syzkaller login: [ 91.855495][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:42866' (ED25519) to the list of known hosts. 2026/01/20 05:47:32 parsed 1 programs [ 142.412604][ T5351] cgroup: Unknown subsys name 'net' [ 142.484278][ T5351] cgroup: Unknown subsys name 'cpuset' [ 142.490553][ T5351] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 143.051947][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.055143][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.220529][ T5351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 148.729730][ T5367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.733670][ T5367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.736871][ T5367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.740959][ T5367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.744442][ T5367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.757447][ T5365] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 152.040243][ T5378] syz-executor (5378) used greatest stack depth: 17000 bytes left [ 154.927246][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.948196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.371033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.374898][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.923734][ T5400] chnl_net:caif_netlink_parms(): no params data found [ 156.160543][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.168996][ T5400] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.172310][ T5400] bridge_slave_0: entered allmulticast mode [ 156.199497][ T5400] bridge_slave_0: entered promiscuous mode [ 156.210428][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.218900][ T5400] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.228724][ T5400] bridge_slave_1: entered allmulticast mode [ 156.243944][ T5400] bridge_slave_1: entered promiscuous mode [ 156.321018][ T5400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.342575][ T5400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.400574][ T5400] team0: Port device team_slave_0 added [ 156.409559][ T5400] team0: Port device team_slave_1 added [ 156.461153][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.464143][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.498760][ T5400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.518816][ T5400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.521707][ T5400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.546250][ T5400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.636242][ T5400] hsr_slave_0: entered promiscuous mode [ 156.659348][ T5400] hsr_slave_1: entered promiscuous mode [ 156.991350][ T5400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.029613][ T5400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.036769][ T5400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.052322][ T5400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.221947][ T5400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.249859][ T5400] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.273014][ T3927] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.275943][ T3927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.294466][ T3927] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.297506][ T3927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.655372][ T5400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.066726][ T5400] veth0_vlan: entered promiscuous mode [ 158.102172][ T5400] veth1_vlan: entered promiscuous mode [ 158.146756][ T5400] veth0_macvtap: entered promiscuous mode [ 158.163224][ T5400] veth1_macvtap: entered promiscuous mode [ 158.210615][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.231993][ T5400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.268336][ T3927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.288148][ T3927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.299562][ T3927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.303642][ T3927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/20 05:47:51 executed programs: 0 [ 158.658987][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.663755][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.667556][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.678609][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.682303][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.900190][ T4683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.910767][ T4683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.914744][ T4683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.918427][ T4683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.922345][ T4683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.935549][ T5482] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.952572][ T5482] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.957319][ T5482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.969593][ T5482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.972967][ T5482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.004592][ T4683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.020145][ T4683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.073104][ T4683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.091831][ T4683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.095916][ T4683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.141966][ T4683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.149479][ T4683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.153186][ T4683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.157065][ T4683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.169738][ T4683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.220777][ T5486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.235924][ T5486] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.239866][ T5486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.243726][ T5486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.249248][ T5486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.738756][ T5482] Bluetooth: hci0: command tx timeout [ 160.748071][ T5479] chnl_net:caif_netlink_parms(): no params data found [ 160.972848][ T5482] Bluetooth: hci1: command tx timeout [ 161.049848][ T5482] Bluetooth: hci3: command tx timeout [ 161.208811][ T5486] Bluetooth: hci2: command tx timeout [ 161.211527][ T5482] Bluetooth: hci4: command tx timeout [ 161.288811][ T5482] Bluetooth: hci5: command tx timeout [ 161.311108][ T5479] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.314456][ T5479] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.317639][ T5479] bridge_slave_0: entered allmulticast mode [ 161.325429][ T5479] bridge_slave_0: entered promiscuous mode [ 161.409637][ T5479] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.412846][ T5479] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.416104][ T5479] bridge_slave_1: entered allmulticast mode [ 161.429698][ T5479] bridge_slave_1: entered promiscuous mode [ 161.468333][ T3927] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.636150][ T3927] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.682781][ T5479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.699524][ T5479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.789949][ T3927] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.875326][ T5479] team0: Port device team_slave_0 added [ 161.910958][ T3927] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.933548][ T5479] team0: Port device team_slave_1 added [ 162.042849][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.046244][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.059245][ T5479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.111106][ T5479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.114178][ T5479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.127670][ T5479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.389175][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 162.421612][ T5480] chnl_net:caif_netlink_parms(): no params data found [ 162.470289][ T5479] hsr_slave_0: entered promiscuous mode [ 162.479430][ T5479] hsr_slave_1: entered promiscuous mode [ 162.482872][ T5479] debugfs: 'hsr0' already exists in 'hsr' [ 162.485439][ T5479] Cannot create hsr debugfs directory [ 162.504546][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 162.559682][ T5476] chnl_net:caif_netlink_parms(): no params data found [ 162.622307][ T3927] bridge_slave_1: left allmulticast mode [ 162.626925][ T3927] bridge_slave_1: left promiscuous mode [ 162.630702][ T3927] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.638356][ T3927] bridge_slave_0: left allmulticast mode [ 162.642217][ T3927] bridge_slave_0: left promiscuous mode [ 162.644933][ T3927] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.808942][ T5482] Bluetooth: hci0: command tx timeout [ 162.894722][ T3927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.903300][ T3927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.908218][ T3927] bond0 (unregistering): Released all slaves [ 163.014565][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 163.049026][ T5482] Bluetooth: hci1: command tx timeout [ 163.130102][ T5482] Bluetooth: hci3: command tx timeout [ 163.142422][ T3927] hsr_slave_0: left promiscuous mode [ 163.149158][ T3927] hsr_slave_1: left promiscuous mode [ 163.159401][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.162845][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.179631][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.182885][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.212038][ T3927] veth1_macvtap: left promiscuous mode [ 163.214730][ T3927] veth0_macvtap: left promiscuous mode [ 163.217428][ T3927] veth1_vlan: left promiscuous mode [ 163.243075][ T3927] veth0_vlan: left promiscuous mode [ 163.292354][ T5486] Bluetooth: hci2: command tx timeout [ 163.294932][ T5482] Bluetooth: hci4: command tx timeout [ 163.368686][ T5482] Bluetooth: hci5: command tx timeout [ 163.603394][ T3927] team0 (unregistering): Port device team_slave_1 removed [ 163.633246][ T3927] team0 (unregistering): Port device team_slave_0 removed [ 164.163489][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.166879][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.174756][ T5471] bridge_slave_0: entered allmulticast mode [ 164.180562][ T5471] bridge_slave_0: entered promiscuous mode [ 164.199871][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.203186][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.206225][ T5480] bridge_slave_0: entered allmulticast mode [ 164.210590][ T5480] bridge_slave_0: entered promiscuous mode [ 164.288739][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.291964][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.295351][ T5471] bridge_slave_1: entered allmulticast mode [ 164.308817][ T5471] bridge_slave_1: entered promiscuous mode [ 164.340084][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.343674][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.347293][ T5480] bridge_slave_1: entered allmulticast mode [ 164.370640][ T5480] bridge_slave_1: entered promiscuous mode [ 164.374223][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.377365][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.387594][ T5492] bridge_slave_0: entered allmulticast mode [ 164.400290][ T5492] bridge_slave_0: entered promiscuous mode [ 164.506547][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.541625][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.544769][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.547873][ T5492] bridge_slave_1: entered allmulticast mode [ 164.552307][ T5492] bridge_slave_1: entered promiscuous mode [ 164.583666][ T5476] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.586755][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.597531][ T5476] bridge_slave_0: entered allmulticast mode [ 164.610033][ T5476] bridge_slave_0: entered promiscuous mode [ 164.616445][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.687924][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.692306][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.695628][ T5476] bridge_slave_1: entered allmulticast mode [ 164.699821][ T5476] bridge_slave_1: entered promiscuous mode [ 164.714870][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.742385][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.746078][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.751250][ T5491] bridge_slave_0: entered allmulticast mode [ 164.754972][ T5491] bridge_slave_0: entered promiscuous mode [ 164.782447][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.789246][ T5471] team0: Port device team_slave_0 added [ 164.795315][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.805526][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.809815][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.813226][ T5491] bridge_slave_1: entered allmulticast mode [ 164.817632][ T5491] bridge_slave_1: entered promiscuous mode [ 164.845439][ T5471] team0: Port device team_slave_1 added [ 164.851341][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.878941][ T5476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.888850][ T5482] Bluetooth: hci0: command tx timeout [ 164.962534][ T5476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.967579][ T5480] team0: Port device team_slave_0 added [ 164.983728][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.986828][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.999014][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.010950][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.025640][ T5480] team0: Port device team_slave_1 added [ 165.029812][ T5492] team0: Port device team_slave_0 added [ 165.035390][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.038295][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.050713][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.059840][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.067511][ T5492] team0: Port device team_slave_1 added [ 165.116969][ T5476] team0: Port device team_slave_0 added [ 165.129397][ T5482] Bluetooth: hci1: command tx timeout [ 165.153970][ T5476] team0: Port device team_slave_1 added [ 165.167400][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.172752][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.185469][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.197355][ T5491] team0: Port device team_slave_0 added [ 165.208864][ T5482] Bluetooth: hci3: command tx timeout [ 165.217528][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.223277][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.235522][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.250972][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.254093][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.267538][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.275271][ T5491] team0: Port device team_slave_1 added [ 165.286551][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.290743][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.301850][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.337645][ T5471] hsr_slave_0: entered promiscuous mode [ 165.340872][ T5471] hsr_slave_1: entered promiscuous mode [ 165.359791][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.363001][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.375497][ T5486] Bluetooth: hci2: command tx timeout [ 165.377933][ T5482] Bluetooth: hci4: command tx timeout [ 165.398642][ T5476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.431226][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.433888][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.449303][ T5482] Bluetooth: hci5: command tx timeout [ 165.460400][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.472695][ T5479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.493904][ T5476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.496866][ T5476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.531141][ T5476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.536761][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.550249][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.574485][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.605890][ T5479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.699951][ T5479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.753201][ T5480] hsr_slave_0: entered promiscuous mode [ 165.756465][ T5480] hsr_slave_1: entered promiscuous mode [ 165.762061][ T5480] debugfs: 'hsr0' already exists in 'hsr' [ 165.764461][ T5480] Cannot create hsr debugfs directory [ 165.767901][ T5479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.780553][ T5492] hsr_slave_0: entered promiscuous mode [ 165.783880][ T5492] hsr_slave_1: entered promiscuous mode [ 165.786907][ T5492] debugfs: 'hsr0' already exists in 'hsr' [ 165.790705][ T5492] Cannot create hsr debugfs directory [ 165.870944][ T5491] hsr_slave_0: entered promiscuous mode [ 165.874195][ T5491] hsr_slave_1: entered promiscuous mode [ 165.877094][ T5491] debugfs: 'hsr0' already exists in 'hsr' [ 165.880708][ T5491] Cannot create hsr debugfs directory [ 165.887893][ T5476] hsr_slave_0: entered promiscuous mode [ 165.891887][ T5476] hsr_slave_1: entered promiscuous mode [ 165.895166][ T5476] debugfs: 'hsr0' already exists in 'hsr' [ 165.897867][ T5476] Cannot create hsr debugfs directory [ 166.593293][ T5471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.616777][ T5471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.651262][ T5471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.664689][ T5479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.706217][ T5471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.787506][ T5479] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.854254][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.857179][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.893870][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.896691][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.968866][ T5482] Bluetooth: hci0: command tx timeout [ 167.121372][ T5480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.162861][ T5480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.186608][ T5480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.208048][ T5480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.218878][ T5482] Bluetooth: hci1: command tx timeout [ 167.290751][ T5482] Bluetooth: hci3: command tx timeout [ 167.390022][ T5492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.429181][ T5492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.449290][ T5486] Bluetooth: hci2: command tx timeout [ 167.451682][ T5482] Bluetooth: hci4: command tx timeout [ 167.470728][ T5492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.493383][ T5492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.520029][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.529993][ T5482] Bluetooth: hci5: command tx timeout [ 167.605859][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.655041][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.658533][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.712013][ T5476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.732340][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.735601][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.750260][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.760548][ T5476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.832847][ T5476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.867314][ T5476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.013130][ T5491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.049475][ T5491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.081257][ T5491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.111430][ T5491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.259651][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.347709][ T5479] veth0_vlan: entered promiscuous mode [ 168.405020][ T5480] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.492945][ T5479] veth1_vlan: entered promiscuous mode [ 168.540025][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.543382][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.613057][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.616239][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.664299][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.730816][ T5476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.781062][ T5479] veth0_macvtap: entered promiscuous mode [ 168.851557][ T5479] veth1_macvtap: entered promiscuous mode [ 168.872042][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.893188][ T5476] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.920788][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.937013][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.941170][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.000092][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.003345][ T3108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.043185][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.070202][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.073445][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.099977][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.103217][ T3108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.111600][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.117753][ T5479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.201417][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.272013][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.317410][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.351869][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.355469][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.389106][ T5471] veth0_vlan: entered promiscuous mode [ 169.471952][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.475442][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.505674][ T5471] veth1_vlan: entered promiscuous mode [ 169.571092][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.574409][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.751278][ T5471] veth0_macvtap: entered promiscuous mode [ 169.866382][ T5471] veth1_macvtap: entered promiscuous mode [ 169.887171][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.901419][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.905956][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.007533][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.019461][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.035932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.109302][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.167899][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/20 05:48:03 executed programs: 12 [ 170.205170][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.276327][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.306925][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.325663][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.384280][ T5476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.392553][ T5679] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 170.416497][ T5679] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.450564][ T5679] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 170.508419][ T5480] veth0_vlan: entered promiscuous mode [ 170.639462][ T5480] veth1_vlan: entered promiscuous mode [ 170.681175][ T5686] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 170.687012][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.703047][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.765776][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.815137][ T5686] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 170.839566][ T5476] veth0_vlan: entered promiscuous mode [ 170.849020][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.852790][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.879925][ T5480] veth0_macvtap: entered promiscuous mode [ 170.960290][ T5480] veth1_macvtap: entered promiscuous mode [ 170.983166][ T5692] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 170.995576][ T5476] veth1_vlan: entered promiscuous mode [ 171.044739][ T5692] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 171.083575][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.193451][ T5695] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 171.234950][ T5695] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 171.245533][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.270227][ T5694] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 171.304177][ T5694] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.348038][ T3927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.369898][ T5694] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 171.376252][ T3927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.403370][ T3927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.439073][ T3927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.471559][ T5476] veth0_macvtap: entered promiscuous mode [ 171.557074][ T5476] veth1_macvtap: entered promiscuous mode [ 171.682980][ T5492] veth0_vlan: entered promiscuous mode [ 171.703821][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.774116][ T5476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.799870][ T5492] veth1_vlan: entered promiscuous mode [ 171.814032][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.817536][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.852446][ T3927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.909065][ T3927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.945546][ T3927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.962831][ T3927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.985174][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.001160][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.030685][ T5491] veth0_vlan: entered promiscuous mode [ 172.043687][ T5492] veth0_macvtap: entered promiscuous mode [ 172.142797][ T5492] veth1_macvtap: entered promiscuous mode [ 172.165584][ T5491] veth1_vlan: entered promiscuous mode [ 172.207808][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.228164][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.292233][ T5709] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.321103][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.365158][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.399876][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.418213][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.426037][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.453010][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.457100][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.532943][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.544297][ T5491] veth0_macvtap: entered promiscuous mode [ 172.613647][ T5491] veth1_macvtap: entered promiscuous mode [ 172.761872][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.817266][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.838097][ T5717] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.860602][ T3108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.881735][ T3108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.923821][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.970531][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.995525][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.027549][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.112722][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.166814][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.344170][ T4041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.395909][ T4041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.527371][ T3108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.556259][ T5728] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.563735][ T3108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.950590][ T5739] bond0: (slave wlan1): Enslaving as an active interface with an up link 2026/01/20 05:48:08 executed programs: 104 [ 175.436174][ T5794] validate_nla: 186 callbacks suppressed [ 175.436187][ T5794] netlink: 'syz.5.116': attribute type 10 has an invalid length. [ 175.455788][ T5797] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 175.475612][ T5796] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 175.491775][ T5795] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 175.503258][ T5798] netlink: 'syz.1.120': attribute type 10 has an invalid length. [ 175.507294][ T5794] netlink: 'syz.5.116': attribute type 10 has an invalid length. [ 175.512605][ T5797] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 175.521331][ T5796] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 175.527293][ T5795] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 175.537451][ T5799] netlink: 'syz.4.119': attribute type 10 has an invalid length. 2026/01/20 05:48:13 executed programs: 298 [ 180.453014][ T5990] validate_nla: 383 callbacks suppressed [ 180.453028][ T5990] netlink: 'syz.5.311': attribute type 10 has an invalid length. [ 180.500788][ T5991] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 180.505968][ T5992] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 180.515153][ T5994] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 180.530662][ T5993] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 180.536771][ T5995] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 180.547670][ T5991] netlink: 'syz.3.312': attribute type 10 has an invalid length. [ 180.556994][ T5992] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 180.566075][ T5993] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 180.570705][ T5995] netlink: 'syz.0.313': attribute type 10 has an invalid length. 2026/01/20 05:48:18 executed programs: 500 [ 185.464726][ T6195] validate_nla: 394 callbacks suppressed [ 185.464739][ T6195] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 185.501058][ T6198] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 185.507408][ T6200] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 185.511865][ T6199] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 185.535942][ T6202] netlink: 'syz.5.517': attribute type 10 has an invalid length. [ 185.543615][ T6198] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 185.560890][ T6200] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 185.566253][ T6199] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 185.577413][ T6201] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 185.605969][ T6201] netlink: 'syz.3.518': attribute type 10 has an invalid length. 2026/01/20 05:48:23 executed programs: 709 [ 190.469343][ T6408] validate_nla: 405 callbacks suppressed [ 190.469355][ T6408] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 190.479664][ T6407] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 190.513751][ T6407] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 190.534353][ T6409] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 190.542916][ T6408] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 190.580932][ T6410] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 190.586923][ T6410] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 190.595153][ T6412] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 190.603207][ T6411] netlink: 'syz.5.725': attribute type 10 has an invalid length. [ 190.607566][ T6411] netlink: 'syz.5.725': attribute type 10 has an invalid length. 2026/01/20 05:48:28 executed programs: 925 [ 195.497156][ T6621] validate_nla: 420 callbacks suppressed [ 195.497170][ T6621] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 195.510826][ T6624] netlink: 'syz.3.938': attribute type 10 has an invalid length. [ 195.550001][ T6623] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 195.559676][ T6624] netlink: 'syz.3.938': attribute type 10 has an invalid length. [ 195.572867][ T6621] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 195.583062][ T6623] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 195.591134][ T6625] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 195.595934][ T6626] netlink: 'syz.5.939': attribute type 10 has an invalid length. [ 195.607635][ T6627] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 195.623950][ T6625] netlink: 'syz.2.940': attribute type 10 has an invalid length. 2026/01/20 05:48:33 executed programs: 1133 [ 200.508226][ T6832] validate_nla: 410 callbacks suppressed [ 200.508241][ T6832] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 200.533878][ T6833] netlink: 'syz.4.1146': attribute type 10 has an invalid length. [ 200.537857][ T6833] netlink: 'syz.4.1146': attribute type 10 has an invalid length. [ 200.546835][ T6834] netlink: 'syz.5.1148': attribute type 10 has an invalid length. [ 200.554237][ T6832] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 200.583278][ T6834] netlink: 'syz.5.1148': attribute type 10 has an invalid length. [ 200.597915][ T6837] netlink: 'syz.3.1149': attribute type 10 has an invalid length. [ 200.606661][ T6835] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 200.625439][ T6836] netlink: 'syz.2.1151': attribute type 10 has an invalid length. [ 200.632865][ T6837] netlink: 'syz.3.1149': attribute type 10 has an invalid length. [ 204.494405][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.501449][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/20 05:48:38 executed programs: 1342 [ 205.527982][ T7037] validate_nla: 400 callbacks suppressed [ 205.527995][ T7037] netlink: 'syz.4.1352': attribute type 10 has an invalid length. [ 205.546324][ T7041] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 205.550823][ T7039] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 205.555536][ T7038] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 205.572333][ T7039] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 205.577219][ T7042] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 205.585294][ T7037] netlink: 'syz.4.1352': attribute type 10 has an invalid length. [ 205.589299][ T7038] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 205.593740][ T7040] netlink: 'syz.5.1356': attribute type 10 has an invalid length. [ 205.601078][ T7041] netlink: 'syz.3.1351': attribute type 10 has an invalid length. 2026/01/20 05:48:43 executed programs: 1541 [ 210.544327][ T7235] validate_nla: 391 callbacks suppressed [ 210.544342][ T7235] netlink: 'syz.5.1549': attribute type 10 has an invalid length. [ 210.567518][ T7239] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 210.576355][ T7238] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 210.611223][ T7238] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 210.615250][ T7240] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 210.629367][ T7239] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 210.635225][ T7241] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 210.654306][ T7240] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 210.661640][ T7242] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 210.665961][ T7242] netlink: 'syz.4.1556': attribute type 10 has an invalid length. 2026/01/20 05:48:48 executed programs: 1743 [ 215.561577][ T7438] validate_nla: 391 callbacks suppressed [ 215.561590][ T7438] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 215.601263][ T7439] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 215.637110][ T7439] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 215.641980][ T7438] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 215.663278][ T7441] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 215.676738][ T7442] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 215.681787][ T7443] netlink: 'syz.5.1756': attribute type 10 has an invalid length. [ 215.686151][ T7440] netlink: 'syz.2.1757': attribute type 10 has an invalid length. [ 215.699907][ T7441] netlink: 'syz.1.1755': attribute type 10 has an invalid length. [ 215.709953][ T7442] netlink: 'syz.3.1754': attribute type 10 has an invalid length. 2026/01/20 05:48:53 executed programs: 1946 [ 220.572991][ T7637] validate_nla: 392 callbacks suppressed [ 220.573004][ T7637] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 220.590273][ T7639] netlink: 'syz.3.1954': attribute type 10 has an invalid length. [ 220.620088][ T7641] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 220.636641][ T7637] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 220.641256][ T7642] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 220.653852][ T7639] netlink: 'syz.3.1954': attribute type 10 has an invalid length. [ 220.671798][ T7641] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 220.685784][ T7642] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 220.700630][ T7644] netlink: 'syz.5.1957': attribute type 10 has an invalid length. [ 220.705116][ T7643] netlink: 'syz.0.1958': attribute type 10 has an invalid length. 2026/01/20 05:48:58 executed programs: 2164 [ 225.636566][ T7860] validate_nla: 424 callbacks suppressed [ 225.636581][ T7860] netlink: 'syz.2.2174': attribute type 10 has an invalid length. [ 225.645431][ T7857] netlink: 'syz.1.2170': attribute type 10 has an invalid length. [ 225.659974][ T7856] netlink: 'syz.5.2171': attribute type 10 has an invalid length. [ 225.665837][ T7858] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 225.675775][ T7859] netlink: 'syz.0.2173': attribute type 10 has an invalid length. [ 225.684754][ T7858] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 225.691636][ T7857] netlink: 'syz.1.2170': attribute type 10 has an invalid length. [ 225.695878][ T7861] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 225.700061][ T7856] netlink: 'syz.5.2171': attribute type 10 has an invalid length. [ 225.704393][ T7860] netlink: 'syz.2.2174': attribute type 10 has an invalid length. 2026/01/20 05:49:03 executed programs: 2376 [ 230.645931][ T8069] validate_nla: 418 callbacks suppressed [ 230.645944][ T8069] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 230.660438][ T8072] netlink: 'syz.4.2386': attribute type 10 has an invalid length. [ 230.687414][ T8069] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 230.693128][ T8071] netlink: 'syz.2.2385': attribute type 10 has an invalid length. [ 230.697375][ T8073] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 230.702980][ T8072] netlink: 'syz.4.2386': attribute type 10 has an invalid length. [ 230.714565][ T8071] netlink: 'syz.2.2385': attribute type 10 has an invalid length. [ 230.727775][ T8074] netlink: 'syz.1.2388': attribute type 10 has an invalid length. [ 230.736769][ T8073] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 230.757845][ T8075] netlink: 'syz.5.2389': attribute type 10 has an invalid length. 2026/01/20 05:49:08 executed programs: 2587 [ 235.649639][ T8279] validate_nla: 409 callbacks suppressed [ 235.649652][ T8279] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 235.674606][ T8281] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 235.679754][ T8282] netlink: 'syz.2.2596': attribute type 10 has an invalid length. [ 235.684701][ T8280] netlink: 'syz.5.2594': attribute type 10 has an invalid length. [ 235.693456][ T8283] netlink: 'syz.0.2597': attribute type 10 has an invalid length. [ 235.697784][ T8283] netlink: 'syz.0.2597': attribute type 10 has an invalid length. [ 235.704435][ T8282] netlink: 'syz.2.2596': attribute type 10 has an invalid length. [ 235.713999][ T8281] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 235.723765][ T8280] netlink: 'syz.5.2594': attribute type 10 has an invalid length. [ 235.729015][ T8284] netlink: 'syz.4.2598': attribute type 10 has an invalid length. 2026/01/20 05:49:13 executed programs: 2788 [ 240.669385][ T8479] validate_nla: 390 callbacks suppressed [ 240.669399][ T8479] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 240.691576][ T8480] netlink: 'syz.1.2794': attribute type 10 has an invalid length. [ 240.696637][ T8480] netlink: 'syz.1.2794': attribute type 10 has an invalid length. [ 240.704604][ T8483] netlink: 'syz.3.2797': attribute type 10 has an invalid length. [ 240.717622][ T8484] netlink: 'syz.4.2798': attribute type 10 has an invalid length. [ 240.727658][ T8481] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 240.750151][ T8482] netlink: 'syz.5.2796': attribute type 10 has an invalid length. [ 240.754548][ T8482] netlink: 'syz.5.2796': attribute type 10 has an invalid length. [ 240.767538][ T8483] netlink: 'syz.3.2797': attribute type 10 has an invalid length. [ 240.774952][ T8484] netlink: 'syz.4.2798': attribute type 10 has an invalid length. 2026/01/20 05:49:18 executed programs: 2997 [ 245.682405][ T8688] validate_nla: 410 callbacks suppressed [ 245.682415][ T8688] netlink: 'syz.4.3002': attribute type 10 has an invalid length. [ 245.750138][ T8690] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 245.764061][ T8692] netlink: 'syz.3.3005': attribute type 10 has an invalid length. [ 245.773798][ T8691] netlink: 'syz.5.3008': attribute type 10 has an invalid length. [ 245.778307][ T8691] netlink: 'syz.5.3008': attribute type 10 has an invalid length. [ 245.793711][ T8693] netlink: 'syz.0.3006': attribute type 10 has an invalid length. [ 245.801090][ T8690] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 245.809410][ T8694] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 245.815297][ T8692] netlink: 'syz.3.3005': attribute type 10 has an invalid length. [ 245.820371][ T8693] netlink: 'syz.0.3006': attribute type 10 has an invalid length. 2026/01/20 05:49:23 executed programs: 3227 [ 250.690651][ T8926] validate_nla: 452 callbacks suppressed [ 250.690664][ T8926] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 250.708104][ T8928] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 250.731895][ T8929] netlink: 'syz.2.3236': attribute type 10 has an invalid length. [ 250.744797][ T8926] netlink: 'syz.3.3233': attribute type 10 has an invalid length. [ 250.754724][ T8930] netlink: 'syz.5.3237': attribute type 10 has an invalid length. [ 250.777664][ T8932] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 250.783991][ T8929] netlink: 'syz.2.3236': attribute type 10 has an invalid length. [ 250.789984][ T8931] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 250.798213][ T8930] netlink: 'syz.5.3237': attribute type 10 has an invalid length. [ 250.815844][ T8932] netlink: 'syz.1.3238': attribute type 10 has an invalid length. 2026/01/20 05:49:28 executed programs: 3475 [ 255.699577][ T9173] validate_nla: 482 callbacks suppressed [ 255.699590][ T9173] netlink: 'syz.2.3481': attribute type 10 has an invalid length. [ 255.724016][ T9173] netlink: 'syz.2.3481': attribute type 10 has an invalid length. [ 255.730006][ T9174] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 255.733856][ T9175] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 255.742166][ T9177] netlink: 'syz.1.3484': attribute type 10 has an invalid length. [ 255.751545][ T9176] netlink: 'syz.5.3483': attribute type 10 has an invalid length. [ 255.770185][ T9175] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 255.779737][ T9176] netlink: 'syz.5.3483': attribute type 10 has an invalid length. [ 255.800219][ T9177] netlink: 'syz.1.3484': attribute type 10 has an invalid length. [ 255.808203][ T9178] netlink: 'syz.0.3485': attribute type 10 has an invalid length. [ 257.229962][ T5486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.234398][ T5486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.237902][ T5486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.241953][ T5486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.246024][ T5486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.561776][ T3016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.707442][ T3016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.831915][ T3016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.961875][ T3016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.432124][ T9244] chnl_net:caif_netlink_parms(): no params data found [ 258.528324][ T3016] bridge_slave_1: left allmulticast mode [ 258.541864][ T3016] bridge_slave_1: left promiscuous mode [ 258.544734][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.573792][ T3016] bridge_slave_0: left allmulticast mode [ 258.576449][ T3016] bridge_slave_0: left promiscuous mode [ 258.590107][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.962864][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.974134][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.981806][ T3016] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 258.985610][ T3016] bond0 (unregistering): Released all slaves [ 259.289378][ T5482] Bluetooth: hci6: command tx timeout [ 259.526778][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.541659][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.544818][ T9244] bridge_slave_0: entered allmulticast mode [ 259.562835][ T9244] bridge_slave_0: entered promiscuous mode [ 259.608946][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.612161][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.631302][ T9244] bridge_slave_1: entered allmulticast mode [ 259.678087][ T9244] bridge_slave_1: entered promiscuous mode [ 259.724039][ T3016] hsr_slave_0: left promiscuous mode [ 259.739695][ T3016] hsr_slave_1: left promiscuous mode [ 259.749829][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.753208][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.770322][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.773686][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.811601][ T3016] veth1_macvtap: left promiscuous mode [ 259.813854][ T3016] veth0_macvtap: left promiscuous mode [ 259.816451][ T3016] veth1_vlan: left promiscuous mode [ 259.829918][ T3016] veth0_vlan: left promiscuous mode [ 260.203505][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 260.227715][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 260.615027][ T9244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.671507][ T9244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 2026/01/20 05:49:33 executed programs: 3611 [ 260.718375][ T9334] validate_nla: 264 callbacks suppressed [ 260.718392][ T9334] netlink: 'syz.4.3618': attribute type 10 has an invalid length. [ 260.854508][ T9339] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 260.862245][ T9336] netlink: 'syz.3.3619': attribute type 10 has an invalid length. [ 260.866853][ T9336] netlink: 'syz.3.3619': attribute type 10 has an invalid length. [ 260.873286][ T9338] netlink: 'syz.2.3620': attribute type 10 has an invalid length. [ 260.893252][ T9244] team0: Port device team_slave_0 added [ 260.901430][ T9337] netlink: 'syz.5.3621': attribute type 10 has an invalid length. [ 260.911419][ T9339] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 260.916755][ T9340] netlink: 'syz.4.3623': attribute type 10 has an invalid length. [ 260.935888][ T9338] netlink: 'syz.2.3620': attribute type 10 has an invalid length. [ 260.939755][ T9244] team0: Port device team_slave_1 added [ 260.942773][ T9337] netlink: 'syz.5.3621': attribute type 10 has an invalid length. [ 261.088309][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.113043][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.157082][ T9244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.196023][ T9244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.220346][ T9244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.269353][ T9244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.373571][ T5482] Bluetooth: hci6: command tx timeout [ 261.518133][ T9244] hsr_slave_0: entered promiscuous mode [ 261.542703][ T9244] hsr_slave_1: entered promiscuous mode [ 261.568114][ T9244] debugfs: 'hsr0' already exists in 'hsr' [ 261.571702][ T9244] Cannot create hsr debugfs directory [ 263.016122][ T9244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.085699][ T9244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.113045][ T9244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.158074][ T9244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.450486][ T5482] Bluetooth: hci6: command tx timeout [ 263.645152][ T9244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.719272][ T9244] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.811967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.815280][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.835708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.838913][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.824064][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.084522][ T9244] veth0_vlan: entered promiscuous mode [ 265.142767][ T9244] veth1_vlan: entered promiscuous mode [ 265.302329][ T9244] veth0_macvtap: entered promiscuous mode [ 265.307591][ T9244] veth1_macvtap: entered promiscuous mode [ 265.426232][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.513764][ T9244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.529413][ T5482] Bluetooth: hci6: command tx timeout [ 265.562287][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.600402][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.644716][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.713686][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/20 05:49:38 executed programs: 3762 [ 265.744289][ T9519] validate_nla: 283 callbacks suppressed [ 265.744302][ T9519] netlink: 'syz.2.3766': attribute type 10 has an invalid length. [ 265.763135][ T9521] netlink: 'syz.5.3765': attribute type 10 has an invalid length. [ 265.768109][ T9523] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 265.786078][ T9520] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 265.794435][ T9522] netlink: 'syz.4.3769': attribute type 10 has an invalid length. [ 265.827229][ T9523] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 265.833563][ T9519] netlink: 'syz.2.3766': attribute type 10 has an invalid length. [ 265.837952][ T9521] netlink: 'syz.5.3765': attribute type 10 has an invalid length. [ 265.842433][ T9520] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 265.846791][ T9522] netlink: 'syz.4.3769': attribute type 10 has an invalid length. [ 265.874182][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.911440][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.931789][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.936931][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.027325][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.075372][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.418300][ T5486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.425755][ T5486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.430722][ T5486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.441074][ T5486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.444681][ T5486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.614571][ T9541] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.698850][ T3108] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 266.703854][ T3108] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 266.707626][ T3108] CPU: 0 UID: 0 PID: 3108 Comm: kworker/u4:16 Not tainted syzkaller #0 PREEMPT(full) [ 266.711832][ T3108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.716691][ T3108] Workqueue: events_unbound cfg80211_wiphy_work [ 266.719699][ T3108] RIP: 0010:ieee80211_put_srates_elem+0x42/0x640 [ 266.722483][ T3108] Code: 18 89 54 24 28 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 ae 3f e3 f6 48 89 5c 24 38 4c 8d 6b 18 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 27 84 c0 0f 85 19 05 00 00 41 8b 5d 00 31 ff 89 de e8 [ 266.730944][ T3108] RSP: 0018:ffffc900029b77b8 EFLAGS: 00010206 [ 266.733634][ T3108] RAX: ffffffff8addc7b2 RBX: 0000000000000000 RCX: ffff88803a764980 [ 266.737206][ T3108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801b3c3b40 [ 266.740793][ T3108] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 266.744344][ T3108] R10: dffffc0000000000 R11: ffffed10082300db R12: dffffc0000000000 [ 266.747956][ T3108] R13: 0000000000000018 R14: ffff88801b3c3b40 R15: 0000000000000003 [ 266.751479][ T3108] FS: 0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 266.755499][ T3108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.758422][ T3108] CR2: 00007f9afd2e4e9c CR3: 00000000548c5000 CR4: 0000000000352ef0 [ 266.761940][ T3108] Call Trace: [ 266.763502][ T3108] [ 266.764852][ T3108] ieee80211_mesh_build_beacon+0xa83/0x1b50 [ 266.767516][ T3108] ? ieee80211_mesh_build_beacon+0x292/0x1b50 [ 266.770179][ T3108] ieee80211_mesh_rebuild_beacon+0xc7/0x170 [ 266.772743][ T3108] ieee80211_mesh_finish_csa+0x131/0x210 [ 266.775244][ T3108] ieee80211_csa_finalize+0x633/0x1150 [ 266.777673][ T3108] ? __pfx_ieee80211_csa_finalize+0x10/0x10 [ 266.780348][ T3108] ? ieee80211_csa_finalize_work+0x176/0x1e0 [ 266.783059][ T3108] cfg80211_wiphy_work+0x2ab/0x450 [ 266.785389][ T3108] ? process_scheduled_works+0x9ef/0x1770 [ 266.787983][ T3108] process_scheduled_works+0xad1/0x1770 [ 266.790506][ T3108] ? __pfx_process_scheduled_works+0x10/0x10 [ 266.793280][ T3108] ? do_raw_spin_lock+0x121/0x290 [ 266.795576][ T3108] worker_thread+0x8a0/0xda0 [ 266.797705][ T3108] ? __kthread_parkme+0x7b/0x200 [ 266.800009][ T3108] kthread+0x711/0x8a0 [ 266.801869][ T3108] ? __pfx_worker_thread+0x10/0x10 [ 266.804288][ T3108] ? __pfx_kthread+0x10/0x10 [ 266.806439][ T3108] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.808918][ T3108] ? __pfx_kthread+0x10/0x10 [ 266.811014][ T3108] ret_from_fork+0x510/0xa50 [ 266.813145][ T3108] ? __pfx_ret_from_fork+0x10/0x10 [ 266.815515][ T3108] ? __switch_to+0xc9e/0x1480 [ 266.817715][ T3108] ? __pfx_kthread+0x10/0x10 [ 266.819837][ T3108] ret_from_fork_asm+0x1a/0x30 [ 266.822009][ T3108] [ 266.823431][ T3108] Modules linked in: [ 266.825873][ T3108] ---[ end trace 0000000000000000 ]--- [ 266.900203][ T3108] RIP: 0010:ieee80211_put_srates_elem+0x42/0x640 [ 266.918916][ T3108] Code: 18 89 54 24 28 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 ae 3f e3 f6 48 89 5c 24 38 4c 8d 6b 18 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 27 84 c0 0f 85 19 05 00 00 41 8b 5d 00 31 ff 89 de e8 [ 266.938081][ T3108] RSP: 0018:ffffc900029b77b8 EFLAGS: 00010206 [ 266.943712][ T3108] RAX: ffffffff8addc7b2 RBX: 0000000000000000 RCX: ffff88803a764980 [ 266.947348][ T3108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801b3c3b40 [ 266.962392][ T3108] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 266.972523][ T3108] R10: dffffc0000000000 R11: ffffed10082300db R12: dffffc0000000000 [ 266.976088][ T3108] R13: 0000000000000018 R14: ffff88801b3c3b40 R15: 0000000000000003 [ 266.990561][ T3108] FS: 0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 267.003337][ T3108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.006598][ T3108] CR2: 00007fec6a208e9c CR3: 000000004224e000 CR4: 0000000000352ef0 [ 267.010893][ T3108] Kernel panic - not syncing: Fatal exception [ 267.014050][ T3108] Kernel Offset: disabled [ 267.016081][ T3108] Rebooting in 86400 seconds..