265] bridge230: port 1(syz_tun) entered disabled state [ 953.760769][T25283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x84ffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 953.876807][T25265] bridge231: port 1(syz_tun) entered blocking state [ 953.897829][T25265] bridge231: port 1(syz_tun) entered disabled state [ 953.935306][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.947751][T25265] device syz_tun entered promiscuous mode [ 953.968881][T25273] device bridge52 entered promiscuous mode 17:32:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x88ffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 954.001031][T25273] team0: Port device bridge52 added [ 954.032499][T25279] bridge231: port 2(erspan0) entered blocking state [ 954.044567][T25279] bridge231: port 2(erspan0) entered disabled state 17:32:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) [ 954.072992][T25293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 954.075331][T25279] device erspan0 entered promiscuous mode [ 954.136927][T25286] device erspan0 left promiscuous mode 17:32:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 954.177682][T25286] bridge231: port 2(erspan0) entered disabled state [ 954.270300][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 954.345421][T25307] device syz_tun left promiscuous mode [ 954.389360][T25307] bridge50: port 1(syz_tun) entered disabled state [ 954.567689][T25307] bridge53: port 1(syz_tun) entered blocking state [ 954.574356][T25307] bridge53: port 1(syz_tun) entered disabled state [ 954.582503][T25307] device syz_tun entered promiscuous mode [ 954.599127][T25304] bridge53: port 2(erspan0) entered blocking state [ 954.605902][T25304] bridge53: port 2(erspan0) entered disabled state [ 954.619855][T25304] device erspan0 entered promiscuous mode [ 954.628677][T25314] device erspan0 left promiscuous mode [ 954.634437][T25314] bridge53: port 2(erspan0) entered disabled state [ 954.645854][T25271] IPVS: ftp: loaded support on port[0] = 21 [ 954.756504][T25314] bond2: (slave erspan0): slave is up - this may be due to an out of date ifenslave 17:32:35 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x541b) 17:32:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x5865}, 0x0) 17:32:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xe2050000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2208, &(0x7f0000000000)=[{0x20, 0xfd, 0x0, 0xfffffffffffff010}, {0x26}, {0x6, 0x1, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0xaf) 17:32:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) r2 = socket(0x6, 0x3, 0xf7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r3, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r6, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r8, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x60000b, @rand_addr="534fb4aec4b268b18d920c1cef566e51", 0x2}}, 0x1000, 0x8, 0x9, 0x4, 0x8}, &(0x7f00000001c0)=0x98) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 955.085944][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 955.167796][T25336] IPVS: ftp: loaded support on port[0] = 21 [ 955.289566][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xf5ffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x6000}, 0x0) [ 955.400868][T25333] device syz_tun left promiscuous mode [ 955.423663][T25333] bridge231: port 1(syz_tun) entered disabled state 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 955.571037][T25333] bridge232: port 1(syz_tun) entered blocking state [ 955.586580][T25333] bridge232: port 1(syz_tun) entered disabled state [ 955.607982][T25333] device syz_tun entered promiscuous mode 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 955.617040][T25337] bridge232: port 2(erspan0) entered blocking state [ 955.623999][T25337] bridge232: port 2(erspan0) entered disabled state [ 955.636025][T25337] device erspan0 entered promiscuous mode [ 955.672384][T25344] device erspan0 left promiscuous mode [ 955.678913][T25344] bridge232: port 2(erspan0) entered disabled state 17:32:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xffffff84, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 956.038218][T25336] IPVS: ftp: loaded support on port[0] = 21 17:32:36 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x1, 0xa44}, 0x10) pipe(0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r2 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000001500)={r1}) socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200), 0xfe1c) recvmsg$can_j1939(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) socket(0x0, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe869") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x5421) 17:32:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xffffff88, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x6558}, 0x0) 17:32:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000104000040000000000000001ea6", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 17:32:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0), 0xffffffffffffffac) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 17:32:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f00000072c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xc762324648467d37, 0x0, 0x0, {}, [{0x34, 0x1, @m_gact={0x30, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}, 0x1, 0x8100}, 0x0) 17:32:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) 17:32:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) sendto$inet6(r3, &(0x7f00000002c0)="b5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x19, &(0x7f0000000040)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x81, 0x8115837acc46c0a0, 0x29bc, 0x3, 0x8, 0x3ff, 0xf4000000, r5}, 0x20) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x28}, {0x6}]}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) sendto(r7, &(0x7f0000000040)="8446849009982236afc09530dec8efb09b7c58c8c8fc4dbdbfc358dcd747d6364fd7858549c5fef9a0746558e71f0e23fb0399bc", 0x34, 0x200000c0, &(0x7f0000000080)=@llc={0x1a, 0xc, 0x9e, 0x9, 0x0, 0x7, @remote}, 0x80) sendmmsg(r0, &(0x7f0000001e00), 0x1, 0x0) [ 956.438261][T25385] device syz_tun left promiscuous mode [ 956.474389][T25385] bridge232: port 1(syz_tun) entered disabled state [ 956.505237][T25387] IPVS: ftp: loaded support on port[0] = 21 17:32:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 956.607772][T25385] bridge233: port 1(syz_tun) entered blocking state [ 956.629892][T25385] bridge233: port 1(syz_tun) entered disabled state 17:32:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xfffffff5, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 956.677855][T25385] device syz_tun entered promiscuous mode [ 956.701193][T25383] device syz_tun left promiscuous mode [ 956.710532][T25383] bridge53: port 1(syz_tun) entered disabled state 17:32:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x84, 0x0, 0x1, 0x519, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x6}]}, 0x84}}, 0x0) [ 956.866605][T25383] bridge54: port 1(syz_tun) entered blocking state [ 956.879571][T25383] bridge54: port 1(syz_tun) entered disabled state [ 956.908975][T25383] device syz_tun entered promiscuous mode [ 956.928953][T25388] bridge233: port 2(erspan0) entered blocking state [ 956.949628][T25388] bridge233: port 2(erspan0) entered disabled state [ 956.975767][T25388] device erspan0 entered promiscuous mode [ 956.991991][T25391] bridge54: port 2(erspan0) entered blocking state [ 957.003926][T25391] bridge54: port 2(erspan0) entered disabled state [ 957.020021][T25391] device erspan0 entered promiscuous mode [ 957.042749][T25396] device erspan0 left promiscuous mode [ 957.048500][T25396] bridge54: port 2(erspan0) entered disabled state [ 957.136543][ C0] ------------[ cut here ]------------ [ 957.142039][ C0] DEBUG_LOCKS_WARN_ON(1) [ 957.142108][ C0] WARNING: CPU: 0 PID: 25420 at kernel/locking/lockdep.c:167 mark_lock+0x22b/0x1220 [ 957.155827][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 957.162409][ C0] CPU: 0 PID: 25420 Comm: modprobe Not tainted 5.5.0-rc5-syzkaller #0 [ 957.170680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 957.180741][ C0] Call Trace: [ 957.184024][ C0] [ 957.186891][ C0] dump_stack+0x197/0x210 [ 957.191327][ C0] ? mark_lock+0x1c0/0x1220 [ 957.195830][ C0] panic+0x2e3/0x75c [ 957.199713][ C0] ? add_taint.cold+0x16/0x16 [ 957.204388][ C0] ? __kasan_check_write+0x14/0x20 [ 957.209519][ C0] ? __warn.cold+0x14/0x3e [ 957.213925][ C0] ? __warn+0xd9/0x1cf [ 957.217980][ C0] ? mark_lock+0x22b/0x1220 [ 957.222494][ C0] __warn.cold+0x2f/0x3e [ 957.226952][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 957.232731][ C0] ? mark_lock+0x22b/0x1220 [ 957.237387][ C0] report_bug+0x289/0x300 [ 957.241830][ C0] do_error_trap+0x11b/0x200 [ 957.246782][ C0] do_invalid_op+0x37/0x50 [ 957.251195][ C0] ? mark_lock+0x22b/0x1220 [ 957.255719][ C0] invalid_op+0x23/0x30 [ 957.259863][ C0] RIP: 0010:mark_lock+0x22b/0x1220 [ 957.264951][ C0] Code: d0 7c 08 84 d2 0f 85 a8 0e 00 00 44 8b 1d dd 18 21 09 45 85 db 75 b6 48 c7 c6 20 80 2b 88 48 c7 c7 60 80 2b 88 e8 b4 3f eb ff <0f> 0b 31 db e9 aa fe ff ff 48 c7 c7 e0 14 66 8b e8 70 4f 58 00 e9 [ 957.284686][ C0] RSP: 0000:ffffc900000071b8 EFLAGS: 00010082 [ 957.290780][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 957.298845][ C0] RDX: 0000000000000100 RSI: ffffffff815e53a6 RDI: fffff52000000e29 [ 957.306912][ C0] RBP: ffffc90000007208 R08: ffff8880993cc440 R09: fffffbfff1333285 [ 957.314882][ C0] R10: fffffbfff1333284 R11: ffffffff89999423 R12: 0000000000000004 [ 957.322847][ C0] R13: ffff8880993cce40 R14: 0000000000000001 R15: 0000000000042cd5 [ 957.330815][ C0] ? vprintk_func+0x86/0x189 [ 957.335459][ C0] ? mark_lock+0x22b/0x1220 [ 957.340039][ C0] ? __kasan_check_read+0x11/0x20 [ 957.345056][ C0] __lock_acquire+0x1e8e/0x4a00 [ 957.349940][ C0] ? __kasan_check_read+0x11/0x20 [ 957.355005][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 957.361270][ C0] ? netif_skb_features+0x6c2/0xb90 [ 957.366471][ C0] ? mark_held_locks+0xf0/0xf0 [ 957.371239][ C0] ? mark_lock+0xc2/0x1220 [ 957.375660][ C0] lock_acquire+0x190/0x410 [ 957.380183][ C0] ? sch_direct_xmit+0x2e0/0xd30 [ 957.385143][ C0] _raw_spin_lock+0x2f/0x40 [ 957.389665][ C0] ? sch_direct_xmit+0x2e0/0xd30 [ 957.394601][ C0] sch_direct_xmit+0x2e0/0xd30 [ 957.399353][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 957.405693][ C0] ? dev_watchdog+0xca0/0xca0 [ 957.410379][ C0] ? lock_acquire+0x120/0x410 [ 957.415046][ C0] __dev_queue_xmit+0x2707/0x35c0 [ 957.420071][ C0] ? __kasan_check_read+0x11/0x20 [ 957.425132][ C0] ? __lock_acquire+0x16f2/0x4a00 [ 957.430145][ C0] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 957.435424][ C0] ? __kasan_check_read+0x11/0x20 [ 957.440470][ C0] ? mark_lock+0xc2/0x1220 [ 957.444959][ C0] ? mark_held_locks+0xa4/0xf0 [ 957.449723][ C0] ? ip6_finish_output2+0xc98/0x25c0 [ 957.455252][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 957.460522][ C0] ? ip6_finish_output2+0xc98/0x25c0 [ 957.465841][ C0] dev_queue_xmit+0x18/0x20 [ 957.470351][ C0] ? dev_queue_xmit+0x18/0x20 [ 957.475187][ C0] ip6_finish_output2+0xfbe/0x25c0 [ 957.480303][ C0] ? ip6_frag_next+0xb20/0xb20 [ 957.485057][ C0] ? lock_downgrade+0x920/0x920 [ 957.489906][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 957.494917][ C0] ? __kasan_check_read+0x11/0x20 [ 957.499929][ C0] __ip6_finish_output+0x444/0xaa0 [ 957.505020][ C0] ? __ip6_finish_output+0x444/0xaa0 [ 957.510309][ C0] ip6_finish_output+0x38/0x1f0 [ 957.515198][ C0] ip6_output+0x25e/0x880 [ 957.519567][ C0] ? ip6_finish_output+0x1f0/0x1f0 [ 957.524659][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 957.530796][ C0] ? __ip6_finish_output+0xaa0/0xaa0 [ 957.537018][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 957.542870][ C0] ndisc_send_skb+0xf1f/0x1490 [ 957.547626][ C0] ? nf_hook.constprop.0+0x560/0x560 [ 957.553090][ C0] ? memcpy+0x46/0x50 [ 957.557055][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 957.563335][ C0] ndisc_send_ns+0x3a9/0x850 [ 957.567923][ C0] ? ndisc_netdev_event+0x5e0/0x5e0 [ 957.573179][ C0] ? ipv6_chk_addr_and_flags+0x5c6/0x800 [ 957.578825][ C0] ? find_held_lock+0x35/0x130 [ 957.583576][ C0] ndisc_solicit+0x2ed/0x470 [ 957.588160][ C0] ? ndisc_send_ns+0x850/0x850 [ 957.592933][ C0] ? ndisc_send_ns+0x850/0x850 [ 957.597691][ C0] neigh_probe+0xd0/0x120 [ 957.602025][ C0] neigh_timer_handler+0x59d/0x10e0 [ 957.607340][ C0] call_timer_fn+0x1ac/0x780 [ 957.611924][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 957.617107][ C0] ? msleep_interruptible+0x150/0x150 [ 957.622471][ C0] ? run_timer_softirq+0x6b1/0x1790 [ 957.627664][ C0] ? trace_hardirqs_on+0x67/0x240 [ 957.633049][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 957.638234][ C0] ? neigh_lookup_nodev+0x800/0x800 [ 957.643416][ C0] run_timer_softirq+0x6c3/0x1790 [ 957.648439][ C0] ? add_timer+0x930/0x930 [ 957.652852][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 957.659002][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 957.664536][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 957.670512][ C0] ? trace_hardirqs_on+0x67/0x240 [ 957.675570][ C0] __do_softirq+0x262/0x98c [ 957.680134][ C0] ? sched_clock_cpu+0x1b/0x1b0 [ 957.684979][ C0] irq_exit+0x19b/0x1e0 [ 957.689125][ C0] smp_apic_timer_interrupt+0x1a3/0x610 [ 957.694755][ C0] apic_timer_interrupt+0xf/0x20 [ 957.699677][ C0] [ 957.702614][ C0] RIP: 0010:lock_release+0x4c0/0x960 [ 957.707899][ C0] Code: 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 8c 03 00 00 48 83 3d a7 61 38 08 00 0f 84 7f 01 00 00 48 8b bd 48 ff ff ff 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 [ 957.728388][ C0] RSP: 0000:ffffc900016c79c8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 957.736801][ C0] RAX: 1ffffffff132669b RBX: 1ffff920002d8f3e RCX: 1ffff11013279999 [ 957.744891][ C0] RDX: dffffc0000000000 RSI: 1ffff110132799aa RDI: 0000000000000282 [ 957.752861][ C0] RBP: ffffc900016c7a98 R08: 0000000000000004 R09: ffff8880993cccd0 [ 957.760833][ C0] R10: fffffbfff14f6988 R11: ffffffff8a7b4c47 R12: ffff8880993cc440 [ 957.768813][ C0] R13: ffffffff81b94063 R14: ffffc900016c7a70 R15: ffff8880993cc440 [ 957.776876][ C0] ? __unlock_page_memcg+0x53/0x100 [ 957.782062][ C0] ? lock_downgrade+0x920/0x920 [ 957.786902][ C0] ? lock_acquire+0x190/0x410 [ 957.791681][ C0] ? task_css.constprop.0+0x120/0x120 [ 957.797047][ C0] ? __kasan_check_read+0x11/0x20 [ 957.802152][ C0] __unlock_page_memcg+0x6b/0x100 [ 957.807268][ C0] unlock_page_memcg+0x2c/0x40 [ 957.812027][ C0] page_add_file_rmap+0x56e/0xd60 [ 957.817039][ C0] alloc_set_pte+0x62b/0x1800 [ 957.821722][ C0] ? rcu_read_lock_held_common+0x130/0x130 [ 957.827658][ C0] filemap_map_pages+0x11f4/0x14e0 [ 957.832951][ C0] ? find_lock_entry+0x650/0x650 [ 957.838127][ C0] ? fault_around_bytes_set+0xa0/0xa0 [ 957.843495][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 957.849724][ C0] __handle_mm_fault+0x2de6/0x3cc0 [ 957.855095][ C0] ? apply_to_existing_page_range+0x50/0x50 [ 957.861087][ C0] ? handle_mm_fault+0x292/0xa50 [ 957.866119][ C0] ? handle_mm_fault+0x7a0/0xa50 [ 957.871057][ C0] ? __kasan_check_read+0x11/0x20 [ 957.876210][ C0] handle_mm_fault+0x3b2/0xa50 [ 957.880965][ C0] __do_page_fault+0x536/0xd80 [ 957.885717][ C0] ? page_fault+0x16/0x40 [ 957.890143][ C0] do_page_fault+0x38/0x590 [ 957.894650][ C0] page_fault+0x39/0x40 [ 957.898952][ C0] RIP: 0033:0x7ff5485cfbe0 [ 957.903360][ C0] Code: Bad RIP value. [ 957.907415][ C0] RSP: 002b:00007ffc30c01728 EFLAGS: 00010286 [ 957.913469][ C0] RAX: 00007ff54887f520 RBX: 0000000000000000 RCX: 00007ffc30c02c28 [ 957.921581][ C0] RDX: 00007ff54852e49d RSI: 0000000000000028 RDI: 0000000000000000 [ 957.929539][ C0] RBP: 0000000000000028 R08: 00000000ffffffff R09: 0000000000000000 [ 957.937504][ C0] R10: 0000000000000000 R11: 00007ff548573ab0 R12: 000055690df36932 [ 957.945626][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 00007ff548881ec8 [ 957.955737][ C0] Kernel Offset: disabled [ 957.960137][ C0] Rebooting in 86400 seconds..