10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf400}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1584.196930][T28059] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001026d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000c000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf401}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001036d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1584.576576][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001046d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1584.637245][T28100] bridge28: port 1(batadv_slave_0) entered blocking state [ 1584.663293][T28100] bridge28: port 1(batadv_slave_0) entered disabled state 13:49:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf402}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1584.692854][T28100] device batadv_slave_0 entered promiscuous mode [ 1584.722757][T28109] device batadv_slave_0 left promiscuous mode [ 1584.729459][T28109] bridge28: port 1(batadv_slave_0) entered disabled state 13:49:16 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2700000000000000) 13:49:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000d000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1584.806298][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1584.847016][T28113] device syz_tun left promiscuous mode [ 1584.854043][T28113] bridge94: port 1(syz_tun) entered disabled state [ 1584.881404][T28113] bridge95: port 1(syz_tun) entered blocking state [ 1584.894548][T28113] bridge95: port 1(syz_tun) entered disabled state [ 1584.904708][T28113] device syz_tun entered promiscuous mode [ 1584.926098][T28121] device batadv_slave_0 left promiscuous mode [ 1584.938391][T28121] bridge94: port 2(batadv_slave_0) entered disabled state 13:49:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf403}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001056d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1585.013330][T28121] bridge95: port 2(batadv_slave_0) entered blocking state [ 1585.052823][T28121] bridge95: port 2(batadv_slave_0) entered disabled state [ 1585.093488][T28121] device batadv_slave_0 entered promiscuous mode [ 1585.147035][T28110] device batadv_slave_0 left promiscuous mode [ 1585.163372][T28110] bridge95: port 2(batadv_slave_0) entered disabled state [ 1585.199955][T28110] device syz_tun left promiscuous mode [ 1585.222867][T28110] bridge95: port 1(syz_tun) entered disabled state [ 1585.286066][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1585.328028][T28136] bridge28: port 1(batadv_slave_0) entered blocking state [ 1585.344453][T28136] bridge28: port 1(batadv_slave_0) entered disabled state [ 1585.403447][T28136] device batadv_slave_0 entered promiscuous mode [ 1585.441801][T28140] device batadv_slave_0 left promiscuous mode [ 1585.449383][T28140] bridge28: port 1(batadv_slave_0) entered disabled state 13:49:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf500}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000f000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001066d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:17 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2800000000000000) 13:49:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0013000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1585.749144][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001076d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf501}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1585.821715][T28158] bridge95: port 1(syz_tun) entered blocking state [ 1585.860539][T28158] bridge95: port 1(syz_tun) entered disabled state [ 1585.890012][T28158] device syz_tun entered promiscuous mode [ 1585.910103][T28156] bridge95: port 2(batadv_slave_0) entered blocking state [ 1585.922498][T28156] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf502}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1585.953875][T28156] device batadv_slave_0 entered promiscuous mode [ 1585.979336][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1586.043456][T28170] device batadv_slave_0 left promiscuous mode [ 1586.051207][T28170] bridge95: port 2(batadv_slave_0) entered disabled state [ 1586.082074][T28170] device syz_tun left promiscuous mode [ 1586.120416][T28170] bridge95: port 1(syz_tun) entered disabled state 13:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf503}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001086d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0014000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf600}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001096d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1586.523935][T28194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:18 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2900000000000000) 13:49:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0015000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1586.655762][T28195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1586.694789][T28197] bridge95: port 1(syz_tun) entered blocking state 13:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf601}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1586.705297][T28197] bridge95: port 1(syz_tun) entered disabled state [ 1586.731215][T28197] device syz_tun entered promiscuous mode [ 1586.750966][T28202] bridge95: port 2(batadv_slave_0) entered blocking state [ 1586.766184][T28202] bridge95: port 2(batadv_slave_0) entered disabled state [ 1586.787749][T28202] device batadv_slave_0 entered promiscuous mode 13:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf602}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c00010a6d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1586.835644][T28206] device batadv_slave_0 left promiscuous mode [ 1586.854921][T28206] bridge95: port 2(batadv_slave_0) entered disabled state [ 1586.908811][T28206] device syz_tun left promiscuous mode [ 1586.934310][T28206] bridge95: port 1(syz_tun) entered disabled state 13:49:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf603}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1587.028566][T28208] validate_nla: 22 callbacks suppressed [ 1587.028590][T28208] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1587.075263][T28214] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1587.095778][T28208] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1587.132179][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c00010c6d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf700}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0016000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1587.376467][T28234] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1587.416339][T28234] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1587.455124][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1587.533935][T28242] bridge95: port 1(syz_tun) entered blocking state [ 1587.541949][T28242] bridge95: port 1(syz_tun) entered disabled state [ 1587.583513][T28242] device syz_tun entered promiscuous mode [ 1587.598767][T28244] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1587.621603][T28238] bridge95: port 2(batadv_slave_0) entered blocking state [ 1587.631449][T28238] bridge95: port 2(batadv_slave_0) entered disabled state [ 1587.658827][T28238] device batadv_slave_0 entered promiscuous mode [ 1587.685866][T28242] device batadv_slave_0 left promiscuous mode [ 1587.703793][T28242] bridge95: port 2(batadv_slave_0) entered disabled state [ 1587.725219][T28242] device syz_tun left promiscuous mode [ 1587.739507][T28242] bridge95: port 1(syz_tun) entered disabled state 13:49:19 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2a00000000000000) 13:49:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf701}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c00010e6d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0018000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1587.859083][T28255] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1587.881399][T28255] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf702}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c00010f6d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1587.974435][T28260] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1588.108804][T28267] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1588.133562][T28265] bridge95: port 1(syz_tun) entered blocking state 13:49:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf703}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1588.160662][T28265] bridge95: port 1(syz_tun) entered disabled state [ 1588.181598][T28265] device syz_tun entered promiscuous mode [ 1588.200645][T28275] bridge95: port 2(batadv_slave_0) entered blocking state 13:49:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001106d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1588.220121][T28275] bridge95: port 2(batadv_slave_0) entered disabled state [ 1588.239959][T28275] device batadv_slave_0 entered promiscuous mode [ 1588.258248][T28265] device batadv_slave_0 left promiscuous mode [ 1588.286351][T28265] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001b000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1588.328252][T28265] device syz_tun left promiscuous mode [ 1588.378577][T28265] bridge95: port 1(syz_tun) entered disabled state 13:49:20 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2b00000000000000) 13:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf800}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001606d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001c000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x5, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf801}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1588.744560][T28294] __nla_validate_parse: 3 callbacks suppressed [ 1588.744585][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1588.823200][T28296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1588.882974][T28302] bridge95: port 1(syz_tun) entered blocking state [ 1588.893183][T28302] bridge95: port 1(syz_tun) entered disabled state 13:49:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0003000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1588.931724][T28302] device syz_tun entered promiscuous mode [ 1588.966024][T28305] bridge95: port 2(batadv_slave_0) entered blocking state 13:49:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf802}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1588.979346][T28305] bridge95: port 2(batadv_slave_0) entered disabled state [ 1589.013907][T28305] device batadv_slave_0 entered promiscuous mode [ 1589.045398][T28296] device batadv_slave_0 left promiscuous mode [ 1589.064918][T28296] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1589.105718][T28296] device syz_tun left promiscuous mode [ 1589.131633][T28296] bridge95: port 1(syz_tun) entered disabled state 13:49:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf803}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1589.242916][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1589.263207][T28317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001d000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:21 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2c00000000000000) 13:49:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e020c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf900}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001e000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1589.646380][T28336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf901}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1589.709065][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e030c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1589.752796][T28343] bridge95: port 1(syz_tun) entered blocking state [ 1589.772723][T28343] bridge95: port 1(syz_tun) entered disabled state [ 1589.797860][T28343] device syz_tun entered promiscuous mode [ 1589.842235][T28336] bridge95: port 2(batadv_slave_0) entered blocking state [ 1589.854504][T28336] bridge95: port 2(batadv_slave_0) entered disabled state [ 1589.921394][T28336] device batadv_slave_0 entered promiscuous mode 13:49:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf902}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1589.963715][T28351] device batadv_slave_0 left promiscuous mode [ 1589.971490][T28351] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1590.011539][T28351] device syz_tun left promiscuous mode [ 1590.042143][T28351] bridge95: port 1(syz_tun) entered disabled state 13:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xf903}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1590.147526][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001f000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0020000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:22 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2d00000000000000) 13:49:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e040c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfa00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfa01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1590.524801][T28379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1590.595655][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1590.642671][T28391] bridge95: port 1(syz_tun) entered blocking state [ 1590.652033][T28391] bridge95: port 1(syz_tun) entered disabled state [ 1590.672112][T28391] device syz_tun entered promiscuous mode [ 1590.701199][T28383] bridge95: port 2(batadv_slave_0) entered blocking state [ 1590.717690][T28383] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfa02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1590.754071][T28383] device batadv_slave_0 entered promiscuous mode [ 1590.802777][T28391] device batadv_slave_0 left promiscuous mode [ 1590.809035][T28391] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1590.854520][T28391] device syz_tun left promiscuous mode [ 1590.860216][T28391] bridge95: port 1(syz_tun) entered disabled state 13:49:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0021000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e050c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1590.989210][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfa03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:23 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2e00000000000000) 13:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0022000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e060c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfb00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1591.361643][T28418] bridge95: port 1(syz_tun) entered blocking state [ 1591.391385][T28418] bridge95: port 1(syz_tun) entered disabled state 13:49:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfb01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1591.423715][T28418] device syz_tun entered promiscuous mode [ 1591.463866][T28433] bridge95: port 2(batadv_slave_0) entered blocking state 13:49:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e2f24000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1591.476955][T28433] bridge95: port 2(batadv_slave_0) entered disabled state [ 1591.525791][T28433] device batadv_slave_0 entered promiscuous mode 13:49:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfb02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1591.583947][T28418] device batadv_slave_0 left promiscuous mode [ 1591.590511][T28418] bridge95: port 2(batadv_slave_0) entered disabled state [ 1591.652161][T28418] device syz_tun left promiscuous mode [ 1591.677067][T28418] bridge95: port 1(syz_tun) entered disabled state 13:49:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e070c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0025000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfb03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x9, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1592.095771][T28460] bridge95: port 1(syz_tun) entered blocking state [ 1592.107279][T28460] bridge95: port 1(syz_tun) entered disabled state [ 1592.123612][T28460] device syz_tun entered promiscuous mode 13:49:24 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2f00000000000000) 13:49:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0037000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfc00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e080c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1592.146220][T28460] bridge95: port 2(batadv_slave_0) entered blocking state [ 1592.162632][T28460] bridge95: port 2(batadv_slave_0) entered disabled state [ 1592.170964][T28460] device batadv_slave_0 entered promiscuous mode [ 1592.217121][T28460] device batadv_slave_0 left promiscuous mode [ 1592.247529][T28460] bridge95: port 2(batadv_slave_0) entered disabled state 13:49:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfc01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1592.301771][T28460] device syz_tun left promiscuous mode [ 1592.322108][T28460] bridge95: port 1(syz_tun) entered disabled state [ 1592.408554][T28471] validate_nla: 45 callbacks suppressed [ 1592.408582][T28471] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1592.434460][T28475] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:49:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfc02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1592.504309][T28471] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e090c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xa, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0040000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfc03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1592.836755][T28496] bridge95: port 1(syz_tun) entered blocking state [ 1592.856810][T28496] bridge95: port 1(syz_tun) entered disabled state [ 1592.889511][T28496] device syz_tun entered promiscuous mode [ 1592.911350][T28504] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1592.934270][T28503] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1592.955179][T28506] bridge95: port 2(batadv_slave_0) entered blocking state [ 1592.966296][T28506] bridge95: port 2(batadv_slave_0) entered disabled state [ 1592.979330][T28506] device batadv_slave_0 entered promiscuous mode [ 1592.991267][T28496] device batadv_slave_0 left promiscuous mode [ 1593.014060][T28496] bridge95: port 2(batadv_slave_0) entered disabled state [ 1593.037255][T28496] device syz_tun left promiscuous mode [ 1593.046875][T28496] bridge95: port 1(syz_tun) entered disabled state [ 1593.107476][T28504] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:25 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3000000000000000) 13:49:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfd00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0a0c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0041000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfd01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1593.435234][T28530] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1593.456338][T28527] bridge96: port 1(syz_tun) entered blocking state [ 1593.474728][T28527] bridge96: port 1(syz_tun) entered disabled state 13:49:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0c0c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1593.491585][T28527] device syz_tun entered promiscuous mode [ 1593.508279][T28534] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1593.518856][T28535] bridge96: port 2(batadv_slave_0) entered blocking state [ 1593.530361][T28535] bridge96: port 2(batadv_slave_0) entered disabled state [ 1593.556532][T28535] device batadv_slave_0 entered promiscuous mode [ 1593.585014][T28530] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfd02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1593.618117][T28527] device batadv_slave_0 left promiscuous mode [ 1593.626066][T28527] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1593.688871][T28527] device syz_tun left promiscuous mode 13:49:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0048000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1593.731048][T28527] bridge96: port 1(syz_tun) entered disabled state 13:49:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfd03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1593.854608][T28546] __nla_validate_parse: 11 callbacks suppressed [ 1593.854629][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1593.945654][T28551] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:49:26 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3100000000000000) 13:49:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfe00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e005b000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0e0c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xe, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1594.378867][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfe01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e045d000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1594.439819][T28571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1594.510826][T28577] bridge96: port 1(syz_tun) entered blocking state [ 1594.520794][T28577] bridge96: port 1(syz_tun) entered disabled state [ 1594.555140][T28577] device syz_tun entered promiscuous mode [ 1594.594702][T28570] bridge96: port 2(batadv_slave_0) entered blocking state [ 1594.619143][T28570] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0f0c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1594.665396][T28570] device batadv_slave_0 entered promiscuous mode [ 1594.703675][T28583] device batadv_slave_0 left promiscuous mode 13:49:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfe02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1594.710434][T28583] bridge96: port 2(batadv_slave_0) entered disabled state [ 1594.767480][T28583] device syz_tun left promiscuous mode [ 1594.797165][T28583] bridge96: port 1(syz_tun) entered disabled state 13:49:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xfe03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1594.908078][T28586] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. 13:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1594.959600][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1595.055240][T28570] bridge96: port 1(syz_tun) entered blocking state [ 1595.061856][T28570] bridge96: port 1(syz_tun) entered disabled state [ 1595.096704][T28570] device syz_tun entered promiscuous mode [ 1595.128666][T28586] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1595.175087][T28599] bridge96: port 2(batadv_slave_0) entered blocking state [ 1595.192407][T28599] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:27 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3200000000000000) 13:49:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xff00}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e100c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0063000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1595.232593][T28599] device batadv_slave_0 entered promiscuous mode [ 1595.261469][T28603] device batadv_slave_0 left promiscuous mode [ 1595.269139][T28603] bridge96: port 2(batadv_slave_0) entered disabled state [ 1595.305694][T28603] device syz_tun left promiscuous mode [ 1595.334461][T28603] bridge96: port 1(syz_tun) entered disabled state 13:49:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xff01}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1595.417176][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xff02}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0002000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e600c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0xff03}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1595.800269][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0003000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1595.877943][T28635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1595.927618][T28639] bridge96: port 1(syz_tun) entered blocking state [ 1595.935934][T28639] bridge96: port 1(syz_tun) entered disabled state [ 1595.960917][T28639] device syz_tun entered promiscuous mode [ 1595.985334][T28635] bridge96: port 2(batadv_slave_0) entered blocking state [ 1596.004999][T28635] bridge96: port 2(batadv_slave_0) entered disabled state [ 1596.054098][T28635] device batadv_slave_0 entered promiscuous mode [ 1596.078322][T28639] device batadv_slave_0 left promiscuous mode [ 1596.094453][T28639] bridge96: port 2(batadv_slave_0) entered disabled state [ 1596.125681][T28639] device syz_tun left promiscuous mode [ 1596.135085][T28639] bridge96: port 1(syz_tun) entered disabled state 13:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0014000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:28 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3300000000000000) 13:49:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0004000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x48, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1596.305407][T28655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0018000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0005000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1596.572105][T28665] bridge96: port 1(syz_tun) entered blocking state [ 1596.605848][T28665] bridge96: port 1(syz_tun) entered disabled state 13:49:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1596.655172][T28665] device syz_tun entered promiscuous mode [ 1596.726002][T28673] bridge96: port 2(batadv_slave_0) entered blocking state [ 1596.754596][T28673] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0028000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1596.810429][T28673] device batadv_slave_0 entered promiscuous mode [ 1596.869305][T28675] device batadv_slave_0 left promiscuous mode [ 1596.880316][T28675] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1596.929192][T28675] device syz_tun left promiscuous mode [ 1596.964524][T28675] bridge96: port 1(syz_tun) entered disabled state 13:49:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:29 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3400000000000000) 13:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0003000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0006000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4c, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1597.544722][T28705] validate_nla: 24 callbacks suppressed [ 1597.544745][T28705] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1597.590145][T28710] bridge96: port 1(syz_tun) entered blocking state [ 1597.614813][T28710] bridge96: port 1(syz_tun) entered disabled state 13:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0010000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1597.663893][T28710] device syz_tun entered promiscuous mode [ 1597.720643][T28704] bridge96: port 2(batadv_slave_0) entered blocking state [ 1597.738780][T28704] bridge96: port 2(batadv_slave_0) entered disabled state [ 1597.772973][T28704] device batadv_slave_0 entered promiscuous mode [ 1597.812612][T28714] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:49:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x8}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1597.830116][T28716] device batadv_slave_0 left promiscuous mode [ 1597.849415][T28716] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1597.887933][T28716] device syz_tun left promiscuous mode [ 1597.906318][T28716] bridge96: port 1(syz_tun) entered disabled state [ 1598.007954][T28705] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0014000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x9}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1598.220071][T28730] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:49:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3500000000000000) 13:49:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0007000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x60, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0018000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xe}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1598.550427][T28743] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1598.641062][T28747] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1598.665313][T28746] bridge96: port 1(syz_tun) entered blocking state [ 1598.672007][T28746] bridge96: port 1(syz_tun) entered disabled state 13:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0028000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1598.706802][T28746] device syz_tun entered promiscuous mode [ 1598.748452][T28743] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1598.768818][T28754] bridge96: port 2(batadv_slave_0) entered blocking state [ 1598.777270][T28754] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0xf}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1598.812936][T28754] device batadv_slave_0 entered promiscuous mode [ 1598.842520][T28746] device batadv_slave_0 left promiscuous mode [ 1598.849041][T28746] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0008000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1598.920263][T28746] device syz_tun left promiscuous mode [ 1598.964375][T28746] bridge96: port 1(syz_tun) entered disabled state 13:49:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x60}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1599.081534][T28759] __nla_validate_parse: 14 callbacks suppressed [ 1599.081559][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1599.126788][T28762] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1599.147699][T28766] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1599.168142][T28762] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3600000000000000) 13:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c020280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x68, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0009000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x3, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1599.497362][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1599.497687][T28781] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1599.554638][T28783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1599.575208][T28787] bridge96: port 1(syz_tun) entered blocking state [ 1599.600090][T28787] bridge96: port 1(syz_tun) entered disabled state 13:49:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x8, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c030280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1599.628634][T28787] device syz_tun entered promiscuous mode [ 1599.701765][T28779] bridge96: port 2(batadv_slave_0) entered blocking state [ 1599.715270][T28779] bridge96: port 2(batadv_slave_0) entered disabled state [ 1599.754432][T28779] device batadv_slave_0 entered promiscuous mode 13:49:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0xb, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1599.815027][T28791] device batadv_slave_0 left promiscuous mode [ 1599.821271][T28791] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1599.891097][T28791] device syz_tun left promiscuous mode [ 1599.917679][T28791] bridge96: port 1(syz_tun) entered disabled state [ 1600.007114][T28800] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1600.046407][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000b000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x10, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:32 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3700000000000000) 13:49:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6c, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c040280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000c000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x34, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1600.522231][T28822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x3c, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1600.575413][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1600.632757][T28826] bridge96: port 1(syz_tun) entered blocking state [ 1600.640700][T28826] bridge96: port 1(syz_tun) entered disabled state [ 1600.664235][T28826] device syz_tun entered promiscuous mode 13:49:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000d000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c050280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1600.694990][T28820] bridge96: port 2(batadv_slave_0) entered blocking state [ 1600.708775][T28820] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x44, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1600.745354][T28820] device batadv_slave_0 entered promiscuous mode [ 1600.778371][T28826] device batadv_slave_0 left promiscuous mode [ 1600.787532][T28826] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1600.834487][T28826] device syz_tun left promiscuous mode [ 1600.865508][T28826] bridge96: port 1(syz_tun) entered disabled state [ 1600.965399][T28836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1601.028928][T28843] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 13:49:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000f000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:33 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3800000000000000) 13:49:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c060280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x74, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x2, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0010000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x3, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c070280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1601.482216][T28858] bridge96: port 1(syz_tun) entered blocking state [ 1601.520071][T28858] bridge96: port 1(syz_tun) entered disabled state 13:49:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0013000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1601.595057][T28858] device syz_tun entered promiscuous mode [ 1601.619666][T28866] bridge96: port 2(batadv_slave_0) entered blocking state [ 1601.631779][T28866] bridge96: port 2(batadv_slave_0) entered disabled state [ 1601.671238][T28866] device batadv_slave_0 entered promiscuous mode [ 1601.727176][T28868] device batadv_slave_0 left promiscuous mode [ 1601.735011][T28868] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x4, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1601.775880][T28868] device syz_tun left promiscuous mode [ 1601.798914][T28868] bridge96: port 1(syz_tun) entered disabled state 13:49:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c080280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:34 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3900000000000000) 13:49:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x5, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0014000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7a, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c090280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0a0280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x6, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1602.356785][T28896] bridge96: port 1(syz_tun) entered blocking state [ 1602.389887][T28896] bridge96: port 1(syz_tun) entered disabled state [ 1602.444031][T28896] device syz_tun entered promiscuous mode [ 1602.485948][T28906] bridge96: port 2(batadv_slave_0) entered blocking state [ 1602.499562][T28906] bridge96: port 2(batadv_slave_0) entered disabled state [ 1602.531433][T28906] device batadv_slave_0 entered promiscuous mode [ 1602.564794][T28907] validate_nla: 33 callbacks suppressed [ 1602.564816][T28907] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1602.599727][T28909] device batadv_slave_0 left promiscuous mode [ 1602.610568][T28909] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x7, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1602.643613][T28909] device syz_tun left promiscuous mode [ 1602.661304][T28909] bridge96: port 1(syz_tun) entered disabled state [ 1602.735716][T28903] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0c0280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:35 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3c00000000000000) 13:49:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0015000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x8, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0e0280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1603.256654][T28935] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0f0280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x9, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1603.304800][T28937] bridge96: port 1(syz_tun) entered blocking state [ 1603.329996][T28937] bridge96: port 1(syz_tun) entered disabled state [ 1603.368156][T28937] device syz_tun entered promiscuous mode [ 1603.395495][T28944] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1603.423548][T28945] bridge96: port 2(batadv_slave_0) entered blocking state [ 1603.443061][T28945] bridge96: port 2(batadv_slave_0) entered disabled state [ 1603.481360][T28945] device batadv_slave_0 entered promiscuous mode [ 1603.518069][T28935] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1603.534040][T28937] device batadv_slave_0 left promiscuous mode [ 1603.541880][T28937] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0xa, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0016000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1603.578898][T28937] device syz_tun left promiscuous mode [ 1603.614644][T28937] bridge96: port 1(syz_tun) entered disabled state 13:49:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0xb, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1603.801340][T28959] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1603.865355][T28961] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1603.905418][T28961] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:35 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3d00000000000000) 13:49:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c100280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x10, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0018000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1604.189534][T28971] __nla_validate_parse: 11 callbacks suppressed [ 1604.189555][T28971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1604.236878][T28973] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1604.269509][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x11, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1604.307088][T28976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1604.320090][T28979] bridge96: port 1(syz_tun) entered blocking state [ 1604.328616][T28979] bridge96: port 1(syz_tun) entered disabled state [ 1604.349755][T28979] device syz_tun entered promiscuous mode 13:49:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c600280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1604.379697][T28973] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1604.405537][T28974] bridge96: port 2(batadv_slave_0) entered blocking state [ 1604.418536][T28974] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1604.463408][T28974] device batadv_slave_0 entered promiscuous mode 13:49:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x300, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1604.514967][T28979] device batadv_slave_0 left promiscuous mode [ 1604.538773][T28979] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1604.581255][T28979] device syz_tun left promiscuous mode [ 1604.593194][T28979] bridge96: port 1(syz_tun) entered disabled state [ 1604.706728][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001b000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1604.821641][T28998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:36 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3e00000000000000) 13:49:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000580080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x500, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001c000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1605.133197][T29010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1605.168363][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x8}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c001480080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1605.228360][T29016] bridge96: port 1(syz_tun) entered blocking state [ 1605.250781][T29016] bridge96: port 1(syz_tun) entered disabled state 13:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1605.291240][T29016] device syz_tun entered promiscuous mode [ 1605.326511][T29012] bridge96: port 2(batadv_slave_0) entered blocking state [ 1605.341154][T29012] bridge96: port 2(batadv_slave_0) entered disabled state [ 1605.378687][T29012] device batadv_slave_0 entered promiscuous mode [ 1605.418856][T29021] device batadv_slave_0 left promiscuous mode [ 1605.430246][T29021] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0xb}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1605.473815][T29021] device syz_tun left promiscuous mode [ 1605.495477][T29021] bridge96: port 1(syz_tun) entered disabled state [ 1605.586976][T29026] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001d000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000580080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:37 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x3f00000000000000) 13:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x600, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000880080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e001e000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1606.015704][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1606.060965][T29055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1606.095122][T29051] bridge96: port 1(syz_tun) entered blocking state 13:49:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0021000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x14}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c001080080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1606.114069][T29051] bridge96: port 1(syz_tun) entered disabled state [ 1606.139306][T29051] device syz_tun entered promiscuous mode [ 1606.189654][T29060] bridge96: port 2(batadv_slave_0) entered blocking state [ 1606.205746][T29060] bridge96: port 2(batadv_slave_0) entered disabled state [ 1606.239752][T29060] device batadv_slave_0 entered promiscuous mode [ 1606.270825][T29061] device batadv_slave_0 left promiscuous mode [ 1606.282713][T29061] bridge96: port 2(batadv_slave_0) entered disabled state [ 1606.314484][T29061] device syz_tun left promiscuous mode [ 1606.320576][T29061] bridge96: port 1(syz_tun) entered disabled state 13:49:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x1a}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c001480080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:38 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4100000000000000) 13:49:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0022000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x700, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x3, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280020001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x8, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0025000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280030001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1606.930032][T29089] bridge96: port 1(syz_tun) entered blocking state [ 1606.960076][T29089] bridge96: port 1(syz_tun) entered disabled state [ 1607.010893][T29089] device syz_tun entered promiscuous mode [ 1607.052665][T29096] bridge96: port 2(batadv_slave_0) entered blocking state [ 1607.067480][T29096] bridge96: port 2(batadv_slave_0) entered disabled state 13:49:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0xb, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1607.103378][ T3231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.109902][ T3231] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.111611][T29096] device batadv_slave_0 entered promiscuous mode 13:49:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1607.182762][T29089] device batadv_slave_0 left promiscuous mode [ 1607.191477][T29089] bridge96: port 2(batadv_slave_0) entered disabled state [ 1607.239416][T29089] device syz_tun left promiscuous mode [ 1607.259044][T29089] bridge96: port 1(syz_tun) entered disabled state 13:49:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280040001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:39 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4200000000000000) 13:49:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0037000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x10, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x900, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280050001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1607.817481][T29127] validate_nla: 38 callbacks suppressed [ 1607.817504][T29127] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1607.838446][T29128] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1607.890318][T29130] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1607.911942][T29133] bridge97: port 1(syz_tun) entered blocking state [ 1607.928021][T29133] bridge97: port 1(syz_tun) entered disabled state 13:49:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x34, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280060001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1607.948783][T29133] device syz_tun entered promiscuous mode [ 1607.970565][T29135] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1608.012510][T29130] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1608.022551][T29129] bridge97: port 2(batadv_slave_0) entered blocking state [ 1608.030469][T29129] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0041000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1608.077246][T29129] device batadv_slave_0 entered promiscuous mode [ 1608.090918][T29140] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 1608.112481][T29133] device batadv_slave_0 left promiscuous mode [ 1608.119067][T29133] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x3c, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1608.164859][T29133] device syz_tun left promiscuous mode [ 1608.195466][T29133] bridge97: port 1(syz_tun) entered disabled state [ 1608.306628][T29143] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1608.339300][T29146] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280090001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1608.365081][T29145] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1608.388842][T29146] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:40 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4600000000000000) 13:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x44, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xa00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0048000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800a0001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e005b000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1608.885097][T29167] bridge97: port 1(syz_tun) entered blocking state [ 1608.913368][T29167] bridge97: port 1(syz_tun) entered disabled state 13:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x3, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800b0001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1608.945762][T29167] device syz_tun entered promiscuous mode [ 1608.979512][T29177] bridge97: port 2(batadv_slave_0) entered blocking state [ 1608.990627][T29177] bridge97: port 2(batadv_slave_0) entered disabled state [ 1609.024511][T29177] device batadv_slave_0 entered promiscuous mode [ 1609.055515][T29167] device batadv_slave_0 left promiscuous mode [ 1609.067157][T29167] bridge97: port 2(batadv_slave_0) entered disabled state [ 1609.111607][T29167] device syz_tun left promiscuous mode [ 1609.135348][T29167] bridge97: port 1(syz_tun) entered disabled state 13:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x8, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1609.236177][T29183] __nla_validate_parse: 19 callbacks suppressed [ 1609.236201][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0063000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1609.500126][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:41 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4800000000000000) 13:49:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280100001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xc00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0xb, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e005d040d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1609.784755][T29210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x10, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1609.829992][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280110001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e0000200d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1609.890296][T29212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1609.931146][T29214] bridge97: port 1(syz_tun) entered blocking state [ 1609.944966][T29214] bridge97: port 1(syz_tun) entered disabled state [ 1609.996093][T29214] device syz_tun entered promiscuous mode 13:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x34, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1610.039302][T29208] bridge97: port 2(batadv_slave_0) entered blocking state [ 1610.054985][T29208] bridge97: port 2(batadv_slave_0) entered disabled state [ 1610.099260][T29208] device batadv_slave_0 entered promiscuous mode [ 1610.131929][T29221] device batadv_slave_0 left promiscuous mode [ 1610.142031][T29221] bridge97: port 2(batadv_slave_0) entered disabled state [ 1610.179341][T29221] device syz_tun left promiscuous mode [ 1610.201792][T29221] bridge97: port 1(syz_tun) entered disabled state 13:49:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x3c, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1610.315666][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1610.574260][T29240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:42 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x4c00000000000000) 13:49:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280140001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e00242f0d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xe00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x44, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1610.749365][T29250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1610.799599][T29253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a6400000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1610.857518][T29256] bridge97: port 1(syz_tun) entered blocking state 13:49:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280320001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1610.903939][T29256] bridge97: port 1(syz_tun) entered disabled state [ 1610.939374][T29256] device syz_tun entered promiscuous mode [ 1610.989361][T29253] bridge97: port 2(batadv_slave_0) entered blocking state [ 1611.008252][T29253] bridge97: port 2(batadv_slave_0) entered disabled state [ 1611.051631][T29253] device batadv_slave_0 entered promiscuous mode [ 1611.084663][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1611.108947][T29261] device batadv_slave_0 left promiscuous mode [ 1611.120173][T29261] bridge97: port 2(batadv_slave_0) entered disabled state [ 1611.178845][T29261] device syz_tun left promiscuous mode [ 1611.190365][T29261] bridge97: port 1(syz_tun) entered disabled state 13:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080300000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:43 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x500a000000000000) 13:49:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a020d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x106f, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x8}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080400000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x9}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a030d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080201000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1611.744064][T29293] bridge97: port 1(syz_tun) entered blocking state [ 1611.780500][T29293] bridge97: port 1(syz_tun) entered disabled state 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1611.829522][T29293] device syz_tun entered promiscuous mode [ 1611.892443][T29301] bridge97: port 2(batadv_slave_0) entered blocking state [ 1611.899729][T29301] bridge97: port 2(batadv_slave_0) entered disabled state [ 1611.936075][T29301] device batadv_slave_0 entered promiscuous mode [ 1611.959931][T29305] device batadv_slave_0 left promiscuous mode [ 1611.969370][T29305] bridge97: port 2(batadv_slave_0) entered disabled state [ 1611.997335][T29305] device syz_tun left promiscuous mode [ 1612.018135][T29305] bridge97: port 1(syz_tun) entered disabled state 13:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x10}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080301000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:44 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6000000000000000) 13:49:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a040d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x1f00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x11}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080401000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1612.500693][T29330] bridge97: port 1(syz_tun) entered blocking state [ 1612.527120][T29330] bridge97: port 1(syz_tun) entered disabled state 13:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x14}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080501000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1612.560739][T29330] device syz_tun entered promiscuous mode [ 1612.588778][T29339] bridge97: port 2(batadv_slave_0) entered blocking state [ 1612.599695][T29339] bridge97: port 2(batadv_slave_0) entered disabled state [ 1612.630867][T29339] device batadv_slave_0 entered promiscuous mode [ 1612.652626][T29330] device batadv_slave_0 left promiscuous mode [ 1612.660456][T29330] bridge97: port 2(batadv_slave_0) entered disabled state [ 1612.699523][T29330] device syz_tun left promiscuous mode [ 1612.731221][T29330] bridge97: port 1(syz_tun) entered disabled state 13:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x3, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080601000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c0001006272696467"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a050d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1613.019199][T29357] validate_nla: 29 callbacks suppressed [ 1613.019223][T29357] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1613.060525][T29359] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1613.094533][T29359] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:45 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6558000000000000) 13:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x2000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080701000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a060d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1613.346239][T29370] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080801000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x2c, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1613.413310][T29370] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1613.431017][T29374] bridge97: port 1(syz_tun) entered blocking state [ 1613.450113][T29374] bridge97: port 1(syz_tun) entered disabled state [ 1613.495405][T29374] device syz_tun entered promiscuous mode 13:49:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a070d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1613.541250][T29379] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1613.556274][T29381] bridge97: port 2(batadv_slave_0) entered blocking state [ 1613.574565][T29381] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1613.613827][T29381] device batadv_slave_0 entered promiscuous mode [ 1613.650906][T29374] device batadv_slave_0 left promiscuous mode 13:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x2, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1613.658582][T29374] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080901000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1613.731114][T29374] device syz_tun left promiscuous mode [ 1613.760721][T29374] bridge97: port 1(syz_tun) entered disabled state [ 1613.876008][T29388] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1613.890187][T29397] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1613.908111][T29388] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:46 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6800000000000000) 13:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x4, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080a01000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a080d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1614.288914][T29409] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1614.309530][T29415] __nla_validate_parse: 20 callbacks suppressed [ 1614.309553][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a090d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x5, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1614.392217][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080c01000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1614.449001][T29413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1614.469278][T29416] bridge97: port 1(syz_tun) entered blocking state [ 1614.479782][T29416] bridge97: port 1(syz_tun) entered disabled state [ 1614.510601][T29416] device syz_tun entered promiscuous mode [ 1614.535770][T29419] bridge97: port 2(batadv_slave_0) entered blocking state [ 1614.552409][T29419] bridge97: port 2(batadv_slave_0) entered disabled state [ 1614.583964][T29419] device batadv_slave_0 entered promiscuous mode [ 1614.614924][T29412] device batadv_slave_0 left promiscuous mode [ 1614.623518][T29412] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x6, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1614.660871][T29412] device syz_tun left promiscuous mode [ 1614.684962][T29412] bridge97: port 1(syz_tun) entered disabled state [ 1614.776027][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x8, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a480d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1614.823287][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1614.921231][T29416] bridge97: port 1(syz_tun) entered blocking state [ 1614.936535][T29416] bridge97: port 1(syz_tun) entered disabled state [ 1614.974433][T29416] device syz_tun entered promiscuous mode [ 1614.994853][T29439] bridge97: port 2(batadv_slave_0) entered blocking state [ 1615.002049][T29439] bridge97: port 2(batadv_slave_0) entered disabled state [ 1615.034978][T29439] device batadv_slave_0 entered promiscuous mode [ 1615.054025][T29441] device batadv_slave_0 left promiscuous mode [ 1615.060330][T29441] bridge97: port 2(batadv_slave_0) entered disabled state [ 1615.084008][T29441] device syz_tun left promiscuous mode [ 1615.089767][T29441] bridge97: port 1(syz_tun) entered disabled state 13:49:47 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x6c00000000000000) 13:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080e01000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x9, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1615.250690][T29454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:49:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4800, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a4c0d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0xa, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1615.296874][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080f01000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1615.486135][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a600d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0xb, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1615.560266][T29470] bridge97: port 1(syz_tun) entered blocking state [ 1615.603110][T29470] bridge97: port 1(syz_tun) entered disabled state [ 1615.657750][T29470] device syz_tun entered promiscuous mode [ 1615.698852][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1615.725868][T29465] bridge97: port 2(batadv_slave_0) entered blocking state [ 1615.735935][T29465] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280081001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1615.765001][T29465] device batadv_slave_0 entered promiscuous mode [ 1615.795255][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1615.843530][T29476] device batadv_slave_0 left promiscuous mode [ 1615.851201][T29476] bridge97: port 2(batadv_slave_0) entered disabled state [ 1615.907656][T29476] device syz_tun left promiscuous mode [ 1615.931751][T29476] bridge97: port 1(syz_tun) entered disabled state 13:49:48 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7400000000000000) 13:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x10, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280086001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a680d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080003000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x11, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1616.425691][T29503] bridge97: port 1(syz_tun) entered blocking state [ 1616.445053][T29503] bridge97: port 1(syz_tun) entered disabled state 13:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1616.486864][T29503] device syz_tun entered promiscuous mode 13:49:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a6c0d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1616.532723][T29509] bridge97: port 2(batadv_slave_0) entered blocking state [ 1616.548681][T29509] bridge97: port 2(batadv_slave_0) entered disabled state [ 1616.604891][T29509] device batadv_slave_0 entered promiscuous mode [ 1616.647464][T29503] device batadv_slave_0 left promiscuous mode [ 1616.655831][T29503] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0xa800, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1616.698033][T29503] device syz_tun left promiscuous mode [ 1616.725076][T29503] bridge97: port 1(syz_tun) entered disabled state 13:49:48 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a740d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080005000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:49 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x7a00000000000000) 13:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x5865, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0xd000, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a7a0d000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x3, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1617.306281][T29541] bridge97: port 1(syz_tun) entered blocking state 13:49:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080039000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000f000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1617.346567][T29541] bridge97: port 1(syz_tun) entered disabled state [ 1617.400286][T29541] device syz_tun entered promiscuous mode [ 1617.450907][T29547] bridge97: port 2(batadv_slave_0) entered blocking state [ 1617.467986][T29547] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x10, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1617.515701][T29547] device batadv_slave_0 entered promiscuous mode [ 1617.547600][T29551] device batadv_slave_0 left promiscuous mode [ 1617.569432][T29551] bridge97: port 2(batadv_slave_0) entered disabled state [ 1617.601181][T29551] device syz_tun left promiscuous mode [ 1617.626091][T29551] bridge97: port 1(syz_tun) entered disabled state 13:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x18, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0012000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008003e000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:49 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x8100000000000000) 13:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0018000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080002000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x4, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1618.221725][T29581] validate_nla: 34 callbacks suppressed [ 1618.221750][T29581] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1618.299905][T29584] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1618.321166][T29586] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1618.337841][T29588] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080003000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1618.357994][T29591] bridge97: port 1(syz_tun) entered blocking state [ 1618.366704][T29591] bridge97: port 1(syz_tun) entered disabled state [ 1618.383102][T29594] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1618.401894][T29591] device syz_tun entered promiscuous mode [ 1618.434778][T29583] bridge97: port 2(batadv_slave_0) entered blocking state [ 1618.457012][T29583] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x8, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1618.495850][T29583] device batadv_slave_0 entered promiscuous mode [ 1618.549951][T29581] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1618.570481][T29588] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1618.589645][T29595] device batadv_slave_0 left promiscuous mode [ 1618.598780][T29595] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a001f000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0xb, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1618.650142][T29595] device syz_tun left promiscuous mode [ 1618.676595][T29595] bridge97: port 1(syz_tun) entered disabled state [ 1618.766563][T29601] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1618.836862][T29583] bridge97: port 1(syz_tun) entered blocking state [ 1618.856638][T29583] bridge97: port 1(syz_tun) entered disabled state [ 1618.899176][T29583] device syz_tun entered promiscuous mode 13:49:50 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x88a8ffff00000000) 13:49:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080005000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1618.953525][T29612] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1618.966462][T29595] device syz_tun left promiscuous mode [ 1618.975445][T29595] bridge97: port 1(syz_tun) entered disabled state [ 1619.057655][T29615] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6558, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x10, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0020000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080008000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x14, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0025000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1619.404667][T29634] __nla_validate_parse: 8 callbacks suppressed [ 1619.404689][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080010000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1619.541788][T29635] bridge97: port 1(syz_tun) entered blocking state [ 1619.554491][T29635] bridge97: port 1(syz_tun) entered disabled state 13:49:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1619.619189][T29635] device syz_tun entered promiscuous mode [ 1619.648272][T29638] bridge97: port 2(batadv_slave_0) entered blocking state [ 1619.659198][T29638] bridge97: port 2(batadv_slave_0) entered disabled state [ 1619.692635][T29638] device batadv_slave_0 entered promiscuous mode [ 1619.710817][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1619.731866][T29634] device batadv_slave_0 left promiscuous mode [ 1619.744097][T29634] bridge97: port 2(batadv_slave_0) entered disabled state [ 1619.773430][T29634] device syz_tun left promiscuous mode [ 1619.793455][T29634] bridge97: port 1(syz_tun) entered disabled state [ 1619.895904][T29643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:52 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x9effffff00000000) 13:49:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x3, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0040000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080039000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6800, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1620.265487][T29666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1620.269762][T29667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:49:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008003e000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1620.306223][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001040000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1620.369289][T29675] bridge97: port 1(syz_tun) entered blocking state [ 1620.401680][T29675] bridge97: port 1(syz_tun) entered disabled state 13:49:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0041000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1620.457855][T29675] device syz_tun entered promiscuous mode [ 1620.519193][T29670] bridge97: port 2(batadv_slave_0) entered blocking state [ 1620.535252][T29670] bridge97: port 2(batadv_slave_0) entered disabled state [ 1620.580642][T29670] device batadv_slave_0 entered promiscuous mode [ 1620.628906][T29678] device batadv_slave_0 left promiscuous mode [ 1620.636941][T29678] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x6, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1620.695945][T29678] device syz_tun left promiscuous mode [ 1620.707751][T29678] bridge97: port 1(syz_tun) entered disabled state 13:49:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xa, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1620.802421][T29685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1620.982700][T29696] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 13:49:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc000000000000000) 13:49:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0048000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080000030800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1621.251497][T29709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1621.273964][T29708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a005b000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1621.355515][T29713] bridge97: port 1(syz_tun) entered blocking state [ 1621.369083][T29713] bridge97: port 1(syz_tun) entered disabled state [ 1621.420779][T29713] device syz_tun entered promiscuous mode [ 1621.452865][T29708] bridge97: port 2(batadv_slave_0) entered blocking state [ 1621.465931][T29708] bridge97: port 2(batadv_slave_0) entered disabled state [ 1621.499851][T29708] device batadv_slave_0 entered promiscuous mode [ 1621.532915][T29718] device batadv_slave_0 left promiscuous mode [ 1621.554919][T29718] bridge97: port 2(batadv_slave_0) entered disabled state [ 1621.590612][T29718] device syz_tun left promiscuous mode 13:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1621.619683][T29718] bridge97: port 1(syz_tun) entered disabled state 13:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc00e000000000000) 13:49:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000f000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6f10, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x6558, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000600000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x8100, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1622.188601][T29743] bridge97: port 1(syz_tun) entered blocking state [ 1622.205152][T29743] bridge97: port 1(syz_tun) entered disabled state [ 1622.227248][T29743] device syz_tun entered promiscuous mode 13:49:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001020800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1622.272741][T29752] bridge97: port 2(batadv_slave_0) entered blocking state [ 1622.300247][T29752] bridge97: port 2(batadv_slave_0) entered disabled state [ 1622.356288][T29752] device batadv_slave_0 entered promiscuous mode [ 1622.404012][T29743] device batadv_slave_0 left promiscuous mode [ 1622.410891][T29743] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x8, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1622.448865][T29743] device syz_tun left promiscuous mode [ 1622.478136][T29743] bridge97: port 1(syz_tun) entered disabled state 13:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001030800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff00", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:54 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc71d000000000000) 13:49:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0012000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7400, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0xb, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001040800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff00", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x10, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1623.103849][T29782] bridge97: port 1(syz_tun) entered blocking state [ 1623.110826][T29782] bridge97: port 1(syz_tun) entered disabled state 13:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff00", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001050800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0018000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1623.146380][T29782] device syz_tun entered promiscuous mode [ 1623.181716][T29789] bridge97: port 2(batadv_slave_0) entered blocking state [ 1623.240623][T29789] bridge97: port 2(batadv_slave_0) entered disabled state [ 1623.289013][T29789] device batadv_slave_0 entered promiscuous mode 13:49:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1623.329461][T29782] device batadv_slave_0 left promiscuous mode [ 1623.340493][T29782] bridge97: port 2(batadv_slave_0) entered disabled state [ 1623.385966][T29782] device syz_tun left promiscuous mode [ 1623.409703][T29782] bridge97: port 1(syz_tun) entered disabled state [ 1623.526827][T29798] validate_nla: 47 callbacks suppressed [ 1623.526850][T29798] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1623.555048][T29799] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001060800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1623.589953][T29798] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1623.640991][T29799] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1623.663524][T29808] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:49:55 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xc900000000000000) 13:49:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x0, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:49:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff0000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0025000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001070800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1623.963422][T29819] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1623.987433][T29819] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1624.022781][T29824] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1624.053057][T29819] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1624.061486][T29825] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:49:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x3, 0x6}]}]}, 0x58}}, 0x0) 13:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001080800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1624.078004][T29823] bridge97: port 1(syz_tun) entered blocking state [ 1624.088538][T29823] bridge97: port 1(syz_tun) entered disabled state [ 1624.111300][T29823] device syz_tun entered promiscuous mode 13:49:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0041000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1624.132005][T29828] bridge97: port 2(batadv_slave_0) entered blocking state [ 1624.156163][T29828] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff0000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1624.200330][T29828] device batadv_slave_0 entered promiscuous mode [ 1624.247422][T29823] device batadv_slave_0 left promiscuous mode [ 1624.272255][T29823] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x4, 0x6}]}]}, 0x58}}, 0x0) [ 1624.329058][T29823] device syz_tun left promiscuous mode [ 1624.349017][T29823] bridge97: port 1(syz_tun) entered disabled state [ 1624.472605][T29837] __nla_validate_parse: 13 callbacks suppressed [ 1624.472629][T29837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 13:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001090800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:56 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xe03f030000000000) 13:49:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0048000000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x5, 0x6}]}]}, 0x58}}, 0x0) 13:49:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff0000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010a0800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a005b000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1624.927409][T29855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1624.957142][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010c0800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x6, 0x6}]}]}, 0x58}}, 0x0) [ 1625.019655][T29864] bridge97: port 1(syz_tun) entered blocking state [ 1625.045463][T29864] bridge97: port 1(syz_tun) entered disabled state [ 1625.095669][T29864] device syz_tun entered promiscuous mode [ 1625.132651][T29857] bridge97: port 2(batadv_slave_0) entered blocking state [ 1625.139840][T29857] bridge97: port 2(batadv_slave_0) entered disabled state [ 1625.185635][T29857] device batadv_slave_0 entered promiscuous mode [ 1625.216017][T29867] device batadv_slave_0 left promiscuous mode [ 1625.229388][T29867] bridge97: port 2(batadv_slave_0) entered disabled state [ 1625.250997][T29867] device syz_tun left promiscuous mode [ 1625.268093][T29867] bridge97: port 1(syz_tun) entered disabled state 13:49:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x9, 0x6}]}]}, 0x58}}, 0x0) [ 1625.336212][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1625.368448][T29876] bridge37: port 1(batadv_slave_0) entered blocking state [ 1625.381171][T29876] bridge37: port 1(batadv_slave_0) entered disabled state [ 1625.399619][T29876] device batadv_slave_0 entered promiscuous mode 13:49:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010e0800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1625.427028][T29878] device batadv_slave_0 left promiscuous mode [ 1625.432565][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1625.456886][T29878] bridge37: port 1(batadv_slave_0) entered disabled state 13:49:57 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xeffdffff00000000) 13:49:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xa, 0x6}]}]}, 0x58}}, 0x0) 13:49:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010f0800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0000200000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1625.846658][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:49:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001100800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0000640000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0xb, 0x6}]}]}, 0x58}}, 0x0) [ 1625.943793][T29903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1626.019484][T29904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1626.092785][T29906] bridge37: port 1(batadv_slave_0) entered blocking state [ 1626.102976][T29906] bridge37: port 1(batadv_slave_0) entered disabled state [ 1626.124428][T29906] device batadv_slave_0 entered promiscuous mode [ 1626.136563][T29907] bridge97: port 1(syz_tun) entered blocking state [ 1626.145830][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1626.158079][T29907] bridge97: port 1(syz_tun) entered disabled state [ 1626.185200][T29907] device syz_tun entered promiscuous mode 13:49:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001600800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1626.218164][T29903] device batadv_slave_0 left promiscuous mode [ 1626.235777][T29903] bridge37: port 1(batadv_slave_0) entered disabled state 13:49:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x10, 0x6}]}]}, 0x58}}, 0x0) [ 1626.356175][T29912] bridge97: port 2(batadv_slave_0) entered blocking state [ 1626.369872][T29912] bridge97: port 2(batadv_slave_0) entered disabled state [ 1626.380222][T29926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1626.400801][T29912] device batadv_slave_0 entered promiscuous mode 13:49:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x11, 0x6}]}]}, 0x58}}, 0x0) [ 1626.429022][T29904] device batadv_slave_0 left promiscuous mode [ 1626.445151][T29904] bridge97: port 2(batadv_slave_0) entered disabled state [ 1626.471824][T29904] device syz_tun left promiscuous mode [ 1626.492037][T29904] bridge97: port 1(syz_tun) entered disabled state 13:49:58 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf0ffffff00000000) 13:49:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000900000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000020008000001201", 0x2e}], 0x1}, 0x0) 13:49:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x14, 0x6}]}]}, 0x58}}, 0x0) 13:49:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x40000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d020000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1626.965500][T29940] bridge37: port 1(batadv_slave_0) entered blocking state [ 1626.990623][T29940] bridge37: port 1(batadv_slave_0) entered disabled state 13:49:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x5}]}]}, 0x58}}, 0x0) [ 1627.032830][T29940] device batadv_slave_0 entered promiscuous mode [ 1627.062253][T29949] device batadv_slave_0 left promiscuous mode [ 1627.068699][T29949] bridge37: port 1(batadv_slave_0) entered disabled state 13:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000a00000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1627.144163][T29950] bridge97: port 1(syz_tun) entered blocking state [ 1627.156789][T29950] bridge97: port 1(syz_tun) entered disabled state [ 1627.206074][T29950] device syz_tun entered promiscuous mode [ 1627.260780][T29947] bridge97: port 2(batadv_slave_0) entered blocking state [ 1627.278898][T29947] bridge97: port 2(batadv_slave_0) entered disabled state [ 1627.313465][T29947] device batadv_slave_0 entered promiscuous mode [ 1627.322323][T29958] device batadv_slave_0 left promiscuous mode [ 1627.330761][T29958] bridge97: port 2(batadv_slave_0) entered disabled state 13:49:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x8}]}]}, 0x58}}, 0x0) [ 1627.389837][T29958] device syz_tun left promiscuous mode [ 1627.440867][T29958] bridge97: port 1(syz_tun) entered disabled state 13:49:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0xb}]}]}, 0x58}}, 0x0) 13:49:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d030000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:59 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xf400000000000000) 13:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000b00000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:49:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x200000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:49:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x10}]}]}, 0x58}}, 0x0) 13:49:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d040000ba8000001201", 0x2e}], 0x1}, 0x0) 13:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:49:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d050000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1628.015446][T29984] bridge97: port 1(syz_tun) entered blocking state [ 1628.045372][T29984] bridge97: port 1(syz_tun) entered disabled state 13:49:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x14}]}]}, 0x58}}, 0x0) [ 1628.081408][T29984] device syz_tun entered promiscuous mode [ 1628.100780][T29986] bridge37: port 1(batadv_slave_0) entered blocking state [ 1628.116744][T29986] bridge37: port 1(batadv_slave_0) entered disabled state [ 1628.142102][T29986] device batadv_slave_0 entered promiscuous mode [ 1628.162186][T29994] bridge97: port 2(batadv_slave_0) entered blocking state [ 1628.170281][T29994] bridge97: port 2(batadv_slave_0) entered disabled state [ 1628.184058][T29994] device batadv_slave_0 entered promiscuous mode [ 1628.194515][T29995] device batadv_slave_0 left promiscuous mode [ 1628.203271][T29995] bridge37: port 1(batadv_slave_0) entered disabled state [ 1628.296685][T29984] device batadv_slave_0 left promiscuous mode [ 1628.304894][T29984] bridge97: port 2(batadv_slave_0) entered disabled state [ 1628.330933][T29984] device syz_tun left promiscuous mode 13:50:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x1a}]}]}, 0x58}}, 0x0) [ 1628.343850][T29984] bridge97: port 1(syz_tun) entered disabled state 13:50:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d060000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1628.673892][T30015] validate_nla: 52 callbacks suppressed [ 1628.673916][T30015] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1628.708746][T30015] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1628.723317][T30015] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1628.731916][T30016] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:00 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xff00000000000000) 13:50:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x0}]}]}, 0x58}}, 0x0) 13:50:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001003200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d070000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1628.906962][T30027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1628.943077][T30023] bridge97: port 1(syz_tun) entered blocking state 13:50:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) 13:50:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1628.962955][T30023] bridge97: port 1(syz_tun) entered disabled state [ 1629.011293][T30023] device syz_tun entered promiscuous mode [ 1629.040775][T30027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1629.076399][T30031] bridge97: port 2(batadv_slave_0) entered blocking state [ 1629.094502][T30031] bridge97: port 2(batadv_slave_0) entered disabled state [ 1629.138285][T30031] device batadv_slave_0 entered promiscuous mode [ 1629.171820][T30032] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1629.188992][T30033] bridge37: port 1(batadv_slave_0) entered blocking state [ 1629.215133][T30033] bridge37: port 1(batadv_slave_0) entered disabled state [ 1629.227524][T30033] device batadv_slave_0 entered promiscuous mode [ 1629.238875][T30034] device batadv_slave_0 left promiscuous mode [ 1629.247960][T30034] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}}, 0x0) [ 1629.280085][T30034] device syz_tun left promiscuous mode [ 1629.302906][T30034] bridge97: port 1(syz_tun) entered disabled state [ 1629.414456][T30038] device batadv_slave_0 left promiscuous mode [ 1629.422077][T30038] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) [ 1629.536720][T30027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1629.551132][T30039] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1629.561326][T30050] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:50:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:01 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xff03000000000000) 13:50:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x58}}, 0x0) 13:50:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d080000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1629.889196][T30059] __nla_validate_parse: 8 callbacks suppressed [ 1629.889220][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1629.982120][T30064] bridge37: port 1(batadv_slave_0) entered blocking state [ 1630.004801][T30064] bridge37: port 1(batadv_slave_0) entered disabled state [ 1630.041718][T30064] device batadv_slave_0 entered promiscuous mode [ 1630.067841][T30069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1630.102239][T30059] device batadv_slave_0 left promiscuous mode [ 1630.120056][T30059] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x58}}, 0x0) [ 1630.217266][T30072] bridge97: port 1(syz_tun) entered blocking state [ 1630.229069][T30072] bridge97: port 1(syz_tun) entered disabled state 13:50:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x58}}, 0x0) [ 1630.260323][T30072] device syz_tun entered promiscuous mode [ 1630.289168][T30069] bridge97: port 2(batadv_slave_0) entered blocking state [ 1630.301353][T30069] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1630.345291][T30069] device batadv_slave_0 entered promiscuous mode 13:50:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x6}]}]}, 0x58}}, 0x0) [ 1630.402763][T30077] device batadv_slave_0 left promiscuous mode [ 1630.409023][T30077] bridge97: port 2(batadv_slave_0) entered disabled state [ 1630.440944][T30077] device syz_tun left promiscuous mode [ 1630.465777][T30077] bridge97: port 1(syz_tun) entered disabled state 13:50:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x7}]}]}, 0x58}}, 0x0) 13:50:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d090000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000600000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1630.848228][T30103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1630.931828][T30105] bridge37: port 1(batadv_slave_0) entered blocking state [ 1630.951998][T30105] bridge37: port 1(batadv_slave_0) entered disabled state [ 1630.974453][T30105] device batadv_slave_0 entered promiscuous mode 13:50:02 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xffffff7f00000000) 13:50:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x58}}, 0x0) 13:50:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000900000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d480000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1630.991131][T30103] device batadv_slave_0 left promiscuous mode [ 1630.998780][T30103] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1631.157759][T30119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000a00000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x9}]}]}, 0x58}}, 0x0) [ 1631.219773][T30122] bridge97: port 1(syz_tun) entered blocking state [ 1631.242728][T30122] bridge97: port 1(syz_tun) entered disabled state 13:50:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d4c0000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1631.282850][T30122] device syz_tun entered promiscuous mode [ 1631.310948][T30119] bridge97: port 2(batadv_slave_0) entered blocking state [ 1631.321342][T30119] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xa}]}]}, 0x58}}, 0x0) [ 1631.368331][T30119] device batadv_slave_0 entered promiscuous mode [ 1631.426126][T30122] device batadv_slave_0 left promiscuous mode [ 1631.437215][T30122] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xe}]}]}, 0x58}}, 0x0) [ 1631.486353][T30122] device syz_tun left promiscuous mode [ 1631.516267][T30122] bridge97: port 1(syz_tun) entered disabled state 13:50:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf}]}]}, 0x58}}, 0x0) [ 1631.617463][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1631.645621][T30134] bridge37: port 1(batadv_slave_0) entered blocking state [ 1631.657433][T30134] bridge37: port 1(batadv_slave_0) entered disabled state [ 1631.681100][T30134] device batadv_slave_0 entered promiscuous mode [ 1631.743158][T30137] device batadv_slave_0 left promiscuous mode [ 1631.757341][T30137] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:04 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xffffffff00000000) 13:50:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000b00000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x60}]}]}, 0x58}}, 0x0) 13:50:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d600000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1632.240816][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf0}]}]}, 0x58}}, 0x0) [ 1632.316218][T30164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x300}]}]}, 0x58}}, 0x0) [ 1632.368018][T30168] bridge37: port 1(batadv_slave_0) entered blocking state [ 1632.380160][T30168] bridge37: port 1(batadv_slave_0) entered disabled state [ 1632.414947][T30168] device batadv_slave_0 entered promiscuous mode [ 1632.444011][T30170] bridge97: port 1(syz_tun) entered blocking state [ 1632.450582][T30170] bridge97: port 1(syz_tun) entered disabled state [ 1632.496557][T30170] device syz_tun entered promiscuous mode [ 1632.530830][T30162] device batadv_slave_0 left promiscuous mode [ 1632.539928][T30162] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x500}]}]}, 0x58}}, 0x0) [ 1632.650472][T30164] bridge97: port 2(batadv_slave_0) entered blocking state [ 1632.664629][T30164] bridge97: port 2(batadv_slave_0) entered disabled state [ 1632.697481][T30164] device batadv_slave_0 entered promiscuous mode [ 1632.739868][T30176] device batadv_slave_0 left promiscuous mode [ 1632.750127][T30176] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x600}]}]}, 0x58}}, 0x0) [ 1632.795659][T30176] device syz_tun left promiscuous mode [ 1632.806024][T30176] bridge97: port 1(syz_tun) entered disabled state [ 1632.950002][T30170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d680000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1633.033717][T30164] bridge97: port 1(syz_tun) entered blocking state [ 1633.040307][T30164] bridge97: port 1(syz_tun) entered disabled state [ 1633.087273][T30164] device syz_tun entered promiscuous mode [ 1633.104745][T30194] bridge97: port 2(batadv_slave_0) entered blocking state [ 1633.114616][T30194] bridge97: port 2(batadv_slave_0) entered disabled state [ 1633.136315][T30194] device batadv_slave_0 entered promiscuous mode [ 1633.150500][T30176] device batadv_slave_0 left promiscuous mode [ 1633.158399][T30176] bridge97: port 2(batadv_slave_0) entered disabled state [ 1633.171771][T30176] device syz_tun left promiscuous mode [ 1633.178759][T30176] bridge97: port 1(syz_tun) entered disabled state 13:50:05 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0xfffffffffffff000) 13:50:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x700}]}]}, 0x58}}, 0x0) 13:50:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d6c0000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1633.384250][T30207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x900}]}]}, 0x58}}, 0x0) 13:50:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001001400000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:05 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x400, 0x70bd26, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9b4ea77fc7daf9b3a9164a380e4aaa"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6767c7458fc662a6db9ae05f1e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "65209c9c204bc1c9"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x40) [ 1633.486275][T30215] bridge37: port 1(batadv_slave_0) entered blocking state [ 1633.503725][T30215] bridge37: port 1(batadv_slave_0) entered disabled state [ 1633.558805][T30215] device batadv_slave_0 entered promiscuous mode [ 1633.581496][T30207] device batadv_slave_0 left promiscuous mode [ 1633.591930][T30207] bridge37: port 1(batadv_slave_0) entered disabled state [ 1633.696194][T30218] validate_nla: 30 callbacks suppressed [ 1633.696216][T30218] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1633.734645][T30219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xa00}]}]}, 0x58}}, 0x0) [ 1633.767702][T30222] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1633.780160][T30224] bridge97: port 1(syz_tun) entered blocking state [ 1633.788409][T30224] bridge97: port 1(syz_tun) entered disabled state [ 1633.809825][T30224] device syz_tun entered promiscuous mode [ 1633.838641][T30226] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1633.855639][T30227] bridge97: port 2(batadv_slave_0) entered blocking state [ 1633.869050][T30227] bridge97: port 2(batadv_slave_0) entered disabled state [ 1633.909593][T30227] device batadv_slave_0 entered promiscuous mode [ 1633.949128][T30233] device batadv_slave_0 left promiscuous mode 13:50:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001003200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1633.959411][T30233] bridge97: port 2(batadv_slave_0) entered disabled state [ 1633.994176][T30233] device syz_tun left promiscuous mode 13:50:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xe00}]}]}, 0x58}}, 0x0) [ 1634.015194][T30233] bridge97: port 1(syz_tun) entered disabled state [ 1634.115601][T30218] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1634.145560][T30222] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000001000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:06 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) socket(0x29, 0x4, 0x9) 13:50:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xee2}]}]}, 0x58}}, 0x0) 13:50:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d740000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1634.447543][T30257] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1634.466105][T30252] bridge37: port 1(batadv_slave_0) entered blocking state [ 1634.478067][T30252] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000002000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf00}]}]}, 0x58}}, 0x0) [ 1634.515481][T30252] device batadv_slave_0 entered promiscuous mode [ 1634.550720][T30256] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1634.572864][T30255] bridge97: port 1(syz_tun) entered blocking state [ 1634.586036][T30255] bridge97: port 1(syz_tun) entered disabled state [ 1634.613582][T30255] device syz_tun entered promiscuous mode [ 1634.648395][T30265] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1634.667239][T30264] device batadv_slave_0 left promiscuous mode [ 1634.675666][T30264] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x1f00}]}]}, 0x58}}, 0x0) [ 1634.766449][T30266] bridge97: port 2(batadv_slave_0) entered blocking state [ 1634.780106][T30266] bridge97: port 2(batadv_slave_0) entered disabled state [ 1634.813106][T30266] device batadv_slave_0 entered promiscuous mode [ 1634.829586][T30267] device batadv_slave_0 left promiscuous mode [ 1634.838016][T30267] bridge97: port 2(batadv_slave_0) entered disabled state [ 1634.862844][T30267] device syz_tun left promiscuous mode [ 1634.878945][T30267] bridge97: port 1(syz_tun) entered disabled state 13:50:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x2000}]}]}, 0x58}}, 0x0) [ 1634.945672][T30256] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1634.963350][T30265] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1634.983878][T30270] __nla_validate_parse: 3 callbacks suppressed [ 1634.983960][T30270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1635.049414][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x6000}]}]}, 0x58}}, 0x0) 13:50:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d7a0000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) [ 1635.127115][T30255] bridge97: port 1(syz_tun) entered blocking state [ 1635.138691][T30255] bridge97: port 1(syz_tun) entered disabled state 13:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000003000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1635.181354][T30255] device syz_tun entered promiscuous mode [ 1635.219143][T30284] bridge97: port 2(batadv_slave_0) entered blocking state [ 1635.235434][T30284] bridge97: port 2(batadv_slave_0) entered disabled state [ 1635.272841][T30284] device batadv_slave_0 entered promiscuous mode [ 1635.327084][T30285] device batadv_slave_0 left promiscuous mode [ 1635.336132][T30285] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xe20e}]}]}, 0x58}}, 0x0) [ 1635.384337][T30285] device syz_tun left promiscuous mode [ 1635.406193][T30285] bridge97: port 1(syz_tun) entered disabled state 13:50:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket(0x200000000000011, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="98020000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25170000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000005c0001801400020076657468315f746f5f626f6e64000000140002006970766c616e30000000000000000000080003000100000014000200766574683000000000000000000000001400020076657468305f766c616e0000000000003c000180140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r1, @ANYBLOB="140002006873723000000000000000000000000008000300010000008400018014000200000000000000000000000000000000000800030003000000080003000100000014000200766c616e31000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f7769666900000023001400020069705f767469300000000000000000000801f8ffff0000004c000180140002005288a2766c616e300000000000000000080001000000e78e064bb758673b8c8186f32d9ce76789b7dbc850c4d07f93", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300020000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="5c0001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f746f5f687372000000000800030002000000080003000000000008000300010000003c0001800800030003000000140002006261746164765f736c6176655f300000140002006261746164765f736c6176655f3100000800030003000000"], 0x298}, 0x1, 0x0, 0x0, 0x4000800}, 0x801) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1635.506514][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1635.550424][T30295] bridge37: port 1(batadv_slave_0) entered blocking state [ 1635.561638][T30295] bridge37: port 1(batadv_slave_0) entered disabled state [ 1635.596226][T30295] device batadv_slave_0 entered promiscuous mode [ 1635.643754][T30296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1635.661770][T30297] device batadv_slave_0 left promiscuous mode [ 1635.671103][T30297] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000004000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf000}]}]}, 0x58}}, 0x0) 13:50:07 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x41664c29, 0x100) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000300ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00"], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1636.031091][T30321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000005000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x34000}]}]}, 0x58}}, 0x0) [ 1636.132578][T30325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000500ba8000001201", 0x2e}], 0x1}, 0x0) [ 1636.192628][T30326] bridge97: port 1(syz_tun) entered blocking state [ 1636.204781][T30326] bridge97: port 1(syz_tun) entered disabled state [ 1636.237852][T30326] device syz_tun entered promiscuous mode [ 1636.285243][T30321] bridge97: port 2(batadv_slave_0) entered blocking state [ 1636.297723][T30321] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x40000}]}]}, 0x58}}, 0x0) [ 1636.343887][T30321] device batadv_slave_0 entered promiscuous mode [ 1636.381433][T30334] bridge37: port 1(batadv_slave_0) entered blocking state [ 1636.401767][T30334] bridge37: port 1(batadv_slave_0) entered disabled state [ 1636.430098][T30334] device batadv_slave_0 entered promiscuous mode 13:50:08 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x3ff, 0x3ff, 0x34e6, 0x5}, 0x10) [ 1636.450163][T30335] device batadv_slave_0 left promiscuous mode [ 1636.475966][T30335] bridge97: port 2(batadv_slave_0) entered disabled state [ 1636.510470][T30335] device syz_tun left promiscuous mode [ 1636.526882][T30335] bridge97: port 1(syz_tun) entered disabled state 13:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x200000}]}]}, 0x58}}, 0x0) [ 1636.606265][T30325] device batadv_slave_0 left promiscuous mode [ 1636.613213][T30325] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000006000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x400300}]}]}, 0x58}}, 0x0) 13:50:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d0b0500ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00"], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000802000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf0ffff}]}]}, 0x58}}, 0x0) [ 1637.053380][T30364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000600ba8000001201", 0x2e}], 0x1}, 0x0) [ 1637.152438][T30367] bridge97: port 1(syz_tun) entered blocking state [ 1637.167115][T30367] bridge97: port 1(syz_tun) entered disabled state [ 1637.219899][T30367] device syz_tun entered promiscuous mode [ 1637.260966][T30366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1637.305938][T30364] bridge97: port 2(batadv_slave_0) entered blocking state [ 1637.319071][T30364] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x1000000}]}]}, 0x58}}, 0x0) [ 1637.347744][T30364] device batadv_slave_0 entered promiscuous mode [ 1637.375572][T30375] device batadv_slave_0 left promiscuous mode [ 1637.384867][T30375] bridge97: port 2(batadv_slave_0) entered disabled state [ 1637.416451][T30375] device syz_tun left promiscuous mode [ 1637.434562][T30375] bridge97: port 1(syz_tun) entered disabled state 13:50:09 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x390}) sendto$inet(r1, &(0x7f0000000140)="a9cdd07aaa028b9ab2a3ed963fea220daa46f6e4a18563e222b12f5cd4b105be7c753c828bf62114ae5bbc16451db71da63f5be5880404810ee1c9a795ec4cdea5a00a3077387d8c450d5eee2c2e548f", 0x50, 0x0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 13:50:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x2000000}]}]}, 0x58}}, 0x0) [ 1637.541341][T30377] bridge37: port 1(batadv_slave_0) entered blocking state [ 1637.558157][T30377] bridge37: port 1(batadv_slave_0) entered disabled state [ 1637.608696][T30377] device batadv_slave_0 entered promiscuous mode [ 1637.650028][T30380] device batadv_slave_0 left promiscuous mode [ 1637.675477][T30380] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000803000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x3000000}]}]}, 0x58}}, 0x0) 13:50:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000804000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000700ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00"], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x4000000}]}]}, 0x58}}, 0x0) [ 1638.061483][T30407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1638.137876][T30411] bridge97: port 1(syz_tun) entered blocking state [ 1638.150675][T30411] bridge97: port 1(syz_tun) entered disabled state 13:50:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000805000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:10 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000f88c343bed076ca0749fff018711e2f0d10d10dbefeddc3d320200000000000000200014000a000000000000e417490f426c6094a7b44b69105d0fe17d792bd9915bc019b615d6970f9f29bf6f758749f45bc4484d7552de926f92dc30e54e5960157629793d0a4781346a1667f869f1e846f8e9bf748bdd2abe49a7428905349d9f68ef1a3a9937068366977d6ac807bb7bcfd7b74b3daccc10172295f4bbb4aea54ffc08fc909f239e8cb63db8197af5eb18a3494c145504fea3d49304923ee3822b80ca502b14fa13556c7166b4dc1e8de0790cb5bc02017623c2ff3000e2152bb996fe695a3137c74c14f90bf8f589b4c9cf7c5a81c8d4bbeb28a4ae5dca88c8f6e8b0e10c02133b23cc6a37676dabf12c93f9ab970bbac834753a65b60602f03d1f52878c0cc50449078249ce2f4d14639ab9a118dca47d4a2f74cc340c5401912f000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000040)=0x5, r0, &(0x7f0000000140)=0x8, 0x7, 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb, 0x4, 0x0, 0x2}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="263e690f0d19014f3021708db32657cec592af9ebe90c9754f51068061769a5c549815c2a5919bbefbaef1014c8423a9b28bb4912c97d4db7b7fb2e72ac69da128ca3f757ce0f805ab25f523538774cf19e0173c45f97c59b71d29435d749c451ca422378f3eb729d7bca52fb0f2abe6a3f276"], 0x18}}, 0x48010) sendmmsg$alg(r0, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="3b4a842ff7ac453a325aae919b5cd802a94975dbad136c413819179520e70d5a542b87b7566ec03f0bd65e6541bfd8c2f3304185f2ef42e2f380c444b64dd0a29d29ae478820935fbb61cc6b969636a73f24ac969db26b8e7dfceee8b4e75b06553b339b175b329b8c3b4e25c3e96b4a4b8b54d156d78643dcd55a74647dd1bd7e13ea7a6a7bd0144dce43da08398b689bc923ec0d9931", 0x97}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="f29ef7c8cf20c9528ba5a2396b7f5b77aa166b649bf48decf4aad4394e633c781f0b5b25429cebde2a1dff1ed2740ba18dc6d369323d0d4649301917f0107d0ff815dbe5967b2930a8eec4307c3e8ec0612754f10855628504ea01fa4453e9e3265f4170ccfa60cf83208673de0a823be53c3fcea3030536f58e9e886f41c0eb7bfa5ddb304c677edd8e3a7285d68229251a0462c08e674a2945e7663ba5f2767ba32aaf5a89068b8e9da076f247837759c67de4d4d8f79b7276858ba081910f5a76bffe951972973fc89969d636c8f67d3e239ccc5505819e", 0xd9}], 0x3, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0xe05}], 0x18}, {0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001680)="34e60568c5b312ff40366deed1effc5cfa5af5c538250d17689ac9aa2a54fb39bf44c33b996d821b230679f9d6c19de1f99750f145b7ef2fc306bb8f943d3ea408f50847d8b98435bd3829687a435505", 0x50}, {&(0x7f0000001700)="c1fbeda52704928416b2c49f356ff2635a7844ca95be51ff20cb7ca2293e0157f6962b9a36084d0adbc06964d202d10f1b68c91efc42c3b64019f54e8184c903b7ec3eca8c9007816adfc2308757a727681c149853155923fba3", 0x5a}], 0x2, &(0x7f00000017c0)=[@iv={0x50, 0x117, 0x2, 0x3a, "5b600c9b6814033204718d9c0507870486bd2012dc92b1ff79af7bb3e73e21ea0951d3b69d05951aa05a38628461f16b3e39db546e654ee94e51"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x60, 0x117, 0x2, 0x4a, "17638f90dd06bdd44988bc3f54d1f93148721f9928d1da2c1266901c544d49048d61a47a91753fc12b22231160d6510bf595276f73d05d65ba8008d3eabd8e90161353485b47b4a32daa"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}, @iv={0xa8, 0x117, 0x2, 0x8f, "1043b81b5a7adf5528bbf056cc56f96f0c99b687a38bc56db60ea89a79020c028f352b9639ff8595a2b2353e4a2e26c3ee60992da2e05d181421f58f6b907dc0a8fdca9d4ecb9af8da2197d5b6207ef7fa2fcf3f8acce96811d01cf4da9c83b4fea4be768937ef7387e159f06b2ae5fe90ded6f280839936ef92f1c15cd04690a25aa10bcc0f2ef8c1d1c521dce738"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffe}], 0x200}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)="93da73ab74a9a0b46077cc8859d79fcca6108272367c712ce7b647b6c3a4a37031c8cbf42a40e20a1026ff23573e9ce13accb3b3e0a94ddce545237d3f626948c4acb09ef922aa9d3afc85247816aa141624d7d6886ef053d1807a7218e829cd7e2669a779de81c685cfda8ee8ffb39265c37c8b30a030817a4c634eb0a5f98cbeb9fc31533ce625ce3cc439aba83e86", 0x90}, {&(0x7f0000001ac0)="f8ac99c3951c24b21e43a55051667e23e7ad8f4eb4008f392e4914fb302e64488db880ce5f55498c9150d274eb71c71deb07f2c8524aa053458ab3690cd3f304fad2a28d339a78e7b7735cf578490f101d32622375abd15f7f1978ed8af9fbd0eacddeddc871a830696bbb57e3585175b78e2750fc99bd9fc1b74be1de4db4ed503e26a91963dc2bb3c77ac2a81d7ac71f78cb9611862018cb18b410e1aa0d1c395a792a305ca342452825", 0xab}], 0x3, &(0x7f0000001bc0)=[@iv={0x58, 0x117, 0x2, 0x42, "43bdaf0bb02fcd5ae3597aa091c0c6d03822f484c94c621640cc63f419a4867b5019e42f15fca29d8378be7bd873bb9017ecafdf2b3f50e262d3bd41227bd7cfd38b"}, @assoc={0x18, 0x117, 0x4, 0x80}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}], 0xa0}], 0x3, 0x20000000) [ 1638.188300][T30411] device syz_tun entered promiscuous mode [ 1638.222022][T30407] bridge97: port 2(batadv_slave_0) entered blocking state 13:50:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x5000000}]}]}, 0x58}}, 0x0) [ 1638.239053][T30407] bridge97: port 2(batadv_slave_0) entered disabled state [ 1638.283073][T30407] device batadv_slave_0 entered promiscuous mode [ 1638.314501][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1638.357572][T30411] device batadv_slave_0 left promiscuous mode [ 1638.368609][T30411] bridge97: port 2(batadv_slave_0) entered disabled state [ 1638.394797][T30411] device syz_tun left promiscuous mode 13:50:10 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$alg(r0, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000140)="669fc9eac99355b8f51ea0e051299e71e24340235a25c3ff9a3aea4b76f7735753179d2bc8d8df43067bc9fd983296e2659400456e90b28c09ac03c785f609b70de7d0b0ee10a4ac8117ef2f0d08f1f500b90c68aab2d9b901866096f3660d501a7505b087eb0c45811aa8b60cc44c44cc2731a62cb29acbbea588d793efae1c21c18397a6407fe2ea903990f719", 0x8e}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="ea3764b5789917e9c2edf679f75d7a8603670d155ea8cd79536ee87780dda773a1a04c9affb9dfd26558465964a3c619f3b4ef3ec980d1fc4ea0dfb114c3cff3b02aef4545fb8595d20b84184f7752dda69cbf491db00a6b4c870632cb63822c8c6f75340224839199cc26a69ccf0672e139ffc02068fc2fcb5641f180752e4d68a4de06b7031835bb6d8a1797da778d4c2d5b11c45699817becb357a2f52957a412dc89d8263a5a01de3051e5ab6c1dd2305905e01bc90a74c46f48ccbc", 0xbe}, {&(0x7f0000001340)="ab16dd6c4895b59e2b7e2614e106eec36f8245f9efb5df5acfb106ca0381401d5902120c8260ea29758ae290c9fcfe7a0e2678e970a0f9a1390930b8f136ec50a855e3c2082d76a4a8909811d5e0ed3f05c13a0738c42e5439424a5c9794b1ca84f7ebc9f0403c2486", 0x69}, {&(0x7f00000013c0)="829f1f3bd675c7fff282e712525088fde35af393f05e677db667f78a927bbfcc4c306f0712b0d18792db63364fb685da77f5b87f1db26736d263c60e6408572479ac36a4364d8b03cb3fa678d119d6b0510398c69de60a3c9395df7fe48c8fdfdf4ae72f52e858cd850c78019683482c4f72162bf65d6b5ce5e51d39a39d80a7a7a711f073ecc69a6c7eb81ee7e469ef2ea94cd091a4e89e973460f2d57722df", 0xa0}, {&(0x7f0000001480)="7e1d2d1efd5eec4b9f068784050dd0b60e027ce5dadc4b2065603f9f9539a9a5dd98dd45a5e7a2e2e6bb301afd4bccc9154688075568301a4ce84ee6f68e5ad48d9ff630a46b86a38ec5ff1fa1a6a6d1dd99b2dd0f236b166eccaf75f113b6e11d164057c471fac213e8e871bb71389bf4fe48", 0x73}, {&(0x7f0000001500)="0961b83240d252b696d5d06995246678d1ff173cb40a47550a1ba76cc7296b9f7b9d512dc8aee354fdf8208c331010034bb735f7db8934cbed4dd6f0d04d45e39ea5febf2a7d79776af74db5dbaf8b0d8fe37f5e96a052afd2fa121f972d53521bdf8385", 0x64}, {&(0x7f0000001580)="7f2d18b3eb407a1b675132a53fd569e329d3338165a7efea1dfe1885458d8039f6a18a86d051c5519ac6ffb634c7f7970d2632175d23e4211594a8b8291e1e5e7d9a1de36914413b745dc70d18b8e295bf914db7b921b66ce042a3c0170c16c669699ef96f4b68231f73a4dfbb311ba3e479c37fa37c63793a2124cf0ceb1400a8956a405fdeacccc502c5e61fd279787353d33a1f284cd9245c23379dcb793bb86fb3a91b773103e35dab9ac263f9c488a3e77d264d572d93ef75a8a8d4c5e0", 0xc0}, {&(0x7f0000001640)="2068a7cf622fced0d7937725457705c77c1778fc01503f703d8bda7c0bd4ea29234bb7d03fc7cab0f74f472860d46bfee7ab1d5865f2051976fb1d62ed831fda0cc2f11fbf2eb6522e3a", 0x4a}], 0x9, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x150, 0x4}, {0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001900)="f7e8eedd48ae573869766379993663577236cbc5d0dd35673b1b378f58d0c236151b95b63d33db1c021b669be8cbf9a57ae31656a9dc06761c2c0943850d111bed0f32ca9be847b054bbefd8785437d641137c885c7052e768936ad821031da61825b9f1e6fa3d098164a984c757369a414e751e1b9f6e550492e38f560e3e", 0x7f}], 0x1, &(0x7f0000001980)=[@op={0x18}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @op={0x18}], 0x258, 0x5}, {0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="47fd4f6285b653a54a165f057b784b727b440aa144ba820b3581569bb126acdc616ffe75382a0bf32646357a77fef704ac3ace97421aaeeb58d2981ab7012c32273bf05e33afc37c7a471da60dcb2d335b816eb7ae18c0b95be8355ff716fc83a75f65153cbb8972b1992403da1ebe8be2105f61c67a193b8e8dbedaaa6dfeea8aef22751b6e4adebb92c5da09dfd02eac943ecc81156b5806200a6b5bffedfccc8a321198df64c1a95a489650aec993a18bd1e9cd38bbfe8e5fb69229136661d8", 0xc1}, {&(0x7f0000002d40)="e137f2b10da6d07db2d685c2cb58550a08d62dd927de9c84448c6f600c53d41a50d1ea39bbf1a2e4293afba969b5eec021c32e08d36f4398d1b03e53eb3d33162b8fe1cd370301639cbc0f116348ba9af540227c8cf1db92eee7acf5a083682874183038e7cec8944ac5773b59bad8647aec7906be4e0e3a1b50c5b30e7516fb56b1d2ba36057cad32045931ad303639a7db983f905bd0d3447812a9bc6f78c8ecbaba66d807078dab4d51ef277a20fe95f7266d40f07d56b6bc2a649cfdbc0c0c0e1055d192c46c5b9cd2577f9e0cf97a334d0ebda42fc108db55f03012a199c0e87ad000fb41928247cc3c79f45237e172b84db8489dc6", 0xf8}, {&(0x7f0000002e40)="3284542f6c23c3a375145c891cb51460edd479c08d2d3ec3711e5412d4a09a44c4589e327535ffbdbf69b8df513fd8c63d1dc1202b776623c3f53c6c1b41ec3e5463363f0d672578147581228916b504975a0617468853c30a1c", 0x5a}, {&(0x7f0000000200)="689497ca99ff5143e4d889293735b89029d81d13115596161728d13f1b571da10fd5f7a32f8f", 0x26}], 0x5, 0x0, 0x0, 0x44000}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002f40)="8cbf634f9f7e240fd0d0cf2d06c6a02ffc93bbf0fb80e356f0614c4b90eb8eedc711bd836ec6f0e82ea2b8b3572ab25e25ef5828a0ea4db4756bf554adc0d69f6a94fe26baf9692869ad7c6d88cffa9270fc3fa83eb0c756db4a3c8d350fb1729ec950b280a1d6b9365b39a97ecb749cdf0a8ff26ae46ae7dd4b78e4443a3d43e4b5f6e6", 0x84}, {&(0x7f0000003000)="02d3373389b3ffeadcf6efdbfc771d7f04e42e1cb370c9f159976ab38ba157c4df74243a502cd493c84fd3b80bdc27cc1e3e", 0x32}, {&(0x7f0000004740)="0b7fdfe035200d45232406732b144c9c7d17dc720cfef97e7b05d1b0eca8e3fced576223ee0a5a1911b2b107d4b9fc1c9823401b040f1244e1618d30be3b47db0b7e60581e5080e63622f3bbe62898464339baf291d0693cbd015f51a8121336b7a2eaf3306cb62710346c8c3c1729e8e99689fc13770dd431834f33f7858b1156f086d5b3a6adbeb0c3ed7e2b93836d37896945a1a6a89cc2b086451a61ce4cb665ebaff975306fa417e081c7ba7c2bc9a9a41b407d412326ae8fb5a0dfcc20ea67b50b6ce77addc0c30687fa6df2eebddd9f8619", 0xd5}], 0x3, &(0x7f0000003180)=[@iv={0x18, 0x117, 0x2, 0x1, ':'}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x4, "f792cfc4"}, @iv={0xa8, 0x117, 0x2, 0x93, "d05c0b7e88e8ef6a0e4986da2333a536f70861f903fa302a9c067158bf2106a6821d694d881a86b42bc42ae014bb045a6b233d043310a243d0e9993863fd48ca61fd6beb55329a2c3741ed2425c3c1497e41b2af015664405ad7d01c6ae625f8d4e3d555ec8711e84d0bc557c99dd97d331a60e296982bb8a55e4b9774de6f3f4e4bdb94c04dfe2b3eb63b88e159379d012307"}], 0xf0, 0x20000080}, {0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000003280)="51d2c276cec313cc5a918465ed4a386359b56c1412e55b0b19b48b2e1d84013f7445e64767e978be849a9f9c23d3318473fa1fa02ecc9332a7eb23d15ccfa98078775eb1adcc18de15054071678c9ac75a87aff4e54941cffd177dfe60bb397244ad1b9f569dee852898a8bf10dcb66e70336c07bad398cc4be2aa3edc2a8e1b5baf254d91062d92aa791e0f2f12bd6034e89fa66080e8e9068980ce1b9b0b9b31d17e60e748e2450d96a355c1f10854df74b948320b466b09f0e1b29cb0908e217525a9769da5bf401cc475d7e3959d59a388b3f94118b6a571dcc9", 0xdc}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="d0876b944a218659ab5de1ff4f44963e01f7f97e83bc9531cd768f89823e870a1700912530f0ef3e660ac9ca86381cd72b6079f9217aef7dadccc386564939ec61ce141a4189f05898d9a4a90b6f15405fd4a34672957a159654b24eae7e7fea2b7f1581106f04bf6f3b2c3ad0b017014b8318b70d101ed59f0fcc7f4086c2350e0912d00934ab4dd1b259df6587a324173e876f5ba94593f07829211962298e8c1943d24290e1e7cfa26558049e58bbd526a43d", 0xb4}, {&(0x7f0000004440)="41493cf4fa9edf2d0392608a9602065393f7926b18d927b75f4ce4409850", 0x1e}], 0x4, &(0x7f00000044c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x108, 0x117, 0x2, 0xed, "0892b5228e7b6f4f78938f9e7df913ffd38aca3a36f448e5b8e1720acbe1919dc02ea02eda0cd0df86fb1f76aa0d7c0559a4dc848afc985252b4c6c4d5a86f9fdac3f2facbe4ce837943b13905d5e138f9603d94fb8c3019099a8270b040b82282ed7af3bd5df08d5fbbdf928dbf1d7e6f7fb950f0b7ae75c4040dddbcc4c760a3adacbf57f778578f71a46b684da07c9230d1d1b763dca2067a461b4057c5bddb992687737d2fd87a462468c32f9a19d00c42489ecdb93b0f08f7e3fff56c89252eab42c8e28a687f34543c5c914259a4e469a2e501a5997051c358b26a8d8f50c7bb88f79166910972ed05df"}], 0x138, 0x20008081}], 0x5, 0x1) [ 1638.408529][T30411] bridge97: port 1(syz_tun) entered disabled state 13:50:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x6000000}]}]}, 0x58}}, 0x0) 13:50:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000900ba8000001201", 0x2e}], 0x1}, 0x0) [ 1638.487188][T30422] bridge37: port 1(batadv_slave_0) entered blocking state [ 1638.502530][T30422] bridge37: port 1(batadv_slave_0) entered disabled state [ 1638.555051][T30422] device batadv_slave_0 entered promiscuous mode [ 1638.585888][T30423] device batadv_slave_0 left promiscuous mode [ 1638.594956][T30423] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000806000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1638.709016][T30436] validate_nla: 32 callbacks suppressed [ 1638.709038][T30436] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1638.759189][T30440] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1638.772901][T30444] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1638.810303][T30440] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1638.826744][T30444] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x7000000}]}]}, 0x58}}, 0x0) 13:50:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:10 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000140)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) socket(0xb, 0xa, 0x7fffffff) 13:50:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d050b00ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000807000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x8000000}]}]}, 0x58}}, 0x0) 13:50:11 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1639.081604][T30456] bridge97: port 1(syz_tun) entered blocking state [ 1639.132651][T30456] bridge97: port 1(syz_tun) entered disabled state [ 1639.168789][T30456] device syz_tun entered promiscuous mode 13:50:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x9000000}]}]}, 0x58}}, 0x0) [ 1639.236098][T30462] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1639.256491][T30464] bridge97: port 2(batadv_slave_0) entered blocking state [ 1639.269405][T30464] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000808000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1639.311724][T30464] device batadv_slave_0 entered promiscuous mode [ 1639.350228][T30469] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1639.368845][T30471] device batadv_slave_0 left promiscuous mode [ 1639.378825][T30471] bridge97: port 2(batadv_slave_0) entered disabled state 13:50:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xa000000}]}]}, 0x58}}, 0x0) [ 1639.418776][T30471] device syz_tun left promiscuous mode [ 1639.447836][T30471] bridge97: port 1(syz_tun) entered disabled state [ 1639.516861][T30461] bridge37: port 1(batadv_slave_0) entered blocking state [ 1639.526892][T30461] bridge37: port 1(batadv_slave_0) entered disabled state [ 1639.550124][T30461] device batadv_slave_0 entered promiscuous mode 13:50:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xe000000}]}]}, 0x58}}, 0x0) [ 1639.574492][T30472] device batadv_slave_0 left promiscuous mode [ 1639.590205][T30472] bridge37: port 1(batadv_slave_0) entered disabled state [ 1639.692415][T30462] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1639.700692][T30469] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf000000}]}]}, 0x58}}, 0x0) 13:50:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000809000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000dc61100ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x1f000000}]}]}, 0x58}}, 0x0) [ 1640.009037][T30499] __nla_validate_parse: 3 callbacks suppressed [ 1640.009067][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1640.076850][T30498] bridge97: port 1(syz_tun) entered blocking state 13:50:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080a000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:12 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0xa, 0x800, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="010000002f302e0d33301149f0936806f2320aaee3c28d1fd1b9a72cdde421cadaa98f911f00a1acf807dd84166bcd39d5fe57bd7bca8ef113f3d75297e930fc71bcb8538c1a1e74a8646cbd2aeaaa89e9625dce9b5a0453c4035b105dad4799b5cfb123d0a1826b11aa0ddd0012f5234177e750973f1530fe62302aeaef86ad780c4942caa014e160be07d0fad9ae463c5aeaea", @ANYRES16=r1, @ANYBLOB="000227bd7000fbdbdf25320000000c009900050000000e000000"], 0x20}}, 0x4008000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) [ 1640.121452][T30498] bridge97: port 1(syz_tun) entered disabled state [ 1640.147309][T30498] device syz_tun entered promiscuous mode [ 1640.176726][T30504] bridge97: port 2(batadv_slave_0) entered blocking state [ 1640.190255][T30504] bridge97: port 2(batadv_slave_0) entered disabled state [ 1640.230649][T30504] device batadv_slave_0 entered promiscuous mode [ 1640.288325][T30507] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1640.307569][T30508] bridge37: port 1(batadv_slave_0) entered blocking state [ 1640.324471][T30508] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x60000000}]}]}, 0x58}}, 0x0) [ 1640.366591][T30508] device batadv_slave_0 entered promiscuous mode [ 1640.407490][T30509] device batadv_slave_0 left promiscuous mode [ 1640.416934][T30509] bridge97: port 2(batadv_slave_0) entered disabled state [ 1640.467749][T30509] device syz_tun left promiscuous mode [ 1640.482752][T30509] bridge97: port 1(syz_tun) entered disabled state 13:50:12 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x9, 0x24000, 0x8}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) 13:50:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0x9effffff}]}]}, 0x58}}, 0x0) [ 1640.647782][T30499] device batadv_slave_0 left promiscuous mode [ 1640.658117][T30499] bridge37: port 1(batadv_slave_0) entered disabled state [ 1640.784716][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000dc71100ba8000001201", 0x2e}], 0x1}, 0x0) [ 1640.856413][T30498] bridge97: port 1(syz_tun) entered blocking state [ 1640.868988][T30498] bridge97: port 1(syz_tun) entered disabled state [ 1640.908013][T30498] device syz_tun entered promiscuous mode [ 1640.962535][T30539] bridge97: port 2(batadv_slave_0) entered blocking state [ 1640.969735][T30539] bridge97: port 2(batadv_slave_0) entered disabled state [ 1641.011869][T30539] device batadv_slave_0 entered promiscuous mode [ 1641.051940][T30509] device batadv_slave_0 left promiscuous mode [ 1641.062673][T30509] bridge97: port 2(batadv_slave_0) entered disabled state [ 1641.098935][T30509] device syz_tun left promiscuous mode [ 1641.119592][T30509] bridge97: port 1(syz_tun) entered disabled state 13:50:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xc000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080c000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:13 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c3d7550df87d511f709a19926826a35ca00"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="3dd0625bd3955b39e84354d74c64830e55865d2daec0bafba173b91e463f4735a20f857d688c330b663f52", 0x2b}, {&(0x7f0000000140)="8c1be2d247fd2aefe584f95130596c50cd6f8ba259fa58445772052834a7ea5d98dfc3e563bb910732a09be7d308650d19040a30261457eb5f548ebbd24832c6f49f", 0x42}, {&(0x7f0000000280)="028755339d239de2dcc2e66ec776fa464dafe52925cbaaf9c3f3feb61bcee5b1504e516c309acd47d2e4757e2dde0fbe34f8887659a2325d8eee9ce08cb7e3498cc8036ebd36d28997c5ce9b80533f09b69990c000b6948b4035f134ec066f44f28db703820591fc5e68d9200db29061205cf0f4a6f4321eddd8", 0x7a}, {&(0x7f0000000300)="b5b8a4f9ad5bf28a33aebf31db6e9804b9fcf226fe37be045ed7fedd86138745be40c28181d9183795fe9faed48dd0c85ae6df3c3715a618c614d7d63536417762e81f35e104e9d5547c8623dc1768a62588358435134b89391bb67ac42dc9dae73350c549a7374d91c64c62d62c96d3ce5edc4bee44d8ede7e3cb4d88f46615de7f9777f4fcb09e8868b0b85000b371b365b7937a4127b042242dc6eb", 0x9d}, {&(0x7f00000003c0)="3ca3765643af81e8ef7dd1102c3bbbc0a605a98aed2fd08ffe197e391e9d8206c6d9571532a9ba292eadb058bad321571f7e7fe5b0d015cee5dd4c91e4bac175687063a6a9472a5f4c107ee0e6da0b1f7a05a0adf05b5b6fcff0d59e2aea6a859c152b5281ba", 0x66}, {&(0x7f0000000440)="533bc41cfbc5280f316dfb7949d8daff8b6eab8378a24fb2a6d15a5882309441e3d18678086f7037f605e1355601728ef4ffd716167b1baeaecf69161f3f78a70a1ee2d11b59934dc9b37dc2d2fb75e92d824569aaffc6c5e867780d03196cf065be9a9aef5807ab4a8e245aa5e12090e69d98c65a3bec5a2b8c8a0ca9407961a002128dd029082463fdff03280716ddda9fe0fbdd1c9543fb63e2835fc62102737d9a17b841b408969ece9b9b2187102325bc6dc51b7ea609c03a911fd06b77d221e44738a18c37ec", 0xc9}, {&(0x7f0000000540)="92", 0x1}, {&(0x7f0000000580)="01f6e31eaf732bd49980073ae46d396bc8b90f775282386faebd128cd26df60a45d472df9df5da052b56efff5d8cf63c17c3b913a91749945b4924dbf814d09b27e12a60fc887d0b59bd36fee8060fad882333791ff9f68ebb5c6beb1883e728cc240777adf475e07ce9929839d907048b5367b036232eac0fce2b5a0ac633abc6e7f73379b90f4cf1c360d9b45d2e23a85e5db302aeb9c3b70e65afcc077744ef4344ad223516476ecb10fd73dc761e2f947226972296d33a67c39fb2c1068e38763748ce478cf04498df03ecfd5b9264fe7cf86384421e787f99f5cfe9ff3cb8ed42c7", 0xe4}], 0x8, &(0x7f0000000700)=[@iv={0x70, 0x117, 0x2, 0x5b, "e775d2e8b34d5c86fce90498e9dd8255af7f6a0db74f431faad8ad4d7f0cce64e3abb13087b195b946e4d22027918c2dfb486295af5d998ea4e09fb8bedce50500c10ebb5d74dc5601ad9a5d9cdfaeb6431fcfec8b0fbb51e25795"}, @iv={0x38, 0x117, 0x2, 0x23, "eb717cce9522427d4c7f9cfe8254a7fb8b3e6e0614b6ececf91908ed3a946166f26206"}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0xa, "e182cc6f7b8129daeef4"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfff}], 0x110, 0x68015}], 0x1, 0x14040000) 13:50:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xe20e0000}]}]}, 0x58}}, 0x0) 13:50:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000dc81100ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000dc91100ba8000001201", 0x2e}], 0x1}, 0x0) [ 1641.465528][T30557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:13 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000004c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$alg(r0, &(0x7f0000004a00)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="9998c4c6c91803a5a0e94862ef3b645d319f991af922e6ca119a720eccdf064474309e4c71ad29417c927852744d22b5a508915a707304102304efd9210c8215cc198ca7d75cd19bd17028377aebe5c1bb933d276865501b8cfc3d49fa580fb76810eb017a76ac21fff0eb24b0c13ce6dec5cd01cf4ce01cbb00fe7f6bc78916", 0x80}], 0x1, &(0x7f00000001c0), 0x0, 0x4010}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="e014cefe88a912d62ff8a44ec10db1ae8619049c0f0f2e858fe8725e6ad4b1ed0139eba15aa48580caa83f00a966372fad3f857a2969cc12a82d5d1ce479bbc42d7c2dac141ac572a6ce899e7bc18ea6b67ce9d154080f5a7360cd6e18a844", 0x5f}, {&(0x7f0000000300)="8d6380440ebf50101efc86f14a3a1ab0622a748396e328079581c85fb3f686fb4f68b270a78aa77ddb774667792eb52ef446243f53919cfeba14716c983fb56f77dbdae724abbc434ae930132e4fe91623c6fe947e805e6bcec62605733c8051158ff82406faa0139dead3d746883b8d09cad36b3dd65c37050e6e55227237606df7ffdb9cae3500e6b3089631b3d27fc2b314f83abf30c389ff7036b10ff513d1ce", 0xa2}, {&(0x7f00000003c0)="fec4203cd6d49c6c14374364b486fc3999bcbafd964763d5f2687255ae4e9e6de917e3ca48b5bc35118213a0d482bbede0973f648c1d3cd4457cfc41ec780fd43730b0d8e6bf974a0067d1fa108b3f83d71fc117dc41dd56e44a79d69bd0b6ef98701ec9f46742f16e0ccf2f2a71bd1f74baa398501c6d30beb09767ee8067fc2fce1d54eca6b952c85f925da82896deffdcfd2a5579fcda5c38839600faec4eb5e212b2de15d9d1bb332320d3ea5e7f4787f1e9a70b84d583ca9eb7bfaa9460ff1af73094903f0819dc6999787f3388632c3facb8e4f5be119ad6ff1897b272814a8cd651801c7f63ef", 0xea}, {&(0x7f00000004c0)="6b4dfe51543e9141237b9a42d6d76e9bd5217a508c494f30d6cc084ce1653c0949c8c8abb9575d643f39ec88a13380adafdf0cf102cda6fe11be0ff7f1595e7a5e10db53c7ddb0cb17019c52cc8312203f4a44035fb52dcdceb1b0bd3c5ce57c2d7ffacbf5b569b99290f62a1435cf82ba9d15b3cfc30fd8e9f28bdcfd4e15e6abff3b7f80e27c33c81930f2a8f87089cef73ee91cf9a441b7549dddfd361190584d79a55d2c3a3865617d7f448c3f72c2ee0984cd659ca51708a391d82154", 0xbf}], 0x4, &(0x7f0000000580)=[@assoc={0x18, 0x117, 0x4, 0x800}, @iv={0xc8, 0x117, 0x2, 0xae, "5dc186a118f91dcf57a5ed6f9856bfef342cc82b4340778806af79f9f443358f142bd24ce826be2fe007b6f2205d24743f8f1d2457eb430e8005a147be195b34d267a5b3a78ff9bb959e28c25552cb8458fa9e6c3053a2d9bc5a1076354908889ef6f5342d4fc369be5742303b86c22815aafe5418ecb5682807dc1454343147585f505e56fbbe1153ae90b86248b56ed18f3726187a0975c7e8b49d037fc0a5d10e2bc260177dbeeb318c3d56ff"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffd}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000001}], 0x188, 0x20000000}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)="19da3e238aa02c85a9563613f9d0af62e4503f9dcab146c52845e442dd826deced0aafbc25a0f8a2b7e0dfa4e80e78c86d7d8cebf85e376dd873eff50addc8146f869b1b4993407046a65a9b1fb2460c952272d4fae3c6269a2d0b5d30effab95cf7d68f1711a6a0262032e4b72190d48f57f33a901126d780ac7e4533462bd6952210ba48019052bcd0ecefa1b63e63e5f2376e7468b6b3ef", 0x99}, {&(0x7f0000000800)="2625fa975dff15c296078b6e00f5ff59", 0x10}, {&(0x7f0000000840)="972111301fbcac554d124fe4f0b434fc8b8b463f2b0c4893ca96bf17188a690ccca10b0d17748b29c236154895cc7743874561ef269a358ae5399f14cb6c164bb7d74dadcd5b74606bb030131743338c50f73618690c3d89c0368a564e54732f48d676bfbb50099bf87a5fbfefa689c6da761a1fc15768c6fa95eb55bd2cd00e4ae93c20966824dc78239a5d136d023f6a7166ee16baef9d2189d21731ac5f7aa611a6972c73970ce6ce73e092018130c6502261e496e9ec4bf300c9b07538938b927e4bc198215868b6d7a2fe6b11813e3150", 0xd3}, {&(0x7f0000000940)="892ff62e259aeede89051a0bc1eb3cfd897818586c4ae5e3e4eccd7811c484569b26e594f75f5d30834a6fd7ec1d391a814b99ee06974618758b076a88b7e4c64ca510e2b177a64607ff80e386e4ac5b5fea", 0x52}, {&(0x7f00000009c0)="cf8d4ed472946a97004244c44f92818e5879d1523a6c9df060433f86ebf30e407b281fa047920f369e0c24563372be5fc1cc798ce8fb22866e3f828647ff871f3ef352d434d41ae4a1821b688659e3acecfd46a52df448f00575404b9f98686246acf9ecb603993c39841b800c2fdb6ec68f036c2cf271ba32e15b77c6724a0a58d9b037f8948050c922cd9f1cb63c0486d962b0e3141690c02c96ddae1490d842a633e3248195413b706291c41049967b8b0ce4daefbcbd3cd7f38af7076a1e1ba5cba69e75a1a6dd34cf3dfabfbeb30769982af081efeae5bf671cc2c1139f558f4c2a3da666ad7c354ac12271ba21eb", 0xf1}, {&(0x7f0000000ac0)="491b5f5ec347f5ed2325bc61f6abed71dd94a3f4402dadebb2a63e73e170438c375886a20575aafa773e3aeb9e7e9ecce9976cb2b3f64bcbf5ebe90d9ad859f33869a440555bb879a346c1a35075007617744162b17a871651ddbe9e37c95d5ea0d5e027fb160e442bbd6f2c42b8748a2d735637179faacb30d8387c2eb2c345a48d51470a94f97cebbd60ee8609c390bd232989243f1ee537fdfda158ad4ddf80ce0b400b1a2b68", 0xa8}], 0x6, &(0x7f0000000c00)=[@iv={0x40, 0x117, 0x2, 0x2c, "62298b5a2f365217945cd74300e6966f77422d0ebdb5d8a3953e09e7aba6a9e98d4b4e4b55abd4f6c691ab81"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18}], 0x88}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="f041a450cf7ca85367b5c1dc4fcac7dfb5d025b26f1456a32ad9485d1f5660e9e77b6b3ef316d125e4524b574fd434f38ce8568e313db626040a128859c4553059af694b265c11d1e00b369948ce02e93bc1848aecce779664e3f28053b24ee5faa2f15b241ca75d8986f7394a977cfff6fbfa260e0dda7183d8ce8e2c859dd0f20a6de06a40da5dd6ac4cc8a5130aaef7cb64b67b562595be3f19b3a54e520bd7b4c4f0532eeb2ceeaa1c21baff95ac8cdfaa97c9a7c665e4bf1c3c94aa8181b49ab2acc32683b1", 0xc8}, {&(0x7f0000000dc0)="02f83bd2901ed44a34ac926334f53fa64693905b2d45c64af73af323a26ee4567136ad55b93ec006888c2f6d8d03f68b325b00fffcdbce00e55ba0f0e89260cdb878a8b9", 0x44}, {&(0x7f0000000e40)="d2647d65595668", 0x7}, {&(0x7f0000000e80)="8383adec", 0x4}, {&(0x7f0000000ec0)="6023d1a61bb4736fc4e82c3b3ad8a338a715", 0x12}], 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/744], 0x2e8, 0x8080}, {0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)="1577afbc318e2de11565506f6a7de54c13addc6b3d6c3c8f359a533eec93c4d21deb21", 0x23}, {&(0x7f00000012c0)="c155453b96649b52b51fe0d062483b7910065fd475b28abdbd25cbada176bc65a60351f85bc073e4962f1a7b3441beed78fd58cfd00c6d4d069856470c6178db033cc231faec78ec75da37cb412aeeca53f2a641917ab962204981d64eda146ec31fd96d6064d6d529a998d26d2a05d20e08e8864852bec69733e311638fa5549dc2fb421f97838127dc2c55a49e32a8fdab4a65c2c2b8706426d61441147452e52d15a7c98acfe2a2b099a16e4d36b94d68364b4903160d1d93b67e8652b1f47dd9b918d4a1acc823", 0xc9}, {&(0x7f00000013c0)="4b0cfcf7195c07b6b77e22d4a3267e37299155a5b3b83dcd4d43dfd8f4fa0d192fbf6c34ee47fac3dac8f9f0ab3459b28954b887720c51639bb5076f172c35a17aff9433e124586818504424a94f88ab844429c5cee000b6c5eb619b721203e1c37c302fb5222886270002", 0x6b}], 0x3, &(0x7f0000001480)=[@iv={0x108, 0x117, 0x2, 0xf0, "732fdcbb16351be9faa2b1372fb9cf51f05f10064de137869b57fd7e3aad073328464a9dfed3608abe966f2d0db368f9ab6113e2ecc03f4845a0033b01c2cfc5d75c1b3df9a1eb9902be67e18c834cfd26d09566cf4cd5e5e293b0469c091bf2d2e08d64f7f8e42ade7e83da8eae8e0e2d304878c68f38f32a37836029111d18ceacf1353cf6135ceecd08941ba6880b974c159bba064879fe35c646b678c2ef84d700bbc4b1046e236e3c48e41035186f48c6e6622bf39d754e811d0a36eb408a3e018ebe97c1c70a7e437c620f96bef3d0fa5cab38139098f29ef282f03815f16f9579b2ff0545c3e62c7e646758cf"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x168, 0x4000041}, {0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001600)="b0895ad68e6683551bdbc40bb921654b88789b22ed0d1c5f0b0f506ea25651fcd24912157b5494f8bb54dfb610071634e41cffbc293732567cf71183c4d41995c871f80750c5ff38d390ae7601d3d2280047c15dce088a7d674b45e19d33800a38895ee3409fcc5c64fc69229cf4685134f09cc900602cf9fb7f481ea1bbf91dc33f651bb5653b782c0a17b1ece9d897fc25dffd7f5da3730c1c60212dd5ab052973c62794d3621ef851498cc12ef3fb0af47e6c57f031b7aca43977438b6ac40ae0c4de189bd733e096e86fe74dd415c40cb43d61154482ed3b4411e888f28169b68367988952fd9c90e9243441bc1b", 0xf0}, {&(0x7f0000001700)="9b7bb655cca0b9720a29f9a40b8f6241ee822a1c2d17665409b45279bd544c3e6245a693b9f696da593f9a45beb3a1c8e046965ca50a8f547a34713752b3973473b0ed6697d97ed10fe5c62a3fba0c1c01437a66563c6c6b416080ea4eb1b16c9bb888f5b90825800e860720b45f87e3195a4c4338859b738c2c3b31536ac347f5536dad80c55ea8cb367ee028917d353dcd3c62efc9c057a439deb49a095c42248296f1bfc42a30e74652b8256de10773adc5f9ac8efeef41af91cda3ea535145", 0xc1}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="6771b59c0feebde4952438a5c3847c9ab2f84f7ea567eca48ee80c61ca8cadee15556f6bd37fa7e692aa3280f8ef0d4e682d46e079a617ff49b97dbb3b0fd802164ae536f6f0923709e6fa987294fc2fd3630902e9250be2d929df56843844f2a76a90479d5f9dc6586edd74fc657fe652d8b3f1b5df5eafd84df4e4679a0a12741248", 0x83}, {&(0x7f00000028c0)="d800304215679cb245b2e068d6585a4f3db472da95053578a764a1050fe7ce4622128e1f8fc350191e35784cfbe99cc3271a36084c3b0d444384a14431684c0a8312b337de362440f032f4f356232af52e2900b39315613abee1273a190a13a1152747ead48cff733ca8ef1019f393aa2091af6eaa45dd5fe8aaa032b8be27710a4f2b2e07e0a8f2761d7f78aa9c4a1c6c95560217214824d92e8a624a229a9dd84b4918418d9ff1793c6581e3fe3bc4b7be42", 0xb3}, {&(0x7f0000002980)="d428944ed59593e8268d95f2c9260fcd1450fd608637ce1f2260b3", 0x1b}, {&(0x7f00000029c0)="c26d0ca21592a002e296a489b2b27d5bee50c91a8bb3dddcff8fc72a81fe56943082f24d18d956f75653a7d202a32bc1e0ed2e5486d647e741e610ad8e5b83950c78408f4debfcf1dd1bf227c5784b27dd7f0d2ab072fb71bcf21d558d5fd6482a1df7f39143583988dfc982d3603435de2c593c6d6c03fa2c5980965ab7f80d9da0fdb917a13f44393fbff85fa3f13979177ce3e3eb7cf9132a429292c3bdb22d4fb12a9f56e2873ec4e38b1f467951a50ec6ece8c7041eb678f686a2", 0xbd}, {&(0x7f0000002a80)="f978b768f81de35a6756efff58d35fec4c3600704a68439defe5a7de4d3e2253b161dc989db3243b625196e927a5a24622c8a464b922828e72ff7908eda448f2c1d028e2d465d13cd3de0edf4549f1236285f2893dc78bef8088fd912e419b8abdb9dc7708a0084d47d30e6e1013a98815", 0x71}, {&(0x7f0000002b00)="9c81069dd8cff9bfd24c5ca87d1bfd06579c212d1d37d7a3e497427d2e7f0d3dbe204f06f4c641fd0a9ea22b7e61b7511d57dd8bb85a51ba1be6ceb3bd278377d9e31c0c2a3dbe2732abae291946c7644ee17e4c9d0b0c59978af90d743a53436bf70a159d938efdadd17d863fae8f244885f08ce0e27064a521e24d757d69d05f17a2dd70da880ba6564ec68db3520a718a0c358703827a99552940a81db9a79aed103a7e914b1d285887f202ae70bf5272a35da80286bd059428f7dfb0d518408cc33e2ff6fcb77bd7144d8bff278d0f59543a4c9971835818d350d369c39eff54dd7cd81efa7a759c4c0945aba9ccb7c729d6111b26d6dd775adc175caa", 0xff}, {&(0x7f0000002c00)="21ec4b8398c62d536ec0a4e951064e71179a85fe5d8eb19b726c76916cfa67ddd3ef4c3f988a70cf5404eb3b2222cf5f23329c9950f3b087fa907b477c4205fa33dd1b7f84d2b8727bff36b0759c502fda725fd210c1cb5d6d8e17489a4d3a96c9bf33aeb89ab41a200686b5c9a0", 0x6e}], 0xa, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x98, 0x117, 0x2, 0x7e, "fd37fec47b6a0d6b6d70fa14b8512bbc3a5d5b6bda8b2df2e6f0c0767484398e079adc319163c7e1a5d7d049d9314a793e8aabc11992000a7e9254abcf6bb687ea951980c346564691db746f2214020212811cfdf529ba5b52ec105513780bb243201375b989cdc88ad1bbbce2ae45d3c71d534ed488993f461cf435fb65"}, @iv={0xd0, 0x117, 0x2, 0xb9, "f9731500ca0b3ef4f5480ad7aa843de26cbf6ccf999088494e0b29d0ff8999fe064a33fa8d333d9e73405f3919a7cd5a1fddd361f2b789dec45fe95a4ea3ba9a2b7e354b12b74958be85e20e487bb029ed95e661fa9028a8b0111d57ccb2425992e20d2806eaa9144ef2ea5bc3e6f60a519d31f6984f8693f287c07e6edeae728dc6f1182477bcbd9ef69773cfaf08d0b853e5922f2834eee44add30c47c697b6290061a04a573ba4a3ea2f4c022449b6031672b9fd80134e8"}, @assoc={0x18, 0x117, 0x4, 0xa1bd}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x1210, 0x80}, {0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003f80)="b8f1eeda614cfd9e3deb0e8bbc260402a85dd991122de1f58e1202e8d0d8b1f8dd44205b86e65deb29a13cc52f30e2a36c2586f0124785733938a7da3a77edd6b25c162cb07fe5953ab2ab506c34905486d26d5b19fc298e81bd778393c8bb209b2548593e1adfc475b26128f33b7ac2171c88d421cb37de338962c3a8b8a3bea113066bf376d39d3736ae907cb2c8fa7a8682acd4ba4b64e4e92a59310d7b8c8028923b58a6a9222e", 0xa9}, {&(0x7f0000004040)="17049970fa99b78b7feb1fb739a16c26dd63b8be7260d3ddc28bfda11d2a0c116c3b8a7696c33d4c2635b499eaa72b845c055a71e6dc787b398f7a332aab3e7f0678086d2aec7a700aca068905d82e754924cfdb2af82a36a518daca4d8424f1535b11dc7027299fc93f12ef14768a7d7c74bd34d99eda3fcdcffab47d1fe73d96524f44807fff2efb897d44d84513b2e068d2d631415b8c1d7987c04fc4b13adf2227d1d2be12dfefc5f95f47f9992836868f12", 0xb4}, {&(0x7f0000004100)="187be527ed8bfad0e84c", 0xa}, {&(0x7f0000004140)="c50ca2c79ffe00ab87caa29c50f399e30b58dc3d35bc842146f745ee6c5f5728443b371305861358a06b7e5d110530dfa009fe42ecda0ccabc2126b830bf03f6aaa952a3152111f32d01494399ca0f97e0e84b549c5359c92484b4cd72b88479d1029fee09b0248d72dea01843a242", 0x6f}, {&(0x7f00000041c0)="c824aab4fb7d41476dbfaa5a87cdaa145bf30a74bbb2fa529c8acd1cbde089d06880ac05d8db384182c7666d7d4749760328a05bf7f4b34a9a47752f5d6367c3e0c177f42183816a577665adf83f2eebe4434bb496d85da52e51c9d00e8ebe152ec966270147c2d21c890962defb6f2d41250fa4ede20be36476f980cbdfc3c199732bed64374a5584564e3a88376f0ec01c455cdbb5ff8de2a1c1fdf47eb3e66728", 0xa2}, {&(0x7f0000004280)="294dc48fd2cc329606089149ee85ba2fbd59eed27f6659360a845b67e892ea1b4d0a4bbceb92a259b6b20d65183e15688d8834a5ba80ece09e1cf30291bef4e686a68e2a3c7e148d26b369bc6d20d4328c5287475c851576258dd76d9264dc4d5bc3216e1dca0b9cbc70f34e9ddff619df666ca19ecc25e707f53d50b49ab497ea745e06b38f668db779415ce86cccbd127ca4685f2b1f2bf0a81c54c6b39efc151ec05c0682ffa5f327a50f07f72b8d0c2baceeb47cbf1ede1ba7661dd3c5e8c1849c2535cad13e397b388639946cb0061ff14866aed93d08f49a63e73ee96f3a672fd4b7d20b5d3c", 0xe9}, {&(0x7f0000004380)="63b33edd78add5d301ca0c6f62d54a4d8dec3f1059d5e7ca79f3104274feb31462b22b40c26f6176703b9f08c747641e66680d7a7f820b29b1a28d2b09c9973a57ae8c4a6346a474f27121b48fe5bc26e0fd6602f388581cf1b5215ca5aabebaa2", 0x61}, {&(0x7f0000004400)="6d51482b7a2f18f8987e90a6f229a4f579849875b4bcdd3ebb61c5eb73187835eec7427e8023faeb3dc66e353a77ebc1d6018d24d25ecf1c91b048e065d6aba8c5ecbea1a07e9efe6da0c595f93cc596e1963172db17af98fcf2470b5d77d82b6ff3bfd8a0a9c4e91596f0c9babcf2a9cf53996c990f048dc9f3779a71928e78e3132026f35187b2c70ae3b9323e6d47e948a2b9aed32b20877ff7c2034235dd", 0xa0}, {&(0x7f00000044c0)='vJ', 0x2}], 0x9, &(0x7f00000045c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x400}, @assoc={0x18, 0x117, 0x4, 0x100}], 0xa8}, {0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004680)="89892d0b55f08662e68223316d6ceeca620b654412c394b9cbfac32dfa58249da5d96b3cd91c02816bfadeefaaa0108b12e6679e79e7ee31e11bf8acc61e0029c87e2cac58624f675717db0ef2e7c316c9ad7e5d34c53f39832d11227cb19d4b2b867450e079490aa648a5be3e6e3884b3d99e5abc324e5416fb20b40bc4b2d75c32b6cd6e52e968dd8df7f08ed526d460d9703ac534ef9062dda2ac46815a09e58da8b0d5d1103bf43838bef60c8306442b34252a79ed4119d4b659df3f2b0866cb25fefb7fc48eb002e4cefe1cc9a3d3be76a13f4afce2e109f94a8c2396690eeea504e5e0ed0bd1b9c8f8cda26745b5d8615f", 0xf4}, {&(0x7f0000004780)="0a24390366883b1a3a106611e63bba92f4ddf2995910228f125770c7177a8f57b5379d542e8faa73db2cc5bea3218b70698ccdc5cf9c5d2e6eeb33c5ab4d33f1ea4be5eeef321e9ec4a0749993df3c574fa8525698b48d6565472ee63927d8e45b9109ba6839fbb05a51215c0aa8970ce4ad769f33d70c9759710c84db53d402a22798fec71be318f63e556a5cfa2a839780902a38aca343427d4f5c", 0x9c}], 0x2, &(0x7f0000004880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xda}, @iv={0xa8, 0x117, 0x2, 0x94, "71acd39d60c69608db88bccbe7a901e0cdf066abe2b95254574ddff19e6008ea95dd15f5008b1a9467fb0e10ae31354ecdaf3ebbba81b2bd34a1b98633c9aa97adb53486776bc8cd859695dee0266af0d70e57bc31188b8b185045fef343a57e2e240235ad8bc5c57a98a187d55bb3fdf59c145a2c8184849c53a95b89051d9365806e75b6c57c881b3babe9fd847648c3bb32f5"}, @assoc={0x18, 0x117, 0x4, 0x10001}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xc9}], 0x150, 0x81}], 0x8, 0x2044085) 13:50:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xf0ffffff}]}]}, 0x58}}, 0x0) 13:50:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080e000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1641.554951][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1641.603840][T30557] bridge37: port 1(batadv_slave_0) entered blocking state [ 1641.617925][T30557] bridge37: port 1(batadv_slave_0) entered disabled state [ 1641.660024][T30557] device batadv_slave_0 entered promiscuous mode [ 1641.711241][T30565] bridge97: port 1(syz_tun) entered blocking state [ 1641.730969][T30565] bridge97: port 1(syz_tun) entered disabled state 13:50:13 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x404c024) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 1641.777090][T30565] device syz_tun entered promiscuous mode 13:50:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xfffff000}]}]}, 0x58}}, 0x0) [ 1641.825457][T30568] bridge97: port 2(batadv_slave_0) entered blocking state [ 1641.848318][T30568] bridge97: port 2(batadv_slave_0) entered disabled state [ 1641.899025][T30568] device batadv_slave_0 entered promiscuous mode [ 1641.921866][T30562] device batadv_slave_0 left promiscuous mode [ 1641.934456][T30562] bridge37: port 1(batadv_slave_0) entered disabled state [ 1642.019457][T30561] device batadv_slave_0 left promiscuous mode [ 1642.030812][T30561] bridge97: port 2(batadv_slave_0) entered disabled state [ 1642.068489][T30561] device syz_tun left promiscuous mode [ 1642.101029][T30561] bridge97: port 1(syz_tun) entered disabled state 13:50:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:14 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}]}]}, 0x58}}, 0x0) 13:50:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080f000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d001f00ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xffffff9e}]}]}, 0x58}}, 0x0) [ 1642.400166][T30599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000810000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:14 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="8fc4ba105cde12e4cca0b88f094bc50fe1fee796b3c40dd13a1b025c4ca18b80b1f15e13ff2385cdccacf3a1789042dc06daad7eee4f8298f9c57c8657eabf1a70eb2c3c5b51ef55b8054895d484830bf51985d070322ae43bc9b7a935f80cd202d77e13e8b33e5126c0bff053eaa67b9acaa286ad397716e300b261b9f081f5c6b8b8a9d904abf84b43e0c06260862b4ebab0e31bf76fbab35e0872a760fbd6d2305f0bce86399a99fbce344b143512b48151dfdb90f3edb77f1d7ba48df8f5b8c00868b45ca2222c5c7aa1a36819e7404a51c3", 0xd4}, {&(0x7f0000000280)="827a83ee6fd1312a9fc441b7f17e732cdd7a461e01ab028a74e40cd0c76d4c95727bf703fe7eb469876417150e94720b9897e0d83322c11cc732861a0f7df9e39b8c33cc28bae7f2b9f325e743fb663e4ac291c9cf670d4b86356f04ae4298dc260a879f54a212cf7302b58a9afd4e70881547f94af9a69e2f007ea6e3b6415675", 0x81}, {&(0x7f0000000040)="55057a0987c90735c94d1635994254d3dbe65a4d3a483e55", 0x18}, {&(0x7f0000000340)="aabbf9914e8f5f3d0811761c87e2274695a40f238e5e00ceccfb752f76a9d298b4d5b8244c7d9a6c75d2c0b87f0054addee0247ea3621e71783d77d02312be0518935e7b3e09aa91603305fd73d1d53fb6c0fe5fb2db34eebc02f92d1394a8e4db606b57dffb0265c6fd89cc", 0x6c}, {&(0x7f00000003c0)="0d8cc83aa72c5b2803852cdaccda8f9f5448ad130d0a5edb0ab917", 0x1b}, {&(0x7f0000000400)="3439d77f783d4d4007f157d9c30f5e56bceb3a164cd88e9a43c892baa35dc46f5ab1d083d8555339bc385a5e2d8d13c01f47b370503c414ddce5a1b52eaac212738f79ebff0142f3ed07c407184cc0701d35f34cc5649f2d8889787a2df3ba8e02c1c9262315e2bd22a0cb89eb85b19ee98e5ae770b544b01f7d71dbff2ba75254e78c3a7667ed32c620a1190f", 0x8d}], 0x6, &(0x7f0000000540)=[@iv={0xc0, 0x117, 0x2, 0xaa, "df8f698ca9e548bfe83de6a26cd1fac2ed6cda00ba21021e776aec4688ef337f911aaadc28d85a2b437b15f6e30cc5fd563f541e6c92f4500dfafea784200a4c569ac0b1c06bccb5e383bab1d6ed9953dc27a44b18415c889015b83ab0c50f8ac73f264319d4bc24da575c3ad7a916d8eee2a9e1415573111c6e997b8f69c42dc537f75bc9e495e94d918317c70b198d5c43a853303eace27afbeeaf884dbe3253fe5c44c30bed63fa22"}, @op={0x18}], 0xd8, 0x24004048}, {0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001640)="e570a175158559b4fdfe584e919ab998c1f6209cc65d95a16a4e8159068c44dfc9d39f9ec595b8409eb1ea", 0x2b}, {&(0x7f0000001680)="c0160da889ede618eeee1ece08cb76949afdf2c7e5477453754135a4ba0a50449c904a722356b301972a2894fffba7de4396e2bd88085fc4617d777b21a26cc5f7db2416c922dd04a0f88fce6221cdafc807aeefb23fc79fd085ffe66f32022062a1abee34bf647bd0db72c993c9d59a827e08099519456eadc3af942d396bc4983cb94128753b4c873184782ca383faf99d8229cfa0beb11d7dd7d8637c174392c94e2bd417e9866add8d2aed05e25381af3b180bf16876816bc42fa1f30d71ede036ee1bb2ca4d9370de1de90750a375584e485d59fe9b26e054", 0xdb}, {&(0x7f0000001780)="e0e9bf8c577b2c1574d0e20b761cbe7b65760bad99b81edf6bdde6011aa9a16f00df6fc6a820a519cb9904ead0fe1e83a8f5265839a16e3973ff27d5c2b18c1a201d7eae517b075ee5601c9d960754ffd4ec158a24833f5127d5c686e96dbdd81eeffd97cc666e058cb19b8017cb9898acd9b591eba6df", 0x77}, {&(0x7f0000001800)="b0212c8ba8bc904b9e0e6c05ba3f8c3d04dc065d31fcbe88bb332351f4d0faedbcf836a18c42", 0x26}, {&(0x7f0000000640)="a302dde980931c7891000f1b5762e5aacd607aa03ebfc12832708aa8e8dd110926305c8b99bc0ca5024f7037b52049885865ba2c201116c6d0b4bfdf63f78d29334ca2cfadced5d367db332c99dc2b99bac93370e9c4dd32d1c460c8cf3d85e456769bb2cefaa3b29d911f929f71bf6ee7934f086b1c917e5dca688f", 0x7c}, {&(0x7f00000018c0)="435d44c981af0825139ee2b3f799614baea0ef9a4246cf4e5fe106d0b7bf5d8d046416cb1ebf0a03c9bcb9456f6ba38a49641ff2f11de33e151a9cef56e69a8d84d780442006afbd7631d56ac7c36563cfc66b6c04339b44f13a31024f66736df0c2397594c68c6615ceef35571f512b4991d5524c2f92027e3980c06881405a1906a546a8a8d19117e58d369c3421a6", 0x90}], 0x6, &(0x7f0000001a00)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x2, 0x0) [ 1642.474525][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1642.508223][T30605] device syz_tun entered promiscuous mode 13:50:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xfffffff0}]}]}, 0x58}}, 0x0) 13:50:14 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a18b816e39b53388d92a4e9bfa239d582eb34469a7a919ce2f2389a4789b5fe790b313ce1bc151c7b9882fb086c975d746753fbf1a9ab364c0fb649f1044bc937226780453c718017208a75f49caae20488bd126767f1f1876e0c"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}]}, 0x58}}, 0x0) [ 1643.388845][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1643.409455][T30599] bridge37: port 1(batadv_slave_0) entered blocking state [ 1643.417944][T30599] bridge37: port 1(batadv_slave_0) entered disabled state [ 1643.427478][T30599] device batadv_slave_0 entered promiscuous mode [ 1643.436392][T30614] device batadv_slave_0 left promiscuous mode [ 1643.444510][T30614] bridge37: port 1(batadv_slave_0) entered disabled state [ 1643.509765][T30611] bridge97: port 1(syz_tun) entered blocking state [ 1643.516986][T30611] bridge97: port 1(syz_tun) entered disabled state [ 1643.528375][T30611] device syz_tun entered promiscuous mode [ 1643.537132][T30615] bridge97: port 2(batadv_slave_0) entered blocking state [ 1643.545555][T30615] bridge97: port 2(batadv_slave_0) entered disabled state [ 1643.555182][T30615] device batadv_slave_0 entered promiscuous mode [ 1643.571670][T30619] device batadv_slave_0 left promiscuous mode [ 1643.578148][T30619] bridge97: port 2(batadv_slave_0) entered disabled state [ 1643.595440][T30619] device syz_tun left promiscuous mode [ 1643.601353][T30619] bridge97: port 1(syz_tun) entered disabled state 13:50:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0xf}}, 0x0) 13:50:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:15 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00', 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r1, @ANYBLOB="ff830500000000000000", @ANYRES32=r2], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8cbc}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x40) 13:50:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000860000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d002000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0xc0}}, 0x0) [ 1643.868303][T30657] validate_nla: 19 callbacks suppressed [ 1643.868327][T30657] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008f0000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:15 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xf, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4811) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1643.951180][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1643.988998][T30660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1644.008273][T30659] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.028283][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0xec0}}, 0x0) [ 1644.089202][T30663] bridge37: port 1(batadv_slave_0) entered blocking state [ 1644.101621][T30663] bridge37: port 1(batadv_slave_0) entered disabled state [ 1644.136134][T30663] device batadv_slave_0 entered promiscuous mode [ 1644.175798][T30667] bridge97: port 1(syz_tun) entered blocking state [ 1644.188429][T30667] bridge97: port 1(syz_tun) entered disabled state [ 1644.223521][T30667] device syz_tun entered promiscuous mode 13:50:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x33fe0}}, 0x0) [ 1644.246431][T30657] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.263819][T30659] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.283483][T30654] device batadv_slave_0 left promiscuous mode [ 1644.292223][T30654] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:16 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d003f00ba8000001201", 0x2e}], 0x1}, 0x0) [ 1644.401272][T30672] bridge97: port 2(batadv_slave_0) entered blocking state [ 1644.423688][T30672] bridge97: port 2(batadv_slave_0) entered disabled state [ 1644.465985][T30672] device batadv_slave_0 entered promiscuous mode [ 1644.496382][T30661] device batadv_slave_0 left promiscuous mode [ 1644.505843][T30661] bridge97: port 2(batadv_slave_0) entered disabled state [ 1644.545032][T30661] device syz_tun left promiscuous mode [ 1644.562980][T30661] bridge97: port 1(syz_tun) entered disabled state [ 1644.656046][T30687] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.685017][T30692] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.705426][T30687] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.722888][T30692] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x1f000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x20000318}}, 0x0) 13:50:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008f4020008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:16 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x3, 0x6, 0x1780, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x4000815) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d004000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1644.938670][T30709] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1644.956139][T30704] bridge37: port 1(batadv_slave_0) entered blocking state [ 1644.971846][T30704] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800030008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1644.992436][T30704] device batadv_slave_0 entered promiscuous mode [ 1645.003197][T30709] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1645.013311][T30713] __nla_validate_parse: 3 callbacks suppressed [ 1645.013333][T30713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x7ffff000}}, 0x0) 13:50:16 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x8040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1645.039738][T30704] device batadv_slave_0 left promiscuous mode [ 1645.048098][T30704] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0xfffffdef}}, 0x0) [ 1645.162723][T30719] bridge98: port 1(syz_tun) entered blocking state [ 1645.169322][T30719] bridge98: port 1(syz_tun) entered disabled state 13:50:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d004800ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:17 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0)='SMC_PNETID\x00', 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x60}}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x1a, 0x5, 0x4000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffa, 0x1e1d}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4}, 0x10) sendfile(r3, r4, &(0x7f0000000140)=0x7ff, 0xa4) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1008400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000569fcd52177a7fa714e78409f07577f64162c3f35a4537cb962c91fdc42769a48bb50511a0b39ac4208daf41438ec3bb5e12be76782057127975535746765e139d72aa776359d71b00"/87, @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf25740000000c0099000100000004000000"], 0x1e}, 0x1, 0x0, 0x0, 0x40001}, 0x44) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4}, 0x10) sendfile(r5, r6, &(0x7f0000000040)=0x1, 0x7) [ 1645.224253][T30719] device syz_tun entered promiscuous mode [ 1645.278227][T30713] bridge98: port 2(batadv_slave_0) entered blocking state [ 1645.299235][T30713] bridge98: port 2(batadv_slave_0) entered disabled state [ 1645.335505][T30713] device batadv_slave_0 entered promiscuous mode [ 1645.374990][T30729] device batadv_slave_0 left promiscuous mode [ 1645.396374][T30729] bridge98: port 2(batadv_slave_0) entered disabled state [ 1645.419425][T30729] device syz_tun left promiscuous mode [ 1645.444782][T30729] bridge98: port 1(syz_tun) entered disabled state 13:50:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x2}, 0x0) 13:50:17 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00b040ce1c9bc4faabb71d3900001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800050008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d004c00ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800060008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x3}, 0x0) [ 1645.797763][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006000ba8000001201", 0x2e}], 0x1}, 0x0) [ 1645.887674][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1645.951200][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1645.995991][T30758] bridge98: port 1(syz_tun) entered blocking state [ 1646.007612][T30758] bridge98: port 1(syz_tun) entered disabled state 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x4}, 0x0) [ 1646.047013][T30758] device syz_tun entered promiscuous mode [ 1646.076321][T30754] bridge37: port 1(batadv_slave_0) entered blocking state [ 1646.089516][T30754] bridge37: port 1(batadv_slave_0) entered disabled state [ 1646.131227][T30754] device batadv_slave_0 entered promiscuous mode [ 1646.155382][T30763] bridge98: port 2(batadv_slave_0) entered blocking state [ 1646.172156][T30763] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x5}, 0x0) [ 1646.213802][T30763] device batadv_slave_0 entered promiscuous mode [ 1646.250275][T30761] device batadv_slave_0 left promiscuous mode [ 1646.261298][T30761] bridge37: port 1(batadv_slave_0) entered disabled state [ 1646.367724][T30756] device batadv_slave_0 left promiscuous mode [ 1646.376844][T30756] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x6}, 0x0) [ 1646.425538][T30756] device syz_tun left promiscuous mode [ 1646.443357][T30756] bridge98: port 1(syz_tun) entered disabled state 13:50:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:18 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800070008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x7}, 0x0) 13:50:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006800ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x8}, 0x0) [ 1646.809982][T30797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800090008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006c00ba8000001201", 0x2e}], 0x1}, 0x0) [ 1646.894395][T30798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1646.975704][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.007849][T30797] bridge37: port 1(batadv_slave_0) entered blocking state [ 1647.019896][T30797] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x9}, 0x0) [ 1647.061283][T30797] device batadv_slave_0 entered promiscuous mode [ 1647.088257][T30803] bridge98: port 1(syz_tun) entered blocking state [ 1647.097669][T30803] bridge98: port 1(syz_tun) entered disabled state [ 1647.123391][T30803] device syz_tun entered promiscuous mode [ 1647.146865][T30808] device batadv_slave_0 left promiscuous mode [ 1647.155871][T30808] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0xa}, 0x0) 13:50:19 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffff33}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x3}) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}}, 0x1) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1647.256777][T30798] bridge98: port 2(batadv_slave_0) entered blocking state [ 1647.268451][T30798] bridge98: port 2(batadv_slave_0) entered disabled state [ 1647.315720][T30798] device batadv_slave_0 entered promiscuous mode [ 1647.348794][T30809] device batadv_slave_0 left promiscuous mode [ 1647.365959][T30809] bridge98: port 2(batadv_slave_0) entered disabled state [ 1647.403954][T30809] device syz_tun left promiscuous mode [ 1647.428409][T30809] bridge98: port 1(syz_tun) entered disabled state 13:50:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000a0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:19 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb, 0x0, 0x0, 0x7}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0xb}, 0x0) 13:50:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d007400ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1647.752534][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000c0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x10}, 0x0) 13:50:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d007a00ba8000001201", 0x2e}], 0x1}, 0x0) [ 1647.796707][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.831055][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1647.893340][T30839] bridge37: port 1(batadv_slave_0) entered blocking state [ 1647.919717][T30839] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x11}, 0x0) [ 1647.972191][T30839] device batadv_slave_0 entered promiscuous mode [ 1648.020349][T30845] device batadv_slave_0 left promiscuous mode [ 1648.031753][T30845] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x300}, 0x0) [ 1648.136817][T30849] bridge98: port 1(syz_tun) entered blocking state [ 1648.147602][T30849] bridge98: port 1(syz_tun) entered disabled state [ 1648.188521][T30849] device syz_tun entered promiscuous mode [ 1648.221985][T30843] bridge98: port 2(batadv_slave_0) entered blocking state [ 1648.233922][T30843] bridge98: port 2(batadv_slave_0) entered disabled state [ 1648.256910][T30843] device batadv_slave_0 entered promiscuous mode 13:50:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000e0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1648.280168][T30855] device batadv_slave_0 left promiscuous mode [ 1648.294444][T30855] bridge98: port 2(batadv_slave_0) entered disabled state [ 1648.336005][T30855] device syz_tun left promiscuous mode [ 1648.357794][T30855] bridge98: port 1(syz_tun) entered disabled state 13:50:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0xffffff1f}, 0x0) [ 1648.693720][T30874] bridge98: port 1(syz_tun) entered blocking state [ 1648.700413][T30874] bridge98: port 1(syz_tun) entered disabled state [ 1648.722972][T30874] device syz_tun entered promiscuous mode 13:50:20 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x2, {@in6_addr=@mcast2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000024c0)={0x1, 0x3, 0x1000, 0xb6, &(0x7f0000000300)="e3e89591acbe79aefc2af93f42aa7db34bc6ee7345f98d39c44bf79c4fdaca1bcdb88fbac1cc153a4b841a0766bed74fc129f8e272520b588a0d45aeaf45c949adad4cb94158d92c30a351e3df7d3f3a7168a3080e1b81322dae70dcd5e04544a2ccbfa219377ddee23bf8e6e46b0b3d3db84e18a3e1e6408a4641d89e263905492afad32ed7c3d38fc13f6478537d6080dd97ff0568701c213055126cc5a77e8b5d3de706d65ea5ad2c314d81ab8ba396c0733bb701", 0xcb, 0x0, &(0x7f00000023c0)="7ecd036eb0d96d04d56accbf0658c20bdedc7eb251e290f915e7d361bc3359f6e4992d27c0c65aaa806f773de4694945118adaff501cdb8ccfcd47f6984120393c2486cd0595fc366988451c5acc49142dc0829429a69ce4e4d6d00334f88d46ff8228f9719c9fdb42b36ab423764e9147ada05dbedb04b0eb7d4314a0bde117dcc7e2ce48e40d06813d893582eba07f9f6f850d0999e92d903593b62347dceaf761a6a518d1facfc7d4383ed7322550554b126e312413f4260571b753254111f9a6cf658caf5f272775a1"}) sendmmsg$alg(r6, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000022c0)="6a7824be578062523ae3338bfa4da3229ffd2d0bbe322832b2408e8a318394cd6f17f15db7c1888368f164e86f07e64f36e14a77358ae1faf190bf5d5c3ab64783e0ccbc8fd5bcad0a681aecb2223b2250c22f53850ba3f0e554cd280c0c55b828e24ad46c786fc9968d0beb797c9e5c9722d25a3d3db3b67290c04000048e8641650317c8dd0a9baf9fe0c83789ecde3c0c106c16864de04ebcdf9934b400424f8a2b3ec9d61553cab30ce87c023a00feb83149185ed0951a04db6d1675f7bfc8712a9d0d003f0530788963d6a7db69f6f3e8fce35ebc5f05ed4b9a075184a38d437e2805832abbde0fe7348dfa0000000000000000", 0xf6}, {&(0x7f0000000400)="af0f9433a928def1f391aa53e9583b10f0b8b99160260902a68234d3d3c1f28a34bf06a8b3e160ec6c7a41dbfef549897acf9db104e65a1cf380d2223187cdb5dadd931b8efa3b6eb6131c56beaadfa445eae184fc8475fd78399a25a7f70605040d4b65769435c5ea79c466ebc353deaf2980bd382b5429dcdf9e0f7b31cff62534b3c3b9bd8481ce34971b490fefd0143e747f65d97ea200a3fc75e7490cbf68c27ccae6c3a7692bd3d4b5d4f9b81b8a32a08fb33e15a460b0922a70122f1fd7ed5aad6f4920227a1ec808ff6ce03ec86d9d56c638fba5e52eb25cfedf632849a1c3", 0xe3}, {&(0x7f0000000500)="38aa0f1a1a7ca32a95658618fac46e60bd555b08a0f0dcbf86b48ffc8abd0b5b955580bf03b025fb2fe077fc77fa0845d67f5b5256f940db66551fc04fcffbeb1a5b535d80afe1541208be0a3eeff13030b4f9fbd2aa9e05cb333e2bd6ecedc7caf0b45e7816b4c9a3d1f43a602c70acaf48552d111667fb7a1662c883d13c4a59d2b6195cbd562c0a2a59e0744861104bd8f4a7569439d874103e2bb957984e6412652143b77d7e7e9bc37235b255224d3bd0258fcbe55811f78e35db8b7525d999a60670958f", 0xc7}, {&(0x7f0000000600)="7f366be7430b81ffe98d250e990884b3692d55408de04ad3d688e3446bfe9d60a26cbacac561a7d7e402a231fa63545046aebdd33811af312fc629a4ecbe3dbf6300e846eb2083c87fccc825e4be174787c23b4a869db34360fef88545aae793c0e4b4b3", 0x64}, {&(0x7f0000000680)="01cef0899a3e31e6a95d15580f1cdba013bd0e08c98a001c7b16ad479134ff02e3385df92f4fc21d4991aae97afc02", 0x2f}], 0x5, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x100, 0x117, 0x2, 0xe8, "3e6e2576190594c6cab143ceb4ad52e0886d09544f9da3daff80fa6ea30c6bcf1b5ae3f7464dff54eaed307f48b63ee95f89272ac2fcb852358354898362eee0dbdcbe3df26a57923843753f4a345978568dc3ad9191034eec7c4d76c5fd56e16fbad80fea2252d3402c178c9574aa71cb9ce17c78d16c78aef411d2ece634dce9eb8d6ce20927b374985e753af5c395562f74874ae2760c7c1eeb40e934688fba2e22acb7b3b0d52c3c10edf97da582e0cace0a938aaf9b54829c1f9cd9a17a2751ee899c4214f3f229699874cabe801b9224fdc078aa2097f888071f6faf17fa6c1f4818808641"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x130, 0x40080}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000880)="5ae427a4628c6f57daba57f850dc37b8dfed312dfb73fb79800c6f8653ca7bd73efe95254e5782764e2bcff9f631f9c0d6d5f82b2b1eeb56ce12a1a05dd599ce8492517449284f7b575a77f6b424e0215a55b6a01ab6c8ca8508e21fb50b4ef83fe21b2893d983fd6f5cdae6315f02e448f1dc601f6440f62369bdd96b2ffd824397c0ce8be514fef2c750c514cf422eea46fd2460964183dbd0f46f", 0x9c}, {&(0x7f0000000940)="15dcf4d6b935ca098596d585b29c9c48044451e0c29e6b46a447855059b745c1cb80935dfddbedc70dda8c92", 0x2c}, {&(0x7f0000000980)="631ba4a34f42cfcf67dfcfd36f189dd637946835d56d2b3ae55885a5985dacc3c8f2ec5b70b55ed5cda530f849af4d6b1457c5e5ad8d660520a4bbdc3529dec678be5a712cae669ed7f6f58efdb8f749617d63c780f212b0269bcfb00d3d76dc65ba0825a7f23ba6679f51ee3e8c07fffa83c1f3510fd872af2055d1f6dafe5704e891a2dbe31f32a24c7df5a2b23d9045479ff8549fde88dc3fe48b9ca9e9664e1cadec35fbb100e2d74d0d00b4e5b25a7087545cab7c7948383d706812c3585f", 0xc1}], 0x3, &(0x7f0000000ac0)=[@op={0x18}, @iv={0x108, 0x117, 0x2, 0xef, "80a3fb9824ccb14c35dd003c547f75452787a78c6c6b5f114d4f10c28eb61627d9d39e18eabec942a8c2315843568f6ad72399e35d4e61f53dcec977cf4386abf90b2232d335088bd82c2cba5dd3c1d9fa228c3534adce5df96ac35aaf6da3681ba5dacbae08dc20c4ff708df7795ce3a81edb897c0151438b2f6e30d32b37458bd17d6162975b3412a7d6b88d609337a3f1ab20b2faf12d86010ea5d5245c485a2ed46e656cd978d5bfeca7c6afb7d17480fc7206a271eb596ee9910d088dfee3f42dd8f45ecdb8463e6f8f897d06d5edf28e75482534d1265012da025c4b5312f074643e8d1a4212845333763102"}], 0x120, 0x989622065c112f71}, {0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000c00)="808088c967cf174ade11c6e85c27e40f1d6e1fd17e8f649937e534c8dcb97e2168ed4f94c806da875864dc93f684ab4e7a3ae02893c0fd13f00e0a33a1fc33b0a5a2c727724f", 0x46}, {&(0x7f0000000c80)="4343539766a0e621c4c8b4dd75c20bd7710ddb6560bd7b05b038c36d3d38a4b6484319b84a11a1a5162e35cce04542281ab74122cff35abde3636ab6313fffac3c60649d54fc94ae40661d353e", 0x4d}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="d694", 0x2}, {&(0x7f0000001d40)="57d6cadc3482e0d6e73ddd0e433e835b599a0816c9932d6e0c3c8db19f281fefd9a300", 0x23}, {&(0x7f0000001d80)="d04b687757a520c5739eadbe2ffe9fe592ad6c82913ee89313eb7154504b7dbbe3baecdacb98f2d0d49240fe3403766e0c52609e2b4bad0a57d1aa802069ae09f3885f8df72cd8922d470d3a3e7420ce28c7fc5b837d5b0ad41aae3b9f8a100acf7570cbb9b6f9b1d57dc3364c5a264d61a2", 0x72}, {&(0x7f0000001e00)="a2c98b877d0fce501c9fb51bb8fd24dcf169f09b0f8c6bf4ec0e3f7c0a5c45ac3dc1fad9ff2ab2e33a61963f16c5acb2078dc274590952ddf5de2bc36ba4660b3c0401eaa8917abbd4ff5af3d707cde6f9fcbaf0d475ad54e69aa4412d6845ca5ddd460cc3428924d720b6384e7ace261118f82886e9ab16c46917286a139ae5374aa125ee78804b91f0076c47b35c8fc8b2ad24787bcc0c273c788454bb7bf70b591dd9645770aca7d873b13738bf89e9df36881a01005cc0e7f0fbe758a87cd60ef8b6fe8d104bce12ef4d17", 0xcd}, {&(0x7f0000001f00)="5f270d084c02466c4b8475cfdd63ef35a621971b59741f88b710e3efc13c719ba59e29c89973e798aff3c4bb698851f7ec7eeb08400a2f48f421e3b6cb22d9ff2eb4053c", 0x44}, {&(0x7f0000001f80)="bf06ac54ebadca54976095c50569b7ead717f641d6aba2a31d46c8f0470eec7a101e310d7b7a121933e9cb5f4e0b05c5ce9bfa750e592ea404660b0f60016a7770d78afa0ec49f11d01063a9a5de2472c2569efa7f27693836c4ee7200ea29c5dd6f", 0x62}, {&(0x7f0000002000)="b6249f4ea7829adfaa06dcaf34933f24996322b85d1b44ba204b7d8448996c775b1e8a2d01ee3a728739149803582fba2ef22227f6ed7b40de7cc1578361a9c16f013a951ec5b459dff0cbdd9143c7c7e22535b6c01491530f9995261561405e5a5320e3e38846fde2ef03bdc6bd55c13854ba95566b9536c917a41e289da2915c43ceaf8439b21439eec333166ad67fa74453eaeabc537d483e3e33be622e3617694d25ac390cd7e6c457cc6e0fa0dc4b3bc28170f3c20c12a4f65ff8e61f08d3062621", 0xc4}], 0xa, &(0x7f00000021c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000001}], 0x30, 0x4000}], 0x3, 0x20000000) [ 1648.742283][T30874] bridge98: port 2(batadv_slave_0) entered blocking state [ 1648.750155][T30874] bridge98: port 2(batadv_slave_0) entered disabled state [ 1648.767729][T30874] device batadv_slave_0 entered promiscuous mode [ 1648.782960][T30874] device batadv_slave_0 left promiscuous mode 13:50:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000f0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d11c600ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0xfffffffe}, 0x0) [ 1648.790359][T30874] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x2}, 0x0) [ 1648.868810][T30874] device syz_tun left promiscuous mode [ 1648.898547][T30874] bridge98: port 1(syz_tun) entered disabled state [ 1648.975823][T30887] validate_nla: 32 callbacks suppressed [ 1648.975845][T30887] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1649.015914][T30890] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000865580008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1649.029326][T30883] bridge37: port 1(batadv_slave_0) entered blocking state [ 1649.040664][T30883] bridge37: port 1(batadv_slave_0) entered disabled state [ 1649.079805][T30883] device batadv_slave_0 entered promiscuous mode [ 1649.100408][T30887] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1649.117857][T30890] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1649.133485][T30889] device batadv_slave_0 left promiscuous mode [ 1649.141162][T30889] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x3}, 0x0) 13:50:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d11c700ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:21 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00ff0faf88643c7b6cf1d73d004dc51351ac1f0ea0b5df0000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x50}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080081}, 0x1) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800600008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1649.341896][T30908] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x4}, 0x0) [ 1649.419846][T30910] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1649.437293][T30908] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1649.460212][T30910] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000858650008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:21 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000021000a"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00', r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x0, @dev}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x440d1) pwritev(r1, &(0x7f0000001440)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="b5e8e8a56c5f8e838141e90dd334951c63082125c0f047ffca03fb1949d547793fb18126b7bb67872540de95a73fa86a06d1a6ab55a859e34fe1e4a8fed5a494f62241f244b02b0dd0c42f9efeed33a5ea5cd607ce9df8b0815a1fb3016c460cb746922c627e90be55d2", 0x6a}, {&(0x7f0000001380)="51a856f54cb1845f3338cec8c57710f7d2ea534f7168890b80e9a4e07687bf9494f131a59aa38b94b38e385a0d9bacedb1e725d9ad258baa4220fc7aa5bbea136a35077bf95e4db33b2e170d86a04a6fd6b8d18381df5713e0ea505c88835a62c3bd1f5d2c5c", 0x66}, {&(0x7f0000001400)}], 0x4, 0xa26, 0xb2) [ 1649.561751][T30918] bridge98: port 1(syz_tun) entered blocking state [ 1649.592589][T30918] bridge98: port 1(syz_tun) entered disabled state [ 1649.600369][T30918] device syz_tun entered promiscuous mode 13:50:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x5}, 0x0) 13:50:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d11c800ba8000001201", 0x2e}], 0x1}, 0x0) [ 1649.636196][T30926] bridge98: port 2(batadv_slave_0) entered blocking state [ 1649.646759][T30926] bridge98: port 2(batadv_slave_0) entered disabled state [ 1649.673171][T30926] device batadv_slave_0 entered promiscuous mode [ 1649.693590][T30927] bridge37: port 1(batadv_slave_0) entered blocking state [ 1649.700775][T30927] bridge37: port 1(batadv_slave_0) entered disabled state [ 1649.768888][T30927] device batadv_slave_0 entered promiscuous mode [ 1649.815595][T30918] device batadv_slave_0 left promiscuous mode [ 1649.828865][T30918] bridge98: port 2(batadv_slave_0) entered disabled state [ 1649.863112][T30918] device syz_tun left promiscuous mode [ 1649.884396][T30918] bridge98: port 1(syz_tun) entered disabled state [ 1649.965913][T30919] device batadv_slave_0 left promiscuous mode [ 1649.981920][T30919] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x6}, 0x0) [ 1650.077577][T30938] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1650.106206][T30941] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800810008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x65580000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d11c900ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x7}, 0x0) 13:50:22 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) socket(0x10, 0x2, 0x80000000) 13:50:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800f00008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1650.390537][T30955] __nla_validate_parse: 6 callbacks suppressed [ 1650.390558][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x8}, 0x0) [ 1650.471931][T30958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1650.542581][T30959] bridge98: port 1(syz_tun) entered blocking state [ 1650.551975][T30959] bridge98: port 1(syz_tun) entered disabled state [ 1650.575414][T30959] device syz_tun entered promiscuous mode [ 1650.602537][T30955] bridge98: port 2(batadv_slave_0) entered blocking state [ 1650.609802][T30955] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x9}, 0x0) [ 1650.655697][T30955] device batadv_slave_0 entered promiscuous mode [ 1650.688853][T30966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1650.709550][T30958] bridge37: port 1(batadv_slave_0) entered blocking state [ 1650.722630][T30958] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000802f40008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1650.760847][T30958] device batadv_slave_0 entered promiscuous mode [ 1650.807495][T30973] device batadv_slave_0 left promiscuous mode [ 1650.814426][T30973] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xa}, 0x0) [ 1650.854015][T30973] device syz_tun left promiscuous mode [ 1650.880117][T30973] bridge98: port 1(syz_tun) entered disabled state [ 1650.960983][T30972] device batadv_slave_0 left promiscuous mode [ 1650.975144][T30972] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe}, 0x0) 13:50:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000200ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008fffe0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf}, 0x0) [ 1651.356592][T30996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1651.445075][T31001] bridge98: port 1(syz_tun) entered blocking state [ 1651.486386][T31001] bridge98: port 1(syz_tun) entered disabled state 13:50:23 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff01ea41ceccd8bbb02fbfc587e69ef8000014000a"], 0x2c}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="046837a94c18418c35f9fed27f3f1b0ac0e5d3127ce99d08bde4fb5e148532910895d8d492510fbc626ae415bf2bb16ba6aff62613a4e16d1081cbbcf04dfa425c52db999c72fb355ac34fe9848d3ae03b6a66da5501992ed3457ce9abbe094afb982c78025d321b2f0b96e2c5bad1d816fa44e95923c19cdec8dca5a4f540cf40f16924760af50631b90ea49c76d3d0a42991339bd4ba97ed666c4601be6586a12a86a7bcef4ad3a859cc8f075972259f3d9a4cb40c56ece56a67ecdc924b2cdee2946b2d83c43ac3", 0xc9}], 0x1}}, {{0x0, 0x62, &(0x7f00000003c0)=[{&(0x7f0000000540)="8937cc00000000000000c09b959d0257db7da5a9f150c6fabef6778f6ad7dbd8fb65cf67d971ac2442000000", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000011c0)="6c10689ac3c9c658fab101e16a2dc6bfac9679163d14c25364ec7d05766389129452489ce51a6050a2da6346b0bb13229ba7a09cef5604", 0x37}, {&(0x7f0000002440)="c5e8c43340ecf83ab6015bd4bc6eb73e19ff54dff9cf75c848a66b00673e71de6d7da568813a79308cd180d1aa0b94bd46b5194893c19b2120ff6e89e712efd9a8a0d65e7f92739753b5e102ba2f9ff6a16fb18f64abcbe5a1bc5b4700ef711d40aa", 0x62}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x1b5, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x564, 0x11, 0x0, 0x27) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000300ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x60}, 0x0) 13:50:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080fff0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1651.530463][T31001] device syz_tun entered promiscuous mode [ 1651.547172][T31000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1651.607282][T30996] bridge98: port 2(batadv_slave_0) entered blocking state [ 1651.620639][T30996] bridge98: port 2(batadv_slave_0) entered disabled state [ 1651.656666][T30996] device batadv_slave_0 entered promiscuous mode 13:50:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf0}, 0x0) [ 1651.721369][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1651.744554][T31006] device batadv_slave_0 left promiscuous mode [ 1651.756267][T31006] bridge98: port 2(batadv_slave_0) entered disabled state [ 1651.796270][T31006] device syz_tun left promiscuous mode [ 1651.801934][T31006] bridge98: port 1(syz_tun) entered disabled state 13:50:23 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x622, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x38}, 0x1, 0x0, 0x0, 0x8030}, 0x80) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) [ 1651.886249][T31007] bridge37: port 1(batadv_slave_0) entered blocking state [ 1651.899522][T31007] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x300}, 0x0) [ 1651.944340][T31007] device batadv_slave_0 entered promiscuous mode [ 1651.987034][T31000] device batadv_slave_0 left promiscuous mode [ 1651.999685][T31000] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:24 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7847672fbd08a2cee72c0000001600ff000011ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x390}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1652.114470][T30996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1652.154125][T31001] bridge98: port 1(syz_tun) entered blocking state [ 1652.160723][T31001] bridge98: port 1(syz_tun) entered disabled state [ 1652.197072][T31001] device syz_tun entered promiscuous mode [ 1652.234177][T31006] device syz_tun left promiscuous mode [ 1652.239842][T31006] bridge98: port 1(syz_tun) entered disabled state 13:50:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008feff0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000400ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x500}, 0x0) 13:50:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:24 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast1}}) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000540)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x140c, 0xa31, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000001ec0)=[{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000005c0)="db8886f4cd9d68cc88", 0x9}, {&(0x7f0000000600)="11f8c5486ac427af7f14f8f113d22d1b965b5bbf95e589b48548bf75913a24f0e9bc2ac6f314e606b5520a9afb91552e00502f3b66424bf28bec27044a9225f0824bca78a87c09eda1091a8fef300b1f3fad280c2baf1f4abda9402c2c1d66b11ec8902f0613b019bbf6a824675ce68065aa748bad4fddd446fdd1be7906c873282f239daf1db0a7fb64adc4b62d9c0a202478d3cf143feabcdd25e7fa72debec2f8cb488f19d17f1e707f221bad44ae87cf75feee4b650d3f250d6b995aa19b776e272f36656e84a04d5ba2c4053bec5dedc6fa0267737aa0d4d5dcd4befb9835bc643e6ba6a89ce5dbf7753f323babbd69bdd7ebb43b29f09213b02f299f", 0xff}, {&(0x7f0000000700)="322d0a70012eed73fb03fe876efaa8f77302ec8dbde533de238a6971007c26256e7190c0e092ee3e721900d9f768a4bcae684401cfb66301f2ed23d8cb0aaa6eceb9863df9ac5aaa7dcb8ad2f425a0fe85f2c03d3cc42f0d0ece18f00c3fa87aab8f9efd0aab2f999dbb7a56f465a938d602c97beaf1c68d0ce56d6cba9902c083d287c970326273fa4b21bd8feea8dfa268dc0e30d12ccb6f364873e26dd4c50561082155ebf1f803e9ba8a45815817118f4f7d2e18acbfca071dec", 0xbc}, {&(0x7f00000007c0)="5c4cd799c9117676a299e3d6", 0xc}, {&(0x7f0000000800)="3b973b03a9a15e39965eb9284f98c8952de0ff45c75aafbbebb3ee7664fcf06b9bcea515163cc49fb007cd2948d53188d95cbf3b2d6dd416803247134ad8796d2efb639d82dbcfdbdf4602ae7e34f9e9d2c440a1796951247b53649a2b752a98254a7520e8d9cc1be6f3477c233832b3cf3a2e1546db9fa89656f8ae795a1a85ae7b78a9420d31c64ac377051773d1051d6647f0b6", 0x95}], 0x5, &(0x7f0000000940)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x6, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8000, 0x80000000}}, @authinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0xf0, 0x40004}, {&(0x7f0000000a40)=@in6={0xa, 0x4e20, 0x80, @empty, 0x36}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000a80)="927a133c8e9de16eeb73f1dc562a9902f05f6f283be8c7b3ba2057d699be4308ede3f1f9502f3958260e60548a88e1c79175b1f6de6886af5fe3ef1c8d1219ca8204903aa90628d818095f41e0a8821a433b1e3a46c7758d866e7afd9068347d74cd209afcb16894a1c232c80875ca0055baa0ce66080e08ed08eb9ad13d44cce666e5a136bf", 0x86}, {&(0x7f0000000b40)="ce452ab8eb82270e7f16a79d560316d26b4e0fc064188821ab2adfe915724f73943b9bc68c712e1ad39bac32eea086fb86e59c20eb10938df15d781b3a529f1e9d6f2d", 0x43}, {&(0x7f0000000bc0)="c397a901cb6d9281d0788c2b7a67c711f9512b75250d7a6be4385a76aebf06bdf0aff236659dfa54732ec314ca76f666b25e0068a2d93748d6df1f9115a427f3789708f0b5d67173f1e081ae881759d43b602af6cde263385f7c4f4d38d6df869db8a9cfa4e7c793364992a92ff9a0", 0x6f}, {&(0x7f0000000c40)="3025b9c407b15ce0e7bd4bdcc83f869e9985c282bd51005286385aa57d2b5de91e1b653df446a9866f413e3d32e29dce994974ff97dddebe39e87c3e295ea3cd70a19315e32c463aa0d726c9e6841f6c8efc3b9ae538a5fac87cc1a2622e8f59d5c9d91ea36d76e7d889b457b01b0076dd8452de0cb6b85c152e40d5070099e0aac78bba61e440cdd9a9ba", 0x8b}, {&(0x7f0000000d00)="c015", 0x2}, {&(0x7f0000000d40)="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", 0x1000}], 0x6, &(0x7f0000001dc0)=[@init={0x18, 0x84, 0x0, {0xfff9, 0x6, 0x0, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, [], 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @init={0x18, 0x84, 0x0, {0x8, 0x0, 0x8, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0xd8, 0x8004}], 0x2, 0x200000d1) [ 1652.500039][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1652.522012][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1652.547533][T31050] bridge37: port 1(batadv_slave_0) entered blocking state 13:50:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x600}, 0x0) 13:50:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000500ba8000001201", 0x2e}], 0x1}, 0x0) [ 1652.593023][T31050] bridge37: port 1(batadv_slave_0) entered disabled state [ 1652.619317][T31050] device batadv_slave_0 entered promiscuous mode [ 1652.662731][T31059] device batadv_slave_0 left promiscuous mode [ 1652.683338][T31059] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x700}, 0x0) 13:50:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000009000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1652.815543][T31060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1652.867791][T31065] bridge98: port 1(syz_tun) entered blocking state [ 1652.884808][T31065] bridge98: port 1(syz_tun) entered disabled state 13:50:24 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb, 0x0, 0x0, 0xfffffffc}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 13:50:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x900}, 0x0) [ 1652.920035][T31065] device syz_tun entered promiscuous mode [ 1652.955859][T31067] bridge98: port 2(batadv_slave_0) entered blocking state [ 1652.968456][T31067] bridge98: port 2(batadv_slave_0) entered disabled state [ 1653.008189][T31067] device batadv_slave_0 entered promiscuous mode [ 1653.068886][T31071] device batadv_slave_0 left promiscuous mode [ 1653.084825][T31071] bridge98: port 2(batadv_slave_0) entered disabled state [ 1653.137131][T31071] device syz_tun left promiscuous mode [ 1653.151809][T31071] bridge98: port 1(syz_tun) entered disabled state 13:50:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x6f100000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xa00}, 0x0) 13:50:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000600ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080000000a000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe00}, 0x0) 13:50:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000700ba8000001201", 0x2e}], 0x1}, 0x0) [ 1653.590487][T31099] bridge37: port 1(batadv_slave_0) entered blocking state [ 1653.624560][T31099] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080000000b000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1653.659969][T31099] device batadv_slave_0 entered promiscuous mode [ 1653.680443][T31104] device batadv_slave_0 left promiscuous mode [ 1653.691197][T31104] bridge37: port 1(batadv_slave_0) entered disabled state [ 1653.782559][T31105] bridge98: port 1(syz_tun) entered blocking state [ 1653.799926][T31105] bridge98: port 1(syz_tun) entered disabled state [ 1653.834980][T31105] device syz_tun entered promiscuous mode [ 1653.864553][T31103] bridge98: port 2(batadv_slave_0) entered blocking state 13:50:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xee2}, 0x0) [ 1653.878988][T31103] bridge98: port 2(batadv_slave_0) entered disabled state [ 1653.890327][T31103] device batadv_slave_0 entered promiscuous mode [ 1653.920856][T31113] device batadv_slave_0 left promiscuous mode [ 1653.932261][T31113] bridge98: port 2(batadv_slave_0) entered disabled state [ 1653.951275][T31113] device syz_tun left promiscuous mode [ 1653.964627][T31113] bridge98: port 1(syz_tun) entered disabled state 13:50:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf00}, 0x0) [ 1654.049050][T31118] validate_nla: 34 callbacks suppressed [ 1654.049072][T31118] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1654.098306][T31119] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1654.113225][T31112] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1654.142276][T31118] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:26 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4}, 0x10) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, '%+\''}, {0x20, '{-}(@'}, {0x20, '\xb7&!}('}], 0xa, "09b2394f703942773a9ebf252c983120e208042794bcc046d55a066685836610c48eed794e69684011dcd36aa29dab532681048d66eb6dbb75e0d6026173ca6538dc450fbabb6abd23e4bc47c63efd926b60b713c6eb4c4433fc3a3e63f35aa073be7a8a12c04e42502112f582ff2c7eeab15157267480900c8161904e003e781b914f080bff1f1acbec88cabe243e920ac424fda190c08d2ea0bee4990da7d9c72a40c1d418bedf826f73f8c279e9a50a1594e4d1b73859c3d45ffe507c077e2f45e1d170cc158dd372d8798048748544df891db7b554ed4fc7559c77d3abf6dfa982679898d3359fd866bc8c9ac508608a330aa71af68cbe"}, 0x114) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x1, 'batadv_slave_0\x00', {}, 0xffff}) r3 = accept4(r1, 0x0, &(0x7f0000000180), 0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x20, 0x1405, 0x20, 0x70bd29, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x4040040) 13:50:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000010000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000800ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x1f00}, 0x0) [ 1654.389411][T31130] bridge37: port 1(batadv_slave_0) entered blocking state [ 1654.414772][T31130] bridge37: port 1(batadv_slave_0) entered disabled state [ 1654.436814][T31130] device batadv_slave_0 entered promiscuous mode 13:50:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x2000}, 0x0) [ 1654.472092][T31138] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1654.485326][T31139] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1654.508643][T31141] device batadv_slave_0 left promiscuous mode 13:50:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000011000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1654.546087][T31141] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x6000}, 0x0) [ 1654.647028][T31142] bridge98: port 1(syz_tun) entered blocking state [ 1654.667226][T31142] bridge98: port 1(syz_tun) entered disabled state [ 1654.711676][T31142] device syz_tun entered promiscuous mode [ 1654.746167][T31144] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1654.769911][T31133] bridge98: port 2(batadv_slave_0) entered blocking state [ 1654.784594][T31133] bridge98: port 2(batadv_slave_0) entered disabled state [ 1654.818161][T31133] device batadv_slave_0 entered promiscuous mode [ 1654.851576][T31149] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe20e}, 0x0) [ 1654.881978][T31150] device batadv_slave_0 left promiscuous mode [ 1654.891148][T31150] bridge98: port 2(batadv_slave_0) entered disabled state [ 1654.917708][T31150] device syz_tun left promiscuous mode [ 1654.928075][T31150] bridge98: port 1(syz_tun) entered disabled state [ 1655.002411][T31149] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1655.011765][T31144] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000014000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:27 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) read(r1, &(0x7f0000000140)=""/158, 0x9e) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf000}, 0x0) 13:50:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000900ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000032000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x34000}, 0x0) [ 1655.336968][T31175] bridge37: port 1(batadv_slave_0) entered blocking state [ 1655.379641][T31175] bridge37: port 1(batadv_slave_0) entered disabled state [ 1655.427537][T31175] device batadv_slave_0 entered promiscuous mode [ 1655.464967][T31180] __nla_validate_parse: 11 callbacks suppressed [ 1655.464988][T31180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1655.528486][T31184] device batadv_slave_0 left promiscuous mode [ 1655.537870][T31184] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x40000}, 0x0) [ 1655.620542][T31185] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1655.650437][T31186] bridge98: port 1(syz_tun) entered blocking state [ 1655.663646][T31186] bridge98: port 1(syz_tun) entered disabled state 13:50:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800020008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1655.703778][T31186] device syz_tun entered promiscuous mode [ 1655.754000][T31190] bridge98: port 2(batadv_slave_0) entered blocking state [ 1655.766509][T31190] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x200000}, 0x0) [ 1655.813835][T31190] device batadv_slave_0 entered promiscuous mode [ 1655.840702][T31180] device batadv_slave_0 left promiscuous mode [ 1655.867246][T31180] bridge98: port 2(batadv_slave_0) entered disabled state [ 1655.907390][T31180] device syz_tun left promiscuous mode [ 1655.927625][T31180] bridge98: port 1(syz_tun) entered disabled state 13:50:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x400300}, 0x0) 13:50:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800030008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:28 executing program 2: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0xe684}, [@alu={0x7, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}, @map={0x18, 0x7}, @jmp={0x5, 0x0, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x9, 0x1, 0xb, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, [], 0x0, 0x0, r0, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xf, 0x9, 0x2c9}, 0x10}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000000000000014000a6433f34d341d9af753e10c11f59bee61c2b41872791429159f6418db2bf061bb24"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d004800ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf0ffff}, 0x0) 13:50:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800040008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1656.501068][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x1000000}, 0x0) 13:50:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800050008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d004c00ba8000001201", 0x2e}], 0x1}, 0x0) [ 1656.557339][T31225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:28 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1bc, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xa4, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x25}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb33e}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1656.630771][T31229] bridge98: port 1(syz_tun) entered blocking state [ 1656.642731][T31229] bridge98: port 1(syz_tun) entered disabled state [ 1656.698042][T31229] device syz_tun entered promiscuous mode 13:50:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x2000000}, 0x0) [ 1656.752938][T31224] bridge98: port 2(batadv_slave_0) entered blocking state [ 1656.764865][T31224] bridge98: port 2(batadv_slave_0) entered disabled state [ 1656.810853][T31224] device batadv_slave_0 entered promiscuous mode [ 1656.840895][T31235] bridge37: port 1(batadv_slave_0) entered blocking state [ 1656.854797][T31235] bridge37: port 1(batadv_slave_0) entered disabled state [ 1656.898377][T31235] device batadv_slave_0 entered promiscuous mode 13:50:28 executing program 2: r0 = socket(0x25, 0x80000, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000053c0)={@multicast2, @loopback, @rand_addr=0x64010102}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005dc0)='nl80211\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000004640)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004600)={&(0x7f0000004680)={0x4f8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="258322fac815"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x475, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1}, {0x638e}, @device_a, @device_a, @from_mac, {0x6, 0x4}}, {0x1, 0x0, 0x2, 0x0, 0x20}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xa8b}, @device_a, @device_b, @initial, {0x7, 0x99}}, {0xc, 0x1, 0x2}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x44000}, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004b80)={0x114, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1c, 0x6a}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3f]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xba, 0xbe, "cdf78b2ffdbd0d34c381d1410dda77763209336ee89284eeb009f3f61291352f57ce91213391a0253140ad147e97b684fec3055a60c3257a4993d87d25355666ce29481c8726be1b4cf62791e7617582eca8b65dae8a3fcaad2617abf120963de8ae2ae5a0109dc1d350e1a12ff3f598d79e093a18055c39c38064e0837672fbbab69c9b9e13800a4fabf194d873ec4e4c3aca7e756682f32eee48f8082dc042221a4c02a97707bf757385858122d1986081cab6e751"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x120, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @empty}, 0xdc02}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfff, @dev={0xfe, 0x80, [], 0x1d}, 0x80000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x120}}, 0xc800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000500)="e8f51b98e9242bdc8ad6676022ddd1c1ae438d30d62e59b80335cfdf0273dd0d1cace63667982eff961c7acfa4e9d84c918843c788cf4369da250158f73253bd87036bef4722994ee8edc4b90ca3550fd66a873e7366e173a8b10be3def855ad104ee3c7cb5d10b5384c3114e1eaaa7df5bc8ccb894538bc5772dd41a0ff733e4ea4b907de784266be53b4568fbf82787e8583c4379c3ee9b1a0a2492062e96ebafb05e6ed85ac7274a78dcb0e6f067761fb7e76a62bc6c363fb538cde5ae95203a61ca6501d833e81d39da7a529487eb33bb0e15afad4790960a74a7b1054d8cf0c5665c24d20d45b9b9e", 0xeb}, {&(0x7f0000000600)="0822dc5e23dd10df0876c0c3af628f44e5bdaf4e6bb520b583a608e2746d2f0c779f55f9caf0f8d21a0c47f693161e5c5cc061bebd4e8f3d53cddc9c65ca32340a0601af5abb4bb1457b82afb7dbdb614eb9089807011bfdbc90ac905ec1e7c33df9799cbb6105d665e506db5920825ad3995463243e4491634e66b6fa20e9fa7b393641f80d0d1f1c2ebffa7eeb304ff966653f1ef55c2d16a9d623e21cd4fa9dfb8fb2fbd9590c8a6a1b2cc5059dda2c045070d112a3c957859b3edf95fd4515d6d267cf768e7632e5", 0xca}, {&(0x7f0000000700)="79dce08be4f3e42933bc1dfb2912535e78fa42fda0f56a356202fe7feda269cc52b552145116b395a7b28791c7a5ebfb12c2d70ee7f2f235b1c501bd375957c4390ff7be402fc9b46b58c1c2d26eef7b232292cd345568965aa4ad59ddbfeab7e56edd9b769e6d47e9e01ffdd93a7a6bc75ab1707a11af69de991e", 0x7b}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="bc142a6193040d9556aace09cb31f4e7cd8c818769576a9744a557fc903786741c3ac9f07e8511cb93acf2a09f158451ca2b1f6e247aa6fadbbe9bc884f77ed0376e6c6a2f6eaf58a0e623ea67e28e47f8a6d3f763e57f0e0565dac6b6360c5032f038bfca207656f73af1ce92a2da2a0824f0d9eb3ce66a09820fe87a061feaa19c1044e7412fe7dbbeab7f39a77757a231c99136c9d4efa0d433fa552c5cee521e162c51c4fc67", 0xa8}, {&(0x7f0000001840)="18db2ca61443e2dc352cefc4c7178d0bcd7ef57fc55196e497360dee4856c56cafed8dd2760b01a3fec5d08ddf962df252b30abf55bb65320577a685022bf9ae2e1ee45edfb63fb88410763424b9518cf17cb93988", 0x55}], 0x6, &(0x7f0000001940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000001980)="da6f31c7711ec7ca563270f1635fb0ca741bfb", 0x13}, {&(0x7f00000019c0)="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", 0xfa}, {&(0x7f0000001ac0)="0b544c718e9bb91e1ed9dbcc6f3685e5b9ba220916b3e16c38047edc209cb98c9ea9c694a92b760d03ddd3ac2e34e110c21204876ea8c7367665e682a757afb073922e2213e95083cde9cde1a135d1ced720dc6d75f49d7cbb9f836e329eed9672261b12671be693d553833980335f79bf43b989ca11dbcbb0f0bf8d0e852109a2e8085c907e2d3ea604488ba1a2ea87", 0x90}, {&(0x7f0000001b80)="6968fecdcbffd373939f8488efc6b6aead42bfb38c0d6aec3080b42654a03dd2", 0x20}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="c879059adad1bbc060706ac8b280da3c2ce929c155cd3d92d2b9eebb0d90a5504311d9948d84be67f850ba7aa999d6b9a77383d84b22704141897e09c02f913a0ad99ec2fcbf8bdd80a66c76413eef0dd36e2411c345e02eb584871bfd8835d6264d639ad925c4ac19b1311897482853da1173f2e7cb9cc9b88d6248da338b1a637cfb6de4c99349882f0605a3ab4746973a1853be6cf213578601b72c7dab061165c11e8e85dcc43820723b91884fdb8f55bb0430d7137f75282c608fe756adb012c5a5", 0xc4}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="a01bbc109f4037624393e33df0e932a740f15dec3c13d6712f8a5f323bcf5c14d4db8a0ab4ad74afcc80857ddf833929763efe9d", 0x34}], 0x8, 0x0, 0x0, 0x8004}, {0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000003d80)="1407aaf3752854a2699fb63f17459ef877ef7be9293413cad74316a67eee5010e9405fcb54453cedc5f4cf660253bb6fdcc5561c09ba828e6f5c7ad703f70ce76b3dfbe1c41f8fb3e9ee43765e76a4ac22c7d81b609ef6e56a97625d6d276fcc9d6b0d4078d0ee90d48f4b23f1339853921d97f5947177bbf6070d203f8875c3d3835a39f68e", 0x86}, {&(0x7f0000003e40)="e69261cc231505fcd67a64f01acab78d3fe9b717a0b68c3a8b934c829143dc0ee70f43a96e996770a268859bb53c65e4c32d95410bffd23f10df8e6de047e1f7ad4630177254f38c8afc151a0ae7fb70198a15c0b41710b668190d3854cf23127d9700425c0bcfca442847e36bd435c6138719e3404a8c8d12d189356680fdf3edf8193815f6d64fb192cbd4cd4672b765c1283dee", 0x95}, {&(0x7f0000003f00)="42866ba462aada3c0779a8f2f13f38bdc375c8a00732ec0c16d27a2d4d8ffb49c7e1b5994eec8e063b1c021156808078859909", 0x33}, {&(0x7f0000003f40)="6b6ab38c2c2f32cbd2d29871837b6c37c0d907b7de84e7060261d39f73e7003577f156903ba5d0b0b60eb8371569d55f2aa285b9a9f238588a933f8afb4e61ce05794c10a85bab68bc697344ac217e562f5afd4759fb943b45e4cef9b565bd888367368894764407f84fc004f625296444703269dee0c05873ba5fa4918513a68d6b639ede9792c3fcddc4a9e5a6604887a79b72a509e22cce85c6b3260c6530515f90af757b0aa076cdef9d77bec9546b11f5eef65ef97778f65cd33db0eb5dd85cbc352db954d206758fe9f50f67b08462a09769692f4c71", 0xd9}, {&(0x7f0000004040)="f89a2ec2dd150b648e7dcd7b49ec6b372595208cb0cb904f", 0x18}, {&(0x7f0000004080)="4b2c57acfbb97f0cbe2b08d959e504b1dd958822780f31ae55420a21f3a372ce2b42c14d819bb78e370f03efad36cdd4f7f043c09ef4b923eefb6cc1bd938e60408d7b64d540cfeb63cf871c5dbda1ff20c4c78f214e1bdd15b8f4bdc36e1f00578a83418ea54a1763c0c7bc", 0x6c}, {&(0x7f0000004100)="6a60d9b0f20e7285544d5c12b35a7ac70f989a16e6b698689ce45b4b7d53a86755842bf615999b2008713b73fdc56a01ad98bfd258289aff7117d6c690528946c06e6759191235b750423e396ed359e3147111193574392cfa2f382e3f8b30025dcbb789d5ea411df7cd5485a3ec4c9f0e475f9072a50300f662219eecb5581e81", 0x81}, {&(0x7f00000041c0)="2454514c6a52d45aad0ca7eb889d468d15b21b91695553c353a9333d3bf8d83e293631200009b11801f392fbfa882c461bee4cdd77200da8cc493192f79b5e8448b826fe626873177d97a0270c0db5b3b8883ffbeb0ffa113f3bebe01d5b8a545d1a6e8fbc796a0ba41f6e14217f994961987a02f549806b80e9f2a0ead22922f4c50a1282d73cc77e9bdf9c876dc2ac4f65f672bbcc3fb3a3ee004b78c5a6534dfb206dc8c787e0052745e1bfe0186a8010e7fdef0eeb8783a62116696901331704491855a171d30ee94d1e8105533553ce78f340d4a975c203", 0xda}], 0x8, &(0x7f0000004340)=ANY=[@ANYBLOB="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"], 0x190, 0x4040}], 0x3, 0x40014) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000000140)=""/122, &(0x7f0000000040)=0x7a) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x24004095) [ 1656.945014][T31239] device batadv_slave_0 left promiscuous mode [ 1656.952152][T31239] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x3000000}, 0x0) [ 1657.006459][T31239] device syz_tun left promiscuous mode [ 1657.039499][T31239] bridge98: port 1(syz_tun) entered disabled state 13:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x4000000}, 0x0) [ 1657.146335][T31225] device batadv_slave_0 left promiscuous mode [ 1657.157822][T31225] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x88a8ffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x5000000}, 0x0) 13:50:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006000ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800060008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:29 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d002000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000400)=0xbef, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82600002}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffe0, 0xfff2}, {0xc, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) socket(0x26, 0x6, 0xffffff81) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x381d40e7}, &(0x7f00000003c0)=0x8) 13:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x6000000}, 0x0) 13:50:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006800ba8000001201", 0x2e}], 0x1}, 0x0) [ 1657.557879][T31274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1657.619214][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1657.647332][T31278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800070008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1657.666776][T31274] bridge37: port 1(batadv_slave_0) entered blocking state [ 1657.680338][T31274] bridge37: port 1(batadv_slave_0) entered disabled state [ 1657.721643][T31274] device batadv_slave_0 entered promiscuous mode [ 1657.765994][T31283] bridge98: port 1(syz_tun) entered blocking state [ 1657.779893][T31283] bridge98: port 1(syz_tun) entered disabled state [ 1657.820714][T31283] device syz_tun entered promiscuous mode [ 1657.857741][T31276] bridge98: port 2(batadv_slave_0) entered blocking state 13:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x7000000}, 0x0) 13:50:29 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1657.870507][T31276] bridge98: port 2(batadv_slave_0) entered disabled state [ 1657.909093][T31276] device batadv_slave_0 entered promiscuous mode [ 1657.943806][T31278] device batadv_slave_0 left promiscuous mode [ 1657.950763][T31278] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x8000000}, 0x0) [ 1658.036445][T31291] device batadv_slave_0 left promiscuous mode [ 1658.051184][T31291] bridge98: port 2(batadv_slave_0) entered disabled state [ 1658.108831][T31291] device syz_tun left promiscuous mode [ 1658.125256][T31291] bridge98: port 1(syz_tun) entered disabled state 13:50:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x94b29bf6, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d006c00ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair(0x29, 0x800, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/82, 0x52}, 0x0) 13:50:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800080008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x9000000}, 0x0) 13:50:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x7ff, 0x2, 0x8, 0x7, 0x6}, 0x14) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1658.501428][T31317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800090008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1658.552761][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xa000000}, 0x0) 13:50:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d007400ba8000001201", 0x2e}], 0x1}, 0x0) [ 1658.607380][T31319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1658.683595][T31317] bridge37: port 1(batadv_slave_0) entered blocking state [ 1658.694526][T31317] bridge37: port 1(batadv_slave_0) entered disabled state [ 1658.719324][T31317] device batadv_slave_0 entered promiscuous mode [ 1658.750370][T31326] bridge98: port 1(syz_tun) entered blocking state [ 1658.768388][T31326] bridge98: port 1(syz_tun) entered disabled state 13:50:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) getsockopt(r0, 0x2, 0x401, &(0x7f0000000140)=""/200, &(0x7f0000000040)=0xc8) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1658.819157][T31326] device syz_tun entered promiscuous mode 13:50:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe000000}, 0x0) [ 1658.867115][T31329] bridge98: port 2(batadv_slave_0) entered blocking state [ 1658.881993][T31329] bridge98: port 2(batadv_slave_0) entered disabled state [ 1658.911617][T31329] device batadv_slave_0 entered promiscuous mode [ 1658.953182][T31325] device batadv_slave_0 left promiscuous mode [ 1658.963049][T31325] bridge37: port 1(batadv_slave_0) entered disabled state [ 1659.043913][T31319] device batadv_slave_0 left promiscuous mode [ 1659.054209][T31319] bridge98: port 2(batadv_slave_0) entered disabled state [ 1659.079515][T31319] device syz_tun left promiscuous mode [ 1659.106744][T31319] bridge98: port 1(syz_tun) entered disabled state [ 1659.197080][T31339] validate_nla: 29 callbacks suppressed [ 1659.197103][T31339] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1659.213626][T31341] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1659.225179][T31342] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1659.244276][T31339] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1659.267810][T31341] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf000000}, 0x0) 13:50:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000a0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d007a00ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000c0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x1f000000}, 0x0) [ 1659.568031][T31360] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1659.613868][T31359] bridge98: port 1(syz_tun) entered blocking state [ 1659.624631][T31359] bridge98: port 1(syz_tun) entered disabled state [ 1659.669908][T31359] device syz_tun entered promiscuous mode 13:50:31 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1659.713165][T31360] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1659.734256][T31366] bridge98: port 2(batadv_slave_0) entered blocking state [ 1659.750226][T31366] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x60000000}, 0x0) [ 1659.794638][T31366] device batadv_slave_0 entered promiscuous mode [ 1659.812132][T31371] bridge37: port 1(batadv_slave_0) entered blocking state [ 1659.828834][T31371] bridge37: port 1(batadv_slave_0) entered disabled state [ 1659.862785][T31371] device batadv_slave_0 entered promiscuous mode [ 1659.874436][T31372] device batadv_slave_0 left promiscuous mode [ 1659.881875][T31372] bridge98: port 2(batadv_slave_0) entered disabled state [ 1659.905827][T31372] device syz_tun left promiscuous mode [ 1659.928070][T31372] bridge98: port 1(syz_tun) entered disabled state [ 1660.000513][T31360] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1660.011305][T31375] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1660.034908][T31361] device batadv_slave_0 left promiscuous mode [ 1660.041171][T31361] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x9effffff}, 0x0) 13:50:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000003ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000e0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1660.176576][T31379] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 13:50:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe20e0000}, 0x0) 13:50:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800010008000f0008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000005ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf0ffffff}, 0x0) [ 1660.543617][T31401] __nla_validate_parse: 3 callbacks suppressed [ 1660.543639][T31401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1660.622670][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1660.673456][T31408] bridge98: port 1(syz_tun) entered blocking state [ 1660.683975][T31408] bridge98: port 1(syz_tun) entered disabled state 13:50:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800100008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1660.715864][T31408] device syz_tun entered promiscuous mode [ 1660.754214][T31401] bridge37: port 1(batadv_slave_0) entered blocking state 13:50:32 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb, 0xfffffffe, 0xffffffff, 0x1}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1660.781483][T31401] bridge37: port 1(batadv_slave_0) entered disabled state [ 1660.824746][T31401] device batadv_slave_0 entered promiscuous mode 13:50:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xfffff000}, 0x0) [ 1660.871287][T31402] bridge98: port 2(batadv_slave_0) entered blocking state [ 1660.885113][T31402] bridge98: port 2(batadv_slave_0) entered disabled state [ 1660.922757][T31402] device batadv_slave_0 entered promiscuous mode [ 1660.946857][T31404] device batadv_slave_0 left promiscuous mode [ 1660.955983][T31404] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xffffff7f}, 0x0) [ 1661.048598][T31413] device batadv_slave_0 left promiscuous mode [ 1661.056936][T31413] bridge98: port 2(batadv_slave_0) entered disabled state [ 1661.106730][T31413] device syz_tun left promiscuous mode [ 1661.128508][T31413] bridge98: port 1(syz_tun) entered disabled state 13:50:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800600008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xffffff9e}, 0x0) 13:50:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000b05ba8000001201", 0x2e}], 0x1}, 0x0) [ 1661.529120][T31438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800f00008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xfffffff0}, 0x0) [ 1661.605555][T31442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:33 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000adc81600ff018701ceb0139b3dc1ffe54600b1d1754b6b9d3d000000000000000000000014ff8b0ba91c8f70f6f0c80057617780c6e4090efff8b08dd2db526ae9b2f40fd23483f8b799408d429e"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1661.700417][T31438] bridge37: port 1(batadv_slave_0) entered blocking state [ 1661.717474][T31438] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000006ba8000001201", 0x2e}], 0x1}, 0x0) [ 1661.749830][T31438] device batadv_slave_0 entered promiscuous mode [ 1661.785102][T31449] bridge98: port 1(syz_tun) entered blocking state [ 1661.796723][T31449] bridge98: port 1(syz_tun) entered disabled state [ 1661.836712][T31449] device syz_tun entered promiscuous mode [ 1661.876647][T31444] device batadv_slave_0 left promiscuous mode [ 1661.883917][T31444] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:33 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x4000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) 13:50:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x200000000000}, 0x0) [ 1661.966146][T31442] bridge98: port 2(batadv_slave_0) entered blocking state [ 1661.979992][T31442] bridge98: port 2(batadv_slave_0) entered disabled state [ 1662.021450][T31442] device batadv_slave_0 entered promiscuous mode [ 1662.054946][T31452] device batadv_slave_0 left promiscuous mode [ 1662.064912][T31452] bridge98: port 2(batadv_slave_0) entered disabled state 13:50:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x4000000000000}, 0x0) [ 1662.100434][T31452] device syz_tun left promiscuous mode [ 1662.119906][T31452] bridge98: port 1(syz_tun) entered disabled state 13:50:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x4040802) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005dc0)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0xe}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x841) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r6 = socket(0x8, 0x800, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r6) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000007ba8000001201", 0x2e}], 0x1}, 0x0) [ 1662.271671][T31449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r9], 0x20}}, 0x0) 13:50:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf5ffffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800f40208000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x40030000000000}, 0x0) 13:50:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000009ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:34 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[@ANYBLOB="2c0000001600ff0187b5b70c0cf411ca9d3d150000004000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004014) recvmsg$kcm(r0, &(0x7f00000025c0)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x6, &(0x7f00000015c0)=""/4096, 0x1000}, 0x12042) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002700)={&(0x7f0000002600), 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x70, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x13, 0x1, 'batadv_slave_0\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x7, 0x1, 'eth'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x4008084) [ 1662.538744][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf0ffffffffffff}, 0x0) 13:50:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000308000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1662.633033][T31490] bridge37: port 1(batadv_slave_0) entered blocking state [ 1662.669643][T31490] bridge37: port 1(batadv_slave_0) entered disabled state [ 1662.701037][T31490] device batadv_slave_0 entered promiscuous mode [ 1662.742544][T31495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1662.770438][T31500] bridge99: port 1(syz_tun) entered blocking state [ 1662.786325][T31500] bridge99: port 1(syz_tun) entered disabled state 13:50:34 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x6dfca000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x390}) setsockopt$inet_opts(r1, 0x0, 0x740b8fc8b97a86c7, &(0x7f0000000140)="6872d527c77efda4b680ce14863be2a14b38635d9fc2f1fb5582e5f6cc8b39236e27816aba0c35df9f037e0a55115cb3afc7a466fab049c42ff724009eb166d750f125302276a20df744e60eb83f49cca9cd36acbeee8bf9b4d0609af1da42574a2063a8d991089da7b33c289ab9b7d80a0b715d82e7fa35c67435ef9939ed", 0x7f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1662.824011][T31500] device syz_tun entered promiscuous mode [ 1662.860113][T31494] device batadv_slave_0 left promiscuous mode 13:50:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x100000000000000}, 0x0) [ 1662.868225][T31494] bridge37: port 1(batadv_slave_0) entered disabled state [ 1662.957169][T31503] bridge99: port 2(batadv_slave_0) entered blocking state [ 1662.965950][T31503] bridge99: port 2(batadv_slave_0) entered disabled state [ 1662.987979][T31503] device batadv_slave_0 entered promiscuous mode [ 1663.030408][T31495] device batadv_slave_0 left promiscuous mode [ 1663.046764][T31495] bridge99: port 2(batadv_slave_0) entered disabled state 13:50:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x200000000000000}, 0x0) [ 1663.094169][T31495] device syz_tun left promiscuous mode [ 1663.099838][T31495] bridge99: port 1(syz_tun) entered disabled state 13:50:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) [ 1663.244697][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000508000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xf69bb294, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00050bba8000001201", 0x2e}], 0x1}, 0x0) 13:50:35 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="4746e9c65bc089268ab3af1f19", 0xd, 0x4, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x300000000000000}, 0x0) [ 1663.513596][T31536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000608000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x400000000000000}, 0x0) [ 1663.592628][T31544] bridge37: port 1(batadv_slave_0) entered blocking state [ 1663.599840][T31544] bridge37: port 1(batadv_slave_0) entered disabled state [ 1663.634190][T31544] device batadv_slave_0 entered promiscuous mode [ 1663.650689][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1663.677845][T31536] device batadv_slave_0 left promiscuous mode [ 1663.688862][T31536] bridge37: port 1(batadv_slave_0) entered disabled state [ 1663.792903][T31547] bridge100: port 1(syz_tun) entered blocking state [ 1663.799583][T31547] bridge100: port 1(syz_tun) entered disabled state 13:50:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00c611ba8000001201", 0x2e}], 0x1}, 0x0) [ 1663.856045][T31547] device syz_tun entered promiscuous mode 13:50:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x500000000000000}, 0x0) [ 1663.899127][T31546] bridge100: port 2(batadv_slave_0) entered blocking state [ 1663.909594][T31546] bridge100: port 2(batadv_slave_0) entered disabled state [ 1663.928217][T31546] device batadv_slave_0 entered promiscuous mode 13:50:35 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1663.958209][T31554] device batadv_slave_0 left promiscuous mode [ 1663.966984][T31554] bridge100: port 2(batadv_slave_0) entered disabled state [ 1663.995891][T31554] device syz_tun left promiscuous mode 13:50:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000708000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1664.017544][T31554] bridge100: port 1(syz_tun) entered disabled state 13:50:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00c711ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x600000000000000}, 0x0) 13:50:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000908000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:36 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1664.413976][T31580] validate_nla: 33 callbacks suppressed [ 1664.414000][T31580] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x700000000000000}, 0x0) [ 1664.461030][T31579] bridge37: port 1(batadv_slave_0) entered blocking state [ 1664.476490][T31579] bridge37: port 1(batadv_slave_0) entered disabled state [ 1664.508000][T31579] device batadv_slave_0 entered promiscuous mode [ 1664.527337][T31587] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1664.540770][T31588] device batadv_slave_0 left promiscuous mode [ 1664.552116][T31588] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:36 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000e, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x203}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x800000000000000}, 0x0) [ 1664.681140][T31589] bridge101: port 1(syz_tun) entered blocking state [ 1664.693083][T31589] bridge101: port 1(syz_tun) entered disabled state [ 1664.718612][T31589] device syz_tun entered promiscuous mode [ 1664.739751][T31580] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1664.767901][T31587] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000a08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1664.791652][T31582] bridge101: port 2(batadv_slave_0) entered blocking state [ 1664.804980][T31582] bridge101: port 2(batadv_slave_0) entered disabled state 13:50:36 executing program 2: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x3a21, 0x28) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f00000001c0)=""/89, 0x2a48}) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1f, 0x53, 0x1, 0x1, 0x2, 0x3e, 0x6, 0x327, 0x40, 0x15f, 0x7fff, 0x6, 0x38, 0x2, 0x5, 0x9, 0x3615}, [{0x5, 0x2, 0x7f, 0x1000, 0x13, 0x5b, 0x5, 0xffffffffffffffff}, {0x2, 0x20, 0xe09, 0x100000000, 0xfffffffffffffffc, 0x3, 0x7, 0x9}], "", [[], [], []]}, 0x3b0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00c811ba8000001201", 0x2e}], 0x1}, 0x0) [ 1664.837424][T31582] device batadv_slave_0 entered promiscuous mode [ 1664.870823][T31597] device batadv_slave_0 left promiscuous mode [ 1664.877595][T31597] bridge101: port 2(batadv_slave_0) entered disabled state 13:50:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x900000000000000}, 0x0) [ 1664.919145][T31597] device syz_tun left promiscuous mode [ 1664.967745][T31597] bridge101: port 1(syz_tun) entered disabled state [ 1665.070050][T31613] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000c08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1665.122929][T31613] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xffffa888, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xa00000000000000}, 0x0) 13:50:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:37 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2, 0x10}}}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "2f3df54c3107a44af0f7d8b9"}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x3c}}, 0x4000) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c1af909db7f5ba260d8ca4e2a96569e6530202f4098b8"], 0x1e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_getlink={0x5c, 0x12, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x1, 0x100}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_FD={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r2, &(0x7f0000000140), 0x0, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000014c0)='team\x00', r4) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000003c0)={{r5}, "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"}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xf8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf37c}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) [ 1665.189051][T31613] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1665.227226][T31618] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 13:50:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00c911ba8000001201", 0x2e}], 0x1}, 0x0) 13:50:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000e08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe00000000000000}, 0x0) [ 1665.417974][T31627] bridge37: port 1(batadv_slave_0) entered blocking state [ 1665.440090][T31627] bridge37: port 1(batadv_slave_0) entered disabled state [ 1665.461332][T31627] device batadv_slave_0 entered promiscuous mode [ 1665.507393][T31633] device batadv_slave_0 left promiscuous mode [ 1665.514436][T31633] bridge37: port 1(batadv_slave_0) entered disabled state [ 1665.583167][T31635] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1665.597844][T31636] bridge101: port 1(syz_tun) entered blocking state [ 1665.615914][T31636] bridge101: port 1(syz_tun) entered disabled state 13:50:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf00000000000000}, 0x0) [ 1665.660074][T31636] device syz_tun entered promiscuous mode 13:50:37 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x1}}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) close(r1) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000040)=0x7f) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1665.704592][T31630] bridge101: port 2(batadv_slave_0) entered blocking state [ 1665.717353][T31630] bridge101: port 2(batadv_slave_0) entered disabled state [ 1665.745261][T31630] device batadv_slave_0 entered promiscuous mode [ 1665.769986][T31640] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1665.785843][T31646] device batadv_slave_0 left promiscuous mode 13:50:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000f08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1665.795904][T31646] bridge101: port 2(batadv_slave_0) entered disabled state [ 1665.823651][T31646] device syz_tun left promiscuous mode [ 1665.838067][T31646] bridge101: port 1(syz_tun) entered disabled state 13:50:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x1f00000000000000}, 0x0) 13:50:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00001fba8000001201", 0x2e}], 0x1}, 0x0) 13:50:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800655808000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:38 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001900)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}]}, 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 13:50:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x6000000000000000}, 0x0) 13:50:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000020ba8000001201", 0x2e}], 0x1}, 0x0) [ 1666.281576][T31670] __nla_validate_parse: 5 callbacks suppressed [ 1666.281596][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1666.359935][T31671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1666.412732][T31676] bridge101: port 1(syz_tun) entered blocking state [ 1666.419401][T31676] bridge101: port 1(syz_tun) entered disabled state 13:50:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800006008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 13:50:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x9effffff00000000}, 0x0) 13:50:38 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d0000000098aa1f4599d36004e09f1567190000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x4001) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x801) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) [ 1666.464102][T31676] device syz_tun entered promiscuous mode [ 1666.504099][T31677] bridge37: port 1(batadv_slave_0) entered blocking state [ 1666.513851][T31677] bridge37: port 1(batadv_slave_0) entered disabled state [ 1666.569297][T31677] device batadv_slave_0 entered promiscuous mode [ 1666.607278][T31670] bridge101: port 2(batadv_slave_0) entered blocking state [ 1666.620887][T31670] bridge101: port 2(batadv_slave_0) entered disabled state [ 1666.655060][T31670] device batadv_slave_0 entered promiscuous mode 13:50:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xe20e000000000000}, 0x0) [ 1666.674016][T31671] device batadv_slave_0 left promiscuous mode [ 1666.683079][T31671] bridge37: port 1(batadv_slave_0) entered disabled state [ 1666.757256][T31686] device batadv_slave_0 left promiscuous mode [ 1666.767742][T31686] bridge101: port 2(batadv_slave_0) entered disabled state [ 1666.821318][T31686] device syz_tun left promiscuous mode [ 1666.844204][T31686] bridge101: port 1(syz_tun) entered disabled state 13:50:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xf0ffffff00000000}, 0x0) 13:50:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800586508000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1666.996322][T31676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1667.073373][T31670] bridge101: port 1(syz_tun) entered blocking state [ 1667.081392][T31670] bridge101: port 1(syz_tun) entered disabled state [ 1667.105100][T31670] device syz_tun entered promiscuous mode [ 1667.123550][T31706] bridge101: port 2(batadv_slave_0) entered blocking state [ 1667.136677][T31706] bridge101: port 2(batadv_slave_0) entered disabled state [ 1667.176640][T31706] device batadv_slave_0 entered promiscuous mode [ 1667.214235][T31686] device batadv_slave_0 left promiscuous mode [ 1667.220711][T31686] bridge101: port 2(batadv_slave_0) entered disabled state [ 1667.239246][T31686] device syz_tun left promiscuous mode [ 1667.245440][T31686] bridge101: port 1(syz_tun) entered disabled state 13:50:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:39 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c4080000650000042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8c4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)={0x424, 0x29, 0x8, 0x70bd2d, 0x25dfdbfc, {0x1d}, [@nested={0x1a4, 0x8, 0x0, 0x1, [@generic="082432ebc942ba5a2f1839f776aeb70ec80ac2a9b391f35d624a8c4445db2eb87bca51887174a12c7c2f7088a623474aaaaf7bd854acd850c41ff979f68886faad1fe0dad5f3a27bca154ced219c6e9388c66eb6a5644fb7efc2eb367b63d186f6e4c247aca3dad50bdcd2", @generic="a6688727190ca130f88fc6726f835261878f1c0116c72f38a8b89f6b46b254e4951f58b426e0821e4f62b94b1044895b2377f7ae5c3a9b9ce3810f0d6f39d3991d2a2b136715ce9019d791b2bdb18623d73f519427710781a798c513c2da052d04c46569d2d4c15e1f6d2860a051ce8bf3b6cbf52e63d23e618ed33c05b7ff6d427c4f877f89b8d7bdf1bdcbdfc30ec16fa77870f273da41423e6171bb65e739d473ea7e6750aa705a9640c5fb3ab5eca7c11a936f", @generic="e158550e402384197dcc22cc4b4f49a3cc62dadfc8200ee5ce32865448796690042c2c84f5808d7879ac8c0644a630ba6bb1d536637257a0bb416ab78452719577d3fb18fc0fb29aa2f595396c62fd628c8c9475b8776512a22b367cc6e4a17d9c42422cd254d63762d58fb0fe249a724eb990faa184f19bf7b0a63c814628d2"]}, @nested={0x60, 0x2b, 0x0, 0x1, [@generic="e2827998294a4b3b0aa6fab03f64acff5bb1357c3e43a716c46ccc65b723921fefd5c307e94a1b2dff6760452eb54c6211c0590a82bb4247569aa563be81afa74c9597875120961a56ab95318b74121d01079746283f97f4b283ec8b"]}, @nested={0x201, 0x2f, 0x0, 0x1, [@typed={0x4, 0x84}, @generic="b1b00fcabc2c0953b0af254c37d9801cb9091b39905c32e90c5789a780239b053e5d40cf3e85451f547ce3e1", @typed={0x8, 0x7d, 0x0, 0x0, @u32=0x1}, @generic="200fae844b2d6038e365f2da1e885c42ebe0521dc0e7c2ded79e8f08bc04fd5f9bad5c4cdbb2541a9179cd60623ca6c8dd5d3210f46f8bd3173ded19cedce7c320602f7f7615f227ab788a6e14b9f5c176ed3a816819d60e00bc578574fc7a9cf1b10f82d858714e2f5440fcefadc7fa784bfbe867cdebc257988e62732ffd6f119486b8fa5595ce806123135593ffcba37a129c111bbb4b433017a795c15969b373d5c144f38ae0ae1bdf29f8e6f01e178ac23d2079fedd275cd545067cc97e3031743888cc89ece0df1e47cf1347d4734de27da63d2e8e6b6b", @generic="2a033747c39808919ac24833f0dac923696a8ee50aadb7ce324318c6875db5ee9f473e2a17e2ce0038109c7e42805560c549e2c6c7d0c818bbdcffb8c5bd47e95eace15b68ac75e90b360b82a4016ae784250c4569dfe2a1232cbaaa96a6fae557bd34415709bf163915bb8d83efc34f314f3f63dca29a36fb6864bd234b858610c8a75c18e3d0bbd47cd3718d48ebfa2d73dfaf93dc46fe9e3d13cbcc968328c1029d32db218b9866f18634a5511e5c15b3ee0b08452df57c9bbea1ffb3f1d29ca51b802efd692b73789dcdbdc840f1e1fc6310ae241525f1f3e692e4971d6da0fcb58ae4f07a61b398ee"]}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@multicast2}]}, 0x424}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 13:50:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d00003fba8000001201", 0x2e}], 0x1}, 0x0) 13:50:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xffffff7f00000000}, 0x0) 13:50:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="006ee0000000200008000a00", @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000101210000000000000000008486", @ANYRES32=r10], 0x20}}, 0x0) 13:50:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800008108000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1667.510912][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:50:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0xfffffffffffff000}, 0x0) [ 1667.575753][T31729] bridge37: port 1(batadv_slave_0) entered blocking state 13:50:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000040ba8000001201", 0x2e}], 0x1}, 0x0) [ 1667.622895][T31729] bridge37: port 1(batadv_slave_0) entered disabled state [ 1667.675251][T31729] device batadv_slave_0 entered promiscuous mode [ 1667.716550][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:50:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100080000f008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) [ 1667.785389][T31734] bridge101: port 1(syz_tun) entered blocking state [ 1667.800427][T31734] bridge101: port 1(syz_tun) entered disabled state 13:50:39 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001900)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff018711ce9d3d000000000000000000000014000a"], 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x1000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x7ffffffb}, 0x10) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1040) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000040)={{r4}, {@val, @max='max'}}) [ 1667.855261][T31734] device syz_tun entered promiscuous mode 13:50:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x2}, 0x0) [ 1667.895767][T31723] device batadv_slave_0 left promiscuous mode [ 1667.903876][T31723] bridge37: port 1(batadv_slave_0) entered disabled state 13:50:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x105, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x3}, 0x0) [ 1668.026114][T31735] bridge101: port 2(batadv_slave_0) entered blocking state [ 1668.039025][T31735] bridge101: port 2(batadv_slave_0) entered disabled state [ 1668.077075][T31735] device batadv_slave_0 entered promiscuous mode [ 1668.117224][T31738] device batadv_slave_0 left promiscuous mode [ 1668.125057][T31738] bridge101: port 2(batadv_slave_0) entered disabled state [ 1668.153020][T31738] device syz_tun left promiscuous mode [ 1668.160786][T31738] bridge101: port 1(syz_tun) entered disabled state [ 1668.257539][T31747] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1668.269306][T31747] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1668.277736][T31747] CPU: 1 PID: 31747 Comm: syz-executor.2 Not tainted 5.12.0-rc4-syzkaller #0 [ 1668.286522][T31747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.296604][T31747] RIP: 0010:nl802154_del_llsec_key+0x16d/0x320 [ 1668.303288][T31747] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ab 01 00 00 48 8b 93 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 16 [ 1668.322923][T31747] RSP: 0018:ffffc9001664f528 EFLAGS: 00010246 [ 1668.329013][T31747] RAX: dffffc0000000000 RBX: ffff88802796f000 RCX: 0000000000000000 [ 1668.337115][T31747] RDX: 0000000000000000 RSI: ffffffff88945457 RDI: ffff88802796f128 [ 1668.345097][T31747] RBP: 1ffff92002cc9ea6 R08: 0000000000000000 R09: ffff888065d3856b [ 1668.353097][T31747] R10: ffffffff8738fd6a R11: 0000000000000000 R12: ffff88801b4e4000 [ 1668.361083][T31747] R13: ffff888065d38c10 R14: ffffc9001664f8b0 R15: 0000000000000000 [ 1668.369072][T31747] FS: 00007f0dedeef700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1668.378021][T31747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.384611][T31747] CR2: 0000001b32c21000 CR3: 000000002ad3b000 CR4: 00000000001506e0 [ 1668.393129][T31747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1668.401106][T31747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.409088][T31747] Call Trace: [ 1668.412372][T31747] ? nl802154_add_llsec_devkey+0x3d0/0x3d0 [ 1668.418191][T31747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.425060][T31747] ? nl802154_pre_doit+0xf8/0xd30 [ 1668.430117][T31747] ? __nla_parse+0x3d/0x50 [ 1668.434648][T31747] ? nl802154_get_llsec_params+0x390/0x390 [ 1668.440466][T31747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.446735][T31747] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1668.454133][T31747] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1668.461431][T31747] genl_family_rcv_msg_doit+0x228/0x320 [ 1668.466988][T31747] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1668.474372][T31747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.480621][T31747] ? ns_capable+0xde/0x100 [ 1668.485104][T31747] genl_rcv_msg+0x328/0x580 [ 1668.489636][T31747] ? genl_get_cmd+0x480/0x480 [ 1668.494319][T31747] ? nl802154_add_llsec_devkey+0x3d0/0x3d0 [ 1668.500136][T31747] ? lock_release+0x720/0x720 [ 1668.504827][T31747] netlink_rcv_skb+0x153/0x420 [ 1668.509689][T31747] ? genl_get_cmd+0x480/0x480 [ 1668.514379][T31747] ? netlink_ack+0xaa0/0xaa0 [ 1668.518985][T31747] genl_rcv+0x24/0x40 [ 1668.522972][T31747] netlink_unicast+0x533/0x7d0 [ 1668.527745][T31747] ? netlink_attachskb+0x870/0x870 [ 1668.532861][T31747] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.539110][T31747] ? __phys_addr_symbol+0x2c/0x70 [ 1668.544142][T31747] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1668.549868][T31747] ? __check_object_size+0x171/0x3f0 [ 1668.555767][T31747] netlink_sendmsg+0x856/0xd90 [ 1668.560538][T31747] ? netlink_unicast+0x7d0/0x7d0 [ 1668.565513][T31747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.571760][T31747] ? netlink_unicast+0x7d0/0x7d0 [ 1668.576725][T31747] sock_sendmsg+0xcf/0x120 [ 1668.581149][T31747] ____sys_sendmsg+0x6e8/0x810 [ 1668.585921][T31747] ? kernel_sendmsg+0x50/0x50 [ 1668.590628][T31747] ? do_recvmmsg+0x6d0/0x6d0 [ 1668.595248][T31747] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.601247][T31747] ? stack_trace_consume_entry+0x160/0x160 [ 1668.607064][T31747] ___sys_sendmsg+0xf3/0x170 [ 1668.611664][T31747] ? sendmsg_copy_msghdr+0x160/0x160 [ 1668.616978][T31747] ? __fget_files+0x266/0x3d0 [ 1668.621662][T31747] ? lock_downgrade+0x6e0/0x6e0 [ 1668.626521][T31747] ? __fget_files+0x288/0x3d0 [ 1668.631204][T31747] ? __fget_light+0xea/0x280 [ 1668.635799][T31747] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.642050][T31747] __sys_sendmsg+0xe5/0x1b0 [ 1668.646568][T31747] ? __sys_sendmsg_sock+0x30/0x30 [ 1668.651602][T31747] ? syscall_enter_from_user_mode+0x27/0x70 [ 1668.657521][T31747] do_syscall_64+0x2d/0x70 [ 1668.661946][T31747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.667850][T31747] RIP: 0033:0x466459 [ 1668.671759][T31747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.691386][T31747] RSP: 002b:00007f0dedeef188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1668.699811][T31747] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1668.707788][T31747] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000005 [ 1668.715782][T31747] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1668.723753][T31747] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1668.731740][T31747] R13: 00007ffd5e7c72ef R14: 00007f0dedeef300 R15: 0000000000022000 [ 1668.740155][T31747] Modules linked in: [ 1668.748203][T31747] ---[ end trace 194e86593ba2e320 ]--- [ 1668.754260][T31747] RIP: 0010:nl802154_del_llsec_key+0x16d/0x320 [ 1668.755524][ T3231] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.761407][T31747] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ab 01 00 00 48 8b 93 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 16 [ 1668.786784][ T3231] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.822386][T31747] RSP: 0018:ffffc9001664f528 EFLAGS: 00010246 [ 1668.829122][T31747] RAX: dffffc0000000000 RBX: ffff88802796f000 RCX: 0000000000000000 [ 1668.837669][T31747] RDX: 0000000000000000 RSI: ffffffff88945457 RDI: ffff88802796f128 [ 1668.846344][T31747] RBP: 1ffff92002cc9ea6 R08: 0000000000000000 R09: ffff888065d3856b [ 1668.857092][T31747] R10: ffffffff8738fd6a R11: 0000000000000000 R12: ffff88801b4e4000 [ 1668.868108][T31747] R13: ffff888065d38c10 R14: ffffc9001664f8b0 R15: 0000000000000000 [ 1668.876835][T31747] FS: 00007f0dedeef700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1668.896209][T31747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1668.903874][T31747] CR2: 00007f27cf84b718 CR3: 000000002ad3b000 CR4: 00000000001506e0 [ 1668.911842][T31747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1668.922713][T31747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1668.930815][T31747] Kernel panic - not syncing: Fatal exception [ 1668.937297][T31747] Kernel Offset: disabled [ 1668.941623][T31747] Rebooting in 86400 seconds..