ffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:07:43 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:07:43 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000060000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:43 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000008100001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000712001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:43 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70005865000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000a12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000c12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000e12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:44 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00001012001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2568.437363][T29084] device erspan0 left promiscuous mode
[ 2568.451344][T29084] bridge4: port 1(erspan0) entered disabled state
[ 2568.648353][T29091] device erspan0 left promiscuous mode
[ 2568.655967][T29091] bridge6: port 1(erspan0) entered disabled state
[ 2568.946859][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2568.959355][T29098] device erspan0 left promiscuous mode
[ 2568.959817][T29139] validate_nla: 22 callbacks suppressed
[ 2568.959828][T29139] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2568.965502][T29098] bridge3: port 1(erspan0) entered disabled state
[ 2569.060737][T29098] bridge861: port 1(erspan0) entered blocking state
[ 2569.068002][T29098] bridge861: port 1(erspan0) entered disabled state
[ 2569.075773][T29098] device erspan0 entered promiscuous mode
[ 2569.182608][T29099] bridge4: port 1(erspan0) entered blocking state
[ 2569.189145][T29099] bridge4: port 1(erspan0) entered disabled state
[ 2569.196847][T29099] device erspan0 entered promiscuous mode
[ 2569.312561][T29104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2569.429614][T29106] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2569.439166][T29107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2569.453939][T29110] bridge6: port 1(erspan0) entered blocking state
[ 2569.462082][T29110] bridge6: port 1(erspan0) entered disabled state
[ 2569.471505][T29110] device erspan0 entered promiscuous mode
[ 2569.611807][T29115] device erspan0 left promiscuous mode
[ 2569.617661][T29115] bridge861: port 1(erspan0) entered disabled state
[ 2569.694967][T29115] bridge3: port 1(erspan0) entered blocking state
[ 2569.701454][T29115] bridge3: port 1(erspan0) entered disabled state
[ 2569.708673][T29115] device erspan0 entered promiscuous mode
[ 2569.742656][T29117] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2569.822492][    C1] net_ratelimit: 10 callbacks suppressed
[ 2569.822501][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2569.835402][T29093] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2569.844149][T29093] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2569.852394][T29093] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2569.901252][T29139] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:07:45 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000000000c", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00004812001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:45 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:07:45 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:07:45 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000011ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000068000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2570.140780][T29157] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00004c12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00006012001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00006812001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2570.382504][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2570.388396][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00006c12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2570.491735][T29147] device erspan0 left promiscuous mode
[ 2570.504434][T29147] bridge6: port 1(erspan0) entered disabled state
06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00007412001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00007a12001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2570.782489][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2570.788362][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2570.825401][T29154] device erspan0 left promiscuous mode
[ 2570.831155][T29154] bridge3: port 1(erspan0) entered disabled state
[ 2570.912099][T29154] bridge862: port 1(erspan0) entered blocking state
[ 2570.919736][T29154] bridge862: port 1(erspan0) entered disabled state
[ 2570.927164][T29154] device erspan0 entered promiscuous mode
[ 2570.949187][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2570.954980][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2570.976479][T29157] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2571.082593][T29152] device erspan0 left promiscuous mode
[ 2571.088598][T29152] bridge4: port 1(erspan0) entered disabled state
[ 2571.180081][T29159] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2571.182493][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2571.191425][T29159] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2571.197840][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:07:47 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f20c", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:47 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000035001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2571.323376][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2571.432852][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2571.453915][T29169] bridge6: port 1(erspan0) entered blocking state
[ 2571.460432][T29169] bridge6: port 1(erspan0) entered disabled state
[ 2571.468057][T29169] device erspan0 entered promiscuous mode
[ 2571.506816][T29171] device erspan0 left promiscuous mode
[ 2571.512578][T29171] bridge862: port 1(erspan0) entered disabled state
[ 2571.584108][T29171] bridge3: port 1(erspan0) entered blocking state
[ 2571.591086][T29171] bridge3: port 1(erspan0) entered disabled state
[ 2571.598388][T29171] device erspan0 entered promiscuous mode
[ 2571.732201][T29174] bridge4: port 1(erspan0) entered blocking state
[ 2571.739938][T29174] bridge4: port 1(erspan0) entered disabled state
[ 2571.750289][T29174] device erspan0 entered promiscuous mode
[ 2571.806262][T29177] __nla_validate_parse: 1 callbacks suppressed
[ 2571.806275][T29177] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:07:47 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:07:47 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000006c000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2571.909542][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:07:48 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000021ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000005b001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:48 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000006f001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000003b6001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2572.351914][T29217] device erspan0 left promiscuous mode
[ 2572.386369][T29217] bridge4: port 1(erspan0) entered disabled state
06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000000f001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000035001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000005b001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2572.963431][T29229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2572.972968][T29230] bridge4: port 1(erspan0) entered blocking state
[ 2572.979797][T29230] bridge4: port 1(erspan0) entered disabled state
[ 2572.988134][T29230] device erspan0 entered promiscuous mode
[ 2573.032202][T29222] device erspan0 left promiscuous mode
[ 2573.038528][T29222] bridge6: port 1(erspan0) entered disabled state
[ 2573.268674][T29234] device erspan0 left promiscuous mode
[ 2573.275797][T29234] bridge3: port 1(erspan0) entered disabled state
[ 2573.341668][T29234] bridge863: port 1(erspan0) entered blocking state
[ 2573.348983][T29234] bridge863: port 1(erspan0) entered disabled state
[ 2573.357318][T29234] device erspan0 entered promiscuous mode
06:07:49 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f20d", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000006f001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000074000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:49 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2573.632919][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2573.658364][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2573.688464][T29247] bridge6: port 1(erspan0) entered blocking state
[ 2573.711039][T29247] bridge6: port 1(erspan0) entered disabled state
[ 2573.750886][T29247] device erspan0 entered promiscuous mode
[ 2573.819803][T29249] device erspan0 left promiscuous mode
[ 2573.825605][T29249] bridge863: port 1(erspan0) entered disabled state
[ 2573.913643][T29249] bridge3: port 1(erspan0) entered blocking state
[ 2573.920133][T29249] bridge3: port 1(erspan0) entered disabled state
[ 2573.927469][T29249] device erspan0 entered promiscuous mode
[ 2574.065031][T29251] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2574.181469][T29276] validate_nla: 12 callbacks suppressed
[ 2574.181505][T29276] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2574.212159][T29280] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2574.223590][T29290] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:07:50 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000041ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000b6031fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:50 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2574.223631][T29280] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2574.286266][T29280] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012021fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012031fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012041fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2574.559715][T29272] device erspan0 left promiscuous mode
[ 2574.565496][T29272] bridge4: port 1(erspan0) entered disabled state
06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012051fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012061fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2574.742806][T29284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2574.758281][T29285] bridge4: port 1(erspan0) entered blocking state
[ 2574.764949][T29285] bridge4: port 1(erspan0) entered disabled state
[ 2574.772397][T29285] device erspan0 entered promiscuous mode
[ 2574.953448][    C0] net_ratelimit: 11 callbacks suppressed
[ 2574.953455][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2574.964902][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2574.972246][T29290] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2574.984727][T29299] device erspan0 left promiscuous mode
[ 2574.990612][T29299] bridge6: port 1(erspan0) entered disabled state
[ 2575.112960][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2575.119297][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2575.221191][T29301] device erspan0 left promiscuous mode
[ 2575.227548][T29301] bridge3: port 1(erspan0) entered disabled state
[ 2575.302228][T29301] bridge864: port 1(erspan0) entered blocking state
[ 2575.309563][T29301] bridge864: port 1(erspan0) entered disabled state
[ 2575.317192][T29301] device erspan0 entered promiscuous mode
[ 2575.355072][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2575.360878][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2575.452570][T29282] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2575.460891][T29282] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2575.469295][T29282] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2575.592595][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2575.602027][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2575.611936][T29314] device erspan0 left promiscuous mode
[ 2575.617569][T29314] bridge864: port 1(erspan0) entered disabled state
[ 2575.692492][T29314] bridge3: port 1(erspan0) entered blocking state
[ 2575.699099][T29314] bridge3: port 1(erspan0) entered disabled state
[ 2575.706436][T29314] device erspan0 entered promiscuous mode
[ 2575.741952][T29315] bridge6: port 1(erspan0) entered blocking state
[ 2575.748588][T29315] bridge6: port 1(erspan0) entered disabled state
[ 2575.756109][T29315] device erspan0 entered promiscuous mode
[ 2575.796190][T29319] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:07:51 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000000000e", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012071fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:51 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:07:51 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000007a000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:52 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000061ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:52 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2576.062490][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2576.095723][T29341] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000120a1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:52 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000081000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000120c1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000120e1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2576.622506][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2576.628349][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2576.662242][T29340] device erspan0 left promiscuous mode
06:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012101fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2576.685332][T29340] bridge4: port 1(erspan0) entered disabled state
06:07:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012481fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2577.012590][T29349] device erspan0 left promiscuous mode
[ 2577.018300][T29349] bridge6: port 1(erspan0) entered disabled state
[ 2577.022523][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2577.097640][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2577.183252][T29360] bridge4: port 1(erspan0) entered blocking state
[ 2577.191183][T29360] bridge4: port 1(erspan0) entered disabled state
[ 2577.199188][T29360] device erspan0 entered promiscuous mode
[ 2577.243126][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2577.485322][T29365] bridge6: port 1(erspan0) entered blocking state
[ 2577.491790][T29365] bridge6: port 1(erspan0) entered disabled state
[ 2577.499254][T29365] device erspan0 entered promiscuous mode
[ 2577.552695][T29366] device erspan0 left promiscuous mode
[ 2577.558368][T29366] bridge3: port 1(erspan0) entered disabled state
[ 2577.632057][T29366] bridge865: port 1(erspan0) entered blocking state
[ 2577.638834][T29366] bridge865: port 1(erspan0) entered disabled state
[ 2577.646380][T29366] device erspan0 entered promiscuous mode
[ 2577.822580][T29377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2577.836431][T29378] device erspan0 left promiscuous mode
[ 2577.842062][T29378] bridge865: port 1(erspan0) entered disabled state
[ 2577.913740][T29378] bridge3: port 1(erspan0) entered blocking state
[ 2577.920752][T29378] bridge3: port 1(erspan0) entered disabled state
[ 2577.928201][T29378] device erspan0 entered promiscuous mode
06:07:53 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f20e", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000124c1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:53 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:07:53 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2577.962058][T29383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:07:54 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000000000000a1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012601fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:54 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000ec0000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012681fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000126c1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012741fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2578.678620][T29403] device erspan0 left promiscuous mode
[ 2578.689970][T29403] bridge6: port 1(erspan0) entered disabled state
06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000127a1fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000120030ff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2578.972881][T29408] device erspan0 left promiscuous mode
[ 2578.978645][T29408] bridge4: port 1(erspan0) entered disabled state
[ 2579.064536][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2579.162952][T29415] bridge6: port 1(erspan0) entered blocking state
[ 2579.169497][T29415] bridge6: port 1(erspan0) entered disabled state
[ 2579.177597][T29415] device erspan0 entered promiscuous mode
[ 2579.219311][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2579.330563][T29422] bridge4: port 1(erspan0) entered blocking state
[ 2579.338339][T29422] bridge4: port 1(erspan0) entered disabled state
[ 2579.349625][T29422] device erspan0 entered promiscuous mode
[ 2579.407062][T29423] validate_nla: 12 callbacks suppressed
[ 2579.407075][T29423] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2579.711717][T29439] device erspan0 left promiscuous mode
[ 2579.717458][T29439] bridge3: port 1(erspan0) entered disabled state
[ 2579.791746][T29439] bridge866: port 1(erspan0) entered blocking state
[ 2579.798526][T29439] bridge866: port 1(erspan0) entered disabled state
[ 2579.805948][T29439] device erspan0 entered promiscuous mode
[ 2579.932762][T29444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2579.942172][T29449] device erspan0 left promiscuous mode
[ 2579.949588][T29449] bridge866: port 1(erspan0) entered disabled state
[ 2580.014105][T29449] bridge3: port 1(erspan0) entered blocking state
[ 2580.020874][T29449] bridge3: port 1(erspan0) entered disabled state
[ 2580.027933][T29449] device erspan0 entered promiscuous mode
[ 2580.062604][T29450] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2580.151159][T29410] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2580.162393][T29410] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2580.171022][T29410] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:07:56 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f20f", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:07:56 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000000000000c1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:07:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012005bff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:56 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:07:56 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700000ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:56 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2580.339822][T29476] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2580.369658][T29480] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2580.441749][T29480] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2580.487849][T29476] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2580.489916][T29483] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2580.510651][T29481] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2580.749110][T29478] device erspan0 left promiscuous mode
[ 2580.756984][T29478] bridge4: port 1(erspan0) entered disabled state
[ 2580.782504][    C0] net_ratelimit: 14 callbacks suppressed
[ 2580.782515][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2580.794012][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2581.174980][T29474] device erspan0 left promiscuous mode
[ 2581.180822][T29474] bridge6: port 1(erspan0) entered disabled state
[ 2581.192515][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2581.198319][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:07:57 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000040030000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2581.343401][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2581.349748][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:07:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000120030ff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012005bff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2581.582513][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2581.588319][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2581.602729][T29487] device erspan0 left promiscuous mode
[ 2581.608531][T29487] bridge3: port 1(erspan0) entered disabled state
[ 2581.682185][T29487] bridge867: port 1(erspan0) entered blocking state
[ 2581.689046][T29487] bridge867: port 1(erspan0) entered disabled state
[ 2581.696506][T29487] device erspan0 entered promiscuous mode
[ 2581.734627][T29488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2581.744300][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2581.832566][T29491] bridge6: port 1(erspan0) entered blocking state
[ 2581.839101][T29491] bridge6: port 1(erspan0) entered disabled state
[ 2581.846971][T29491] device erspan0 entered promiscuous mode
[ 2581.887599][T29492] bridge4: port 1(erspan0) entered blocking state
[ 2581.894323][T29492] bridge4: port 1(erspan0) entered disabled state
[ 2581.901435][T29492] device erspan0 entered promiscuous mode
06:07:57 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:07:58 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2582.210287][T29496] device erspan0 left promiscuous mode
[ 2582.216176][T29496] bridge867: port 1(erspan0) entered disabled state
[ 2582.302494][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2582.327921][T29496] bridge3: port 1(erspan0) entered blocking state
[ 2582.334821][T29496] bridge3: port 1(erspan0) entered disabled state
[ 2582.341817][T29496] device erspan0 entered promiscuous mode
06:07:58 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2582.377688][T29501] __nla_validate_parse: 1 callbacks suppressed
[ 2582.377699][T29501] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:07:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000003400000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:58 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000000000000e1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2582.533786][T29519] device erspan0 left promiscuous mode
[ 2582.545933][T29519] bridge6: port 1(erspan0) entered disabled state
[ 2582.862535][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2583.032818][T29524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2583.047013][T29523] device erspan0 left promiscuous mode
[ 2583.056586][T29523] bridge4: port 1(erspan0) entered disabled state
[ 2583.151349][T29525] bridge6: port 1(erspan0) entered blocking state
[ 2583.158691][T29525] bridge6: port 1(erspan0) entered disabled state
[ 2583.165992][T29525] device erspan0 entered promiscuous mode
06:07:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff09bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:07:59 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2583.387157][T29530] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2583.398545][T29535] bridge4: port 1(erspan0) entered blocking state
[ 2583.408393][T29535] bridge4: port 1(erspan0) entered disabled state
[ 2583.417253][T29535] device erspan0 entered promiscuous mode
06:07:59 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2583.658762][T29564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2583.894626][T29547] device erspan0 left promiscuous mode
[ 2583.900455][T29547] bridge3: port 1(erspan0) entered disabled state
[ 2583.972717][T29547] bridge868: port 1(erspan0) entered blocking state
[ 2583.979480][T29547] bridge868: port 1(erspan0) entered disabled state
[ 2583.987868][T29547] device erspan0 entered promiscuous mode
[ 2584.132599][T29546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2584.142088][T29549] device erspan0 left promiscuous mode
[ 2584.147902][T29549] bridge868: port 1(erspan0) entered disabled state
[ 2584.224816][T29549] bridge3: port 1(erspan0) entered blocking state
[ 2584.231289][T29549] bridge3: port 1(erspan0) entered disabled state
[ 2584.238708][T29549] device erspan0 entered promiscuous mode
[ 2584.273863][T29550] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:00 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000101ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2584.375886][T29562] device erspan0 left promiscuous mode
[ 2584.381538][T29562] bridge6: port 1(erspan0) entered disabled state
06:08:00 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff5bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2584.521315][T29583] validate_nla: 22 callbacks suppressed
[ 2584.521347][T29583] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:00 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f210", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2584.573060][T29586] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2584.662654][T29564] bridge6: port 1(erspan0) entered blocking state
[ 2584.669675][T29564] bridge6: port 1(erspan0) entered disabled state
[ 2584.678117][T29564] device erspan0 entered promiscuous mode
06:08:00 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f000300"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2584.823348][T29566] device erspan0 left promiscuous mode
[ 2584.829762][T29566] bridge4: port 1(erspan0) entered disabled state
[ 2585.052554][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2585.062349][T29573] bridge4: port 1(erspan0) entered blocking state
[ 2585.069527][T29573] bridge4: port 1(erspan0) entered disabled state
[ 2585.076822][T29573] device erspan0 entered promiscuous mode
06:08:01 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2585.232636][T29583] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2585.257645][T29586] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2585.267859][T29607] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2585.333750][T29611] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2585.491395][T29589] device erspan0 left promiscuous mode
[ 2585.498915][T29589] bridge3: port 1(erspan0) entered disabled state
[ 2585.573835][T29589] bridge869: port 1(erspan0) entered blocking state
[ 2585.580577][T29589] bridge869: port 1(erspan0) entered disabled state
[ 2585.589246][T29589] device erspan0 entered promiscuous mode
[ 2585.632047][T29590] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2585.640470][T29590] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2585.648847][T29590] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2585.802574][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2585.812046][T29594] device erspan0 left promiscuous mode
[ 2585.818720][T29594] bridge869: port 1(erspan0) entered disabled state
[ 2585.904575][T29594] bridge3: port 1(erspan0) entered blocking state
[ 2585.911050][T29594] bridge3: port 1(erspan0) entered disabled state
[ 2585.918336][T29594] device erspan0 entered promiscuous mode
[ 2585.955244][T29595] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:01 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000fdeb07561ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2586.046320][T29599] device erspan0 left promiscuous mode
[ 2586.052162][T29599] bridge6: port 1(erspan0) entered disabled state
[ 2586.232842][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2586.242319][T29603] bridge6: port 1(erspan0) entered blocking state
[ 2586.249450][T29603] bridge6: port 1(erspan0) entered disabled state
[ 2586.257313][T29603] device erspan0 entered promiscuous mode
06:08:02 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f000300"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:02 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000200000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2586.401212][T29607] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2586.411822][T29610] device erspan0 left promiscuous mode
[ 2586.423657][T29610] bridge4: port 1(erspan0) entered disabled state
[ 2586.462479][    C1] net_ratelimit: 16 callbacks suppressed
[ 2586.462490][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2586.677969][T29616] bridge4: port 1(erspan0) entered blocking state
[ 2586.684551][T29616] bridge4: port 1(erspan0) entered disabled state
[ 2586.691609][T29616] device erspan0 entered promiscuous mode
06:08:02 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2587.022493][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2587.028347][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2587.082687][T29623] device erspan0 left promiscuous mode
[ 2587.088502][T29623] bridge3: port 1(erspan0) entered disabled state
[ 2587.164607][T29623] bridge870: port 1(erspan0) entered blocking state
[ 2587.171238][T29623] bridge870: port 1(erspan0) entered disabled state
[ 2587.178706][T29623] device erspan0 entered promiscuous mode
[ 2587.293088][T29626] device erspan0 left promiscuous mode
[ 2587.298916][T29626] bridge870: port 1(erspan0) entered disabled state
[ 2587.375881][T29626] bridge3: port 1(erspan0) entered blocking state
[ 2587.382380][T29626] bridge3: port 1(erspan0) entered disabled state
[ 2587.389800][T29626] device erspan0 entered promiscuous mode
06:08:03 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff63bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2587.424901][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2587.430676][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2587.439060][T29627] __nla_validate_parse: 2 callbacks suppressed
[ 2587.439071][T29627] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:03 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000300000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2587.568832][T29634] device erspan0 left promiscuous mode
[ 2587.574643][T29634] bridge6: port 1(erspan0) entered disabled state
[ 2587.582577][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2587.588375][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:03 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000080215c581ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2587.732805][T29636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2587.743166][T29637] bridge6: port 1(erspan0) entered blocking state
[ 2587.749821][T29637] bridge6: port 1(erspan0) entered disabled state
[ 2587.757127][T29637] device erspan0 entered promiscuous mode
06:08:03 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000011", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2587.822506][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2587.828359][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:03 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f000300"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2587.948177][T29644] device erspan0 left promiscuous mode
[ 2587.954134][T29644] bridge4: port 1(erspan0) entered disabled state
[ 2588.132606][T29646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2588.142044][T29647] bridge4: port 1(erspan0) entered blocking state
[ 2588.149047][T29647] bridge4: port 1(erspan0) entered disabled state
[ 2588.156357][T29647] device erspan0 entered promiscuous mode
06:08:04 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:08:04 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:04 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd0a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2588.542516][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2588.664168][T29661] device erspan0 left promiscuous mode
[ 2588.669772][T29661] bridge3: port 1(erspan0) entered disabled state
[ 2588.743704][T29661] bridge871: port 1(erspan0) entered blocking state
[ 2588.750873][T29661] bridge871: port 1(erspan0) entered disabled state
[ 2588.758500][T29661] device erspan0 entered promiscuous mode
[ 2588.882577][T29665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2588.931593][T29667] device erspan0 left promiscuous mode
[ 2588.938507][T29667] bridge871: port 1(erspan0) entered disabled state
[ 2589.024715][T29667] bridge3: port 1(erspan0) entered blocking state
[ 2589.031173][T29667] bridge3: port 1(erspan0) entered disabled state
[ 2589.038410][T29667] device erspan0 entered promiscuous mode
[ 2589.072523][T29669] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:05 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000601ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2589.166139][T29672] device erspan0 left promiscuous mode
[ 2589.172043][T29672] bridge6: port 1(erspan0) entered disabled state
[ 2589.342574][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2589.352271][T29677] bridge6: port 1(erspan0) entered blocking state
[ 2589.359180][T29677] bridge6: port 1(erspan0) entered disabled state
[ 2589.366543][T29677] device erspan0 entered promiscuous mode
06:08:05 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f00030000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2589.515413][T29685] device erspan0 left promiscuous mode
[ 2589.521241][T29685] bridge4: port 1(erspan0) entered disabled state
[ 2589.732632][T29689] validate_nla: 17 callbacks suppressed
[ 2589.732645][T29689] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2589.747964][T29691] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2589.758353][T29692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2589.767926][T29693] bridge4: port 1(erspan0) entered blocking state
[ 2589.775461][T29693] bridge4: port 1(erspan0) entered disabled state
[ 2589.783204][T29693] device erspan0 entered promiscuous mode
[ 2589.829382][T29694] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2589.838261][T29694] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2589.846740][T29694] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:08:05 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2590.196603][T29702] device erspan0 left promiscuous mode
[ 2590.202248][T29702] bridge3: port 1(erspan0) entered disabled state
[ 2590.281588][T29702] bridge872: port 1(erspan0) entered blocking state
[ 2590.288296][T29702] bridge872: port 1(erspan0) entered disabled state
[ 2590.295689][T29702] device erspan0 entered promiscuous mode
06:08:06 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:06 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd25000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2590.334697][T29704] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2590.344951][T29707] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2590.433120][T29732] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2590.435598][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2590.447289][T29733] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2590.460383][T29709] device erspan0 left promiscuous mode
[ 2590.466445][T29709] bridge872: port 1(erspan0) entered disabled state
[ 2590.524802][T29709] bridge3: port 1(erspan0) entered blocking state
[ 2590.531250][T29709] bridge3: port 1(erspan0) entered disabled state
[ 2590.538731][T29709] device erspan0 entered promiscuous mode
[ 2590.576181][T29710] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:06 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000058651ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2590.668789][T29712] device erspan0 left promiscuous mode
[ 2590.674705][T29712] bridge6: port 1(erspan0) entered disabled state
[ 2590.872528][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2590.885725][T29718] bridge6: port 1(erspan0) entered blocking state
[ 2590.892880][T29718] bridge6: port 1(erspan0) entered disabled state
[ 2590.900149][T29718] device erspan0 entered promiscuous mode
06:08:06 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f00030000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:07 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f211", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2591.052576][T29724] device erspan0 left promiscuous mode
[ 2591.058175][T29724] bridge4: port 1(erspan0) entered disabled state
[ 2591.228646][T29753] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2591.333096][T29727] bridge4: port 1(erspan0) entered blocking state
[ 2591.339655][T29727] bridge4: port 1(erspan0) entered disabled state
[ 2591.346934][T29727] device erspan0 entered promiscuous mode
06:08:07 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2591.582508][    C0] net_ratelimit: 11 callbacks suppressed
[ 2591.582517][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2591.593996][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:07 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2591.742984][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2591.749351][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2591.810831][T29739] device erspan0 left promiscuous mode
[ 2591.817804][T29739] bridge3: port 1(erspan0) entered disabled state
[ 2591.896433][T29739] bridge873: port 1(erspan0) entered blocking state
[ 2591.903105][T29739] bridge873: port 1(erspan0) entered disabled state
[ 2591.910382][T29739] device erspan0 entered promiscuous mode
[ 2591.982510][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2591.988332][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2592.022831][T29742] device erspan0 left promiscuous mode
[ 2592.028504][T29742] bridge873: port 1(erspan0) entered disabled state
[ 2592.103970][T29742] bridge3: port 1(erspan0) entered blocking state
[ 2592.111022][T29742] bridge3: port 1(erspan0) entered disabled state
[ 2592.118584][T29742] device erspan0 entered promiscuous mode
06:08:08 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000f629af7a1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2592.234164][T29747] device erspan0 left promiscuous mode
[ 2592.240068][T29747] bridge6: port 1(erspan0) entered disabled state
06:08:08 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000600000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2592.502557][T29758] __nla_validate_parse: 3 callbacks suppressed
[ 2592.502570][T29758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2592.519799][T29759] bridge6: port 1(erspan0) entered blocking state
[ 2592.526352][T29759] bridge6: port 1(erspan0) entered disabled state
[ 2592.533545][T29759] device erspan0 entered promiscuous mode
06:08:08 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f00030000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2592.677967][T29768] device erspan0 left promiscuous mode
[ 2592.684243][T29768] bridge4: port 1(erspan0) entered disabled state
[ 2592.702504][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2592.884232][T29770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2592.893676][T29771] bridge4: port 1(erspan0) entered blocking state
[ 2592.900691][T29771] bridge4: port 1(erspan0) entered disabled state
[ 2592.908000][T29771] device erspan0 entered promiscuous mode
06:08:09 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b0000000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2593.272861][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2593.279509][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2593.309008][T29782] device erspan0 left promiscuous mode
06:08:09 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2593.316957][T29782] bridge3: port 1(erspan0) entered disabled state
[ 2593.402748][T29782] bridge874: port 1(erspan0) entered blocking state
[ 2593.409613][T29782] bridge874: port 1(erspan0) entered disabled state
[ 2593.419642][T29782] device erspan0 entered promiscuous mode
06:08:09 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000012", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2593.532637][T29785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2593.542173][T29786] device erspan0 left promiscuous mode
[ 2593.548322][T29786] bridge874: port 1(erspan0) entered disabled state
[ 2593.626505][T29786] bridge3: port 1(erspan0) entered blocking state
[ 2593.633402][T29786] bridge3: port 1(erspan0) entered disabled state
[ 2593.641300][T29786] device erspan0 entered promiscuous mode
[ 2593.662728][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2593.682037][T29787] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:09 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000585c21801ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2593.775352][T29792] device erspan0 left promiscuous mode
[ 2593.781191][T29792] bridge6: port 1(erspan0) entered disabled state
[ 2593.972843][T29794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2593.985019][T29795] bridge6: port 1(erspan0) entered blocking state
[ 2593.991737][T29795] bridge6: port 1(erspan0) entered disabled state
[ 2593.999379][T29795] device erspan0 entered promiscuous mode
06:08:10 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2594.217252][T29801] device erspan0 left promiscuous mode
[ 2594.222976][T29801] bridge4: port 1(erspan0) entered disabled state
[ 2594.422590][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2594.433425][T29809] bridge4: port 1(erspan0) entered blocking state
[ 2594.440162][T29809] bridge4: port 1(erspan0) entered disabled state
[ 2594.447871][T29809] device erspan0 entered promiscuous mode
06:08:10 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b0000000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2594.837724][T29820] device erspan0 left promiscuous mode
[ 2594.844606][T29820] bridge3: port 1(erspan0) entered disabled state
[ 2594.922878][T29820] bridge875: port 1(erspan0) entered blocking state
[ 2594.929534][T29820] bridge875: port 1(erspan0) entered disabled state
[ 2594.937004][T29820] device erspan0 entered promiscuous mode
[ 2595.032619][T29822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2595.042693][T29823] device erspan0 left promiscuous mode
[ 2595.048333][T29823] bridge875: port 1(erspan0) entered disabled state
[ 2595.125378][T29823] bridge3: port 1(erspan0) entered blocking state
[ 2595.132231][T29823] bridge3: port 1(erspan0) entered disabled state
[ 2595.139538][T29823] device erspan0 entered promiscuous mode
06:08:11 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2595.176396][T29825] validate_nla: 19 callbacks suppressed
[ 2595.176408][T29825] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2595.192197][T29826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2595.277535][T29850] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:11 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000811ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2595.328781][T29803] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2595.342392][T29832] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2595.352373][T29832] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2595.361905][T29832] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:08:11 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2595.408661][T29829] device erspan0 left promiscuous mode
[ 2595.414526][T29829] bridge6: port 1(erspan0) entered disabled state
[ 2595.466665][T29856] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2595.572598][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2595.582455][T29836] bridge6: port 1(erspan0) entered blocking state
[ 2595.589389][T29836] bridge6: port 1(erspan0) entered disabled state
[ 2595.599536][T29836] device erspan0 entered promiscuous mode
06:08:11 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2595.746936][T29842] device erspan0 left promiscuous mode
[ 2595.752807][T29842] bridge4: port 1(erspan0) entered disabled state
[ 2595.952849][T29844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2595.962971][T29845] bridge4: port 1(erspan0) entered blocking state
[ 2595.969913][T29845] bridge4: port 1(erspan0) entered disabled state
[ 2595.977323][T29845] device erspan0 entered promiscuous mode
[ 2596.072654][T29872] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:12 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f212", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2596.136354][T29850] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2596.149304][T29856] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:12 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b0000000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2596.459032][T29857] device erspan0 left promiscuous mode
[ 2596.465962][T29857] bridge3: port 1(erspan0) entered disabled state
[ 2596.553738][T29857] bridge876: port 1(erspan0) entered blocking state
[ 2596.560360][T29857] bridge876: port 1(erspan0) entered disabled state
[ 2596.567595][T29857] device erspan0 entered promiscuous mode
[ 2596.672646][T29860] device erspan0 left promiscuous mode
[ 2596.678716][T29860] bridge876: port 1(erspan0) entered disabled state
[ 2596.755154][T29860] bridge3: port 1(erspan0) entered blocking state
[ 2596.761695][T29860] bridge3: port 1(erspan0) entered disabled state
[ 2596.768705][T29860] device erspan0 entered promiscuous mode
06:08:12 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000e3017c841ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2596.862533][    C1] net_ratelimit: 14 callbacks suppressed
[ 2596.862542][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2596.884863][T29865] device erspan0 left promiscuous mode
[ 2596.890627][T29865] bridge6: port 1(erspan0) entered disabled state
[ 2597.062677][T29869] bridge6: port 1(erspan0) entered blocking state
[ 2597.069433][T29869] bridge6: port 1(erspan0) entered disabled state
[ 2597.076830][T29869] device erspan0 entered promiscuous mode
06:08:13 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:13 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:13 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700000002a0900000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2597.422483][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2597.428312][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2597.514573][T29882] device erspan0 left promiscuous mode
[ 2597.520206][T29882] bridge4: port 1(erspan0) entered disabled state
[ 2597.682618][T29884] __nla_validate_parse: 4 callbacks suppressed
[ 2597.682631][T29884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2597.698232][T29885] bridge4: port 1(erspan0) entered blocking state
[ 2597.705044][T29885] bridge4: port 1(erspan0) entered disabled state
[ 2597.712146][T29885] device erspan0 entered promiscuous mode
[ 2597.822509][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2597.828484][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:13 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000000002", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2597.965666][T29894] device erspan0 left promiscuous mode
[ 2597.975232][T29894] bridge3: port 1(erspan0) entered disabled state
[ 2597.983381][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2597.989735][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2598.055468][T29894] bridge877: port 1(erspan0) entered blocking state
[ 2598.062150][T29894] bridge877: port 1(erspan0) entered disabled state
[ 2598.069756][T29894] device erspan0 entered promiscuous mode
[ 2598.173100][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2598.182413][T29897] device erspan0 left promiscuous mode
[ 2598.190416][T29897] bridge877: port 1(erspan0) entered disabled state
[ 2598.222521][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2598.228350][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2598.268205][T29897] bridge3: port 1(erspan0) entered blocking state
[ 2598.274828][T29897] bridge3: port 1(erspan0) entered disabled state
[ 2598.282441][T29897] device erspan0 entered promiscuous mode
06:08:14 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:14 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2598.332568][T29905] device erspan0 left promiscuous mode
[ 2598.338291][T29905] bridge6: port 1(erspan0) entered disabled state
[ 2598.512886][T29910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2598.522390][T29911] bridge6: port 1(erspan0) entered blocking state
[ 2598.529657][T29911] bridge6: port 1(erspan0) entered disabled state
[ 2598.536828][T29911] device erspan0 entered promiscuous mode
06:08:14 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2598.683414][T29898] device erspan0 left promiscuous mode
[ 2598.689250][T29898] bridge3: port 1(erspan0) entered disabled state
[ 2598.770800][T29898] bridge877: port 1(erspan0) entered blocking state
[ 2598.777620][T29898] bridge877: port 1(erspan0) entered disabled state
[ 2598.785813][T29898] device erspan0 entered promiscuous mode
06:08:14 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000013", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2598.832503][T29918] device erspan0 left promiscuous mode
[ 2598.838168][T29918] bridge4: port 1(erspan0) entered disabled state
06:08:14 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000ffffa8881ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2598.942501][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2599.023007][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2599.032306][T29923] bridge4: port 1(erspan0) entered blocking state
[ 2599.053089][T29923] bridge4: port 1(erspan0) entered disabled state
[ 2599.060426][T29923] device erspan0 entered promiscuous mode
06:08:15 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000000002", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2599.227228][T29937] device erspan0 left promiscuous mode
[ 2599.237420][T29937] bridge6: port 1(erspan0) entered disabled state
[ 2599.724191][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2599.733669][T29945] bridge6: port 1(erspan0) entered blocking state
[ 2599.740367][T29945] bridge6: port 1(erspan0) entered disabled state
[ 2599.748813][T29945] device erspan0 entered promiscuous mode
[ 2599.791285][T29948] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
06:08:15 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2600.036754][T29950] device erspan0 left promiscuous mode
[ 2600.042633][T29950] bridge877: port 1(erspan0) entered disabled state
[ 2600.140245][T29950] bridge878: port 1(erspan0) entered blocking state
[ 2600.147347][T29950] bridge878: port 1(erspan0) entered disabled state
[ 2600.155569][T29950] device erspan0 entered promiscuous mode
[ 2600.242595][T29955] validate_nla: 22 callbacks suppressed
[ 2600.242606][T29955] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2600.257163][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2600.266722][T29958] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2600.283674][T29959] device erspan0 left promiscuous mode
06:08:16 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:16 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000c00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2600.292659][T29959] bridge878: port 1(erspan0) entered disabled state
[ 2600.329539][T29981] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2600.379410][T29985] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2600.401561][T29959] bridge3: port 1(erspan0) entered blocking state
[ 2600.408267][T29959] bridge3: port 1(erspan0) entered disabled state
[ 2600.415690][T29959] device erspan0 entered promiscuous mode
[ 2600.454877][T29962] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:16 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000ffffff9e1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2600.550360][T29965] device erspan0 left promiscuous mode
[ 2600.556886][T29965] bridge4: port 1(erspan0) entered disabled state
[ 2600.742571][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2600.752321][T29968] bridge4: port 1(erspan0) entered blocking state
[ 2600.758986][T29968] bridge4: port 1(erspan0) entered disabled state
[ 2600.769390][T29968] device erspan0 entered promiscuous mode
06:08:16 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f213", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2600.921655][T29976] device erspan0 left promiscuous mode
[ 2600.927547][T29976] bridge6: port 1(erspan0) entered disabled state
06:08:16 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b000000000002", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2601.142592][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2601.155260][T29979] bridge6: port 1(erspan0) entered blocking state
[ 2601.162051][T29979] bridge6: port 1(erspan0) entered disabled state
[ 2601.169361][T29979] device erspan0 entered promiscuous mode
[ 2601.177904][T30010] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:17 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2601.215268][T29981] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2601.227557][T29985] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2601.326415][T30016] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:17 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2601.598720][T29992] device erspan0 left promiscuous mode
[ 2601.607159][T29992] bridge3: port 1(erspan0) entered disabled state
[ 2601.686935][T29992] bridge879: port 1(erspan0) entered blocking state
[ 2601.693730][T29992] bridge879: port 1(erspan0) entered disabled state
[ 2601.700907][T29992] device erspan0 entered promiscuous mode
[ 2601.822954][T29995] device erspan0 left promiscuous mode
[ 2601.828600][T29995] bridge879: port 1(erspan0) entered disabled state
[ 2601.915001][T29995] bridge3: port 1(erspan0) entered blocking state
[ 2601.921610][T29995] bridge3: port 1(erspan0) entered disabled state
[ 2601.928794][T29995] device erspan0 entered promiscuous mode
[ 2601.982703][    C0] net_ratelimit: 11 callbacks suppressed
[ 2601.982713][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2601.994328][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:18 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000847c01e31ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2602.073697][T30001] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2602.081937][T30001] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2602.143559][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2602.149329][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2602.161840][T30004] device erspan0 left promiscuous mode
[ 2602.167751][T30004] bridge4: port 1(erspan0) entered disabled state
06:08:18 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2602.332759][T30012] bridge4: port 1(erspan0) entered blocking state
[ 2602.339438][T30012] bridge4: port 1(erspan0) entered disabled state
[ 2602.350291][T30012] device erspan0 entered promiscuous mode
[ 2602.384150][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2602.389956][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:18 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:18 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2602.523104][T30021] device erspan0 left promiscuous mode
[ 2602.529985][T30021] bridge6: port 1(erspan0) entered disabled state
[ 2602.742899][T30023] __nla_validate_parse: 4 callbacks suppressed
[ 2602.742912][T30023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2602.763267][T30024] bridge6: port 1(erspan0) entered blocking state
[ 2602.769732][T30024] bridge6: port 1(erspan0) entered disabled state
[ 2602.778699][T30024] device erspan0 entered promiscuous mode
[ 2602.820379][T30025] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
06:08:18 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:18 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000014", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2603.103806][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2603.232261][T30036] device erspan0 left promiscuous mode
[ 2603.238473][T30036] bridge3: port 1(erspan0) entered disabled state
[ 2603.317489][T30036] bridge880: port 1(erspan0) entered blocking state
[ 2603.324174][T30036] bridge880: port 1(erspan0) entered disabled state
[ 2603.331580][T30036] device erspan0 entered promiscuous mode
[ 2603.425737][T30040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2603.435190][T30041] device erspan0 left promiscuous mode
[ 2603.441150][T30041] bridge880: port 1(erspan0) entered disabled state
[ 2603.516020][T30041] bridge3: port 1(erspan0) entered blocking state
[ 2603.522593][T30041] bridge3: port 1(erspan0) entered disabled state
[ 2603.529579][T30041] device erspan0 entered promiscuous mode
[ 2603.566214][T30042] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:19 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000fffffff01ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:08:19 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2603.662527][T30050] device erspan0 left promiscuous mode
[ 2603.670542][T30050] bridge4: port 1(erspan0) entered disabled state
[ 2603.677104][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2603.682891][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2603.883206][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2603.892771][T30053] bridge4: port 1(erspan0) entered blocking state
[ 2603.899679][T30053] bridge4: port 1(erspan0) entered disabled state
[ 2603.907364][T30053] device erspan0 entered promiscuous mode
06:08:20 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2604.068511][T30059] device erspan0 left promiscuous mode
[ 2604.072505][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2604.074952][T30059] bridge6: port 1(erspan0) entered disabled state
06:08:20 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2604.304713][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2604.314200][T30068] bridge6: port 1(erspan0) entered blocking state
[ 2604.321267][T30068] bridge6: port 1(erspan0) entered disabled state
[ 2604.329110][T30068] device erspan0 entered promiscuous mode
06:08:20 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2604.756394][T30080] device erspan0 left promiscuous mode
[ 2604.762198][T30080] bridge3: port 1(erspan0) entered disabled state
[ 2604.844588][T30080] bridge881: port 1(erspan0) entered blocking state
[ 2604.851236][T30080] bridge881: port 1(erspan0) entered disabled state
[ 2604.858583][T30080] device erspan0 entered promiscuous mode
[ 2605.008403][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2605.017832][T30085] device erspan0 left promiscuous mode
[ 2605.023688][T30085] bridge881: port 1(erspan0) entered disabled state
[ 2605.106107][T30085] bridge3: port 1(erspan0) entered blocking state
[ 2605.112620][T30085] bridge3: port 1(erspan0) entered disabled state
[ 2605.119852][T30085] device erspan0 entered promiscuous mode
[ 2605.157424][T30086] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:21 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000007aaf29f61ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2605.259114][T30090] device erspan0 left promiscuous mode
[ 2605.265754][T30090] bridge4: port 1(erspan0) entered disabled state
[ 2605.472560][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2605.482083][T30096] bridge4: port 1(erspan0) entered blocking state
[ 2605.489507][T30096] bridge4: port 1(erspan0) entered disabled state
[ 2605.500073][T30096] device erspan0 entered promiscuous mode
06:08:21 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000001000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2605.544911][T30095] validate_nla: 19 callbacks suppressed
[ 2605.544924][T30095] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2605.610946][T30119] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:21 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2605.692607][T30076] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2605.701642][T30102] device erspan0 left promiscuous mode
[ 2605.708399][T30102] bridge6: port 1(erspan0) entered disabled state
06:08:21 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70100000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2605.833775][T30128] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2605.962577][T30104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2605.973173][T30105] bridge6: port 1(erspan0) entered blocking state
[ 2605.980050][T30105] bridge6: port 1(erspan0) entered disabled state
[ 2605.987422][T30105] device erspan0 entered promiscuous mode
06:08:22 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:22 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f214", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2606.410111][T30143] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2606.463716][T30114] device erspan0 left promiscuous mode
[ 2606.469563][T30114] bridge3: port 1(erspan0) entered disabled state
[ 2606.522895][T30114] bridge882: port 1(erspan0) entered blocking state
[ 2606.529565][T30114] bridge882: port 1(erspan0) entered disabled state
[ 2606.537274][T30114] device erspan0 entered promiscuous mode
[ 2606.652677][T30117] device erspan0 left promiscuous mode
[ 2606.658513][T30117] bridge882: port 1(erspan0) entered disabled state
[ 2606.754814][T30117] bridge3: port 1(erspan0) entered blocking state
[ 2606.761323][T30117] bridge3: port 1(erspan0) entered disabled state
[ 2606.770140][T30117] device erspan0 entered promiscuous mode
[ 2606.806278][T30119] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:22 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000005607ebfd1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2606.898643][T30128] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2606.910810][T30125] device erspan0 left promiscuous mode
[ 2606.917862][T30125] bridge4: port 1(erspan0) entered disabled state
06:08:22 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70480000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2607.050996][T30157] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2607.184414][T30131] bridge4: port 1(erspan0) entered blocking state
[ 2607.191605][T30131] bridge4: port 1(erspan0) entered disabled state
[ 2607.202861][T30131] device erspan0 entered promiscuous mode
[ 2607.262490][    C1] net_ratelimit: 14 callbacks suppressed
[ 2607.262499][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:23 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2607.362724][T30136] device erspan0 left promiscuous mode
[ 2607.368617][T30136] bridge6: port 1(erspan0) entered disabled state
[ 2607.562970][T30141] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2607.571272][T30141] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
06:08:23 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2607.622650][T30146] bridge6: port 1(erspan0) entered blocking state
[ 2607.631515][T30146] bridge6: port 1(erspan0) entered disabled state
[ 2607.647787][T30146] device erspan0 entered promiscuous mode
06:08:23 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2607.822831][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2607.828971][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2608.057817][T30158] device erspan0 left promiscuous mode
[ 2608.063544][T30158] bridge3: port 1(erspan0) entered disabled state
[ 2608.133623][T30158] bridge883: port 1(erspan0) entered blocking state
[ 2608.140280][T30158] bridge883: port 1(erspan0) entered disabled state
[ 2608.148651][T30158] device erspan0 entered promiscuous mode
[ 2608.222545][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2608.228509][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2608.298677][T30161] __nla_validate_parse: 4 callbacks suppressed
[ 2608.298690][T30161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2608.314342][T30163] device erspan0 left promiscuous mode
[ 2608.320127][T30163] bridge883: port 1(erspan0) entered disabled state
[ 2608.386069][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2608.391860][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2608.398778][T30163] bridge3: port 1(erspan0) entered blocking state
[ 2608.405260][T30163] bridge3: port 1(erspan0) entered disabled state
[ 2608.412582][T30163] device erspan0 entered promiscuous mode
[ 2608.448887][T30164] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:24 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000088a8ffff1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2608.543933][T30169] device erspan0 left promiscuous mode
[ 2608.549674][T30169] bridge4: port 1(erspan0) entered disabled state
[ 2608.623052][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2608.629354][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2608.742550][T30171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2608.751991][T30172] bridge4: port 1(erspan0) entered blocking state
[ 2608.761340][T30172] bridge4: port 1(erspan0) entered disabled state
[ 2608.768552][T30172] device erspan0 entered promiscuous mode
06:08:24 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000003f00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:24 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd704c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:24 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2608.938622][T30181] device erspan0 left promiscuous mode
[ 2608.944280][T30181] bridge6: port 1(erspan0) entered disabled state
[ 2609.123499][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2609.133012][T30184] bridge6: port 1(erspan0) entered blocking state
[ 2609.139719][T30184] bridge6: port 1(erspan0) entered disabled state
[ 2609.147004][T30184] device erspan0 entered promiscuous mode
06:08:25 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f215", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:25 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2609.342521][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2609.659198][T30193] device erspan0 left promiscuous mode
[ 2609.666819][T30193] bridge3: port 1(erspan0) entered disabled state
[ 2609.756804][T30193] bridge884: port 1(erspan0) entered blocking state
[ 2609.763627][T30193] bridge884: port 1(erspan0) entered disabled state
[ 2609.770971][T30193] device erspan0 entered promiscuous mode
[ 2609.902764][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2609.915270][T30198] device erspan0 left promiscuous mode
[ 2609.920904][T30198] bridge884: port 1(erspan0) entered disabled state
[ 2609.994384][T30198] bridge3: port 1(erspan0) entered blocking state
[ 2610.001083][T30198] bridge3: port 1(erspan0) entered disabled state
[ 2610.009052][T30198] device erspan0 entered promiscuous mode
[ 2610.046064][T30199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:26 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000007fffffff1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2610.140588][T30207] device erspan0 left promiscuous mode
[ 2610.146520][T30207] bridge4: port 1(erspan0) entered disabled state
[ 2610.342536][T30209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2610.351936][T30210] bridge4: port 1(erspan0) entered blocking state
[ 2610.361248][T30210] bridge4: port 1(erspan0) entered disabled state
[ 2610.368706][T30210] device erspan0 entered promiscuous mode
06:08:26 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2610.494411][T30219] device erspan0 left promiscuous mode
[ 2610.500151][T30219] bridge6: port 1(erspan0) entered disabled state
[ 2610.682534][T30222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2610.692611][T30223] bridge6: port 1(erspan0) entered blocking state
[ 2610.699246][T30223] bridge6: port 1(erspan0) entered disabled state
[ 2610.706407][T30223] device erspan0 entered promiscuous mode
06:08:26 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000004000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2610.747629][T30225] validate_nla: 19 callbacks suppressed
[ 2610.747641][T30225] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2610.834767][T30253] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:26 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70600000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:26 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2610.904812][T30230] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2610.917754][T30234] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2610.932523][T30234] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2610.940747][T30234] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2611.076005][T30259] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2611.227612][T30236] device erspan0 left promiscuous mode
[ 2611.234212][T30236] bridge3: port 1(erspan0) entered disabled state
[ 2611.307062][T30236] bridge885: port 1(erspan0) entered blocking state
[ 2611.313893][T30236] bridge885: port 1(erspan0) entered disabled state
[ 2611.321488][T30236] device erspan0 entered promiscuous mode
[ 2611.442532][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2611.452037][T30239] device erspan0 left promiscuous mode
[ 2611.458147][T30239] bridge885: port 1(erspan0) entered disabled state
[ 2611.546335][T30239] bridge3: port 1(erspan0) entered blocking state
[ 2611.553131][T30239] bridge3: port 1(erspan0) entered disabled state
[ 2611.560413][T30239] device erspan0 entered promiscuous mode
[ 2611.597591][T30243] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2611.607338][T30241] device erspan0 left promiscuous mode
[ 2611.615136][T30267] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2611.616748][T30241] bridge4: port 1(erspan0) entered disabled state
06:08:27 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a00400000009effffff1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2611.858029][T30272] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2611.870779][T30248] bridge4: port 1(erspan0) entered blocking state
[ 2611.880668][T30248] bridge4: port 1(erspan0) entered disabled state
[ 2611.888454][T30248] device erspan0 entered promiscuous mode
06:08:28 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f216", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2612.046863][T30253] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2612.062773][T30258] device erspan0 left promiscuous mode
[ 2612.068339][T30258] bridge6: port 1(erspan0) entered disabled state
06:08:28 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2612.285281][T30262] bridge6: port 1(erspan0) entered blocking state
[ 2612.291816][T30262] bridge6: port 1(erspan0) entered disabled state
[ 2612.299113][T30262] device erspan0 entered promiscuous mode
[ 2612.382526][    C0] net_ratelimit: 11 callbacks suppressed
[ 2612.382536][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2612.394052][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:28 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000004800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:28 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:28 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70680000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2612.542489][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2612.548294][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2612.784820][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2612.790617][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2612.964141][T30273] device erspan0 left promiscuous mode
[ 2612.971174][T30273] bridge3: port 1(erspan0) entered disabled state
[ 2613.044711][T30273] bridge886: port 1(erspan0) entered blocking state
[ 2613.051361][T30273] bridge886: port 1(erspan0) entered disabled state
[ 2613.058821][T30273] device erspan0 entered promiscuous mode
[ 2613.182822][T30276] device erspan0 left promiscuous mode
[ 2613.188658][T30276] bridge886: port 1(erspan0) entered disabled state
[ 2613.285756][T30276] bridge3: port 1(erspan0) entered blocking state
[ 2613.292366][T30276] bridge3: port 1(erspan0) entered disabled state
[ 2613.299731][T30276] device erspan0 entered promiscuous mode
[ 2613.373413][T30279] __nla_validate_parse: 4 callbacks suppressed
[ 2613.373422][T30279] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:29 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000f0ffffff1ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2613.475330][T30283] device erspan0 left promiscuous mode
[ 2613.481179][T30283] bridge4: port 1(erspan0) entered disabled state
[ 2613.683094][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2613.692506][T30289] bridge4: port 1(erspan0) entered blocking state
[ 2613.698999][T30289] bridge4: port 1(erspan0) entered disabled state
[ 2613.708627][T30289] device erspan0 entered promiscuous mode
06:08:29 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2613.755669][T30299] device erspan0 left promiscuous mode
[ 2613.762059][T30299] bridge6: port 1(erspan0) entered disabled state
06:08:29 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2613.952610][T30302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2614.062698][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2614.069076][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000004c00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:30 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd706c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2614.359067][T30315] device erspan0 left promiscuous mode
[ 2614.365545][T30315] bridge3: port 1(erspan0) entered disabled state
[ 2614.444461][T30315] bridge887: port 1(erspan0) entered blocking state
[ 2614.451209][T30315] bridge887: port 1(erspan0) entered disabled state
[ 2614.459183][T30315] device erspan0 entered promiscuous mode
[ 2614.462514][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2614.470738][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2614.582528][T30317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2614.591935][T30320] device erspan0 left promiscuous mode
[ 2614.598868][T30320] bridge887: port 1(erspan0) entered disabled state
[ 2614.675953][T30320] bridge3: port 1(erspan0) entered blocking state
[ 2614.682473][T30320] bridge3: port 1(erspan0) entered disabled state
[ 2614.689514][T30320] device erspan0 entered promiscuous mode
[ 2614.726460][T30322] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2614.736592][T30319] device erspan0 left promiscuous mode
[ 2614.742236][T30319] bridge4: port 1(erspan0) entered disabled state
06:08:30 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000200001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2614.972846][T30326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2615.005607][T30328] bridge4: port 1(erspan0) entered blocking state
[ 2615.012264][T30328] bridge4: port 1(erspan0) entered disabled state
[ 2615.021139][T30328] device erspan0 entered promiscuous mode
06:08:31 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:08:31 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f217", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2615.263779][T30340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2615.278079][T30341] bridge6: port 1(erspan0) entered blocking state
[ 2615.285182][T30341] bridge6: port 1(erspan0) entered disabled state
[ 2615.292982][T30341] device erspan0 entered promiscuous mode
[ 2615.353110][T30342] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
06:08:31 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000006000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:31 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70740000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2615.758540][T30352] validate_nla: 25 callbacks suppressed
[ 2615.758556][T30352] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2615.773112][T30353] device erspan0 left promiscuous mode
[ 2615.792659][T30353] bridge3: port 1(erspan0) entered disabled state
[ 2615.836058][T30384] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2615.868946][T30353] bridge888: port 1(erspan0) entered blocking state
[ 2615.876316][T30353] bridge888: port 1(erspan0) entered disabled state
[ 2615.883782][T30353] device erspan0 entered promiscuous mode
[ 2616.022650][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2616.036273][T30356] device erspan0 left promiscuous mode
[ 2616.041968][T30356] bridge888: port 1(erspan0) entered disabled state
[ 2616.116161][T30356] bridge3: port 1(erspan0) entered blocking state
[ 2616.122981][T30356] bridge3: port 1(erspan0) entered disabled state
[ 2616.130291][T30356] device erspan0 entered promiscuous mode
[ 2616.166355][T30363] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2616.178579][T30360] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2616.186883][T30360] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2616.197632][T30360] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:08:32 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000400001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2616.324445][T30362] device erspan0 left promiscuous mode
[ 2616.330236][T30362] bridge4: port 1(erspan0) entered disabled state
[ 2616.468848][T30394] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2616.522999][T30369] bridge4: port 1(erspan0) entered blocking state
[ 2616.529536][T30369] bridge4: port 1(erspan0) entered disabled state
[ 2616.536895][T30369] device erspan0 entered promiscuous mode
[ 2616.632606][T30400] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:32 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2616.693810][T30371] device erspan0 left promiscuous mode
[ 2616.699724][T30371] bridge6: port 1(erspan0) entered disabled state
[ 2616.801511][T30377] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2616.912904][T30380] bridge6: port 1(erspan0) entered blocking state
[ 2616.919505][T30380] bridge6: port 1(erspan0) entered disabled state
[ 2616.927036][T30380] device erspan0 entered promiscuous mode
[ 2616.968688][T30384] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:33 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2617.084246][T30388] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
06:08:33 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000586500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2617.376445][T30395] device erspan0 left promiscuous mode
[ 2617.382399][T30395] bridge3: port 1(erspan0) entered disabled state
[ 2617.462509][T30395] bridge889: port 1(erspan0) entered blocking state
[ 2617.469234][T30395] bridge889: port 1(erspan0) entered disabled state
[ 2617.476838][T30395] device erspan0 entered promiscuous mode
[ 2617.582988][T30398] device erspan0 left promiscuous mode
[ 2617.588713][T30398] bridge889: port 1(erspan0) entered disabled state
[ 2617.647318][T30398] bridge3: port 1(erspan0) entered blocking state
[ 2617.653930][T30398] bridge3: port 1(erspan0) entered disabled state
[ 2617.661096][T30398] device erspan0 entered promiscuous mode
[ 2617.666920][    C1] net_ratelimit: 13 callbacks suppressed
[ 2617.666937][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:33 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd707a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:33 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000600001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2617.831907][T30405] device erspan0 left promiscuous mode
[ 2617.837833][T30405] bridge4: port 1(erspan0) entered disabled state
[ 2618.003078][T30409] bridge4: port 1(erspan0) entered blocking state
[ 2618.009846][T30409] bridge4: port 1(erspan0) entered disabled state
[ 2618.018176][T30409] device erspan0 entered promiscuous mode
06:08:34 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f218", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2618.182719][T30415] device erspan0 left promiscuous mode
[ 2618.188629][T30415] bridge6: port 1(erspan0) entered disabled state
[ 2618.222521][    C0] protocol 88fb is buggy, dev hsr_slave_0
06:08:34 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2618.228315][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2618.423420][T30417] __nla_validate_parse: 6 callbacks suppressed
[ 2618.423473][T30417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2618.440330][T30420] bridge6: port 1(erspan0) entered blocking state
[ 2618.447254][T30420] bridge6: port 1(erspan0) entered disabled state
[ 2618.454782][T30420] device erspan0 entered promiscuous mode
[ 2618.632514][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2618.638357][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:34 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:34 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2618.793353][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2618.799833][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2618.944824][T30430] device erspan0 left promiscuous mode
[ 2618.950529][T30430] bridge3: port 1(erspan0) entered disabled state
[ 2619.024181][T30430] bridge890: port 1(erspan0) entered blocking state
[ 2619.030895][T30430] bridge890: port 1(erspan0) entered disabled state
[ 2619.032490][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2619.038362][T30430] device erspan0 entered promiscuous mode
[ 2619.043300][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2619.152610][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2619.161972][T30433] device erspan0 left promiscuous mode
[ 2619.171039][T30433] bridge890: port 1(erspan0) entered disabled state
[ 2619.246969][T30433] bridge3: port 1(erspan0) entered blocking state
[ 2619.253543][T30433] bridge3: port 1(erspan0) entered disabled state
[ 2619.261119][T30433] device erspan0 entered promiscuous mode
06:08:35 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000006800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2619.297962][T30434] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:35 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000a00001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2619.511844][T30444] device erspan0 left promiscuous mode
[ 2619.518624][T30444] bridge4: port 1(erspan0) entered disabled state
[ 2619.682599][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2619.691988][T30448] bridge4: port 1(erspan0) entered blocking state
[ 2619.702162][T30448] bridge4: port 1(erspan0) entered disabled state
[ 2619.709576][T30448] device erspan0 entered promiscuous mode
[ 2619.756340][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:35 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:08:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2619.882538][T30457] device erspan0 left promiscuous mode
[ 2619.888961][T30457] bridge6: port 1(erspan0) entered disabled state
06:08:35 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000600000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2620.058606][T30484] device erspan0 left promiscuous mode
[ 2620.075741][T30484] bridge4: port 1(erspan0) entered disabled state
[ 2620.773237][T30461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2620.785221][T30463] bridge6: port 1(erspan0) entered blocking state
[ 2620.791949][T30463] bridge6: port 1(erspan0) entered disabled state
[ 2620.799267][T30463] device erspan0 entered promiscuous mode
[ 2620.840636][T30462] validate_nla: 24 callbacks suppressed
[ 2620.840647][T30462] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2620.857758][T30462] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2620.867651][T30462] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2620.924924][T30501] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:36 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x6}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2621.022710][T30469] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2621.249864][T30473] device erspan0 left promiscuous mode
[ 2621.256443][T30473] bridge3: port 1(erspan0) entered disabled state
[ 2621.346509][T30473] bridge891: port 1(erspan0) entered blocking state
[ 2621.353640][T30473] bridge891: port 1(erspan0) entered disabled state
[ 2621.360962][T30473] device erspan0 entered promiscuous mode
[ 2621.473354][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2621.483323][T30478] device erspan0 left promiscuous mode
[ 2621.489198][T30478] bridge891: port 1(erspan0) entered disabled state
[ 2621.567067][T30478] bridge3: port 1(erspan0) entered blocking state
[ 2621.573577][T30478] bridge3: port 1(erspan0) entered disabled state
[ 2621.580729][T30478] device erspan0 entered promiscuous mode
[ 2621.616605][T30479] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:37 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000c00001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2621.762898][T30492] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2621.771797][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2621.806210][T30495] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2621.816516][T30496] bridge4: port 1(erspan0) entered blocking state
[ 2621.832594][T30496] bridge4: port 1(erspan0) entered disabled state
[ 2621.845694][T30496] device erspan0 entered promiscuous mode
06:08:37 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000006c00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2621.923514][T30516] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:38 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f219", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:38 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2622.028874][T30501] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2622.062131][T30504] device erspan0 left promiscuous mode
[ 2622.068994][T30504] bridge6: port 1(erspan0) entered disabled state
06:08:38 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000700000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2622.242244][T30531] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2622.352609][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2622.362084][T30507] bridge6: port 1(erspan0) entered blocking state
[ 2622.369469][T30507] bridge6: port 1(erspan0) entered disabled state
[ 2622.376938][T30507] device erspan0 entered promiscuous mode
06:08:38 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2622.769558][T30514] device erspan0 left promiscuous mode
[ 2622.776441][T30514] bridge3: port 1(erspan0) entered disabled state
[ 2622.783014][    C0] net_ratelimit: 11 callbacks suppressed
[ 2622.783024][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2622.794466][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2622.873852][T30514] bridge892: port 1(erspan0) entered blocking state
[ 2622.880522][T30514] bridge892: port 1(erspan0) entered disabled state
[ 2622.888666][T30514] device erspan0 entered promiscuous mode
[ 2622.952535][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2622.958419][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2623.014411][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2623.024921][T30519] device erspan0 left promiscuous mode
[ 2623.031105][T30519] bridge892: port 1(erspan0) entered disabled state
[ 2623.096267][T30519] bridge3: port 1(erspan0) entered blocking state
[ 2623.102904][T30519] bridge3: port 1(erspan0) entered disabled state
[ 2623.110291][T30519] device erspan0 entered promiscuous mode
[ 2623.182665][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2623.188719][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:39 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000e00001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2623.309842][T30524] device erspan0 left promiscuous mode
[ 2623.318865][T30524] bridge4: port 1(erspan0) entered disabled state
06:08:39 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2623.492677][T30534] __nla_validate_parse: 1 callbacks suppressed
[ 2623.492688][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2623.515642][T30535] bridge4: port 1(erspan0) entered blocking state
[ 2623.522794][T30535] bridge4: port 1(erspan0) entered disabled state
[ 2623.529892][T30535] device erspan0 entered promiscuous mode
06:08:39 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2623.686162][T30541] device erspan0 left promiscuous mode
[ 2623.694506][T30541] bridge6: port 1(erspan0) entered disabled state
06:08:39 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000007400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2623.821350][T30569] device erspan0 left promiscuous mode
[ 2623.829754][T30569] bridge4: port 1(erspan0) entered disabled state
[ 2623.902487][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2624.465819][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2624.472804][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2624.562738][T30545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2624.573074][T30546] bridge6: port 1(erspan0) entered blocking state
[ 2624.579936][T30546] bridge6: port 1(erspan0) entered disabled state
[ 2624.587300][T30546] device erspan0 entered promiscuous mode
06:08:40 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2624.862535][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2625.038370][T30557] device erspan0 left promiscuous mode
[ 2625.044684][T30557] bridge3: port 1(erspan0) entered disabled state
[ 2625.114466][T30557] bridge893: port 1(erspan0) entered blocking state
[ 2625.121309][T30557] bridge893: port 1(erspan0) entered disabled state
[ 2625.129225][T30557] device erspan0 entered promiscuous mode
[ 2625.252838][T30562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2625.262225][T30563] device erspan0 left promiscuous mode
[ 2625.270609][T30563] bridge893: port 1(erspan0) entered disabled state
[ 2625.365544][T30563] bridge3: port 1(erspan0) entered blocking state
[ 2625.372171][T30563] bridge3: port 1(erspan0) entered disabled state
[ 2625.379462][T30563] device erspan0 entered promiscuous mode
[ 2625.416364][T30564] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:41 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000001000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2625.585944][T30573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2625.596234][T30574] bridge4: port 1(erspan0) entered blocking state
[ 2625.605809][T30574] bridge4: port 1(erspan0) entered disabled state
[ 2625.615165][T30574] device erspan0 entered promiscuous mode
06:08:41 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2625.792522][T30583] device erspan0 left promiscuous mode
[ 2625.798150][T30583] bridge6: port 1(erspan0) entered disabled state
06:08:41 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000007a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:41 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f21a", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:41 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2625.934293][T30604] validate_nla: 18 callbacks suppressed
[ 2625.934338][T30604] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2625.992886][T30610] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2626.112558][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2626.122072][T30587] bridge6: port 1(erspan0) entered blocking state
[ 2626.129293][T30587] bridge6: port 1(erspan0) entered disabled state
[ 2626.137151][T30587] device erspan0 entered promiscuous mode
06:08:42 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2626.510647][T30594] device erspan0 left promiscuous mode
[ 2626.516566][T30594] bridge3: port 1(erspan0) entered disabled state
[ 2626.604170][T30594] bridge894: port 1(erspan0) entered blocking state
[ 2626.610972][T30594] bridge894: port 1(erspan0) entered disabled state
[ 2626.619125][T30594] device erspan0 entered promiscuous mode
[ 2626.732672][T30627] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2626.745449][T30596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2626.754862][T30597] device erspan0 left promiscuous mode
[ 2626.761232][T30597] bridge894: port 1(erspan0) entered disabled state
[ 2626.857649][T30597] bridge3: port 1(erspan0) entered blocking state
[ 2626.864164][T30597] bridge3: port 1(erspan0) entered disabled state
[ 2626.871345][T30597] device erspan0 entered promiscuous mode
[ 2626.908310][T30599] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:42 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000006000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2627.001626][T30604] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2627.019427][T30611] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2627.027927][T30611] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2627.036987][T30611] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:08:43 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000008100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2627.114787][T30610] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2627.126964][T30607] device erspan0 left promiscuous mode
[ 2627.135009][T30607] bridge4: port 1(erspan0) entered disabled state
[ 2627.189326][T30638] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2627.312591][T30614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2627.321973][T30615] bridge4: port 1(erspan0) entered blocking state
[ 2627.329339][T30615] bridge4: port 1(erspan0) entered disabled state
[ 2627.336591][T30615] device erspan0 entered promiscuous mode
[ 2627.383641][T30643] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:43 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2627.595753][T30621] device erspan0 left promiscuous mode
[ 2627.601686][T30621] bridge6: port 1(erspan0) entered disabled state
[ 2627.772868][T30624] bridge6: port 1(erspan0) entered blocking state
[ 2627.779500][T30624] bridge6: port 1(erspan0) entered disabled state
[ 2627.786751][T30624] device erspan0 entered promiscuous mode
06:08:43 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2627.934435][T30627] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
06:08:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000e00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2628.062491][    C1] net_ratelimit: 14 callbacks suppressed
[ 2628.062502][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2628.095385][T30639] device erspan0 left promiscuous mode
[ 2628.101013][T30639] bridge3: port 1(erspan0) entered disabled state
[ 2628.224158][T30639] bridge895: port 1(erspan0) entered blocking state
[ 2628.230817][T30639] bridge895: port 1(erspan0) entered disabled state
[ 2628.238268][T30639] device erspan0 entered promiscuous mode
[ 2628.365916][T30642] device erspan0 left promiscuous mode
[ 2628.371736][T30642] bridge895: port 1(erspan0) entered disabled state
[ 2628.450345][T30642] bridge3: port 1(erspan0) entered blocking state
[ 2628.456859][T30642] bridge3: port 1(erspan0) entered disabled state
[ 2628.464456][T30642] device erspan0 entered promiscuous mode
06:08:44 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000006001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2628.500492][T30648] device erspan0 left promiscuous mode
[ 2628.507664][T30648] bridge4: port 1(erspan0) entered disabled state
[ 2628.622937][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2628.629447][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2628.682616][T30650] __nla_validate_parse: 2 callbacks suppressed
[ 2628.682627][T30650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2628.698548][T30651] bridge4: port 1(erspan0) entered blocking state
[ 2628.705158][T30651] bridge4: port 1(erspan0) entered disabled state
[ 2628.712262][T30651] device erspan0 entered promiscuous mode
06:08:44 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2628.881589][T30663] device erspan0 left promiscuous mode
[ 2628.893552][T30663] bridge6: port 1(erspan0) entered disabled state
06:08:44 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f21b", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:44 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000ffffa88800000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2629.022490][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2629.028297][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2629.122639][T30665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2629.132164][T30667] bridge6: port 1(erspan0) entered blocking state
[ 2629.139365][T30667] bridge6: port 1(erspan0) entered disabled state
[ 2629.147240][T30667] device erspan0 entered promiscuous mode
[ 2629.182503][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2629.188337][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:45 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2629.433134][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2629.439925][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2629.529931][T30674] device erspan0 left promiscuous mode
[ 2629.535825][T30674] bridge3: port 1(erspan0) entered disabled state
[ 2629.602377][T30674] bridge896: port 1(erspan0) entered blocking state
[ 2629.609571][T30674] bridge896: port 1(erspan0) entered disabled state
[ 2629.617088][T30674] device erspan0 entered promiscuous mode
[ 2629.735605][T30676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2629.745177][T30677] device erspan0 left promiscuous mode
[ 2629.750829][T30677] bridge896: port 1(erspan0) entered disabled state
[ 2629.828706][T30677] bridge3: port 1(erspan0) entered blocking state
[ 2629.835351][T30677] bridge3: port 1(erspan0) entered disabled state
[ 2629.842899][T30677] device erspan0 entered promiscuous mode
06:08:45 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2629.880687][T30680] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:45 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000000000a001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2630.086781][T30685] device erspan0 left promiscuous mode
[ 2630.094027][T30685] bridge4: port 1(erspan0) entered disabled state
[ 2630.142506][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2630.272613][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2630.282037][T30694] bridge4: port 1(erspan0) entered blocking state
[ 2630.291473][T30694] bridge4: port 1(erspan0) entered disabled state
[ 2630.298796][T30694] device erspan0 entered promiscuous mode
06:08:46 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000050700000000000800000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2630.457112][T30700] device erspan0 left promiscuous mode
[ 2630.463076][T30700] bridge6: port 1(erspan0) entered disabled state
[ 2630.652668][T30702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2630.662079][T30703] bridge6: port 1(erspan0) entered blocking state
[ 2630.671607][T30703] bridge6: port 1(erspan0) entered disabled state
[ 2630.678943][T30703] device erspan0 entered promiscuous mode
06:08:46 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:46 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70b52c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:46 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000ffffff9e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2631.069591][T30740] validate_nla: 22 callbacks suppressed
[ 2631.069618][T30740] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2631.137277][T30742] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2631.215862][T30717] device erspan0 left promiscuous mode
[ 2631.221615][T30717] bridge3: port 1(erspan0) entered disabled state
[ 2631.294635][T30717] bridge897: port 1(erspan0) entered blocking state
[ 2631.301379][T30717] bridge897: port 1(erspan0) entered disabled state
[ 2631.309587][T30717] device erspan0 entered promiscuous mode
[ 2631.432577][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2631.445205][T30720] device erspan0 left promiscuous mode
[ 2631.450876][T30720] bridge897: port 1(erspan0) entered disabled state
[ 2631.526485][T30720] bridge3: port 1(erspan0) entered blocking state
[ 2631.533021][T30720] bridge3: port 1(erspan0) entered disabled state
[ 2631.540279][T30720] device erspan0 entered promiscuous mode
[ 2631.576994][T30721] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:47 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000000000c001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2631.671423][T30726] device erspan0 left promiscuous mode
[ 2631.677336][T30726] bridge4: port 1(erspan0) entered disabled state
[ 2631.892582][T30728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2631.902307][T30729] bridge4: port 1(erspan0) entered blocking state
[ 2631.908896][T30729] bridge4: port 1(erspan0) entered disabled state
[ 2631.916054][T30729] device erspan0 entered promiscuous mode
[ 2631.934229][T30757] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
06:08:48 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f21c", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:48 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000000000080000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2632.072656][T30740] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2632.085065][T30737] device erspan0 left promiscuous mode
[ 2632.090864][T30737] bridge6: port 1(erspan0) entered disabled state
06:08:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70004000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2632.230446][T30742] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2632.306361][T30772] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2632.325087][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2632.334853][T30745] bridge6: port 1(erspan0) entered blocking state
[ 2632.341492][T30745] bridge6: port 1(erspan0) entered disabled state
[ 2632.348684][T30745] device erspan0 entered promiscuous mode
06:08:48 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2632.732209][T30752] device erspan0 left promiscuous mode
[ 2632.737801][T30752] bridge3: port 1(erspan0) entered disabled state
[ 2632.817932][T30752] bridge898: port 1(erspan0) entered blocking state
[ 2632.824856][T30752] bridge898: port 1(erspan0) entered disabled state
[ 2632.832313][T30752] device erspan0 entered promiscuous mode
06:08:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700000000ec000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2632.963361][T30757] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2632.972533][T30759] device erspan0 left promiscuous mode
[ 2633.000486][T30759] bridge898: port 1(erspan0) entered disabled state
[ 2633.028503][T30790] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2633.078992][T30759] bridge3: port 1(erspan0) entered blocking state
[ 2633.085527][T30759] bridge3: port 1(erspan0) entered disabled state
[ 2633.093070][T30759] device erspan0 entered promiscuous mode
[ 2633.095984][T30793] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2633.182560][    C0] net_ratelimit: 11 callbacks suppressed
[ 2633.182569][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2633.194004][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:49 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000000000e001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2633.237274][T30768] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2633.342649][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2633.348454][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2633.358408][T30767] device erspan0 left promiscuous mode
[ 2633.367133][T30767] bridge4: port 1(erspan0) entered disabled state
[ 2633.535216][T30775] bridge4: port 1(erspan0) entered blocking state
[ 2633.541887][T30775] bridge4: port 1(erspan0) entered disabled state
[ 2633.549076][T30775] device erspan0 entered promiscuous mode
[ 2633.593610][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2633.599408][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:49 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000000000080000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2633.715852][T30780] device erspan0 left promiscuous mode
[ 2633.721828][T30780] bridge6: port 1(erspan0) entered disabled state
[ 2633.882579][T30783] __nla_validate_parse: 3 callbacks suppressed
[ 2633.882608][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2633.899148][T30784] bridge6: port 1(erspan0) entered blocking state
[ 2633.906803][T30784] bridge6: port 1(erspan0) entered disabled state
[ 2633.914052][T30784] device erspan0 entered promiscuous mode
06:08:49 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:08:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70004800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000fffffff000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2634.303218][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2634.424652][T30797] device erspan0 left promiscuous mode
[ 2634.430541][T30797] bridge3: port 1(erspan0) entered disabled state
[ 2634.506028][T30797] bridge899: port 1(erspan0) entered blocking state
[ 2634.513483][T30797] bridge899: port 1(erspan0) entered disabled state
[ 2634.520734][T30797] device erspan0 entered promiscuous mode
[ 2634.653012][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2634.664876][T30800] device erspan0 left promiscuous mode
[ 2634.670622][T30800] bridge899: port 1(erspan0) entered disabled state
[ 2634.735861][T30800] bridge3: port 1(erspan0) entered blocking state
[ 2634.742478][T30800] bridge3: port 1(erspan0) entered disabled state
[ 2634.749537][T30800] device erspan0 entered promiscuous mode
[ 2634.786639][T30801] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2634.863627][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2634.869417][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:50 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000006558001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2634.906608][T30806] device erspan0 left promiscuous mode
[ 2634.912231][T30806] bridge4: port 1(erspan0) entered disabled state
[ 2635.072625][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2635.083490][T30811] bridge4: port 1(erspan0) entered blocking state
[ 2635.090145][T30811] bridge4: port 1(erspan0) entered disabled state
[ 2635.099513][T30811] device erspan0 entered promiscuous mode
06:08:51 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100005070000000000080000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2635.262520][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2635.268470][T30817] device erspan0 left promiscuous mode
[ 2635.274338][T30817] bridge6: port 1(erspan0) entered disabled state
06:08:51 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000001f21d", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:51 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70004c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2635.464163][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2635.481228][T30825] bridge6: port 1(erspan0) entered blocking state
[ 2635.489941][T30825] bridge6: port 1(erspan0) entered disabled state
[ 2635.507672][T30825] device erspan0 entered promiscuous mode
06:08:51 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2635.907487][T30834] device erspan0 left promiscuous mode
[ 2635.913383][T30834] bridge3: port 1(erspan0) entered disabled state
[ 2635.993537][T30834] bridge900: port 1(erspan0) entered blocking state
[ 2636.001001][T30834] bridge900: port 1(erspan0) entered disabled state
[ 2636.008580][T30834] device erspan0 entered promiscuous mode
06:08:51 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000000000ff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2636.101649][T30867] validate_nla: 17 callbacks suppressed
[ 2636.101666][T30867] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2636.122916][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2636.132921][T30839] device erspan0 left promiscuous mode
[ 2636.138567][T30839] bridge900: port 1(erspan0) entered disabled state
[ 2636.227252][T30839] bridge3: port 1(erspan0) entered blocking state
[ 2636.233797][T30839] bridge3: port 1(erspan0) entered disabled state
[ 2636.241794][T30839] device erspan0 entered promiscuous mode
[ 2636.279001][T30840] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:52 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000060001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2636.377277][T30845] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2636.386492][T30845] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2636.399329][T30845] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
06:08:52 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70655800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2636.462216][T30852] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2636.477645][T30843] device erspan0 left promiscuous mode
[ 2636.484801][T30843] bridge4: port 1(erspan0) entered disabled state
[ 2636.579297][T30879] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2636.703454][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2636.713654][T30855] bridge4: port 1(erspan0) entered blocking state
[ 2636.720293][T30855] bridge4: port 1(erspan0) entered disabled state
[ 2636.730231][T30855] device erspan0 entered promiscuous mode
06:08:52 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0x0)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2636.889052][T30861] device erspan0 left promiscuous mode
[ 2636.894995][T30861] bridge6: port 1(erspan0) entered disabled state
[ 2636.904058][T30887] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2637.122562][T30863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2637.134860][T30864] bridge6: port 1(erspan0) entered blocking state
[ 2637.142659][T30864] bridge6: port 1(erspan0) entered disabled state
[ 2637.149720][T30864] device erspan0 entered promiscuous mode
06:08:53 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2637.300721][T30867] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2637.314412][T30870] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2637.327652][T30870] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
06:08:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70006000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2637.673415][T30880] device erspan0 left promiscuous mode
[ 2637.679239][T30880] bridge3: port 1(erspan0) entered disabled state
[ 2637.754850][T30880] bridge901: port 1(erspan0) entered blocking state
[ 2637.761715][T30880] bridge901: port 1(erspan0) entered disabled state
[ 2637.769698][T30880] device erspan0 entered promiscuous mode
[ 2637.893900][T30882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2637.920988][T30883] device erspan0 left promiscuous mode
[ 2637.928968][T30883] bridge901: port 1(erspan0) entered disabled state
[ 2638.017022][T30883] bridge3: port 1(erspan0) entered blocking state
[ 2638.023708][T30883] bridge3: port 1(erspan0) entered disabled state
[ 2638.030898][T30883] device erspan0 entered promiscuous mode
06:08:54 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd700088a8ffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2638.157412][T30891] device erspan0 left promiscuous mode
[ 2638.163182][T30891] bridge4: port 1(erspan0) entered disabled state
06:08:54 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000005865001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2638.363736][T30894] bridge4: port 1(erspan0) entered blocking state
[ 2638.373850][T30894] bridge4: port 1(erspan0) entered disabled state
[ 2638.384908][T30894] device erspan0 entered promiscuous mode
[ 2638.472677][    C1] net_ratelimit: 14 callbacks suppressed
[ 2638.472686][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:08:54 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000020", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:08:54 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0x0)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:08:54 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2639.022491][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2639.028556][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2639.055914][T30917] device erspan0 left promiscuous mode
[ 2639.062364][T30917] bridge3: port 1(erspan0) entered disabled state
[ 2639.146135][T30917] bridge902: port 1(erspan0) entered blocking state
[ 2639.154472][T30917] bridge902: port 1(erspan0) entered disabled state
[ 2639.163659][T30917] device erspan0 entered promiscuous mode
06:08:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70586500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2639.276471][T30921] __nla_validate_parse: 3 callbacks suppressed
[ 2639.276483][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2639.295876][T30922] device erspan0 left promiscuous mode
[ 2639.301685][T30922] bridge902: port 1(erspan0) entered disabled state
[ 2639.387411][T30922] bridge3: port 1(erspan0) entered blocking state
[ 2639.394665][T30922] bridge3: port 1(erspan0) entered disabled state
[ 2639.402247][T30922] device erspan0 entered promiscuous mode
[ 2639.422528][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2639.429479][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2639.444301][T30923] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:55 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000081001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2639.582524][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2639.588501][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2639.627900][T30929] device erspan0 left promiscuous mode
[ 2639.646120][T30929] bridge4: port 1(erspan0) entered disabled state
06:08:55 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70007fffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2639.802796][T30937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2639.815841][T30939] bridge4: port 1(erspan0) entered blocking state
[ 2639.822894][T30939] bridge4: port 1(erspan0) entered disabled state
[ 2639.832518][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2639.867543][T30939] device erspan0 entered promiscuous mode
[ 2639.871212][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:08:55 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0x0)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2640.052907][T30938] device erspan0 left promiscuous mode
[ 2640.061001][T30938] bridge6: port 1(erspan0) entered disabled state
[ 2640.252931][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2640.263147][T30945] bridge6: port 1(erspan0) entered blocking state
[ 2640.270762][T30945] bridge6: port 1(erspan0) entered disabled state
[ 2640.281604][T30945] device erspan0 entered promiscuous mode
06:08:56 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb00", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2640.542517][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2640.759511][T30957] device erspan0 left promiscuous mode
[ 2640.765912][T30957] bridge3: port 1(erspan0) entered disabled state
[ 2640.845787][T30957] bridge903: port 1(erspan0) entered blocking state
[ 2640.853516][T30957] bridge903: port 1(erspan0) entered disabled state
[ 2640.861208][T30957] device erspan0 entered promiscuous mode
[ 2640.992649][T30961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2641.002707][T30962] device erspan0 left promiscuous mode
[ 2641.008675][T30962] bridge903: port 1(erspan0) entered disabled state
[ 2641.075873][T30962] bridge3: port 1(erspan0) entered blocking state
[ 2641.083047][T30962] bridge3: port 1(erspan0) entered disabled state
[ 2641.090250][T30962] device erspan0 entered promiscuous mode
[ 2641.127494][T30963] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:57 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000002001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

06:08:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70006800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2641.228715][T30967] validate_nla: 23 callbacks suppressed
[ 2641.228726][T30967] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2641.247943][T30969] device erspan0 left promiscuous mode
[ 2641.254621][T30969] bridge4: port 1(erspan0) entered disabled state
[ 2641.363344][T30992] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2641.483159][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2641.492718][T30973] bridge4: port 1(erspan0) entered blocking state
[ 2641.499502][T30973] bridge4: port 1(erspan0) entered disabled state
[ 2641.506721][T30973] device erspan0 entered promiscuous mode
06:08:57 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

06:08:57 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000c2f", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2641.679258][T30981] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2641.688651][T30978] device erspan0 left promiscuous mode
[ 2641.702720][T30978] bridge6: port 1(erspan0) entered disabled state
06:08:57 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70009effffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2641.864102][T31008] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2641.942642][T30983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2641.956244][T30984] bridge6: port 1(erspan0) entered blocking state
[ 2641.962883][T30984] bridge6: port 1(erspan0) entered disabled state
[ 2641.970306][T30984] device erspan0 entered promiscuous mode
06:08:58 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2642.123671][T30992] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2642.160752][T31017] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2642.384539][T30994] device erspan0 left promiscuous mode
[ 2642.390738][T30994] bridge3: port 1(erspan0) entered disabled state
[ 2642.470160][T30994] bridge904: port 1(erspan0) entered blocking state
[ 2642.477265][T30994] bridge904: port 1(erspan0) entered disabled state
[ 2642.487581][T30994] device erspan0 entered promiscuous mode
[ 2642.602611][T30996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2642.612133][T30997] device erspan0 left promiscuous mode
[ 2642.619071][T30997] bridge904: port 1(erspan0) entered disabled state
[ 2642.710597][T30997] bridge3: port 1(erspan0) entered blocking state
[ 2642.717190][T30997] bridge3: port 1(erspan0) entered disabled state
[ 2642.724455][T30997] device erspan0 entered promiscuous mode
[ 2642.762021][T30998] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:08:58 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000004001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2642.859712][T31006] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[ 2642.868966][T31006] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[ 2642.881044][T31006] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 2642.944182][T31008] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2642.957903][T31003] device erspan0 left promiscuous mode
06:08:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd7000f0ffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2642.989192][T31003] bridge4: port 1(erspan0) entered disabled state
[ 2643.582536][    C0] net_ratelimit: 11 callbacks suppressed
[ 2643.582546][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.594517][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2643.742540][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.748353][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2643.752585][T31012] bridge4: port 1(erspan0) entered blocking state
[ 2643.760612][T31012] bridge4: port 1(erspan0) entered disabled state
[ 2643.767838][T31012] device erspan0 entered promiscuous mode
06:08:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70006c00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

06:08:59 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2643.822548][T31023] device erspan0 left promiscuous mode
[ 2643.828193][T31023] bridge6: port 1(erspan0) entered disabled state
[ 2643.992497][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2643.998361][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2644.062918][T31026] bridge6: port 1(erspan0) entered blocking state
[ 2644.069435][T31026] bridge6: port 1(erspan0) entered disabled state
[ 2644.079230][T31026] device erspan0 entered promiscuous mode
06:09:00 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd7000000000000000003f", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

06:09:00 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

06:09:00 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000000034000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2644.542539][T31039] device erspan0 left promiscuous mode
[ 2644.548309][T31039] bridge3: port 1(erspan0) entered disabled state
[ 2644.647538][T31039] bridge905: port 1(erspan0) entered blocking state
[ 2644.654308][T31039] bridge905: port 1(erspan0) entered disabled state
[ 2644.661586][T31039] device erspan0 entered promiscuous mode
[ 2644.702558][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2644.803214][T31042] __nla_validate_parse: 3 callbacks suppressed
[ 2644.803221][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2644.819088][T31040] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:09:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70007400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2644.922553][T31053] device erspan0 left promiscuous mode
[ 2644.929733][T31053] bridge4: port 1(erspan0) entered disabled state
06:09:00 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000006001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2645.122593][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2645.132090][T31056] bridge4: port 1(erspan0) entered blocking state
[ 2645.139757][T31056] bridge4: port 1(erspan0) entered disabled state
[ 2645.147162][T31056] device erspan0 entered promiscuous mode
06:09:01 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2645.193926][T31057] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2645.275436][T31068] device erspan0 left promiscuous mode
[ 2645.281099][T31068] bridge6: port 1(erspan0) entered disabled state
[ 2645.342487][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2645.348339][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:09:01 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000012001fff2bbd70000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

[ 2645.473711][T31072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2645.484104][T31073] bridge6: port 1(erspan0) entered blocking state
[ 2645.491681][T31073] bridge6: port 1(erspan0) entered disabled state
[ 2645.503075][T31073] device erspan0 entered promiscuous mode
06:09:01 executing program 2:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000280)={<r18=>0xffffffffffffffff})
getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r19, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r19], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r19, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x7}}, 0xc080)
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, 0x0, 0x0)

[ 2645.662883][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2645.903923][T31087] device erspan0 left promiscuous mode
[ 2645.909662][T31087] bridge905: port 1(erspan0) entered disabled state
[ 2645.997534][T31087] bridge906: port 1(erspan0) entered blocking state
[ 2646.004235][T31087] bridge906: port 1(erspan0) entered disabled state
[ 2646.011520][T31087] device erspan0 entered promiscuous mode
[ 2646.125624][T31089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2646.136194][T31093] device erspan0 left promiscuous mode
[ 2646.141837][T31093] bridge906: port 1(erspan0) entered disabled state
[ 2646.226200][T31093] bridge3: port 1(erspan0) entered blocking state
[ 2646.232716][T31093] bridge3: port 1(erspan0) entered disabled state
[ 2646.239697][T31093] device erspan0 entered promiscuous mode
06:09:02 executing program 1:
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(0xffffffffffffffff, r1)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc00000010001fff2bbd70000000000000000040", @ANYRES32=0x0, @ANYBLOB="0000000000000000900012001000010069703665727370616e0000007c0002001400060000000000000000000000ffffe000000208000100", @ANYRES32, @ANYBLOB="08000f00810000000400120008000300a700000004001200080015001e0403001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000bb14000700ff02000000000000000000a38d13cf010c000a00aaaaaaaaff070000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0xf8, 0x0, 0x2, 0x70bd26, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xf8}}, 0x24000040)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0)

[ 2646.280055][T31092] device erspan0 left promiscuous mode
[ 2646.285801][T31092] bridge4: port 1(erspan0) entered disabled state
[ 2646.365379][T31123] validate_nla: 14 callbacks suppressed
[ 2646.365424][T31123] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2646.385571][T31094] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
06:09:02 executing program 4:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a004000000000000a001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r17=>0x0})
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r20=>0xffffffffffffffff})
getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r21, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r21], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r11, @ANYBLOB, @ANYRES32=r21, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r22 = socket$netlink(0x10, 0x3, 0x0)
r23 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r25 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r25, 0x0, 0x0)

[ 2646.574026][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2646.585336][T31101] bridge4: port 1(erspan0) entered blocking state
[ 2646.592311][T31101] bridge4: port 1(erspan0) entered disabled state
[ 2646.601764][T31101] device erspan0 entered promiscuous mode
06:09:02 executing program 5:
creat(0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x3f8, 0x10, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x4000001)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x28}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$inet(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
pipe(&(0x7f0000000280)={<r19=>0xffffffffffffffff})
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11e)
sendmsg$nl_route(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400000000005f6217eb000000", @ANYRES32=r20, @ANYBLOB="0000000000000000140012000b000100627269646765000004000200"], 0x34}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000104000000009b6e0000000000000000", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20, @ANYBLOB], 0x28}}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001c00a0040000000000000001ea6", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r20], 0x28}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x363, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000507000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002400120000000100697036746e6c00000000020000000600a500000000000200ff02000000000000000000000000000100000600ff0000000000080009000000000006000300000000000200794ef82847bc4ef109e1eefe1de7119b0000090029000000000009002900000000000300fe8000000000000000000000000000bb0000080004000000000008002b00000000000200", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r20, @ANYBLOB="0000130000001000c0ff000000000f0003000000"], 0x44}}, 0xc080)
r21 = socket$netlink(0x10, 0x3, 0x0)
r22 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r22, &(0x7f0000000100)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r23}]]}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r24 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r24, 0x0, 0x0)

[ 2646.700402][T31102] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2646.710060][T31104] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2646.952563][T31125] ==================================================================
[ 2646.960727][T31125] BUG: KCSAN: data-race in __acct_update_integrals / vm_stat_account
[ 2646.962589][T31109] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[ 2646.968781][T31125] 
[ 2646.968796][T31125] read to 0xffff888092381200 of 8 bytes by interrupt on cpu 0:
[ 2646.968818][T31125]  __acct_update_integrals+0x1b1/0x1e0
[ 2646.968843][T31125]  acct_account_cputime+0x4e/0x60
[ 2646.997287][T31125]  account_system_index_time+0xa2/0xb0
[ 2647.002756][T31125]  irqtime_account_process_tick.isra.0+0x16a/0x1b0
[ 2647.004391][T31112] device erspan0 left promiscuous mode
[ 2647.009264][T31125]  account_process_tick+0x14e/0x190
[ 2647.009283][T31125]  update_process_times+0x29/0x80
[ 2647.009309][T31125]  tick_sched_handle+0x75/0x100
[ 2647.014978][T31112] bridge6: port 1(erspan0) entered disabled state
[ 2647.019938][T31125]  tick_sched_timer+0x58/0xe0
[ 2647.019958][T31125]  __hrtimer_run_queues+0x274/0x5f0
[ 2647.019981][T31125]  hrtimer_interrupt+0x22a/0x480
[ 2647.051146][T31125]  smp_apic_timer_interrupt+0xdc/0x280
[ 2647.056590][T31125]  apic_timer_interrupt+0xf/0x20
[ 2647.061520][T31125]  batadv_check_known_mac_addr+0x86/0x1a0
[ 2647.067284][T31125]  batadv_hard_if_event+0x7a6/0xa70
[ 2647.072479][T31125]  notifier_call_chain+0xd7/0x160
[ 2647.077489][T31125]  raw_notifier_call_chain+0x37/0x50
[ 2647.082770][T31125]  call_netdevice_notifiers_info+0x9a/0x120
[ 2647.088646][T31125]  register_netdevice+0x485/0xad0
[ 2647.093663][T31125]  br_dev_newlink+0x33/0xf0
[ 2647.098168][T31125]  __rtnl_newlink+0xc8d/0x1090
[ 2647.102924][T31125]  rtnl_newlink+0x63/0x90
[ 2647.107240][T31125]  rtnetlink_rcv_msg+0x1d3/0x500
[ 2647.112258][T31125]  netlink_rcv_skb+0xb0/0x260
[ 2647.116921][T31125]  rtnetlink_rcv+0x26/0x30
[ 2647.121329][T31125]  netlink_unicast+0x3a6/0x4d0
[ 2647.126126][T31125]  netlink_sendmsg+0x4d3/0x8b0
[ 2647.130882][T31125]  sock_sendmsg+0x9f/0xc0
[ 2647.135213][T31125]  ____sys_sendmsg+0x49d/0x4d0
[ 2647.139987][T31125]  ___sys_sendmsg+0xb5/0x100
[ 2647.144664][T31125]  __sys_sendmsg+0xa0/0x160
[ 2647.149165][T31125]  __x64_sys_sendmsg+0x51/0x70
[ 2647.153937][T31125]  do_syscall_64+0xcc/0x3a0
[ 2647.158438][T31125]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2647.165092][T31125] 
[ 2647.167415][T31125] write to 0xffff888092381200 of 8 bytes by task 31125 on cpu 1:
[ 2647.175124][T31125]  vm_stat_account+0x45/0x150
[ 2647.179801][T31125]  mprotect_fixup+0x31f/0x510
[ 2647.184483][T31125]  do_mprotect_pkey+0x3eb/0x660
[ 2647.189330][T31125]  __x64_sys_mprotect+0x51/0x70
[ 2647.194172][T31125]  do_syscall_64+0xcc/0x3a0
[ 2647.198671][T31125]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2647.204556][T31125] 
[ 2647.206908][T31125] Reported by Kernel Concurrency Sanitizer on:
[ 2647.213068][T31125] CPU: 1 PID: 31125 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 2647.221869][T31125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2647.231950][T31125] ==================================================================
[ 2647.240015][T31125] Kernel panic - not syncing: panic_on_warn set ...
[ 2647.246614][T31125] CPU: 1 PID: 31125 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0
[ 2647.255283][T31125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2647.266004][T31125] Call Trace:
[ 2647.269299][T31125]  dump_stack+0x11d/0x181
[ 2647.273756][T31125]  panic+0x210/0x640
[ 2647.277653][T31125]  ? vprintk_func+0x8d/0x140
[ 2647.282276][T31125]  kcsan_report.cold+0xc/0xd
[ 2647.286881][T31125]  kcsan_setup_watchpoint+0x3fe/0x460
[ 2647.292254][T31125]  __tsan_unaligned_write8+0xc7/0x110
[ 2647.297652][T31125]  vm_stat_account+0x45/0x150
[ 2647.302418][T31125]  mprotect_fixup+0x31f/0x510
[ 2647.307106][T31125]  do_mprotect_pkey+0x3eb/0x660
[ 2647.311972][T31125]  __x64_sys_mprotect+0x51/0x70
[ 2647.316828][T31125]  do_syscall_64+0xcc/0x3a0
[ 2647.321346][T31125]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2647.327257][T31125] RIP: 0033:0x45b047
[ 2647.331153][T31125] Code: 00 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2647.350896][T31125] RSP: 002b:00007ffe2e7c6658 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[ 2647.359316][T31125] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 000000000045b047
[ 2647.367475][T31125] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007fd325943000
[ 2647.375454][T31125] RBP: 00007ffe2e7c6740 R08: 000000000071d800 R09: 000000000071d800
[ 2647.383519][T31125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2e7c6830
[ 2647.391606][T31125] R13: 00007fd325963700 R14: 00007fd3259639c0 R15: 000000000075c274
[ 2647.401804][T31125] Kernel Offset: disabled
[ 2647.406139][T31125] Rebooting in 86400 seconds..