[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.


Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts.
2020/06/27 10:34:09 fuzzer started
2020/06/27 10:34:09 dialing manager at 10.128.0.26:44531
2020/06/27 10:34:09 syscalls: 1429
2020/06/27 10:34:09 code coverage: enabled
2020/06/27 10:34:09 comparison tracing: enabled
2020/06/27 10:34:09 extra coverage: enabled
2020/06/27 10:34:09 setuid sandbox: enabled
2020/06/27 10:34:09 namespace sandbox: enabled
2020/06/27 10:34:09 Android sandbox: /sys/fs/selinux/policy does not exist
2020/06/27 10:34:09 fault injection: enabled
2020/06/27 10:34:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/06/27 10:34:09 net packet injection: enabled
2020/06/27 10:34:09 net device setup: enabled
2020/06/27 10:34:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/06/27 10:34:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/06/27 10:34:09 USB emulation: enabled
10:35:39 executing program 0:

syzkaller login: [  146.418933][ T6796] IPVS: ftp: loaded support on port[0] = 21
10:35:39 executing program 1:

[  146.560408][ T6796] chnl_net:caif_netlink_parms(): no params data found
[  146.630177][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.639420][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.648792][ T6796] device bridge_slave_0 entered promiscuous mode
[  146.658745][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.666743][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.674736][ T6796] device bridge_slave_1 entered promiscuous mode
[  146.700376][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.712499][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.741741][ T6796] team0: Port device team_slave_0 added
[  146.754220][ T6796] team0: Port device team_slave_1 added
[  146.776508][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.783682][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.810587][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.824717][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.832384][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.874073][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
10:35:40 executing program 2:

[  146.905728][ T6950] IPVS: ftp: loaded support on port[0] = 21
[  146.999804][ T6796] device hsr_slave_0 entered promiscuous mode
[  147.065888][ T6796] device hsr_slave_1 entered promiscuous mode
[  147.220798][ T6962] IPVS: ftp: loaded support on port[0] = 21
10:35:40 executing program 3:

[  147.376971][ T6950] chnl_net:caif_netlink_parms(): no params data found
[  147.480675][ T6796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  147.538033][ T6796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  147.608413][ T6796] netdevsim netdevsim0 netdevsim2: renamed from eth2
10:35:40 executing program 4:

[  147.704999][ T6796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  147.722862][ T7145] IPVS: ftp: loaded support on port[0] = 21
[  147.888926][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.896123][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.904217][ T6950] device bridge_slave_0 entered promiscuous mode
[  147.945165][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.952249][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.976160][ T6950] device bridge_slave_1 entered promiscuous mode
[  147.989720][ T6962] chnl_net:caif_netlink_parms(): no params data found
[  148.068293][ T7246] IPVS: ftp: loaded support on port[0] = 21
[  148.105910][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
10:35:41 executing program 5:

[  148.144294][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.241291][ T6796] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.279416][ T6950] team0: Port device team_slave_0 added
[  148.346731][ T6950] team0: Port device team_slave_1 added
[  148.394643][ T6796] 8021q: adding VLAN 0 to HW filter on device team0
[  148.430476][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.439156][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.452808][ T7145] chnl_net:caif_netlink_parms(): no params data found
[  148.467467][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.474532][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.486237][ T6962] device bridge_slave_0 entered promiscuous mode
[  148.502694][ T7392] IPVS: ftp: loaded support on port[0] = 21
[  148.509326][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.518257][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.545666][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.582386][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.592000][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.601056][ T6962] device bridge_slave_1 entered promiscuous mode
[  148.627241][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.634269][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.662592][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.687877][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  148.698228][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  148.707619][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.714781][ T2498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.725977][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  148.734398][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.746246][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.753276][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.765321][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  148.780918][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.800955][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.825321][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  148.837227][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  148.868027][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.877770][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.887724][ T7145] device bridge_slave_0 entered promiscuous mode
[  148.900203][ T7145] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.908318][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.918292][ T7145] device bridge_slave_1 entered promiscuous mode
[  148.999426][ T6950] device hsr_slave_0 entered promiscuous mode
[  149.048253][ T6950] device hsr_slave_1 entered promiscuous mode
[  149.085051][ T6950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.092821][ T6950] Cannot create hsr debugfs directory
[  149.106412][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.119211][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.162087][ T6962] team0: Port device team_slave_0 added
[  149.176937][ T7246] chnl_net:caif_netlink_parms(): no params data found
[  149.200699][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.209354][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.218522][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.239958][ T6962] team0: Port device team_slave_1 added
[  149.249879][ T7145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.261674][ T7145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.354297][ T7392] chnl_net:caif_netlink_parms(): no params data found
[  149.392216][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.399919][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.426297][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.442809][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.452179][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.467474][ T6796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.479814][ T6796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.488287][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.495681][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.522196][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.536548][ T7145] team0: Port device team_slave_0 added
[  149.550693][ T7145] team0: Port device team_slave_1 added
[  149.570761][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.579169][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.619495][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.627519][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.654566][ T7145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.718968][ T6962] device hsr_slave_0 entered promiscuous mode
[  149.775632][ T6962] device hsr_slave_1 entered promiscuous mode
[  149.835024][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.842754][ T6962] Cannot create hsr debugfs directory
[  149.857852][ T7145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.865107][ T7145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.892126][ T7145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.968409][ T7145] device hsr_slave_0 entered promiscuous mode
[  150.025807][ T7145] device hsr_slave_1 entered promiscuous mode
[  150.085048][ T7145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.092594][ T7145] Cannot create hsr debugfs directory
[  150.138965][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.149026][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.158158][ T7246] device bridge_slave_0 entered promiscuous mode
[  150.170179][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.177461][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.186320][ T7246] device bridge_slave_1 entered promiscuous mode
[  150.217691][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.229470][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.242220][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.323739][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.350712][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.359517][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.368998][ T7392] device bridge_slave_0 entered promiscuous mode
[  150.390320][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.432548][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.444210][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.459694][ T7392] device bridge_slave_1 entered promiscuous mode
[  150.532346][ T7246] team0: Port device team_slave_0 added
[  150.546996][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.558425][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.593220][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.607922][ T7246] team0: Port device team_slave_1 added
[  150.637044][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.703670][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.717342][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.743599][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.762496][ T6796] device veth0_vlan entered promiscuous mode
[  150.773960][ T7392] team0: Port device team_slave_0 added
[  150.783931][ T6950] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.818759][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.828258][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.837399][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.844436][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.872193][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.948307][ T7246] device hsr_slave_0 entered promiscuous mode
[  150.987822][ T7246] device hsr_slave_1 entered promiscuous mode
[  151.014979][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.022536][ T7246] Cannot create hsr debugfs directory
[  151.033237][ T7392] team0: Port device team_slave_1 added
[  151.039243][ T6950] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  151.106732][ T6950] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  151.162572][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.170301][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.186352][ T6796] device veth1_vlan entered promiscuous mode
[  151.218995][ T6950] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.269480][ T7145] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  151.321944][ T7145] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  151.381547][ T7145] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  151.428026][ T7145] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.465873][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.472871][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.500061][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.545450][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.552401][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.579891][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.629612][ T6962] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.667399][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.675966][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.709171][ T6796] device veth0_macvtap entered promiscuous mode
[  151.717071][ T6962] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.819686][ T7392] device hsr_slave_0 entered promiscuous mode
[  151.876247][ T7392] device hsr_slave_1 entered promiscuous mode
[  151.924964][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.932529][ T7392] Cannot create hsr debugfs directory
[  151.957403][ T6962] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  152.014394][ T6962] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  152.080256][ T6796] device veth1_macvtap entered promiscuous mode
[  152.168738][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.182113][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.250058][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.263965][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.278230][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.287311][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.303149][ T6796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.332868][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.342981][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.363599][ T6950] 8021q: adding VLAN 0 to HW filter on device team0
[  152.392148][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  152.402902][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  152.425396][ T7145] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.500547][ T7392] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  152.561843][ T7392] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  152.605493][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  152.614499][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  152.623220][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.630353][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.638168][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  152.647403][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  152.658332][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.665538][ T2515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.673096][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  152.773140][ T7392] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  152.836830][ T7392] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  152.881306][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  152.962640][ T7145] 8021q: adding VLAN 0 to HW filter on device team0
[  152.977824][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
10:35:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000480))
sendfile(r2, r0, 0x0, 0x7fffffff)
recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x4f}, 0x3f00)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r8 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x70, r7, 0x8, 0x70bd2d, 0x8064, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b)
r9 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, r9, 0x0)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd8, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x300000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0xbb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[  153.004343][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.014041][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.032482][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.042559][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.069610][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  153.173027][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.200881][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.230694][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.279212][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.312772][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.344347][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.351624][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.391687][ T6950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.427125][ T6950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.480214][ T7246] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  153.557387][ T7246] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  153.984969][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.014544][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.025712][   T29] audit: type=1800 audit(1593254147.275:2): pid=8046 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_user" dev="sda1" ino=15736 res=0
[  154.035991][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.065682][   T29] audit: type=1800 audit(1593254147.275:3): pid=8051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15737 res=0
[  154.073062][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.106830][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.121276][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.131858][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.147552][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.154707][ T2509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.174124][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.239861][ T6962] 8021q: adding VLAN 0 to HW filter on device team0
[  154.263933][ T7246] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  154.408137][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  154.421038][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.439116][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.448531][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.497603][ T7246] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  154.717700][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.728082][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.738246][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.748162][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.757272][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.765365][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.772878][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.782476][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.791533][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.798690][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.806729][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.816008][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.824913][ T2473] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.832064][ T2473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.850934][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.097518][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.105503][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.113306][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.122438][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.131869][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.166129][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.180544][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.193057][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.223715][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.233171][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.243131][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.253465][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.262735][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.272822][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.282589][ T7145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.312504][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.324045][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.334189][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.343481][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.352530][ T2515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.368435][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.424658][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.424791][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.440527][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.450088][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.463509][ T6950] device veth0_vlan entered promiscuous mode
[  155.485664][ T6950] device veth1_vlan entered promiscuous mode
[  155.496690][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.504415][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.513719][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.522032][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.538757][ T7145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.556624][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.588473][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.644101][ T7392] 8021q: adding VLAN 0 to HW filter on device team0
[  155.674622][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.682357][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.694032][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  155.703481][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  155.712308][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.721267][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.730262][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  155.739279][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  155.749957][ T6950] device veth0_macvtap entered promiscuous mode
[  155.796898][ T7145] device veth0_vlan entered promiscuous mode
[  155.803454][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  155.811691][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.821160][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.831117][ T2473] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.838236][ T2473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.846953][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.855764][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.884461][ T7145] device veth1_vlan entered promiscuous mode
[  155.901818][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.910814][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  155.919505][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  155.927924][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  155.937144][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.946982][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.956077][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.963134][ T2509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.971388][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  155.980343][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  155.988995][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.999136][ T6950] device veth1_macvtap entered promiscuous mode
[  156.031952][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.039914][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.048593][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.057402][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.065769][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.089459][ T6962] device veth0_vlan entered promiscuous mode
[  156.103988][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.116347][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.130112][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.140111][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.149617][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.158803][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.168359][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.177274][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.202495][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.219464][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.238980][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  156.254435][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.267345][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.277314][ T6962] device veth1_vlan entered promiscuous mode
[  156.294090][ T7145] device veth0_macvtap entered promiscuous mode
[  156.306950][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.315826][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.324404][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.334194][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.343203][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.355638][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  156.368420][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.380157][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.393997][ T7145] device veth1_macvtap entered promiscuous mode
[  156.424290][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.437329][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.447950][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.460687][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
10:35:49 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x19404, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x453, 0xc, 0x70bd27, 0x25dfdbff, "4bca5458fcf990d6", [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

10:35:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @local, 0xff}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="39a10b", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

[  156.599797][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  156.611096][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.622174][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  156.653530][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.667861][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.679715][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.689526][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.698052][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.714737][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  156.727343][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.753381][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.815070][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.823601][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.861006][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  156.873152][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.886630][ T7145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
10:35:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x10}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd86dac9, 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @local, 0xff}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="39a10b", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b)

[  156.904340][ T7145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.926947][ T7145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.941091][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  157.008593][ T6962] device veth0_macvtap entered promiscuous mode
[  157.036965][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.042185][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  157.062279][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
10:35:50 executing program 1:
r0 = socket(0x1, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x100}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0xc5}, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8801)
recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100ffe1000000ec00000000000000"], 0x18}}], 0x1, 0x400c894)
recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0)

10:35:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3f, 0x4, 0x5, 0x9, 0x8, [{0x7, 0x8, 0x7f, [], 0x1000}, {0x9, 0x8, 0x10000, [], 0x9c96798aedae6de0}, {0x100000001, 0x2f6, 0x1b97, [], 0x200}, {0x3ff, 0x0, 0x1, [], 0x884}, {0xffff, 0x0, 0x0, [], 0x400}, {0x9, 0x8, 0x63988000000000, [], 0x3001}, {0x8, 0x93c, 0x5, [], 0x400}, {0x0, 0x9, 0x5de7, [], 0x4}]})
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000"], 0x1}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f00000000c0)={0x62}, 0x0, 0x0, 0x0, 0x0)
sendfile(r3, r2, 0x0, 0x100000001)

[  157.102909][ T2498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.159846][ T6962] device veth1_macvtap entered promiscuous mode
[  157.355036][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  157.366412][   T29] audit: type=1804 audit(1593254150.605:4): pid=8128 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir390990826/syzkaller.yHMckS/5/cgroup.controllers" dev="sda1" ino=15744 res=1
[  157.405577][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.424545][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  157.451750][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.468344][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  157.488090][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.521346][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0
10:35:50 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000002e000500000000002300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000010000c000100666c6f776572000004000200"], 0x34}}, 0x10)
r1 = socket(0x10, 0x80802, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001000090868fe07002b00000063000a0020000000450200070300001404001a00120002000e0001000a000300"/57, 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x90000020}, 0xc, &(0x7f0000001a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="6800004f0a09c091e0f7aa15000002050000000000000000200a000008060007400003000008000b007369700008000d4000fc0000100003800c0002800500018006000000140002800600034000020000060062df178cda8991b709400000000808000b007369700008000440000000062d9cd7a0131ff4f330078dfbde188b"], 0x68}, 0x1, 0x0, 0x0, 0x4820}, 0x40000)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0xff, @private=0xa010101, 0x4e22, 0x4, 'sed\x00', 0x24, 0x4, 0x64}, 0x2c)
r3 = socket(0xf, 0x80802, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001000090868fe07002b00000063000a0020000000450200070300001404001a00120002000e0001000a000300"/57, 0x39}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x20c, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400001104ac8ad007f5795c5185b4394e4ef0167fd9b43fe2ed8f0330076a7981fd44d7cbdcf00fa9d8b6f0ae7a76bed24a2b0e05bb8334d38ba1d2c8e7e126c508edf518ee28ddf385d5d5d2ccee30d587"], 0x28}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000103783c250ec8500e435000d07000c7f05545a608389eb65e5a83258fa8091c89b699252df440d397a934fe357642ca729c0b03ede105f4b41d1ad0f38d320f912257abf05bf3ed31eda23cb2196590190618fe06993a2a5f4fdc9f6782b01d61f8ede181e883afbea2fabcd66d8936877eb1de5f1e33f0301000000760528a8b110062cdb5fe8aa3201cf", @ANYRES32=r6, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000f79904fdca84a8de445ef454457a0b7761ae26b0ffffa6409b17e7149a2b000e91a052f72958eba664acb752139f0e261687945cb60128c67ca8"], 0x3c}}, 0x0)
r7 = getpid()
syz_open_procfs$namespace(r7, 0xfffffffffffffffd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x140, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0xb0, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf754, 0x429910af}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffaf55, 0x39e3e285}}, @IFLA_VF_RATE={0x10}, @IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0x1ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @broadcast}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xb75}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x81}, @IFLA_BROADCAST={0xa}]}, 0x140}}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0xe8, 0x0, 0x0, 0x301, 0x70bd25, 0x25dfdbfb, {0xc, 0x0, 0x5}, [@generic, @generic="6e178ab5dde968f851d26f126f79416ac1224c12b95159941787e6efd050423d1766c6120c288e8ca5f7e5bfe221980b01d89fca8c983d77ab0494b7d3a1d3663ec4691728e6e72189a96cd6104a46408d64fba877c2783e1f31a18a529fbcfb1f246cffbda7f5755771663f81166e7f0133459db0", @generic="7e3d816319d8b6dd5021166fad016ff1f3720f3db1be4609e732f7a079efb29d865454e31bf4b6425fe1939cf7cb6264cd33e316e0f39821ccdd174f3ba7fbc8d99e452d8aeff00fd57b04764bfa5eb167d4302ba8326e6515dc469539fc6a"]}, 0xe8}}, 0x8000)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4020001}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x220, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f9da526}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x14bd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xda03}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x19}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x88}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x300000000000}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000080}, 0x801)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x25be, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

[  157.628511][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.646778][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.670346][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.685697][ T8128] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  157.711132][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.720311][ T8128] File: /root/syzkaller-testdir390990826/syzkaller.yHMckS/5/cgroup.controllers PID: 8128 Comm: syz-executor.0
10:35:51 executing program 1:
r0 = socket(0x1, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x100}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0xc5}, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x400c894)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8801)
recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100ffe1000000ec00000000000000"], 0x18}}], 0x1, 0x400c894)
recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0)

[  157.746329][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.808473][ T8140] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  157.829334][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  157.847258][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.885350][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.916556][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  157.937923][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.958650][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  157.972451][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.989939][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  158.003909][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.017432][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.030138][ T7392] device veth0_vlan entered promiscuous mode
[  158.055512][ T8140] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.074255][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.085875][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.112603][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.125296][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.153210][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.181851][ T7392] device veth1_vlan entered promiscuous mode
[  158.274804][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.283049][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  158.301242][ T2473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  158.318462][ T7246] 8021q: adding VLAN 0 to HW filter on device team0
[  158.447025][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  158.455345][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  158.463807][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  158.472368][ T2484] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.479491][ T2484] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.488867][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
10:35:51 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @local}, 0x1c)
r1 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xed}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x48, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x8801)
r4 = socket$inet(0x2, 0x1, 0x1000)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
splice(r5, 0x0, r6, 0x0, 0x19404, 0x0)
openat$cgroup(r5, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
getsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000)

10:35:51 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612239c24a0000", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0)
pipe(&(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)

[  158.553722][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.575419][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.594777][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.601840][ T2519] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.624809][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.645568][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.665196][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.801264][ T7392] device veth0_macvtap entered promiscuous mode
[  158.811983][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  158.828222][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.855398][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.864320][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.888323][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.926868][ T7392] device veth1_macvtap entered promiscuous mode
[  158.936541][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.949374][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.974158][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.982880][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.991335][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  159.000368][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.012559][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  159.053164][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.072877][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.083904][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.103758][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.121385][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.141424][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.151768][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.162747][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.174281][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.186459][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.195348][ T2509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.210445][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  159.220970][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.231524][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  159.243049][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.253006][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  159.263515][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.273375][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  159.283880][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.296440][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.310466][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.319667][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.328580][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.336123][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.355348][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.543486][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.573120][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.602537][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.612020][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.622874][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.633104][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.645395][ T7246] device veth0_vlan entered promiscuous mode
[  159.663615][ T7246] device veth1_vlan entered promiscuous mode
[  159.696994][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.710246][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.722799][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.732260][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.748496][ T7246] device veth0_macvtap entered promiscuous mode
[  159.771411][ T7246] device veth1_macvtap entered promiscuous mode
[  159.810268][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.821250][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.839418][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.851492][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.862231][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.874260][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.885620][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.896541][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.906884][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  159.917837][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.931339][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.939348][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.948871][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.957396][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.967897][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.981199][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  159.992804][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.002995][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  160.014115][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.024959][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  160.036023][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.045862][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  160.056367][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.066263][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  160.076880][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.089470][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.104898][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  160.113374][ T2519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
10:35:53 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_batadv\x00', {0x8}, 0x38})
getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080))

10:35:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$rds(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}, 0x4008080)
sendmsg$alg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0)
r7 = accept4(r5, &(0x7f00000003c0)=@in6, &(0x7f0000001d40)=0x80, 0x800)
connect$vsock_stream(r7, &(0x7f0000001d80), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={<r8=>0xffffffffffffffff})
sendto$rxrpc(r8, &(0x7f0000000600)="4e2ab23d70ab886c58e4ae6ff73490b9c4203a1b490eb0974d2812a81c0b00df20f5abd82199ed6b005bef7694f5bcef68ea46472350aa947504bab0320b6060d51cce", 0x43, 0x1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000018000100273bd98566fbfe79b2e14dbd7000ffdbdf2580001002fe0100070016000008001000060000000c00"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4e800)

10:35:53 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x2}}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x4}}, 0x0, [0x1f, 0x9, 0x0, 0x5]}, 0x5c)
recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f0000000240)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000004c0)=""/132, 0x84}], 0x2, &(0x7f0000000140)=""/25, 0x19}, 0x9}, {{&(0x7f0000000580)=@ethernet, 0x80, &(0x7f0000001640)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/9, 0x9}], 0x3, &(0x7f0000001680)=""/232, 0xe8}, 0x651}, {{&(0x7f0000001780)=@xdp, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/3, 0x3}, {&(0x7f0000001840)=""/225, 0xe1}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/106, 0x6a}], 0x4, &(0x7f0000002a00)=""/104, 0x68}, 0xc36}, {{&(0x7f0000002a80)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002c40)=""/24, 0x18}, {&(0x7f0000002b40)=""/232, 0xe8}], 0x2, &(0x7f0000002c80)=""/153, 0x99}, 0x800}, {{&(0x7f0000002d40)=@pppol2tpv3, 0x80, &(0x7f0000004080)=[{&(0x7f0000002dc0)=""/106, 0x6a}, {&(0x7f0000002e40)=""/58, 0x3a}, {&(0x7f0000002e80)=""/116, 0x74}, {&(0x7f0000002f00)=""/185, 0xb9}, {&(0x7f0000002fc0)=""/4085, 0xff5}, {&(0x7f0000003fc0)=""/135, 0x87}], 0x6}, 0x9}], 0x5, 0x22, &(0x7f0000004240)={0x77359400})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendto$unix(r5, &(0x7f0000000300)="7b1b35d4df714474ca9da888b4709d136f6a23a68c74024d05c09eb889b651b47300a0658b8e7443e425693f92e8b678e50aca2c48e4f45eb57365fc46818d6c0f01afbb19b978535957d11c057abc7589088179270a55894cb54a3b796273df802cf2ddd6c3b18db5522a264eb65ed2653059e54f603d0c6c8903c80842190b30dc2f3cfec945aa5df27f44baa52a264de905a6be1594c3b040efe316b13d9f4bfe2f0810c357b83485e67f94fa136fcfb8e8a47cd99f4362d7553e2e51bda294dc5e4dcf1d4b376dd51f3c2a5dc340e43ddbda7e16be8f20150ace57be8aa799712a4963a8fa932f86e1e7c1c384438ba1a0c5136434b22c", 0xf9, 0x4040800, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

10:35:53 executing program 4:
connect$pppoe(0xffffffffffffffff, &(0x7f0000001100)={0x18, 0x0, {0x0, @remote, 'bridge0\x00'}}, 0x1e)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x1f, 0x0, 0x0, 0x7f}, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00'})
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
recvmmsg(r0, &(0x7f0000000900), 0x4000000000001db, 0x0, 0x0)

10:35:53 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000020000100000000000000000002000000000000000000000008000b00000000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c3460137e41337e924196b8405ba7a4fd1e04ad60caf000000689e405da5c0dc074b88129abc208c339500"/52], 0x30}}, 0x0)

10:35:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x66ac658, @local, 0x6, 0x2}, 0x20)
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x2)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="73c9e8ee1eaf6222"], 0x20}}, 0x0)

[  160.410539][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  160.456456][ T8196] IPVS: ftp: loaded support on port[0] = 21
[  160.475648][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
10:35:53 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff00007e063343546a1eeabd268f1c872d2b01000000e88d60764631979c603b23ae484092ab8cd7090000005a77d8bee9990e4ed0c9ab22ec3467441c262ec95407f5270000000000000003b40a2ced1c8931df1b7369ade2e8e0e0976471b94cb8e68ad6a402bc04f4317fe185ad033c593e89c377863842b3545d934b66c8c30b422359409ff686b31667362725e1a016916a2d69799d94cc4fac627b7298a4f5e37efe7fc03baf97737e1c09938b62ceb1f10403c8a0eccaf83dcd8acbbe4fef66", @ANYRES32=0x0, @ANYBLOB="ff7f000020000000140012800a00010076786c616e0000000400028008002a0036459cdb26cd03cc"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r6, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_STA_WME_MAX_SP={0x11, 0x2, "a478ac0e649d19e8447b3c7815"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xbd}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xaed6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf8f9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x63f802a5}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x10000}, 0x40004)

[  160.597727][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
10:35:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030b000000000000000013008ec711bf455cc7fcc1229800000c"], 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001880)={0x14f8, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5bf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x744}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3ef}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd381}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb61f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_NODE={0x11c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa3, 0x3, "941c745c42589654ca89b914919d6cab7cb06068c33482d08dae30e62e7836620a67cef3c9b82d37a890e0f354ace95d6aefc3688160521d980bbe702cf62b6bc07a53d4177eb73313584bda2553d797689dcc03d30547688dfd64904bde7d49714fb9d8cf9f35d085d938a7f9f05b32844594fbe0d08babb7b73768440a02fd98a6757f7d6986434bd6cae4731f4e94f9c985159667e2e3483b8195cb6494"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8, 0x3, "4f73c76f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b5e099209a5d04070bd90c55a732726ff97ec7582ee01c86b9c837ab9d4eca1a"}}, @TIPC_NLA_NODE_ID={0xab, 0x3, "7a8bc707dae3787edce79d691dd5c29ab97255898f4424d9bdf7c38637556a6b1c3812b78e693460166e26adf10b822109a4f884a4d479982de45addc586b0298e4fb06602ec1f0b6327984d96d49ceed027ccd27ba7273a522bd03adb3116259a6887557390c6602357e97b62374c164a1c28a16eace9f55edc290124ed8bf6aaa2f44334beda574fdc3499c763fba7fc629b1591aa13f37fca1b774e39403fe67ac41b12dbb5"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a7a3b34c5c19557015524af1e8d406375a38cb83a800499b9ae6"}}]}]}, 0x14f8}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
connect$can_j1939(r5, &(0x7f0000000240)={0x1d, r4, 0x2, {0x1, 0xf1}, 0xfe}, 0x18)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x32, @multicast1, 0x4e24, 0x1, 'lc\x00', 0x8, 0x10001, 0x7d}, 0x2c)
close(r0)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x4, 0x0, &(0x7f0000000340))

[  160.723143][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  160.851645][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  160.879430][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  160.920081][ T8241] ==================================================================
[  160.928450][ T8241] BUG: KASAN: use-after-free in tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  160.937043][ T8241] Read of size 2 at addr ffff888095821814 by task syz-executor.0/8241
[  160.945190][ T8241] 
[  160.947548][ T8241] CPU: 1 PID: 8241 Comm: syz-executor.0 Not tainted 5.8.0-rc2-syzkaller #0
[  160.956128][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  160.966174][ T8241] Call Trace:
[  160.969468][ T8241]  dump_stack+0x18f/0x20d
[  160.973814][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  160.980056][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  160.986322][ T8241]  print_address_description.constprop.0.cold+0xae/0x436
[  160.993362][ T8241]  ? vprintk_func+0x97/0x1a6
[  160.997949][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.004169][ T8241]  kasan_report.cold+0x1f/0x37
[  161.008936][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.015178][ T8241]  tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.021246][ T8241]  ? tipc_nl_node_dump_monitor+0x300/0x300
[  161.027069][ T8241]  ? check_preemption_disabled+0x38/0x220
[  161.032790][ T8241]  ? rcu_read_lock_sched_held+0x3a/0xb0
[  161.038338][ T8241]  ? kmem_cache_alloc_node_trace+0x3b0/0x400
[  161.044315][ T8241]  ? __kmalloc_node_track_caller+0x38/0x60
[  161.050123][ T8241]  ? kasan_unpoison_shadow+0x33/0x40
[  161.055407][ T8241]  ? __phys_addr+0x9a/0x110
[  161.059909][ T8241]  ? memset+0x20/0x40
[  161.063900][ T8241]  genl_lock_dumpit+0x7f/0xb0
[  161.068554][ T8241]  netlink_dump+0x4cd/0xf60
[  161.073035][ T8241]  ? netlink_insert+0x1670/0x1670
[  161.078039][ T8241]  ? __mutex_unlock_slowpath+0xe2/0x610
[  161.083602][ T8241]  ? genl_start+0x45a/0x6e0
[  161.088113][ T8241]  __netlink_dump_start+0x643/0x900
[  161.093312][ T8241]  ? genl_rcv_msg+0x9e0/0x9e0
[  161.098085][ T8241]  ? tipc_nl_node_dump_monitor+0x300/0x300
[  161.103921][ T8241]  genl_family_rcv_msg_dumpit+0x2ac/0x310
[  161.109639][ T8241]  ? genl_rcv+0x40/0x40
[  161.113785][ T8241]  ? mutex_lock_io_nested+0xf60/0xf60
[  161.119162][ T8241]  ? genl_rcv_msg+0x9e0/0x9e0
[  161.123839][ T8241]  ? genl_unlock+0x20/0x20
[  161.128271][ T8241]  ? genl_parallel_done+0x170/0x170
[  161.133496][ T8241]  ? __radix_tree_lookup+0x1f3/0x290
[  161.138795][ T8241]  genl_rcv_msg+0x797/0x9e0
[  161.143311][ T8241]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310
[  161.150247][ T8241]  ? lock_acquire+0x1f1/0xad0
[  161.154928][ T8241]  ? genl_rcv+0x15/0x40
[  161.159091][ T8241]  ? lock_release+0x8d0/0x8d0
[  161.163767][ T8241]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  161.169063][ T8241]  netlink_rcv_skb+0x15a/0x430
[  161.173832][ T8241]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310
[  161.180772][ T8241]  ? netlink_ack+0xa10/0xa10
[  161.185383][ T8241]  genl_rcv+0x24/0x40
[  161.189363][ T8241]  netlink_unicast+0x533/0x7d0
[  161.194129][ T8241]  ? netlink_attachskb+0x810/0x810
[  161.199249][ T8241]  ? _copy_from_iter_full+0x247/0x890
[  161.204636][ T8241]  ? __phys_addr+0x9a/0x110
[  161.209146][ T8241]  ? __phys_addr_symbol+0x2c/0x70
[  161.214180][ T8241]  ? __check_object_size+0x171/0x3e4
[  161.219474][ T8241]  netlink_sendmsg+0x856/0xd90
[  161.224249][ T8241]  ? netlink_unicast+0x7d0/0x7d0
[  161.229295][ T8241]  ? netlink_unicast+0x7d0/0x7d0
[  161.234235][ T8241]  sock_sendmsg+0xcf/0x120
[  161.238655][ T8241]  ____sys_sendmsg+0x6e8/0x810
[  161.243433][ T8241]  ? kernel_sendmsg+0x50/0x50
[  161.248118][ T8241]  ? do_recvmmsg+0x6d0/0x6d0
[  161.252715][ T8241]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[  161.258688][ T8241]  ___sys_sendmsg+0xf3/0x170
[  161.263257][ T8241]  ? sendmsg_copy_msghdr+0x160/0x160
[  161.268534][ T8241]  ? __fget_files+0x272/0x400
[  161.273189][ T8241]  ? lock_downgrade+0x820/0x820
[  161.278015][ T8241]  ? finish_task_switch+0x147/0x750
[  161.283200][ T8241]  ? check_preemption_disabled+0x38/0x220
[  161.288900][ T8241]  ? __fget_files+0x294/0x400
[  161.293559][ T8241]  ? __fget_light+0xea/0x280
[  161.298129][ T8241]  __sys_sendmsg+0xe5/0x1b0
[  161.302610][ T8241]  ? __sys_sendmsg_sock+0xb0/0xb0
[  161.307635][ T8241]  ? do_syscall_64+0x1c/0xe0
[  161.312214][ T8241]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  161.318205][ T8241]  do_syscall_64+0x60/0xe0
[  161.321453][ T8253] IPVS: ftp: loaded support on port[0] = 21
[  161.322632][ T8241]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  161.322658][ T8241] RIP: 0033:0x45cb19
[  161.338269][ T8241] Code: Bad RIP value.
[  161.342331][ T8241] RSP: 002b:00007f93fc560c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.350791][ T8241] RAX: ffffffffffffffda RBX: 0000000000502180 RCX: 000000000045cb19
[  161.358760][ T8241] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005
[  161.366729][ T8241] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  161.374736][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  161.382727][ T8241] R13: 0000000000000a2e R14: 00000000004d6d10 R15: 00007f93fc5616d4
[  161.390682][ T8241] 
[  161.392986][ T8241] Allocated by task 8222:
[  161.397294][ T8241]  save_stack+0x1b/0x40
[  161.401435][ T8241]  __kasan_kmalloc.constprop.0+0xc2/0xd0
[  161.407041][ T8241]  __alloc_skb+0xae/0x550
[  161.411347][ T8241]  netlink_sendmsg+0x94f/0xd90
[  161.416090][ T8241]  sock_sendmsg+0xcf/0x120
[  161.420501][ T8241]  ____sys_sendmsg+0x6e8/0x810
[  161.425250][ T8241]  ___sys_sendmsg+0xf3/0x170
[  161.429823][ T8241]  __sys_sendmsg+0xe5/0x1b0
[  161.434318][ T8241]  do_syscall_64+0x60/0xe0
[  161.438717][ T8241]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  161.444574][ T8241] 
[  161.446876][ T8241] Freed by task 8222:
[  161.450830][ T8241]  save_stack+0x1b/0x40
[  161.454961][ T8241]  __kasan_slab_free+0xf5/0x140
[  161.459794][ T8241]  kfree+0x103/0x2c0
[  161.463690][ T8241]  skb_release_data+0x6d9/0x910
[  161.468547][ T8241]  consume_skb+0xc2/0x160
[  161.472854][ T8241]  netlink_unicast+0x53b/0x7d0
[  161.477593][ T8241]  netlink_sendmsg+0x856/0xd90
[  161.482341][ T8241]  sock_sendmsg+0xcf/0x120
[  161.486733][ T8241]  ____sys_sendmsg+0x6e8/0x810
[  161.491489][ T8241]  ___sys_sendmsg+0xf3/0x170
[  161.496067][ T8241]  __sys_sendmsg+0xe5/0x1b0
[  161.500544][ T8241]  do_syscall_64+0x60/0xe0
[  161.504936][ T8241]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  161.510800][ T8241] 
[  161.513104][ T8241] The buggy address belongs to the object at ffff888095821800
[  161.513104][ T8241]  which belongs to the cache kmalloc-512 of size 512
[  161.527128][ T8241] The buggy address is located 20 bytes inside of
[  161.527128][ T8241]  512-byte region [ffff888095821800, ffff888095821a00)
[  161.540288][ T8241] The buggy address belongs to the page:
[  161.545914][ T8241] page:ffffea0002560840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0
[  161.554991][ T8241] flags: 0xfffe0000000200(slab)
[  161.559821][ T8241] raw: 00fffe0000000200 ffffea00025c9048 ffffea00028c56c8 ffff8880aa000a80
[  161.568381][ T8241] raw: 0000000000000000 ffff888095821000 0000000100000004 0000000000000000
[  161.576942][ T8241] page dumped because: kasan: bad access detected
[  161.583322][ T8241] 
[  161.585650][ T8241] Memory state around the buggy address:
[  161.591254][ T8241]  ffff888095821700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  161.599286][ T8241]  ffff888095821780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  161.607321][ T8241] >ffff888095821800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.615350][ T8241]                          ^
10:35:54 executing program 3:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000000001190500000300480000000a0000003c0001002c0001001400030016f8bad353dad6b8eaffffffffffffff14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff01000000000000000000000000000108000700000000002c000d0014000500fe80000000000000000000000000000014000400fe8000000000000000000049"], 0xc0}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x40000)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000c060000000000000000000000000007050001000700000005000100070000000900020073797a3200000000050001000700000005000100070000000900020073797a31000000000900020073797a320000000005000100070000000900020073797a3200000000388a11e70ccbe963"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4004030)

[  161.619907][ T8241]  ffff888095821880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.627937][ T8241]  ffff888095821900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.635977][ T8241] ==================================================================
[  161.644014][ T8241] Disabling lock debugging due to kernel taint
[  161.659770][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  161.678126][ T8208] llc_conn_state_process: llc_conn_service failed
[  161.686056][ T8241] Kernel panic - not syncing: panic_on_warn set ...
[  161.692648][ T8257] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004
[  161.692659][ T8241] CPU: 1 PID: 8241 Comm: syz-executor.0 Tainted: G    B             5.8.0-rc2-syzkaller #0
[  161.692672][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  161.719466][ T8241] Call Trace:
[  161.722753][ T8241]  dump_stack+0x18f/0x20d
10:35:55 executing program 5:
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000280)={'security\x00'}, &(0x7f0000000180)=0x54)
r3 = socket(0x1000000010, 0x80002, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300))
r4 = socket(0x11, 0x80000, 0x0)
bind$packet(r4, &(0x7f00000000c0)={0x11, 0x5}, 0x14)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0400000000000000000000000000140002008e673e00580000000000000000000000c72408a1319777ac1585444423ab7e00dfb0ded9fbd13dec72d36d9b9fead2a75f2d9c2fec5f89bbb59e6a2439819886472a2a10"], 0x28}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

[  161.727088][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x440/0x590
[  161.733323][ T8241]  panic+0x2e3/0x75c
[  161.737211][ T8241]  ? __warn_printk+0xf3/0xf3
[  161.741814][ T8241]  ? preempt_schedule_common+0x59/0xc0
[  161.747268][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.753516][ T8241]  ? preempt_schedule_thunk+0x16/0x18
[  161.758884][ T8241]  ? trace_hardirqs_on+0x55/0x220
[  161.763905][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.770142][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.776373][ T8241]  end_report+0x4d/0x53
[  161.780526][ T8241]  kasan_report.cold+0xd/0x37
[  161.785207][ T8241]  ? tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.791449][ T8241]  tipc_nl_node_dump_monitor_peer+0x4da/0x590
[  161.797513][ T8241]  ? tipc_nl_node_dump_monitor+0x300/0x300
[  161.803406][ T8241]  ? check_preemption_disabled+0x38/0x220
[  161.809124][ T8241]  ? rcu_read_lock_sched_held+0x3a/0xb0
[  161.814670][ T8241]  ? kmem_cache_alloc_node_trace+0x3b0/0x400
[  161.820646][ T8241]  ? __kmalloc_node_track_caller+0x38/0x60
[  161.826448][ T8241]  ? kasan_unpoison_shadow+0x33/0x40
[  161.831726][ T8241]  ? __phys_addr+0x9a/0x110
[  161.836232][ T8241]  ? memset+0x20/0x40
[  161.840264][ T8241]  genl_lock_dumpit+0x7f/0xb0
[  161.844933][ T8241]  netlink_dump+0x4cd/0xf60
[  161.849428][ T8241]  ? netlink_insert+0x1670/0x1670
[  161.854438][ T8241]  ? __mutex_unlock_slowpath+0xe2/0x610
[  161.860009][ T8241]  ? genl_start+0x45a/0x6e0
[  161.864511][ T8241]  __netlink_dump_start+0x643/0x900
[  161.869705][ T8241]  ? genl_rcv_msg+0x9e0/0x9e0
[  161.874379][ T8241]  ? tipc_nl_node_dump_monitor+0x300/0x300
[  161.880211][ T8241]  genl_family_rcv_msg_dumpit+0x2ac/0x310
[  161.885959][ T8241]  ? genl_rcv+0x40/0x40
[  161.890105][ T8241]  ? mutex_lock_io_nested+0xf60/0xf60
[  161.895605][ T8241]  ? genl_rcv_msg+0x9e0/0x9e0
[  161.900386][ T8241]  ? genl_unlock+0x20/0x20
[  161.904799][ T8241]  ? genl_parallel_done+0x170/0x170
[  161.909994][ T8241]  ? __radix_tree_lookup+0x1f3/0x290
[  161.913259][ T8270] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004
[  161.915270][ T8241]  genl_rcv_msg+0x797/0x9e0
[  161.915289][ T8241]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310
[  161.915323][ T8241]  ? lock_acquire+0x1f1/0xad0
[  161.938155][ T8241]  ? genl_rcv+0x15/0x40
[  161.942307][ T8241]  ? lock_release+0x8d0/0x8d0
[  161.946974][ T8241]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  161.952255][ T8241]  netlink_rcv_skb+0x15a/0x430
[  161.957017][ T8241]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x310/0x310
[  161.963952][ T8241]  ? netlink_ack+0xa10/0xa10
[  161.968554][ T8241]  genl_rcv+0x24/0x40
[  161.972534][ T8241]  netlink_unicast+0x533/0x7d0
[  161.977297][ T8241]  ? netlink_attachskb+0x810/0x810
[  161.982405][ T8241]  ? _copy_from_iter_full+0x247/0x890
[  161.987818][ T8241]  ? __phys_addr+0x9a/0x110
[  161.992313][ T8241]  ? __phys_addr_symbol+0x2c/0x70
[  161.997331][ T8241]  ? __check_object_size+0x171/0x3e4
[  162.002610][ T8241]  netlink_sendmsg+0x856/0xd90
[  162.007374][ T8241]  ? netlink_unicast+0x7d0/0x7d0
[  162.012316][ T8241]  ? netlink_unicast+0x7d0/0x7d0
[  162.017250][ T8241]  sock_sendmsg+0xcf/0x120
[  162.021690][ T8241]  ____sys_sendmsg+0x6e8/0x810
[  162.026536][ T8241]  ? kernel_sendmsg+0x50/0x50
[  162.031218][ T8241]  ? do_recvmmsg+0x6d0/0x6d0
[  162.035811][ T8241]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[  162.041805][ T8241]  ___sys_sendmsg+0xf3/0x170
[  162.046402][ T8241]  ? sendmsg_copy_msghdr+0x160/0x160
[  162.051679][ T8241]  ? __fget_files+0x272/0x400
[  162.056379][ T8241]  ? lock_downgrade+0x820/0x820
[  162.061219][ T8241]  ? finish_task_switch+0x147/0x750
[  162.066411][ T8241]  ? check_preemption_disabled+0x38/0x220
[  162.072124][ T8241]  ? __fget_files+0x294/0x400
[  162.076800][ T8241]  ? __fget_light+0xea/0x280
[  162.081396][ T8241]  __sys_sendmsg+0xe5/0x1b0
[  162.085893][ T8241]  ? __sys_sendmsg_sock+0xb0/0xb0
[  162.090936][ T8241]  ? do_syscall_64+0x1c/0xe0
[  162.095520][ T8241]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  162.101489][ T8241]  do_syscall_64+0x60/0xe0
[  162.105944][ T8241]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  162.111830][ T8241] RIP: 0033:0x45cb19
[  162.115711][ T8241] Code: Bad RIP value.
[  162.115756][   T29] audit: type=1804 audit(1593254154.935:5): pid=8274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir017257544/syzkaller.Qci9mP/2/cgroup.controllers" dev="sda1" ino=15762 res=1
[  162.119762][ T8241] RSP: 002b:00007f93fc560c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.151884][ T8241] RAX: ffffffffffffffda RBX: 0000000000502180 RCX: 000000000045cb19
[  162.159834][ T8241] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005
[  162.167783][ T8241] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  162.175730][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  162.183687][ T8241] R13: 0000000000000a2e R14: 00000000004d6d10 R15: 00007f93fc5616d4
[  162.192733][ T8241] Kernel Offset: disabled
[  162.197043][ T8241] Rebooting in 86400 seconds..