last executing test programs:

1.092147475s ago: executing program 0 (id=4823):
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x400}, 0x90)

442.015998ms ago: executing program 1 (id=4850):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)

362.657328ms ago: executing program 2 (id=4853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)

362.438324ms ago: executing program 2 (id=4854):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@local, @remote}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(r1)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040), 0x10)

282.827985ms ago: executing program 1 (id=4855):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)

282.625895ms ago: executing program 2 (id=4856):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x10, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000007, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

222.199832ms ago: executing program 0 (id=4857):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

221.931737ms ago: executing program 1 (id=4858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100), 0x0)
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xf, 0x4}, {0x3, 0xfff3}}}, 0x24}}, 0x90)

221.843453ms ago: executing program 0 (id=4859):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)

142.469959ms ago: executing program 0 (id=4860):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

142.125647ms ago: executing program 0 (id=4861):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)

72.776742ms ago: executing program 2 (id=4862):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

72.489178ms ago: executing program 0 (id=4863):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0x0, 0xc9100120, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040000)
shutdown(r2, 0x2)
r3 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)

72.287146ms ago: executing program 1 (id=4864):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)

71.462748ms ago: executing program 2 (id=4865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind(r0, &(0x7f00000000c0)=@sco, 0x80)

2.10737ms ago: executing program 1 (id=4866):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}]}}}}}}, 0x0)

1.932841ms ago: executing program 2 (id=4867):
r0 = socket$kcm(0x11, 0xa, 0x300)
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"})

0s ago: executing program 1 (id=4868):
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4)

kernel console output (not intermixed with test programs):

process `syz.2.873'.
[  120.987717][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  121.104172][ T7844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.874'.
[  121.255264][ T7854] vcan0: Caught tx_queue_len zero misconfig
[  121.378796][ T7859] netlink: 'syz.0.879': attribute type 1 has an invalid length.
[  121.485354][ T7859] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.914687][ T7885] syzkaller0: entered promiscuous mode
[  121.916937][ T7885] syzkaller0: entered allmulticast mode
[  122.325397][   T12] net_ratelimit: 3 callbacks suppressed
[  122.325444][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  122.876659][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  123.218600][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'.
[  123.455675][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  123.537558][ T7925] netlink: 240 bytes leftover after parsing attributes in process `syz.1.906'.
[  123.823383][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.915'.
[  123.975593][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  124.042928][ T7947] netlink: 1412 bytes leftover after parsing attributes in process `syz.2.920'.
[  124.071173][ T7947] netlink: 'syz.2.920': attribute type 10 has an invalid length.
[  124.084335][ T7947] veth0_vlan: left promiscuous mode
[  124.089409][ T7947] veth0_vlan: entered promiscuous mode
[  124.093519][ T7947] team0: Device veth0_vlan failed to register rx_handler
[  124.493045][ T7972] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.496569][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  124.943134][ T7996] netlink: 'syz.1.938': attribute type 8 has an invalid length.
[  125.015885][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  125.555174][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  125.928817][ T8052] xt_hashlimit: size too large, truncated to 1048576
[  126.075221][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  126.121430][ T8057] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  126.127037][ T8057] netlink: 'syz.0.964': attribute type 2 has an invalid length.
[  126.130451][ T8057] __nla_validate_parse: 1 callbacks suppressed
[  126.130465][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'.
[  126.302109][ T8065] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[  126.442093][ T8065] bond2: entered promiscuous mode
[  126.450306][ T8065] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.497087][ T8069] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.502285][ T8069] bond2: (slave bond3): making interface the new active one
[  126.504771][ T8069] bond3: entered promiscuous mode
[  126.508088][ T8069] bond2: (slave bond3): Enslaving as an active interface with an up link
[  126.548116][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.605339][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  126.734406][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'.
[  127.039727][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.059083][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.076766][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.082267][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.087447][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.090469][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.093635][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.097892][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'.
[  127.428545][  T405] net_ratelimit: 2 callbacks suppressed
[  127.428559][  T405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.589996][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.656888][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  127.683321][ T8115] netlink: 'syz.1.989': attribute type 4 has an invalid length.
[  128.196203][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  128.656291][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.718294][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  128.991247][ T8175] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  129.211609][ T8175] 8021q: adding VLAN 0 to HW filter on device bond4
[  129.245185][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  129.265649][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.270579][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.289946][ T8176] bond4: (slave veth5): Enslaving as an active interface with an up link
[  129.320448][ T8172] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  129.348778][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.436278][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.440883][ T8172] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  130.132778][ T8219] xt_hashlimit: size too large, truncated to 1048576
[  130.190792][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.232681][ T8222] bridge_slave_0 (unregistering): left allmulticast mode
[  130.243928][ T8222] bridge_slave_0 (unregistering): left promiscuous mode
[  130.274076][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.301193][ T8223] veth1: entered promiscuous mode
[  130.303543][ T8223] veth1: entered allmulticast mode
[  131.200190][ T8273] __nla_validate_parse: 73 callbacks suppressed
[  131.200201][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'.
[  131.275993][ T8275] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.1043'.
[  131.282426][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'.
[  131.291079][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'.
[  131.452307][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[  131.743925][ T8300] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  132.162050][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[  132.560034][  T405] net_ratelimit: 17 callbacks suppressed
[  132.560046][  T405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.787956][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.825317][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  133.219068][ T8355] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1080'.
[  133.346246][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  133.617192][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.843502][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.865978][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  133.933888][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.971701][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.385291][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  134.409586][ T7112] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.417971][ T7112] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.427879][ T7112] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.441982][ T7112] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.516689][ T8387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  134.524292][ T8387] gretap2: entered allmulticast mode
[  134.754833][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  134.802840][ T8408] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  134.807927][ T8408] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.1101'.
[  134.866085][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.905285][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  135.326087][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'.
[  135.425509][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.709247][ T8466] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  135.913108][ T8481] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  136.061432][ T8485] syzkaller0: entered promiscuous mode
[  136.066181][ T8485] syzkaller0: entered allmulticast mode
[  136.090201][ T8485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.104177][ T8484] tipc: Resetting bearer <eth:syzkaller0>
[  136.131662][ T8484] tipc: Disabling bearer <eth:syzkaller0>
[  136.308686][ T8513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'.
[  136.837513][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1154'.
[  136.840354][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  137.332318][ T8560] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  137.338606][ T8560] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  137.342687][ T8560] veth0_virt_wifi: entered allmulticast mode
[  137.347539][ T8560] veth0_virt_wifi: entered promiscuous mode
[  137.356657][ T8568] netlink: 'syz.1.1169': attribute type 3 has an invalid length.
[  137.503165][ T8577] veth0_macvtap: Caught tx_queue_len zero misconfig
[  137.967609][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  137.995853][ T5667] net_ratelimit: 9 callbacks suppressed
[  137.995868][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  137.997500][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.067620][ T8599] netlink: 'syz.0.1185': attribute type 4 has an invalid length.
[  138.308482][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  138.465308][ T8366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.505247][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  138.754299][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  139.026135][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  139.033982][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.097415][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  139.545327][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  139.585729][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.590939][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.595510][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.890749][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'.
[  140.023052][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'.
[  140.332017][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  141.659804][ T8782] syzkaller1: entered promiscuous mode
[  141.661986][ T8782] syzkaller1: entered allmulticast mode
[  141.716139][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1256'.
[  143.072274][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'.
[  143.145220][ T7112] net_ratelimit: 146 callbacks suppressed
[  143.145238][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  143.198161][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.370188][ T8859] bridge0: port 4(veth0_virt_wifi) entered blocking state
[  143.373251][ T8859] bridge0: port 4(veth0_virt_wifi) entered disabled state
[  143.376495][ T8859] veth0_virt_wifi: entered allmulticast mode
[  143.380519][ T8859] veth0_virt_wifi: entered promiscuous mode
[  143.385665][ T8859] bridge0: port 4(veth0_virt_wifi) entered blocking state
[  143.388592][ T8859] bridge0: port 4(veth0_virt_wifi) entered forwarding state
[  143.675444][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  143.728991][ T8861] tipc: Started in network mode
[  143.730714][ T8861] tipc: Node identity 06afcdfb673f, cluster identity 4711
[  143.733149][ T8861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.736269][ T8861] syzkaller0: entered promiscuous mode
[  143.738501][ T8861] syzkaller0: entered allmulticast mode
[  144.113806][ T8863] tipc: Resetting bearer <eth:syzkaller0>
[  144.120404][ T8860] tipc: Resetting bearer <eth:syzkaller0>
[  144.136206][ T8860] tipc: Disabling bearer <eth:syzkaller0>
[  144.197999][ T8859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.202864][ T8859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.205396][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  144.227271][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.321438][ T8859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.332419][ T8859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.337928][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  144.417889][ T8859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.421036][ T8859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.524000][ T8859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.527571][ T8859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.545370][ T8364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.623752][ T5667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.629797][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.662702][ T5667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.669591][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.687598][ T5667] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.691554][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.712415][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.715919][ T5667] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.720604][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.725401][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  144.863045][ T8894] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  145.116063][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.119814][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.566115][ T8939] block nbd1: not configured, cannot reconfigure
[  145.753270][ T8955] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1330'.
[  146.854619][ T8983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.923731][ T8991] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  147.083906][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'.
[  148.315201][   T12] net_ratelimit: 1037 callbacks suppressed
[  148.315218][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  148.395786][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.415919][ T9049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1371'.
[  148.825436][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  149.335260][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  149.427063][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.825272][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.865145][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  150.387006][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  150.466400][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.473808][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.497277][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'.
[  150.555936][ T9109] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1396'.
[  150.902942][ T9139] xt_connbytes: Forcing CT accounting to be enabled
[  150.979431][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'.
[  151.972964][ T9069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.076649][ T9169] macsec1: entered promiscuous mode
[  152.081706][ T9169] macsec1: entered allmulticast mode
[  152.152589][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'.
[  152.362734][ T9181] lo: Caught tx_queue_len zero misconfig
[  152.462719][ T9185] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  152.470026][ T9185] bond3 (unregistering): Released all slaves
[  152.678550][ T9204] syzkaller0: entered promiscuous mode
[  152.685295][ T9204] syzkaller0: entered allmulticast mode
[  152.729835][ T9206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.765175][ T9206] syzkaller0: entered promiscuous mode
[  152.767010][ T9206] syzkaller0: entered allmulticast mode
[  152.769268][ T9206] tipc: Resetting bearer <eth:syzkaller0>
[  152.783689][ T9205] tipc: Resetting bearer <eth:syzkaller0>
[  153.466931][ T7112] net_ratelimit: 11 callbacks suppressed
[  153.467015][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  153.505300][ T8364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.587981][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.665589][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.995133][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  154.508301][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  154.626475][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.762867][ T9205] tipc: Disabling bearer <eth:syzkaller0>
[  154.768074][ T8364] tipc: Node number set to 1285792337
[  154.932945][ T9242] netlink: 'syz.1.1458': attribute type 1 has an invalid length.
[  154.937881][ T9242] netlink: 'syz.1.1458': attribute type 1 has an invalid length.
[  155.015110][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  155.279331][ T9269] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  155.293026][ T8364] IPVS: starting estimator thread 0...
[  155.371688][ T9278] ip6tnl0: Caught tx_queue_len zero misconfig
[  155.381785][ T9280] netlink: 'syz.0.1473': attribute type 25 has an invalid length.
[  155.385318][ T9274] IPVS: using max 44 ests per chain, 105600 per kthread
[  155.388402][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'.
[  155.428698][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'.
[  155.467485][ T9280] netlink: 'syz.0.1473': attribute type 25 has an invalid length.
[  155.472102][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'.
[  155.515658][ T7335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.902636][ T9303] "syz.0.1485" (9303) uses obsolete ecb(arc4) skcipher
[  156.365318][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.368627][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.440761][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.443266][ T9346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.447044][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.449517][ T9346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.470607][ T9346] bond2: left promiscuous mode
[  156.474511][ T9346] bond3: left promiscuous mode
[  156.483747][ T9350] sctp: [Deprecated]: syz.0.1506 (pid 9350) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.483747][ T9350] Use struct sctp_sack_info instead
[  156.501063][ T9350] sctp: [Deprecated]: syz.0.1506 (pid 9350) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.501063][ T9350] Use struct sctp_sack_info instead
[  156.703407][ T9366] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1513'.
[  156.783225][ T9372] veth1_macvtap: left promiscuous mode
[  156.785597][ T9372] macsec0: entered promiscuous mode
[  157.525569][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'.
[  157.674485][ T9429] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1543'.
[  157.690490][ T9429] bond0: (slave dummy0): Releasing backup interface
[  158.545510][ T8364] net_ratelimit: 20 callbacks suppressed
[  158.545528][ T8364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.585294][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  158.786926][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.799508][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.095212][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  159.107831][ T9475] IPVS: Scheduler module ip_vs_ not found
[  159.605159][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  160.115631][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  160.529363][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'.
[  160.635552][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  161.145292][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  161.261083][ T8366] hid-generic 0005:0458:7FFF.0001: item fetching failed at offset 0/1
[  161.280066][ T8366] hid-generic 0005:0458:7FFF.0001: probe with driver hid-generic failed with error -22
[  161.477458][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  161.655699][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  163.492914][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1654'.
[  163.498519][ T9683] block nbd0: not configured, cannot reconfigure
[  163.695813][ T7112] net_ratelimit: 4 callbacks suppressed
[  163.695883][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  163.746825][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'.
[  164.073492][ T9721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1670'.
[  164.134620][ T9708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  164.146047][ T9708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.227185][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  164.393199][ T9741] ip6gre1: entered promiscuous mode
[  164.395910][ T9741] ip6gre1: entered allmulticast mode
[  164.400049][ T7112] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.406257][ T7112] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.411508][ T9741] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.425177][ T5675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.536596][ T9750] sctp: [Deprecated]: syz.2.1684 (pid 9750) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.536596][ T9750] Use struct sctp_sack_info instead
[  164.558472][ T5675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.755240][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  164.806153][ T5675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  165.269249][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  165.500787][ T9808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.504303][ T9808] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  165.542874][ T9808] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  165.549410][ T9808] tipc: Resetting bearer <eth:syzkaller0>
[  165.795577][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  166.270118][ T9851] bridge5: entered promiscuous mode
[  166.275493][ T9851] bridge5: entered allmulticast mode
[  166.286231][ T9851] team0: Port device bridge5 added
[  166.315640][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  166.561584][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'.
[  166.629403][ T9877] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  166.845204][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  166.909187][ T9892] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1746'.
[  166.913935][ T9892] openvswitch: netlink: Message has 3 unknown bytes.
[  167.058503][ T9899] : renamed from lo (while UP)
[  167.365882][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  167.382040][ T9903] bond5: entered promiscuous mode
[  167.384594][ T9903] bond5: entered allmulticast mode
[  167.391178][ T9903] 8021q: adding VLAN 0 to HW filter on device bond5
[  167.404828][ T9907] x_tables: ip6_tables: udp match: only valid for protocol 17
[  167.526763][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'.
[  167.885932][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  168.555197][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  168.935199][ T5667] net_ratelimit: 1 callbacks suppressed
[  168.935218][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  169.288922][T10036] netlink: 'syz.0.1800': attribute type 11 has an invalid length.
[  169.443981][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1805'.
[  169.455112][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  169.488669][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'.
[  169.519219][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1807'.
[  169.965288][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  170.033815][T10080] netlink: 'syz.2.1821': attribute type 1 has an invalid length.
[  170.075806][T10080] bond4: (slave geneve3): making interface the new active one
[  170.079365][T10080] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  170.082209][ T7112] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  170.088624][ T7112] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  170.095107][ T7112] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  170.101589][ T7112] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  170.145402][T10084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.487812][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  170.976059][T10145] syzkaller1: entered promiscuous mode
[  170.977979][T10145] syzkaller1: entered allmulticast mode
[  171.025490][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  171.102184][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  171.328798][T10177] xt_hashlimit: size too large, truncated to 1048576
[  171.535630][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  172.065217][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  172.576421][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  173.054045][T10246] batman_adv: batadv0: Adding interface: macvlan2
[  173.061190][T10246] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.072009][ T5675] hid-generic 0005:0B57:0A0E.0002: item fetching failed at offset 0/1
[  173.077291][T10246] batman_adv: batadv0: Interface activated: macvlan2
[  173.084149][ T5675] hid-generic 0005:0B57:0A0E.0002: probe with driver hid-generic failed with error -22
[  173.125158][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  173.191314][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'.
[  173.482639][T10270] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1902'.
[  173.636198][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  173.935311][T10301] xt_CONNSECMARK: invalid mode: 254
[  173.988314][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'.
[  174.122770][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  174.127346][T10316] bond0: Unable to set up delay as MII monitoring is disabled
[  174.147012][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  174.164562][T10320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.204165][T10325] netlink: 'syz.0.1927': attribute type 1 has an invalid length.
[  174.223907][T10325] 8021q: adding VLAN 0 to HW filter on device bond3
[  174.234146][T10325] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.240159][T10325] bond3: (slave bond0): Enslaving as a backup interface with an up link
[  174.243257][T10329] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  174.247661][T10325] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  174.251755][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1927'.
[  174.309560][T10335] netlink: 'syz.2.1931': attribute type 7 has an invalid length.
[  174.314274][T10335] netlink: 'syz.2.1931': attribute type 8 has an invalid length.
[  174.656606][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  174.666226][T10343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  175.186139][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  175.519213][T10367] netlink: 'syz.2.1946': attribute type 29 has an invalid length.
[  175.621851][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'.
[  175.695131][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  175.868206][T10389] syzkaller0: entered promiscuous mode
[  175.870145][T10389] syzkaller0: entered allmulticast mode
[  175.879591][T10389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.882427][T10388] tipc: Resetting bearer <eth:syzkaller0>
[  175.905539][T10388] tipc: Disabling bearer <eth:syzkaller0>
[  176.136952][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'.
[  176.205782][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  176.215780][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'.
[  176.598058][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'.
[  176.600894][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1982'.
[  176.659485][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'.
[  176.725825][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  176.858209][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1989'.
[  177.230773][T10477] syzkaller0: entered promiscuous mode
[  177.232811][T10477] syzkaller0: entered allmulticast mode
[  177.237315][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'.
[  177.240040][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1998'.
[  177.245243][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  177.452899][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.755074][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  177.911428][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'.
[  178.267271][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  178.514655][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.521912][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.529804][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.536778][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.570022][T10586] pim6reg: entered allmulticast mode
[  179.306921][   T12] net_ratelimit: 2 callbacks suppressed
[  179.306938][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  179.551138][T10671] erspan0: entered promiscuous mode
[  179.564392][T10671] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.569105][T10671] 8021q: adding VLAN 0 to HW filter on device team0
[  179.577937][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.631216][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.634783][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.642786][T10671] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  179.660292][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.662534][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.673800][   T81] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  179.676541][   T81] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  179.790369][T10682] netlink: 'syz.1.2069': attribute type 15 has an invalid length.
[  179.839014][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  180.345606][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  180.514278][T10702] syzkaller0: entered promiscuous mode
[  180.517239][T10702] syzkaller0: entered allmulticast mode
[  180.629942][T10704] x_tables: ip_tables: icmp match: only valid for protocol 1
[  180.856608][T10727] __nla_validate_parse: 3 callbacks suppressed
[  180.856622][T10727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2089'.
[  180.878279][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  181.022607][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2096'.
[  181.034196][T10745] vlan0: entered promiscuous mode
[  181.150148][T10756] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2101'.
[  181.396419][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  181.531362][T10782] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  181.739640][T10794] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2118'.
[  181.857083][T10803] veth1: left promiscuous mode
[  181.858796][T10803] veth1: left allmulticast mode
[  181.867860][T10803] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  181.906020][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  182.161172][T10822] syzkaller0: entered promiscuous mode
[  182.163419][T10822] syzkaller0: entered allmulticast mode
[  182.417105][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  182.432541][T10839] netlink: 'syz.2.2137': attribute type 4 has an invalid length.
[  182.440291][T10839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2137'.
[  182.477999][T10839] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  182.797407][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'.
[  183.002453][T10872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.005241][T10872] batadv_slave_0: entered allmulticast mode
[  183.083644][T10876] netlink: 'syz.2.2155': attribute type 322 has an invalid length.
[  183.214679][T10882] sctp: [Deprecated]: syz.2.2157 (pid 10882) Use of int in maxseg socket option.
[  183.214679][T10882] Use struct sctp_assoc_value instead
[  183.751503][T10894] team0: entered promiscuous mode
[  183.753222][T10894] team_slave_0: entered promiscuous mode
[  183.755451][T10894] team_slave_1: entered promiscuous mode
[  184.151581][T10920] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.2174'.
[  184.155690][T10920] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.2174'.
[  184.456173][   T12] net_ratelimit: 4 callbacks suppressed
[  184.456191][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  184.977233][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  185.330946][T10973] netlink: 'syz.1.2196': attribute type 32 has an invalid length.
[  185.495171][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  186.025244][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  186.465846][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  186.545124][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  186.603128][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2226'.
[  186.607399][T11037] netlink: 'syz.0.2226': attribute type 12 has an invalid length.
[  186.610626][T11037] netlink: 'syz.0.2226': attribute type 13 has an invalid length.
[  186.938587][T11066] bond3: (slave bond0): Removing an active aggregator
[  186.948308][T11066] bond3: (slave bond0): Releasing backup interface
[  186.979759][T11066] bridge_slave_0: left allmulticast mode
[  186.981829][T11066] bridge_slave_0: left promiscuous mode
[  186.983884][T11066] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.990877][T11066] bridge_slave_1: left allmulticast mode
[  186.992793][T11066] bridge_slave_1: left promiscuous mode
[  186.995489][T11066] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.001773][T11066] bond0: (slave bond_slave_0): Releasing backup interface
[  187.010704][T11066] bond0: (slave bond_slave_1): Releasing backup interface
[  187.018569][T11066] team_slave_0: left promiscuous mode
[  187.024055][T11066] team0: Port device team_slave_0 removed
[  187.028659][T11066] team_slave_1: left promiscuous mode
[  187.033920][T11066] team0: Port device team_slave_1 removed
[  187.037542][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.040644][T11066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.045926][T11066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.048962][T11066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.056967][T11066] veth0_virt_wifi: left allmulticast mode
[  187.059360][T11066] veth0_virt_wifi: left promiscuous mode
[  187.062834][T11066] bridge0: port 4(veth0_virt_wifi) entered disabled state
[  187.065993][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  187.071332][T11066] vlan2: left promiscuous mode
[  187.073490][T11066] geneve0: left promiscuous mode
[  187.084711][T11066] vlan2: left allmulticast mode
[  187.087807][T11066] geneve0: left allmulticast mode
[  187.090205][T11066] bridge0: port 3(vlan2) entered disabled state
[  187.100883][T11066] batman_adv: batadv0: Interface deactivated: macvlan2
[  187.103722][T11066] batman_adv: batadv0: Removing interface: macvlan2
[  187.137978][T11069] team0: Port device vlan0 added
[  187.558769][T11098] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  187.575777][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  187.662868][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'.
[  187.973111][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2265'.
[  188.056220][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'.
[  188.095488][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  188.510250][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'.
[  188.605583][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  188.726820][T11167] gretap0: entered promiscuous mode
[  189.005808][T11189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.007300][T11186] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.048684][T11192] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2298'.
[  189.104785][T11199] netlink: 'syz.1.2300': attribute type 1 has an invalid length.
[  189.332718][T11229] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.645670][   T12] net_ratelimit: 1 callbacks suppressed
[  189.645686][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  190.024500][T11241] syz.0.2320 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  190.029811][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.0.2320 Not tainted syzkaller #0 PREEMPT(full) 
[  190.029834][T11241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.029843][T11241] Call Trace:
[  190.029850][T11241]  <TASK>
[  190.029857][T11241]  dump_stack_lvl+0xe8/0x150
[  190.029880][T11241]  dump_header+0xd3/0x4c0
[  190.029904][T11241]  oom_kill_process+0x3ab/0x970
[  190.029926][T11241]  out_of_memory+0x106c/0x1410
[  190.029941][T11241]  ? try_charge_memcg+0xbb9/0x1570
[  190.029963][T11241]  ? __pfx___mutex_lock+0x10/0x10
[  190.029982][T11241]  ? __pfx_out_of_memory+0x10/0x10
[  190.029997][T11241]  ? do_raw_spin_unlock+0x4d/0x210
[  190.030024][T11241]  try_charge_memcg+0xc77/0x1570
[  190.030056][T11241]  ? __pfx_try_charge_memcg+0x10/0x10
[  190.030073][T11241]  ? percpu_ref_tryget+0x15/0x180
[  190.030107][T11241]  ? charge_memcg+0x23/0x2b0
[  190.030128][T11241]  charge_memcg+0x1a2/0x2b0
[  190.030145][T11241]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  190.030163][T11241]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  190.030184][T11241]  __swap_cache_prepare_and_add+0xdc/0x700
[  190.030206][T11241]  ? page_rmappable_folio+0x9a/0x170
[  190.030232][T11241]  swap_cache_alloc_folio+0xf1/0x240
[  190.030251][T11241]  swap_cluster_readahead+0x355/0x670
[  190.030272][T11241]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  190.030297][T11241]  ? get_vma_policy+0x27b/0x3c0
[  190.030319][T11241]  swapin_readahead+0x196/0xc50
[  190.030337][T11241]  ? swap_table_get+0x1e/0x260
[  190.030355][T11241]  ? __pfx_swapin_readahead+0x10/0x10
[  190.030372][T11241]  ? swap_table_get+0x1e/0x260
[  190.030386][T11241]  ? swap_table_get+0x1e/0x260
[  190.030398][T11241]  ? swap_table_get+0x1e/0x260
[  190.030445][T11241]  ? swap_table_get+0x216/0x260
[  190.030460][T11241]  ? swap_cache_get_folio+0x2e4/0x2f0
[  190.030480][T11241]  do_swap_page+0x555/0x5120
[  190.030500][T11241]  ? __pte_offset_map+0x29/0x240
[  190.030517][T11241]  ? __pte_offset_map+0x29/0x240
[  190.030539][T11241]  ? do_swap_page+0x128/0x5120
[  190.030553][T11241]  ? __pfx_do_swap_page+0x10/0x10
[  190.030566][T11241]  ? __pte_offset_map+0x1ae/0x240
[  190.030584][T11241]  ? pte_offset_map_rw_nolock+0xea/0x160
[  190.030602][T11241]  handle_mm_fault+0x12d4/0x3170
[  190.030635][T11241]  ? handle_mm_fault+0xee/0x3170
[  190.030656][T11241]  ? __pfx_handle_mm_fault+0x10/0x10
[  190.030670][T11241]  ? lock_vma_under_rcu+0x45a/0x500
[  190.030708][T11241]  do_user_addr_fault+0xa73/0x1340
[  190.030730][T11241]  ? rcu_is_watching+0x15/0xb0
[  190.030747][T11241]  ? trace_page_fault_user+0x84/0x1e0
[  190.030763][T11241]  exc_page_fault+0x6a/0xc0
[  190.030785][T11241]  asm_exc_page_fault+0x26/0x30
[  190.030799][T11241] RIP: 0033:0x7f86d446a80c
[  190.030832][T11241] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  190.030843][T11241] RSP: 002b:00007fffc4d85910 EFLAGS: 00010202
[  190.030857][T11241] RAX: 0000000000000000 RBX: 00007f86d4815fa0 RCX: 000055556dccc808
[  190.030865][T11241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  190.030872][T11241] RBP: 00007f86d4817da0 R08: 0000000000000000 R09: 0000000000000000
[  190.030880][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002e6d1
[  190.030888][T11241] R13: 00007f86d4815fac R14: 000000000002e3c3 R15: 00007fffc4d85a10
[  190.030911][T11241]  </TASK>
[  190.031019][T11241] memory: usage 307200kB, limit 307200kB, failcnt 2219
[  190.166290][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  190.169428][T11241] memory+swap: usage 307280kB, limit 9007199254740988kB, failcnt 0
[  190.175684][T11241] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  190.178703][T11241] Memory cgroup stats for /syz0:
[  190.179141][T11241] cache 0
[  190.182429][T11241] rss 0
[  190.183656][T11241] rss_huge 0
[  190.186260][T11241] shmem 0
[  190.187626][T11241] mapped_file 0
[  190.189150][T11241] dirty 0
[  190.190477][T11241] writeback 0
[  190.194287][T11241] workingset_refault_anon 4
[  190.197456][T11241] workingset_refault_file 0
[  190.199546][T11241] swap 81920
[  190.201041][T11241] swapcached 155648
[  190.202705][T11241] pgpgin 78335
[  190.204151][T11241] pgpgout 78328
[  190.206145][T11241] pgfault 183895
[  190.207748][T11241] pgmajfault 2
[  190.209231][T11241] inactive_anon 24576
[  190.210974][T11241] active_anon 4096
[  190.212570][T11241] inactive_file 0
[  190.214123][T11241] active_file 0
[  190.216115][T11241] unevictable 0
[  190.217624][T11241] hierarchical_memory_limit 314572800
[  190.219750][T11241] hierarchical_memsw_limit 9223372036854771712
[  190.222160][T11241] total_cache 0
[  190.223631][T11241] total_rss 0
[  190.227552][T11241] total_rss_huge 0
[  190.229191][T11241] total_shmem 0
[  190.230757][T11241] total_mapped_file 0
[  190.232376][T11241] total_dirty 0
[  190.233902][T11241] total_writeback 0
[  190.235880][T11241] total_workingset_refault_anon 4
[  190.238003][T11241] total_workingset_refault_file 0
[  190.240117][T11241] total_swap 81920
[  190.241705][T11241] total_swapcached 155648
[  190.243523][T11241] total_pgpgin 78335
[  190.245623][T11241] total_pgpgout 78328
[  190.247288][T11241] total_pgfault 183895
[  190.249200][T11241] total_pgmajfault 2
[  190.250875][T11241] total_inactive_anon 24576
[  190.252752][T11241] total_active_anon 4096
[  190.254522][T11241] total_inactive_file 0
[  190.256571][T11241] total_active_file 0
[  190.258264][T11241] total_unevictable 0
[  190.259923][T11241] anon_cost 0
[  190.261263][T11241] file_cost 0
[  190.262591][T11241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2320,pid=11241,uid=0
[  190.271652][T11241] Memory cgroup out of memory: Killed process 11241 (syz.0.2320) total-vm:104208kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  190.314263][T11254] netlink: 'syz.2.2325': attribute type 1 has an invalid length.
[  190.373683][T11254] 8021q: adding VLAN 0 to HW filter on device bond5
[  190.399215][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'.
[  190.406577][T11254] bond5: entered promiscuous mode
[  190.411863][T11254] bond5: entered allmulticast mode
[  190.455925][T11254] bond5: (slave dummy0): making interface the new active one
[  190.461951][T11254] dummy0: entered promiscuous mode
[  190.473804][T11254] dummy0: entered allmulticast mode
[  190.483165][T11254] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  190.685721][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  190.790571][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'.
[  190.893988][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'.
[  191.215290][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  191.735224][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  192.132515][T11356] syzkaller1: entered promiscuous mode
[  192.134303][T11356] syzkaller1: entered allmulticast mode
[  192.255432][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  192.620418][T11385] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  192.627536][T11385] bond6 (unregistering): Released all slaves
[  192.768005][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  192.857303][T11400] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  192.942164][T11410] netlink: 'syz.2.2393': attribute type 3 has an invalid length.
[  192.945244][T11410] netlink: 'syz.2.2393': attribute type 3 has an invalid length.
[  192.947999][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2393'.
[  193.020121][T11416] --map-set only usable from mangle table
[  193.285134][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  193.668447][T11468] Bluetooth: MGMT ver 1.23
[  193.731353][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'.
[  193.795201][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  193.841334][T11483] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2428'.
[  193.848285][T11483] openvswitch: netlink: Key type 769 is out of range max 32
[  193.963398][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'.
[  194.050980][T11502] netlink: 'syz.0.2437': attribute type 11 has an invalid length.
[  194.057732][T11502] netlink: 'syz.0.2437': attribute type 23 has an invalid length.
[  194.067273][T11502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2437'.
[  194.274007][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'.
[  194.467680][T11535] netlink: 'syz.2.2452': attribute type 4 has an invalid length.
[  194.826584][   T12] net_ratelimit: 1 callbacks suppressed
[  194.826597][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  194.919891][T11565] netlink: 'syz.0.2465': attribute type 39 has an invalid length.
[  195.265585][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  195.346423][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  195.846463][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'.
[  195.857776][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  196.218620][T11617] block nbd0: server does not support multiple connections per device.
[  196.234635][T11617] block nbd0: shutting down sockets
[  196.293548][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'.
[  196.375373][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  196.897363][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  196.913048][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2517'.
[  196.916048][T11694] block nbd0: not configured, cannot reconfigure
[  197.068886][   T33] audit: type=1804 audit(1779045971.335:2): pid=11700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2520" name="/newroot/871/memory.events" dev="tmpfs" ino=4405 res=1 errno=0
[  197.415424][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  197.670436][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  197.679319][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  197.689490][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  197.697357][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  197.832106][T11766] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  197.856059][T11767] sctp: [Deprecated]: syz.2.2548 (pid 11767) Use of int in maxseg socket option.
[  197.856059][T11767] Use struct sctp_assoc_value instead
[  197.906714][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'.
[  197.912862][T11773] openvswitch: netlink: Invalid VLAN frame
[  197.935169][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  198.090172][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2558'.
[  198.095580][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2558'.
[  198.157469][T11787] netlink: set zone limit has 4 unknown bytes
[  198.178375][T11791] netlink: set zone limit has 4 unknown bytes
[  198.385784][T11806] batadv_slave_1: entered promiscuous mode
[  198.392900][T11806] macsec1: entered promiscuous mode
[  198.395816][T11806] macsec1: entered allmulticast mode
[  198.398742][T11806] batadv_slave_1: entered allmulticast mode
[  198.403632][T11806] batadv_slave_1: left allmulticast mode
[  198.410032][T11806] batadv_slave_1: left promiscuous mode
[  198.715840][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  198.941486][T11853] gretap0: entered promiscuous mode
[  198.956363][T11853] vlan3: entered promiscuous mode
[  199.746931][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  199.840816][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'.
[  199.988547][ T5483] net_ratelimit: 3 callbacks suppressed
[  199.988560][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  200.099752][T11899] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  200.505103][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  200.742916][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'.
[  200.756625][   T24] hid-generic 0005:0C45:0A0E.0003: item fetching failed at offset 0/1
[  200.762805][   T24] hid-generic 0005:0C45:0A0E.0003: probe with driver hid-generic failed with error -22
[  200.822316][T11958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.827094][T11958] syzkaller0: entered promiscuous mode
[  200.829557][T11958] syzkaller0: entered allmulticast mode
[  200.849425][T11958] tipc: Resetting bearer <eth:syzkaller0>
[  200.855341][T11957] tipc: Resetting bearer <eth:syzkaller0>
[  200.868403][T11957] tipc: Disabling bearer <eth:syzkaller0>
[  200.880287][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'.
[  200.933882][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'.
[  200.946267][T11964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2639'.
[  201.015529][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  201.536877][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  201.563259][T12017] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2662'.
[  201.567417][T12017] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  202.055437][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  202.565159][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  203.075096][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  203.585301][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  204.095217][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  204.754549][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'.
[  204.887797][T12052] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2676'.
[  204.910270][T12052] bond0 (unregistering): left promiscuous mode
[  204.913123][T12052] bond_slave_0: left promiscuous mode
[  204.915465][T12052] bond_slave_1: left promiscuous mode
[  204.918658][T12052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.923738][T12052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.927947][T12052] bond0 (unregistering): Released all slaves
[  205.020730][T12052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2676'.
[  205.044204][T12066] netlink: 'syz.0.2682': attribute type 3 has an invalid length.
[  205.085964][T12052] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2676'.
[  205.135620][ T5667] net_ratelimit: 1 callbacks suppressed
[  205.135635][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  205.211594][T12081] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.655243][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  205.840538][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'.
[  205.938414][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'.
[  206.090165][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2724'.
[  206.167037][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  206.688639][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  206.880048][T12201] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2739'.
[  206.963929][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2741'.
[  206.967754][T12205] block nbd0: not configured, cannot reconfigure
[  207.046348][T12211] netlink: 'syz.0.2744': attribute type 23 has an invalid length.
[  207.048986][T12211] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.171070][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'.
[  207.205321][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  207.532174][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.669552][T12256] syzkaller1: entered promiscuous mode
[  207.671525][T12256] syzkaller1: entered allmulticast mode
[  207.735303][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  208.042160][T12269] syzkaller0: entered promiscuous mode
[  208.055202][T12269] syzkaller0: entered allmulticast mode
[  208.241584][T12274] nbd: device at index 64 is going down
[  208.245073][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  208.584361][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.755120][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  209.399765][T12338] netlink: 'syz.2.2784': attribute type 8 has an invalid length.
[  210.078698][T12378] syzkaller0: entered promiscuous mode
[  210.082427][T12378] syzkaller0: entered allmulticast mode
[  210.286459][ T5667] net_ratelimit: 4 callbacks suppressed
[  210.286470][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  210.448805][T12408] __nla_validate_parse: 13 callbacks suppressed
[  210.448816][T12408] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2818'.
[  210.494293][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'.
[  210.497492][T12415] tunl0: Caught tx_queue_len zero misconfig
[  210.499794][T12416] openvswitch: netlink: Message has 16 unknown bytes.
[  210.546749][T12420] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.551537][T12420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  210.660743][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'.
[  210.686056][T12435] team1: entered promiscuous mode
[  210.687839][T12435] team1: entered allmulticast mode
[  210.689903][T12435] 8021q: adding VLAN 0 to HW filter on device team1
[  210.694126][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'.
[  210.724092][T12435] team2: entered promiscuous mode
[  210.726306][T12435] team2: entered allmulticast mode
[  210.728750][T12435] 8021q: adding VLAN 0 to HW filter on device team2
[  210.805841][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  210.972757][T12460] netlink: 'syz.0.2842': attribute type 1 has an invalid length.
[  211.150646][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'.
[  211.268129][T12494] xfrm0: entered allmulticast mode
[  211.315164][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  211.334259][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'.
[  211.457259][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'.
[  211.461508][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2870'.
[  211.791452][T12555] netlink: 'syz.0.2887': attribute type 1 has an invalid length.
[  211.837113][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  211.871226][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'.
[  212.207244][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2905'.
[  212.356982][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  212.722954][T12652] netlink: 'syz.2.2932': attribute type 15 has an invalid length.
[  212.865262][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  213.114537][T12687] netlink: 'syz.2.2948': attribute type 1 has an invalid length.
[  213.385143][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  213.432569][T12718] netlink: 'syz.0.2962': attribute type 2 has an invalid length.
[  213.517675][T12721] netlink: Unknown conntrack attr (type=2304, max=9)
[  213.564654][T12728] netlink: 'syz.0.2967': attribute type 1 has an invalid length.
[  214.179581][T12778] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  214.182417][T12778] netlink: 'syz.1.2990': attribute type 2 has an invalid length.
[  215.295967][T12812] net_ratelimit: 3 callbacks suppressed
[  215.295981][T12812] IPv6: addrconf: prefix option has invalid lifetime
[  215.435736][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  215.504026][T12825] : renamed from bond0 (while UP)
[  215.520526][T12825] __nla_validate_parse: 5 callbacks suppressed
[  215.520536][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'.
[  215.536207][T12825] team1: entered promiscuous mode
[  215.537992][T12825] team1: entered allmulticast mode
[  215.539901][T12825] 8021q: adding VLAN 0 to HW filter on device team1
[  215.547842][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'.
[  215.551148][T12825] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  215.564879][T12825] team2: entered promiscuous mode
[  215.566547][T12825] team2: entered allmulticast mode
[  215.568394][T12825] 8021q: adding VLAN 0 to HW filter on device team2
[  215.655182][T12833] netlink: 'syz.2.3015': attribute type 2 has an invalid length.
[  215.657573][T12833] netlink: 'syz.2.3015': attribute type 8 has an invalid length.
[  215.660123][T12833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3015'.
[  215.689919][T12835] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.707798][T12835] vlan3: entered allmulticast mode
[  215.709732][T12835] bond4: entered allmulticast mode
[  215.721498][T12835] bond4: (slave geneve3): making interface the new active one
[  215.724111][T12835] geneve3: entered allmulticast mode
[  215.728628][T12835] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  215.764869][T12842] tc action pedit 'at' offset 8 out of bounds
[  215.947794][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  216.477179][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  216.533277][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'.
[  216.559064][T12907] 8021q: adding VLAN 0 to HW filter on device bond5
[  216.585198][T12907] bond5: (slave veth11): Enslaving as an active interface with an up link
[  216.601940][T12907] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3047'.
[  216.607063][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  216.622450][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  216.634771][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  216.658884][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'.
[  216.679447][T12918] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  216.791392][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'.
[  216.823314][ T8366] ip6_vti0 speed is unknown, defaulting to 1000
[  216.830285][T12913] infiniband syz2: set active
[  216.836207][T12913] infiniband syz2: added ip6_vti0
[  216.862940][T12913] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  216.869285][T12913] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  216.876413][T12913] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  216.901422][T12913] RDS/IB: syz2: added
[  216.905432][T12913] smc: adding ib device syz2 with port count 1
[  216.910727][T12913] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  216.917085][ T5675] ip6_vti0 speed is unknown, defaulting to 1000
[  216.932389][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  216.959667][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3058'.
[  216.995666][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  217.050187][T12941] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3061'.
[  217.053929][T12941] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3061'.
[  217.095452][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  217.219163][T12913] ip6_vti0 speed is unknown, defaulting to 1000
[  217.525836][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  217.643219][T12963] team0: left promiscuous mode
[  217.779097][T12963] vlan0: left promiscuous mode
[  217.798853][T12963] macsec0: left promiscuous mode
[  217.819119][T12963] geneve2: left promiscuous mode
[  217.827652][T12963] veth3: left allmulticast mode
[  217.838644][T12963] macsec1: left promiscuous mode
[  217.840750][T12963] macsec1: left allmulticast mode
[  217.842857][T12963] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  217.846722][T12963] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  217.859104][T12963] vlan3: left allmulticast mode
[  217.861109][T12963] bond4: left allmulticast mode
[  217.863196][T12963] geneve3: left allmulticast mode
[  217.886970][ T7112] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.890147][ T7112] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.896895][T12981] pimreg: entered allmulticast mode
[  217.898988][ T7112] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.902619][ T7112] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.908022][ T7112] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.911175][ T7112] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.914273][T12979] pimreg: left allmulticast mode
[  217.932871][ T7112] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  217.938180][ T7112] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.035809][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  218.546044][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.055711][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.132778][T13046] bond0: (slave bond_slave_1): Releasing backup interface
[  219.225880][T13053] validate_nla: 1 callbacks suppressed
[  219.225899][T13053] netlink: 'syz.1.3110': attribute type 1 has an invalid length.
[  219.242569][T13053] bond7: entered promiscuous mode
[  219.244373][T13053] bond7: entered allmulticast mode
[  219.248303][T13053] 8021q: adding VLAN 0 to HW filter on device bond7
[  219.567377][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.585288][ T5622] Bluetooth: hci2: command 0x0405 tx timeout
[  219.900784][T13097] syzkaller0: entered promiscuous mode
[  219.903038][T13097] syzkaller0: entered allmulticast mode
[  220.008157][T13104] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  220.054740][T13108] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  220.160199][T13114] netlink: 'syz.2.3138': attribute type 3 has an invalid length.
[  220.597311][ T7112] net_ratelimit: 1 callbacks suppressed
[  220.597355][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.115321][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.175464][T13168] netlink: 'syz.2.3160': attribute type 89 has an invalid length.
[  221.366147][T13172] __nla_validate_parse: 9 callbacks suppressed
[  221.366167][T13172] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3162'.
[  221.418032][ T5618] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  221.429794][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  221.429816][ T5618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.429825][ T5618] Call Trace:
[  221.429831][ T5618]  <TASK>
[  221.429837][ T5618]  dump_stack_lvl+0xe8/0x150
[  221.429860][ T5618]  dump_header+0xd3/0x4c0
[  221.429884][ T5618]  oom_kill_process+0x3ab/0x970
[  221.429906][ T5618]  out_of_memory+0x106c/0x1410
[  221.429922][ T5618]  ? try_charge_memcg+0xbb9/0x1570
[  221.429945][ T5618]  ? __pfx___mutex_lock+0x10/0x10
[  221.429965][ T5618]  ? __pfx_out_of_memory+0x10/0x10
[  221.429979][ T5618]  ? do_raw_spin_unlock+0x4d/0x210
[  221.430007][ T5618]  try_charge_memcg+0xc77/0x1570
[  221.430041][ T5618]  ? __pfx_try_charge_memcg+0x10/0x10
[  221.430056][ T5618]  ? percpu_ref_tryget+0x15/0x180
[  221.430091][ T5618]  ? charge_memcg+0x23/0x2b0
[  221.430112][ T5618]  charge_memcg+0x1a2/0x2b0
[  221.430131][ T5618]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  221.430148][ T5618]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  221.430169][ T5618]  __swap_cache_prepare_and_add+0xdc/0x700
[  221.430191][ T5618]  ? page_rmappable_folio+0x9a/0x170
[  221.430219][ T5618]  swap_cache_alloc_folio+0xf1/0x240
[  221.430238][ T5618]  swap_cluster_readahead+0x523/0x670
[  221.430259][ T5618]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  221.430316][ T5618]  ? get_vma_policy+0x27b/0x3c0
[  221.430337][ T5618]  swapin_readahead+0x196/0xc50
[  221.430356][ T5618]  ? swap_table_get+0x1e/0x260
[  221.430374][ T5618]  ? __pfx_swapin_readahead+0x10/0x10
[  221.430391][ T5618]  ? swap_table_get+0x1e/0x260
[  221.430405][ T5618]  ? swap_table_get+0x1e/0x260
[  221.430417][ T5618]  ? swap_table_get+0x1e/0x260
[  221.430432][ T5618]  ? swap_table_get+0x216/0x260
[  221.430447][ T5618]  ? swap_cache_get_folio+0x2e4/0x2f0
[  221.430467][ T5618]  do_swap_page+0x555/0x5120
[  221.430485][ T5618]  ? __pte_offset_map+0x29/0x240
[  221.430502][ T5618]  ? __pte_offset_map+0x29/0x240
[  221.430523][ T5618]  ? do_swap_page+0x128/0x5120
[  221.430537][ T5618]  ? __pfx_do_swap_page+0x10/0x10
[  221.430550][ T5618]  ? __pte_offset_map+0x1ae/0x240
[  221.430566][ T5618]  ? pte_offset_map_rw_nolock+0xea/0x160
[  221.430585][ T5618]  handle_mm_fault+0x12d4/0x3170
[  221.430610][ T5618]  ? handle_mm_fault+0xee/0x3170
[  221.430631][ T5618]  ? __pfx_handle_mm_fault+0x10/0x10
[  221.430644][ T5618]  ? lock_vma_under_rcu+0x45a/0x500
[  221.430680][ T5618]  do_user_addr_fault+0xa73/0x1340
[  221.430701][ T5618]  ? rcu_is_watching+0x15/0xb0
[  221.430718][ T5618]  ? trace_page_fault_user+0x84/0x1e0
[  221.430734][ T5618]  exc_page_fault+0x6a/0xc0
[  221.430756][ T5618]  asm_exc_page_fault+0x26/0x30
[  221.430769][ T5618] RIP: 0033:0x7fd2e835d68e
[  221.430783][ T5618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  221.430794][ T5618] RSP: 002b:00007fff55d0b0d8 EFLAGS: 00010246
[  221.430806][ T5618] RAX: 0000000000000000 RBX: 000055555aea1500 RCX: 00007fd2e835d68e
[  221.430834][ T5618] RDX: 00007fff55d0b130 RSI: 0000000000000000 RDI: 0000000000000000
[  221.430842][ T5618] RBP: 00007fff55d0b19c R08: 0000000000000000 R09: 0000000000000000
[  221.430850][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  221.430858][ T5618] R13: 00000000000927c0 R14: 0000000000035da1 R15: 00007fff55d0b1f0
[  221.430880][ T5618]  </TASK>
[  221.433696][ T5618] memory: usage 307200kB, limit 307200kB, failcnt 2177
[  221.562159][ T5618] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0
[  221.564685][ T5618] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  221.568062][ T5618] Memory cgroup stats for /syz1:
[  221.568123][ T5618] cache 0
[  221.570954][ T5618] rss 0
[  221.571868][ T5618] rss_huge 0
[  221.572851][ T5618] shmem 0
[  221.573865][ T5618] mapped_file 0
[  221.575308][ T5618] dirty 0
[  221.576391][ T5618] writeback 0
[  221.577663][ T5618] workingset_refault_anon 1
[  221.579208][ T5618] workingset_refault_file 0
[  221.580929][ T5618] swap 110592
[  221.582208][ T5618] swapcached 126976
[  221.583597][ T5618] pgpgin 105139
[  221.584839][ T5618] pgpgout 105138
[  221.594314][ T5618] pgfault 211458
[  221.595839][ T5618] pgmajfault 3
[  221.597071][ T5618] inactive_anon 0
[  221.598554][ T5618] active_anon 4096
[  221.599919][ T5618] inactive_file 0
[  221.601135][ T5618] active_file 0
[  221.602451][ T5618] unevictable 0
[  221.603496][ T5618] hierarchical_memory_limit 314572800
[  221.607389][ T5618] hierarchical_memsw_limit 9223372036854771712
[  221.609690][ T5618] total_cache 0
[  221.613007][ T5618] total_rss 0
[  221.614183][ T5618] total_rss_huge 0
[  221.625445][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.629670][ T5618] total_shmem 0
[  221.631012][ T5618] total_mapped_file 0
[  221.635224][ T5618] total_dirty 0
[  221.636336][ T5618] total_writeback 0
[  221.641358][ T5618] total_workingset_refault_anon 1
[  221.651634][ T5618] total_workingset_refault_file 0
[  221.657345][ T5618] total_swap 110592
[  221.660652][ T5618] total_swapcached 126976
[  221.677715][ T5618] total_pgpgin 105139
[  221.681045][ T5618] total_pgpgout 105138
[  221.694287][ T5618] total_pgfault 211458
[  221.698368][ T5618] total_pgmajfault 3
[  221.699602][ T5618] total_inactive_anon 0
[  221.707764][ T5618] total_active_anon 4096
[  221.709151][ T5618] total_inactive_file 0
[  221.719142][ T5618] total_active_file 0
[  221.726697][ T5618] total_unevictable 0
[  221.728100][ T5618] anon_cost 0
[  221.730113][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'.
[  221.734904][ T5618] file_cost 0
[  221.736768][ T5618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3154,pid=13148,uid=0
[  221.750608][ T5618] Memory cgroup out of memory: Killed process 13148 (syz.1.3154) total-vm:102160kB, anon-rss:1252kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  221.895415][T13190] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3169'.
[  221.918497][T13190] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  222.145563][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  222.227467][T13206] ip6_vti0 speed is unknown, defaulting to 1000
[  222.305234][T13214] vlan0: entered promiscuous mode
[  222.447642][T13222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'.
[  222.656944][ T5483] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  222.724790][T13236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3191'.
[  222.954446][T13246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3196'.
[  222.959383][T13244] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  222.967230][T13244] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  222.973666][T13244] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  223.080896][T13244] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.089329][T13244] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  223.104931][T13244] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  223.127425][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'.
[  223.185242][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  223.193278][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3195'.
[  223.201394][T13244] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.220842][T13244] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  223.226183][T13244] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  223.306916][T13244] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.316453][T13244] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  223.323120][T13244] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  223.418442][ T7112] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.421426][ T7112] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.424496][ T7112] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  223.443097][ T7112] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.445824][ T7112] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.448555][ T7112] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  223.463399][ T7112] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.467102][ T7112] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.469703][ T7112] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  223.482112][ T7112] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.484822][ T7112] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.489008][ T7112] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  223.708145][ T7112] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  223.790513][T13275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3208'.
[  224.014463][T13296] netlink: 'syz.2.3218': attribute type 9 has an invalid length.
[  224.017609][T13296] netlink: 'syz.2.3218': attribute type 6 has an invalid length.
[  224.215229][ T5667] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  224.234340][T13306] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  224.350610][T13321] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3227'.
[  224.823301][T13370] ip6_vti0 speed is unknown, defaulting to 1000
[  224.929065][T13384] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.931375][T13384] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.938639][T13384] batman_adv: batadv0: Interface deactivated: dummy0
[  224.977293][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.981746][T13384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.051755][ T5674] ip6_vti0 speed is unknown, defaulting to 1000
[  225.054524][ T5674] syz2: Port: 1 Link DOWN
[  225.073470][ T5689] syz0: Port: 1 Link DOWN
[  225.079572][ T7112] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.083827][ T7112] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.087528][ T5674] ip6_vti0 speed is unknown, defaulting to 1000
[  225.092898][ T7112] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.102148][ T7112] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.296064][T13419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.298871][T13420] syzkaller0: entered promiscuous mode
[  226.301422][T13420] syzkaller0: entered allmulticast mode
[  226.345528][T13426] tipc: Resetting bearer <eth:syzkaller0>
[  226.358522][T13416] tipc: Resetting bearer <eth:syzkaller0>
[  226.375771][T13416] tipc: Disabling bearer <eth:syzkaller0>
[  226.524242][T13451] __nla_validate_parse: 4 callbacks suppressed
[  226.524256][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'.
[  226.587415][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'.
[  226.591618][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'.
[  226.595693][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'.
[  226.599643][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'.
[  226.687527][T13462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.690495][T13462] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  226.692826][T13462] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  226.722322][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'.
[  226.725273][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3287'.
[  227.902367][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'.
[  227.942270][T13519] netlink: 'syz.2.3313': attribute type 1 has an invalid length.
[  227.961184][T13519] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.979308][T13519] bond0: (slave veth0_to_bond): making interface the new active one
[  227.983305][T13519] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  227.993005][T13519] macvlan2: entered promiscuous mode
[  227.994777][T13519] macvlan2: entered allmulticast mode
[  227.999808][T13519] bond0: entered promiscuous mode
[  228.004179][T13519] veth0_to_bond: entered promiscuous mode
[  228.007051][T13519] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  228.009795][T13519] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  228.018994][T13519] bond0: left promiscuous mode
[  228.020587][T13519] veth0_to_bond: left promiscuous mode
[  228.124178][T13524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3315'.
[  229.422320][T13608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'.
[  230.170797][T13641] ip6_vti0 speed is unknown, defaulting to 1000
[  230.468421][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  230.551564][T13667] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[  230.678371][ T8364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  231.288405][T13722] netlink: 'syz.1.3405': attribute type 10 has an invalid length.
[  231.292551][T13722] team_slave_0: left promiscuous mode
[  231.297328][T13722] team0 (unregistering): Port device team_slave_0 removed
[  231.299812][T13722] team_slave_1: left promiscuous mode
[  231.302536][T13722] team0 (unregistering): Port device team_slave_1 removed
[  231.586246][ T8364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  231.673023][T13735] xt_TCPMSS: Only works on TCP SYN packets
[  231.756421][T13742] tun0: tun_chr_ioctl cmd 1074025675
[  231.761918][T13742] tun0: persist enabled
[  231.767690][T13742] tun0: tun_chr_ioctl cmd 1074025675
[  231.768964][T13738] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  231.774709][T13742] tun0: persist disabled
[  232.123073][T13779] __nla_validate_parse: 4 callbacks suppressed
[  232.123086][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'.
[  232.223008][T13789] netlink: 'syz.0.3430': attribute type 6 has an invalid length.
[  232.399905][T13804] net_ratelimit: 2 callbacks suppressed
[  232.399926][T13804] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  232.417057][ T8364] IPVS: starting estimator thread 0...
[  232.525094][T13811] IPVS: using max 56 ests per chain, 134400 per kthread
[  233.011651][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'.
[  233.033457][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'.
[  233.041059][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'.
[  233.157065][T13874] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  233.576568][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3481'.
[  233.579657][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3481'.
[  234.889250][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'.
[  234.959987][T13972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3513'.
[  235.761992][T14004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3526'.
[  235.808943][T14010] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3528'.
[  236.189466][T14033] ipip0: entered promiscuous mode
[  236.723408][T14076] ip6_vti0 speed is unknown, defaulting to 1000
[  236.753954][T14082] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[  237.231874][T14105] __nla_validate_parse: 3 callbacks suppressed
[  237.231894][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  237.250959][T14105] netlink: 'syz.0.3573': attribute type 8 has an invalid length.
[  237.272959][T14105] geneve4: entered promiscuous mode
[  237.276132][T14105] geneve4: entered allmulticast mode
[  237.279828][ T5483] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.283560][ T5483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.290051][ T5483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.296612][ T5483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.128346][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'.
[  238.167387][T14129] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'.
[  238.177538][T14129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.365295][T14141] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3588'.
[  238.485916][T14147] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.620974][T14147] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.718454][T14147] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.810435][T14147] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.901026][ T7112] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.916569][ T7112] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.929194][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.949655][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.165733][T14189] openvswitch: netlink: Message has 496 unknown bytes.
[  239.175841][T14189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.938871][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'.
[  239.944707][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'.
[  239.948665][T14213] netlink: 'syz.0.3621': attribute type 19 has an invalid length.
[  239.952373][T14213] netlink: 'syz.0.3621': attribute type 20 has an invalid length.
[  240.047418][T14223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.111143][T14227] netlink: 'syz.1.3627': attribute type 10 has an invalid length.
[  240.119324][T14227] batman_adv: batadv0: Removing interface: dummy0
[  240.133418][T14227] netlink: 'syz.1.3627': attribute type 10 has an invalid length.
[  240.155837][T14227] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  241.205795][T14264] netlink: 'syz.0.3644': attribute type 10 has an invalid length.
[  241.209110][T14264] syz_tun: entered promiscuous mode
[  241.215771][T14264] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  241.390353][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3654'.
[  241.494407][T14292] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3659'.
[  241.570363][T14297] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0
[  241.747223][T14309] netlink: 'syz.0.3665': attribute type 1 has an invalid length.
[  241.821548][T14314] netlink: 'syz.1.3667': attribute type 39 has an invalid length.
[  241.850211][T14316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.945607][T14316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.014220][T14316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.086841][T14316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.305642][ T7112] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.322380][ T7112] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.343239][ T7112] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.373477][ T7112] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.690859][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'.
[  242.750002][T14357] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3688'.
[  242.754598][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3688'.
[  242.783946][T14357] syz_tun: entered allmulticast mode
[  242.791425][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'.
[  242.813358][T14357] syz_tun (unregistering): left allmulticast mode
[  243.408583][T14390] netlink: 'syz.2.3702': attribute type 1 has an invalid length.
[  243.536378][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'.
[  243.540143][T14401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3707'.
[  243.543687][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'.
[  243.548950][T14401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3707'.
[  243.614787][T14406] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3709'.
[  243.627860][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'.
[  243.877698][T14420] netlink: 'syz.0.3716': attribute type 58 has an invalid length.
[  244.099954][T14428] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  245.850685][T14582] netlink: 'syz.1.3789': attribute type 2 has an invalid length.
[  246.005694][T14591] smc: removing ib device syz2
[  246.063576][T14591] smbdirect: ib_dev[syz2] removed
[  247.734843][T14706] __nla_validate_parse: 9 callbacks suppressed
[  247.734857][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3845'.
[  247.807006][T14709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3846'.
[  247.860274][T14712] netlink: 'syz.0.3847': attribute type 29 has an invalid length.
[  247.948054][T14716] batadv_slave_0: entered promiscuous mode
[  247.950507][T14715] batadv_slave_0: left promiscuous mode
[  248.246829][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3862'.
[  248.249711][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3862'.
[  248.539647][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'.
[  248.670804][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'.
[  248.861795][T14793] ip6erspan0: entered promiscuous mode
[  248.885125][T14793] ip6erspan0: entered allmulticast mode
[  249.157984][T14811] netlink: 'syz.2.3893': attribute type 13 has an invalid length.
[  249.166976][T14811] netlink: 'syz.2.3893': attribute type 17 has an invalid length.
[  249.208588][T14810] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  249.214631][T14810] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.346596][T14822] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3896'.
[  249.398680][T14810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.414215][T14810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.615102][T14811] erspan0: left promiscuous mode
[  249.648579][T14811] 8021q: adding VLAN 0 to HW filter on device team0
[  249.656586][T14811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.681770][T14811] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.684322][T14811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.700762][T14811] batadv_slave_0: left allmulticast mode
[  249.703596][T14811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.709526][T14811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.712813][T14811] xfrm0: left allmulticast mode
[  249.723099][T14811] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  249.725684][T14811] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  249.738529][T14811] veth1_vlan: left promiscuous mode
[  249.743131][T14811] veth0_vlan: left promiscuous mode
[  249.747627][T14811] veth0_vlan: entered promiscuous mode
[  249.753475][T14811] veth1_vlan: entered promiscuous mode
[  249.762025][T14811] veth1_macvtap: left promiscuous mode
[  249.766427][T14811] veth0_macvtap: left promiscuous mode
[  249.770186][T14811] veth0_macvtap: entered promiscuous mode
[  249.786677][T14811] veth1_macvtap: entered promiscuous mode
[  249.799287][T14811] 8021q: adding VLAN 0 to HW filter on device hsr1
[  249.804005][T14811] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.812510][T14811] 8021q: adding VLAN 0 to HW filter on device bond2
[  249.826423][T14811] 8021q: adding VLAN 0 to HW filter on device bond3
[  251.311177][T14811] ip6gre1: left promiscuous mode
[  251.313063][T14811] ip6gre1: left allmulticast mode
[  251.316276][T14811] bridge5: left promiscuous mode
[  251.318351][T14811] bridge5: left allmulticast mode
[  251.325158][T14811] 8021q: adding VLAN 0 to HW filter on device bond4
[  251.331690][T14811] erspan0: entered promiscuous mode
[  251.342430][T14811] bond5: left promiscuous mode
[  251.344014][T14811] dummy0: left promiscuous mode
[  251.346790][T14811] bond5: left allmulticast mode
[  251.348542][T14811] dummy0: left allmulticast mode
[  251.352131][T14811] 8021q: adding VLAN 0 to HW filter on device bond5
[  251.357055][T14811] 8021q: adding VLAN 0 to HW filter on device 
[  251.364066][T14811] team1: left promiscuous mode
[  251.366114][T14811] team1: left allmulticast mode
[  251.368284][T14811] 8021q: adding VLAN 0 to HW filter on device team1
[  251.371536][T14811] team2: left promiscuous mode
[  251.373433][T14811] team2: left allmulticast mode
[  251.375758][T14811] 8021q: adding VLAN 0 to HW filter on device team2
[  251.379815][T14811] 8021q: adding VLAN 0 to HW filter on device eth0
[  251.393688][T14811] 8021q: adding VLAN 0 to HW filter on device eth1
[  251.403211][T14811] 8021q: adding VLAN 0 to HW filter on device eth2
[  251.414787][T14811] 8021q: adding VLAN 0 to HW filter on device eth3
[  251.423997][T14811] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.495938][T14824] vlan0: entered promiscuous mode
[  251.497889][T14824] bridge0: entered promiscuous mode
[  251.520260][ T5483] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  251.524060][ T5483] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  251.527279][ T5483] bond3: (slave veth3): making interface the new active one
[  251.533118][ T5483] bond3: active interface up!
[  251.815791][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  251.875969][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3907'.
[  252.680311][T14893] netlink: 'syz.1.3924': attribute type 61 has an invalid length.
[  252.811366][T14907] syzkaller0: entered promiscuous mode
[  252.814522][T14907] syzkaller0: entered allmulticast mode
[  253.309867][T14940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3943'.
[  253.448234][T14946] netlink: 'syz.1.3945': attribute type 62 has an invalid length.
[  253.956322][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3955'.
[  254.068636][T14974] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  254.169636][T14976] tap0: tun_chr_ioctl cmd 1074025677
[  254.171637][T14976] tap0: linktype set to 6
[  254.192490][T14978] sctp: [Deprecated]: syz.0.3960 (pid 14978) Use of int in max_burst socket option deprecated.
[  254.192490][T14978] Use struct sctp_assoc_value instead
[  254.467652][T15004] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  255.326847][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'.
[  255.651162][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3992'.
[  255.684360][T15058] 8021q: adding VLAN 0 to HW filter on device bond6
[  255.689737][T15058] netlink: 'syz.0.3992': attribute type 8 has an invalid length.
[  255.724566][T15058] bond6: (slave geneve5): Enslaving as an active interface with an up link
[  255.733620][ T5667] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  255.741150][ T5667] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  255.755364][T15058] bond6 (unregistering): (slave geneve5): Releasing backup interface
[  255.771717][T15058] bond6 (unregistering): Released all slaves
[  255.782226][ T5667] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  255.788827][ T5667] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  255.887686][T15082] netlink: 'syz.2.4003': attribute type 3 has an invalid length.
[  255.891125][T15082] netlink: 'syz.2.4003': attribute type 1 has an invalid length.
[  255.894332][T15082] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4003'.
[  255.898877][T15082] NCSI netlink: No device for ifindex 2147483648
[  256.145156][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  256.154682][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4006'.
[  256.164323][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4006'.
[  256.213023][T15105] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4013'.
[  256.902763][T15138] netlink: 1412 bytes leftover after parsing attributes in process `syz.1.4030'.
[  256.971639][T15138] netlink: 'syz.1.4030': attribute type 10 has an invalid length.
[  257.038249][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'.
[  257.734634][T15206] netlink: 'syz.0.4059': attribute type 21 has an invalid length.
[  257.737312][T15206] netlink: 'syz.0.4059': attribute type 4 has an invalid length.
[  257.739733][T15206] netlink: 'syz.0.4059': attribute type 5 has an invalid length.
[  257.827234][T15210] x_tables: ip_tables: esp match: only valid for protocol 50
[  257.975175][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  258.692274][T15212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  258.941916][T15256] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  258.962599][T15258] __nla_validate_parse: 5 callbacks suppressed
[  258.962612][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4077'.
[  259.140856][T15275] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4084'.
[  259.144460][T15275] unsupported nlmsg_type 40
[  259.344044][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4090'.
[  259.351834][T15293] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4090'.
[  259.354803][T15293] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4090'.
[  259.357984][T15293] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4090'.
[  259.589525][T15309] netlink: 'syz.2.4098': attribute type 3 has an invalid length.
[  260.243157][T15344] netlink: 'syz.0.4112': attribute type 1 has an invalid length.
[  261.125276][T15346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  261.192459][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  261.678999][T15431] xt_hashlimit: size too large, truncated to 1048576
[  261.858136][T15448] xfrm1: entered allmulticast mode
[  261.927975][T15460] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4150'.
[  261.932449][T15460] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4150'.
[  261.938702][T15460] 0{X: renamed from gretap0
[  261.941654][T15460] 0{X: entered allmulticast mode
[  261.944121][T15460] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  262.201758][T15492] x_tables: duplicate underflow at hook 4
[  262.216795][T15496] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4167'.
[  262.219608][T15496] netlink: 'syz.0.4167': attribute type 1 has an invalid length.
[  262.279315][T15504] veth1: entered promiscuous mode
[  262.281139][T15504] veth1: entered allmulticast mode
[  262.330418][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4176'.
[  262.339966][T15514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  262.343434][T15514] gretap2: entered allmulticast mode
[  262.379339][T15518] bond8: option arp_all_targets: invalid value (129)
[  262.383958][T15518] bond8 (unregistering): Released all slaves
[  262.386013][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  262.562133][T15538] netlink: 'syz.1.4188': attribute type 8 has an invalid length.
[  262.793287][T15561] pim6reg: left allmulticast mode
[  262.969633][T15568] netlink: 'syz.2.4200': attribute type 2 has an invalid length.
[  263.013315][T15575] SET target dimension over the limit!
[  263.072727][T15581] netlink: 'syz.0.4203': attribute type 1 has an invalid length.
[  263.077558][T15581] netlink: 'syz.0.4203': attribute type 1 has an invalid length.
[  263.080933][T15580] dvmrp0: entered allmulticast mode
[  263.138125][T15587] netlink: 'syz.2.4208': attribute type 12 has an invalid length.
[  263.359724][T15604] netlink: 'syz.1.4213': attribute type 4 has an invalid length.
[  264.085539][T15607] __nla_validate_parse: 2 callbacks suppressed
[  264.085560][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'.
[  264.096831][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'.
[  264.288093][T15627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4226'.
[  264.297619][T15627] ip6gre1: entered promiscuous mode
[  264.299730][T15627] ip6gre1: entered allmulticast mode
[  264.303880][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.310799][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.337446][ T5689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.465496][ T5689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.509895][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4232'.
[  264.535459][ T5689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.581363][   T53] Bluetooth: hci2: link tx timeout
[  264.588860][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.595456][   T53] Bluetooth: hci2: link tx timeout
[  264.597521][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  265.025221][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.042726][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4245'.
[  265.197815][T15691] netlink: 'syz.2.4253': attribute type 2 has an invalid length.
[  266.577910][T15817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.585977][T15817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.625339][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  266.646446][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'.
[  267.013280][T15838] netlink: 'syz.2.4315': attribute type 10 has an invalid length.
[  267.023659][T15838] bond5: (slave dummy0): Releasing active interface
[  267.040436][T15838] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  267.044311][T15838] team0: Failed to send options change via netlink (err -105)
[  267.047801][T15838] team0: Port device dummy0 added
[  267.053201][T15838] netlink: 'syz.2.4315': attribute type 10 has an invalid length.
[  267.060860][T15838] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  267.082994][T15838] team0: Failed to send options change via netlink (err -105)
[  267.086402][T15838] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  267.091544][T15838] team0: Port device dummy0 removed
[  267.399039][T15857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4324'.
[  267.783904][T15885] xt_CT: No such helper "snmp"
[  267.926149][T15896] netlink: 'syz.1.4342': attribute type 10 has an invalid length.
[  268.235326][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.672235][T15938] block nbd2: not configured, cannot reconfigure
[  268.705563][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  268.864645][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4366'.
[  269.327233][T15971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  269.424927][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4380'.
[  269.520434][T15991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'.
[  269.943559][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4394'.
[  269.947480][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4394'.
[  269.953282][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4394'.
[  270.014863][T16017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4395'.
[  270.018896][T16017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4395'.
[  270.370222][T16049] sock: sock_set_timeout: `syz.2.4409' (pid 16049) tries to set negative timeout
[  270.574639][T16061] netlink: 'syz.1.4413': attribute type 2 has an invalid length.
[  271.023551][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4429'.
[  271.249472][T16113] raw_sendmsg: syz.1.4436 forgot to set AF_INET. Fix it!
[  271.786189][T16147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.817116][T16147] syzkaller0: entered promiscuous mode
[  271.818972][T16147] syzkaller0: entered allmulticast mode
[  271.821248][T16147] tipc: Resetting bearer <eth:syzkaller0>
[  271.883179][   T62] tipc: Resetting bearer <eth:syzkaller0>
[  271.886958][T16146] tipc: Resetting bearer <eth:syzkaller0>
[  271.998631][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4454'.
[  272.150585][T16154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4454'.
[  272.170498][T16154] nbd: device at index 64 is going down
[  274.413185][T16146] tipc: Disabling bearer <eth:syzkaller0>
[  274.418124][T16172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  274.421543][T16172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  275.848419][T16280] netlink: 'syz.0.4507': attribute type 1 has an invalid length.
[  275.915121][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  276.233928][T16312] netlink: 'syz.2.4520': attribute type 13 has an invalid length.
[  277.121838][T16327] sch_fq: defrate 4294967293 ignored.
[  277.193152][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4529'.
[  277.272202][T16339] bond6: option updelay: invalid value (18446744073709518847)
[  277.276226][T16339] bond6: option updelay: allowed values 0 - 2147483647
[  277.282996][T16339] bond6 (unregistering): Released all slaves
[  277.489989][T16361] netlink: 'syz.2.4539': attribute type 25 has an invalid length.
[  277.493270][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'.
[  277.605863][T16361] netlink: 'syz.2.4539': attribute type 25 has an invalid length.
[  277.609338][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'.
[  277.744794][T16373] netlink: 'syz.0.4546': attribute type 10 has an invalid length.
[  278.035748][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  278.039318][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'.
[  279.831599][T16457] vlan3: entered promiscuous mode
[  279.833242][T16457] geneve1: entered promiscuous mode
[  279.836163][T16457] vlan3: entered allmulticast mode
[  279.838049][T16457] geneve1: entered allmulticast mode
[  279.872426][T16459] netlink: 'syz.2.4584': attribute type 8 has an invalid length.
[  280.135459][T16495] veth0_macvtap: entered allmulticast mode
[  280.137775][T16495] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  282.305635][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  282.916799][T16465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  282.991487][T16527] sock: sock_set_timeout: `syz.1.4611' (pid 16527) tries to set negative timeout
[  283.096410][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4613'.
[  283.188364][T16545] netlink: 'syz.1.4620': attribute type 1 has an invalid length.
[  283.609413][T16570] sctp: [Deprecated]: syz.0.4631 (pid 16570) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.609413][T16570] Use struct sctp_sack_info instead
[  284.123901][T16608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4646'.
[  284.429176][T16634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.432849][T16634] syzkaller0: entered promiscuous mode
[  284.436748][T16634] syzkaller0: entered allmulticast mode
[  284.473166][T16634] tipc: Resetting bearer <eth:syzkaller0>
[  284.478908][T16633] tipc: Resetting bearer <eth:syzkaller0>
[  284.516243][T16633] tipc: Disabling bearer <eth:syzkaller0>
[  284.536344][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4664'.
[  284.894919][T16666] IPv6: syztnl2: Disabled Multicast RS
[  284.992238][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4678'.
[  285.331094][T16696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4688'.
[  285.382251][T16696] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  285.389547][T16696] bond8 (unregistering): Released all slaves
[  285.424209][T16691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.427575][T16691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.530370][T16704] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4689'.
[  285.730666][T16723] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  286.320933][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4713'.
[  287.054473][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4730'.
[  287.137666][T16832] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  287.161789][T16834] geneve6: entered promiscuous mode
[  287.189455][   T13] bond0: (slave veth0_to_bond): link status definitely down, disabling slave
[  287.194870][   T13] bond0: now running without any active interface!
[  287.354070][T16850] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.4744'.
[  287.363827][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4744'.
[  287.684212][T16866] smc: net device wlan0 applied user defined pnetid SYZ0
[  287.951586][T16883] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  288.800903][T16926] __nla_validate_parse: 3 callbacks suppressed
[  288.800918][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4779'.
[  288.923646][T16932] netlink: 'syz.2.4782': attribute type 2 has an invalid length.
[  289.239950][T16956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.244348][T16956] IPv6: NLM_F_CREATE should be set when creating new route
[  289.246819][T16956] IPv6: NLM_F_CREATE should be set when creating new route
[  289.249515][T16956] IPv6: NLM_F_CREATE should be set when creating new route
[  289.256106][T16956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.444410][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4810'.
[  290.589857][T17015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4818'.
[  290.743840][T17036] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  290.817283][T17042] netlink: 'syz.1.4830': attribute type 7 has an invalid length.
[  290.819961][T17042] netlink: 'syz.1.4830': attribute type 8 has an invalid length.
[  290.896006][T17052] wg2: Caught tx_queue_len zero misconfig
[  291.265130][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  291.300157][T17082] nbd: must specify at least one socket
[  291.454748][T17094] sock: sock_set_timeout: `syz.2.4854' (pid 17094) tries to set negative timeout
[  291.520155][T17096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.526201][T17096] syzkaller0: entered promiscuous mode
[  291.528625][T17096] syzkaller0: entered allmulticast mode
[  291.570353][T17096] tipc: Resetting bearer <eth:syzkaller0>
[  291.577122][T17095] tipc: Resetting bearer <eth:syzkaller0>
[  291.608889][T17095] tipc: Disabling bearer <eth:syzkaller0>
[  291.621614][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'.
[  291.630870][T17106] xt_limit: Overflow, try lower: 268435456/134217728
[  291.824911][T17120] ------------[ cut here ]------------
[  291.828880][T17120] !cfg80211_chandef_valid(chandef)
[  291.828892][T17120] WARNING: net/wireless/chan.c:904 at cfg80211_chandef_dfs_required+0xe0c/0xed0, CPU#1: syz.2.4867/17120
[  291.834685][T17120] Modules linked in:
[  291.836587][T17120] CPU: 1 UID: 0 PID: 17120 Comm: syz.2.4867 Not tainted syzkaller #0 PREEMPT(full) 
[  291.839943][T17120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.843466][T17120] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0
[  291.845981][T17120] Code: de e8 18 ed c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 c9 e8 c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 b5 e8 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 32 78 a5 00 89 d1 80 e1
[  291.851951][T17120] RSP: 0018:ffffc9000724f6e0 EFLAGS: 00010283
[  291.853899][T17120] RAX: ffffffff8b04dbab RBX: ffff88819f52d8e8 RCX: 0000000000080000
[  291.856664][T17120] RDX: ffffc9000b8c9000 RSI: 000000000000062b RDI: 000000000000062c
[  291.859527][T17120] RBP: ffffc9000724f870 R08: ffffffff8225a3ef R09: ffff88823c63f5e8
[  291.862016][T17120] R10: dffffc0000000000 R11: ffffed1037732558 R12: 0000000000000006
[  291.864618][T17120] R13: dffffc0000000000 R14: ffffc9000724f9e0 R15: ffff88819f52c018
[  291.868317][T17120] FS:  00007f37ffc4c6c0(0000) GS:ffff8882a927a000(0000) knlGS:0000000000000000
[  291.871584][T17120] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.873608][T17120] CR2: 0000200000000040 CR3: 000000017628e000 CR4: 00000000000006f0
[  291.876329][T17120] Call Trace:
[  291.877371][T17120]  <TASK>
[  291.878559][T17120]  ? kvfree_call_rcu+0x9f/0x430
[  291.880014][T17120]  ? ieee80211_free_chanctx+0x2dc/0x390
[  291.881649][T17120]  ? __pfx_ieee80211_free_chanctx+0x10/0x10
[  291.883419][T17120]  ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10
[  291.885708][T17120]  _ieee80211_link_use_channel+0x28c/0x860
[  291.887540][T17120]  ? __pfx___ieee80211_link_release_channel+0x10/0x10
[  291.889573][T17120]  ? __pfx__ieee80211_link_use_channel+0x10/0x10
[  291.891505][T17120]  ieee80211_set_monitor_channel+0x6fd/0xa10
[  291.893826][T17120]  ? __pfx_ieee80211_set_monitor_channel+0x10/0x10
[  291.896720][T17120]  cfg80211_set_monitor_channel+0x22d/0x5f0
[  291.899270][T17120]  cfg80211_wext_siwfreq+0x717/0x850
[  291.901082][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  291.902846][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  291.904593][T17120]  ioctl_standard_call+0xcb/0x1b0
[  291.906722][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  291.908671][T17120]  wext_ioctl_dispatch+0xee/0x410
[  291.910270][T17120]  ? __pfx_ioctl_standard_call+0x10/0x10
[  291.912243][T17120]  wext_handle_ioctl+0x10f/0x1d0
[  291.914156][T17120]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  291.916982][T17120]  ? do_futex+0x333/0x420
[  291.918674][T17120]  ? file_init_path+0x434/0x590
[  291.920576][T17120]  sock_ioctl+0x159/0x7f0
[  291.922250][T17120]  ? __pfx_sock_ioctl+0x10/0x10
[  291.924126][T17120]  ? __fget_files+0x2a/0x420
[  291.926003][T17120]  ? __fget_files+0x3a0/0x420
[  291.927597][T17120]  ? __fget_files+0x2a/0x420
[  291.929139][T17120]  ? bpf_lsm_file_ioctl+0x9/0x20
[  291.930997][T17120]  ? __pfx_sock_ioctl+0x10/0x10
[  291.932810][T17120]  __se_sys_ioctl+0xfc/0x170
[  291.934264][T17120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.936349][T17120]  do_syscall_64+0x15f/0xf80
[  291.937792][T17120]  ? trace_irq_disable+0x3b/0x140
[  291.939310][T17120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.941274][T17120] RIP: 0033:0x7f37fed9ce59
[  291.942987][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.950377][T17120] RSP: 002b:00007f37ffc4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.953274][T17120] RAX: ffffffffffffffda RBX: 00007f37ff015fa0 RCX: 00007f37fed9ce59
[  291.957266][T17120] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003
[  291.960133][T17120] RBP: 00007f37fee32d6f R08: 0000000000000000 R09: 0000000000000000
[  291.962622][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.965516][T17120] R13: 00007f37ff016038 R14: 00007f37ff015fa0 R15: 00007ffc4cf0bf48
[  291.968160][T17120]  </TASK>
[  291.969134][T17120] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  291.971502][T17120] CPU: 1 UID: 0 PID: 17120 Comm: syz.2.4867 Not tainted syzkaller #0 PREEMPT(full) 
[  291.974384][T17120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.977714][T17120] Call Trace:
[  291.979017][T17120]  <TASK>
[  291.980195][T17120]  vpanic+0x56c/0xa60
[  291.981759][T17120]  ? __pfx__printk+0x10/0x10
[  291.983253][T17120]  ? __pfx_vpanic+0x10/0x10
[  291.984830][T17120]  ? is_bpf_text_address+0x292/0x2b0
[  291.986603][T17120]  ? is_bpf_text_address+0x26/0x2b0
[  291.988263][T17120]  panic+0xc5/0xd0
[  291.989469][T17120]  ? __pfx_panic+0x10/0x10
[  291.990989][T17120]  __warn+0x315/0x4c0
[  291.992295][T17120]  ? cfg80211_chandef_dfs_required+0xe0c/0xed0
[  291.994240][T17120]  ? cfg80211_chandef_dfs_required+0xe0c/0xed0
[  291.996163][T17120]  __report_bug+0x29a/0x540
[  291.997646][T17120]  ? cfg80211_chandef_dfs_required+0xe0c/0xed0
[  291.999625][T17120]  ? __pfx___report_bug+0x10/0x10
[  292.001191][T17120]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  292.002985][T17120]  ? mac80211_hwsim_config+0x129/0xd30
[  292.004694][T17120]  ? __pfx___mutex_lock+0x10/0x10
[  292.006302][T17120]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  292.008301][T17120]  ? cfg80211_chandef_dfs_required+0xe0c/0xed0
[  292.010237][T17120]  report_bug+0x16a/0x220
[  292.011941][T17120]  ? cfg80211_chandef_dfs_required+0xe0c/0xed0
[  292.014301][T17120]  ? cfg80211_chandef_dfs_required+0xe0e/0xed0
[  292.016700][T17120]  handle_bug+0x9c/0x200
[  292.018361][T17120]  exc_invalid_op+0x1a/0x50
[  292.020136][T17120]  asm_exc_invalid_op+0x1a/0x20
[  292.022044][T17120] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0
[  292.024638][T17120] Code: de e8 18 ed c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 c9 e8 c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 b5 e8 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 32 78 a5 00 89 d1 80 e1
[  292.032031][T17120] RSP: 0018:ffffc9000724f6e0 EFLAGS: 00010283
[  292.033949][T17120] RAX: ffffffff8b04dbab RBX: ffff88819f52d8e8 RCX: 0000000000080000
[  292.036290][T17120] RDX: ffffc9000b8c9000 RSI: 000000000000062b RDI: 000000000000062c
[  292.038735][T17120] RBP: ffffc9000724f870 R08: ffffffff8225a3ef R09: ffff88823c63f5e8
[  292.041367][T17120] R10: dffffc0000000000 R11: ffffed1037732558 R12: 0000000000000006
[  292.043744][T17120] R13: dffffc0000000000 R14: ffffc9000724f9e0 R15: ffff88819f52c018
[  292.046127][T17120]  ? __kfree_rcu_sheaf+0x1f/0x5d0
[  292.047672][T17120]  ? cfg80211_chandef_dfs_required+0xe0b/0xed0
[  292.049650][T17120]  ? kvfree_call_rcu+0x9f/0x430
[  292.051238][T17120]  ? ieee80211_free_chanctx+0x2dc/0x390
[  292.053012][T17120]  ? __pfx_ieee80211_free_chanctx+0x10/0x10
[  292.054838][T17120]  ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10
[  292.056782][T17120]  _ieee80211_link_use_channel+0x28c/0x860
[  292.058527][T17120]  ? __pfx___ieee80211_link_release_channel+0x10/0x10
[  292.060735][T17120]  ? __pfx__ieee80211_link_use_channel+0x10/0x10
[  292.062693][T17120]  ieee80211_set_monitor_channel+0x6fd/0xa10
[  292.064523][T17120]  ? __pfx_ieee80211_set_monitor_channel+0x10/0x10
[  292.066968][T17120]  cfg80211_set_monitor_channel+0x22d/0x5f0
[  292.069250][T17120]  cfg80211_wext_siwfreq+0x717/0x850
[  292.071278][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  292.073539][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  292.075804][T17120]  ioctl_standard_call+0xcb/0x1b0
[  292.077592][T17120]  ? __pfx_cfg80211_wext_siwfreq+0x10/0x10
[  292.079345][T17120]  wext_ioctl_dispatch+0xee/0x410
[  292.080865][T17120]  ? __pfx_ioctl_standard_call+0x10/0x10
[  292.082550][T17120]  wext_handle_ioctl+0x10f/0x1d0
[  292.084031][T17120]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  292.085662][T17120]  ? do_futex+0x333/0x420
[  292.086959][T17120]  ? file_init_path+0x434/0x590
[  292.088489][T17120]  sock_ioctl+0x159/0x7f0
[  292.089915][T17120]  ? __pfx_sock_ioctl+0x10/0x10
[  292.091571][T17120]  ? __fget_files+0x2a/0x420
[  292.093364][T17120]  ? __fget_files+0x3a0/0x420
[  292.095116][T17120]  ? __fget_files+0x2a/0x420
[  292.096763][T17120]  ? bpf_lsm_file_ioctl+0x9/0x20
[  292.098596][T17120]  ? __pfx_sock_ioctl+0x10/0x10
[  292.100153][T17120]  __se_sys_ioctl+0xfc/0x170
[  292.101682][T17120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.103704][T17120]  do_syscall_64+0x15f/0xf80
[  292.105123][T17120]  ? trace_irq_disable+0x3b/0x140
[  292.106726][T17120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.108511][T17120] RIP: 0033:0x7f37fed9ce59
[  292.109842][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.115905][T17120] RSP: 002b:00007f37ffc4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.118436][T17120] RAX: ffffffffffffffda RBX: 00007f37ff015fa0 RCX: 00007f37fed9ce59
[  292.120804][T17120] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003
[  292.123156][T17120] RBP: 00007f37fee32d6f R08: 0000000000000000 R09: 0000000000000000
[  292.125514][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.128061][T17120] R13: 00007f37ff016038 R14: 00007f37ff015fa0 R15: 00007ffc4cf0bf48
[  292.130725][T17120]  </TASK>
[  292.132375][T17120] Kernel Offset: disabled
[  292.133716][T17120] Rebooting in 86400 seconds..
