syzkaller login: [ 91.793218][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:8221' (ED25519) to the list of known hosts. 2026/01/18 18:34:54 parsed 1 programs [ 227.741073][ T5356] cgroup: Unknown subsys name 'net' [ 227.812840][ T5356] cgroup: Unknown subsys name 'cpuset' [ 227.819465][ T5356] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.512867][ T5356] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 234.463934][ T5366] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.352711][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.356822][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.360698][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.365254][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.369005][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.182346][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.185816][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.268246][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.271772][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.303314][ T5404] chnl_net:caif_netlink_parms(): no params data found [ 238.434044][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.437887][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.440912][ T5404] bridge_slave_0: entered allmulticast mode [ 238.458084][ T5404] bridge_slave_0: entered promiscuous mode [ 238.463223][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.465978][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.478286][ T5404] bridge_slave_1: entered allmulticast mode [ 238.482106][ T5404] bridge_slave_1: entered promiscuous mode [ 238.530743][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.550003][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.598416][ T5404] team0: Port device team_slave_0 added [ 238.602622][ T5404] team0: Port device team_slave_1 added [ 238.644111][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.657822][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.678269][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.697701][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.700630][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.718149][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.799031][ T5404] hsr_slave_0: entered promiscuous mode [ 238.802258][ T5404] hsr_slave_1: entered promiscuous mode [ 239.008682][ T5404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.019147][ T5404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.025656][ T5404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.032207][ T5404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.062299][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.065541][ T5404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.069571][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.072839][ T5404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.129217][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.141838][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.146048][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.157117][ T5404] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.166275][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.169549][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.186669][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.189759][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.354234][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.393668][ T5404] veth0_vlan: entered promiscuous mode [ 239.403509][ T5404] veth1_vlan: entered promiscuous mode [ 239.447057][ T5404] veth0_macvtap: entered promiscuous mode [ 239.465196][ T5404] veth1_macvtap: entered promiscuous mode [ 239.497852][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.509720][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.521995][ T1074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.534020][ T1074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.546712][ T1074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.562827][ T1074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.722100][ T3171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.861494][ T3171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.929335][ T3171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.000348][ T3171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.467957][ T3171] bridge_slave_1: left allmulticast mode [ 242.470745][ T3171] bridge_slave_1: left promiscuous mode [ 242.474036][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.530469][ T3171] bridge_slave_0: left allmulticast mode [ 242.543053][ T3171] bridge_slave_0: left promiscuous mode [ 242.545770][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/18 18:35:11 executed programs: 0 [ 243.041144][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.045275][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.049477][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.053431][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.057030][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.109210][ T3171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.115312][ T3171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.120073][ T3171] bond0 (unregistering): Released all slaves [ 243.232329][ T3171] hsr_slave_0: left promiscuous mode [ 243.241159][ T3171] hsr_slave_1: left promiscuous mode [ 243.255607][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.259171][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.272779][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.275901][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.299091][ T3171] veth1_macvtap: left promiscuous mode [ 243.301765][ T3171] veth0_macvtap: left promiscuous mode [ 243.304349][ T3171] veth1_vlan: left promiscuous mode [ 243.306829][ T3171] veth0_vlan: left promiscuous mode [ 243.752396][ T3171] team0 (unregistering): Port device team_slave_1 removed [ 243.778003][ T3171] team0 (unregistering): Port device team_slave_0 removed [ 244.264258][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 244.692367][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.695784][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.700284][ T5471] bridge_slave_0: entered allmulticast mode [ 244.704454][ T5471] bridge_slave_0: entered promiscuous mode [ 244.722819][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.726245][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.736922][ T5471] bridge_slave_1: entered allmulticast mode [ 244.755932][ T5471] bridge_slave_1: entered promiscuous mode [ 244.923428][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.945441][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.029044][ T5471] team0: Port device team_slave_0 added [ 245.042366][ T5471] team0: Port device team_slave_1 added [ 245.068433][ T46] Bluetooth: hci0: command tx timeout [ 245.136744][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.153002][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.202402][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.224464][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.237672][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.279951][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.370491][ T5471] hsr_slave_0: entered promiscuous mode [ 245.378018][ T5471] hsr_slave_1: entered promiscuous mode [ 245.908996][ T5471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.921834][ T5471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.936304][ T5471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.951527][ T5471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.079705][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.111207][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.122384][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.125577][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.153884][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.157169][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.494171][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.555723][ T5471] veth0_vlan: entered promiscuous mode [ 246.576877][ T5471] veth1_vlan: entered promiscuous mode [ 246.621912][ T5471] veth0_macvtap: entered promiscuous mode [ 246.627162][ T5471] veth1_macvtap: entered promiscuous mode [ 246.670060][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.689739][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.701435][ T3171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.718538][ T3171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.742109][ T3171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.746062][ T3171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.848531][ T3171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.852247][ T3171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.915336][ T3171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.928295][ T3171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.066911][ T5536] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 247.091529][ T5536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.112743][ T5536] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 247.147977][ T46] Bluetooth: hci0: command tx timeout [ 247.192341][ T5539] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 247.208480][ T5539] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 247.280918][ T5540] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 247.285500][ T5540] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 247.336749][ T5541] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 247.342062][ T5541] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 247.386146][ T5542] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 247.395998][ T5542] netlink: 'syz.0.21': attribute type 10 has an invalid length. 2026/01/18 18:35:16 executed programs: 18 [ 249.229419][ T46] Bluetooth: hci0: command tx timeout [ 251.308496][ T46] Bluetooth: hci0: command tx timeout [ 252.068906][ T5720] validate_nla: 342 callbacks suppressed [ 252.068919][ T5720] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 252.076240][ T5720] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 252.094320][ T5721] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 252.100514][ T5721] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 252.120741][ T5722] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 252.125784][ T5722] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 252.145960][ T5723] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 252.151231][ T5723] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 252.170096][ T5724] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 252.174211][ T5724] netlink: 'syz.0.197': attribute type 10 has an invalid length. 2026/01/18 18:35:21 executed programs: 219 [ 257.101287][ T5966] validate_nla: 482 callbacks suppressed [ 257.101300][ T5966] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 257.109182][ T5966] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 257.126714][ T5967] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 257.132019][ T5967] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 257.152962][ T5968] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 257.161815][ T5968] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 257.181088][ T5969] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 257.185873][ T5969] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 257.205888][ T5970] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 257.210893][ T5970] netlink: 'syz.0.443': attribute type 10 has an invalid length. 2026/01/18 18:35:26 executed programs: 465 [ 260.799668][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.803649][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.809169][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.816857][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.821394][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.936012][ T3244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.993584][ T3244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.005177][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 261.050251][ T3244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.097331][ T3244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.125814][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.129409][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.132671][ T6147] bridge_slave_0: entered allmulticast mode [ 261.136386][ T6147] bridge_slave_0: entered promiscuous mode [ 261.147172][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.151902][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.154896][ T6147] bridge_slave_1: entered allmulticast mode [ 261.158217][ T6147] bridge_slave_1: entered promiscuous mode [ 261.221641][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.246928][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.256567][ T3244] bridge_slave_1: left allmulticast mode [ 261.260456][ T3244] bridge_slave_1: left promiscuous mode [ 261.262553][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.266923][ T3244] bridge_slave_0: left allmulticast mode [ 261.270050][ T3244] bridge_slave_0: left promiscuous mode [ 261.272758][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.440447][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.446201][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.452272][ T3244] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 261.456410][ T3244] bond0 (unregistering): Released all slaves [ 261.531281][ T6147] team0: Port device team_slave_0 added [ 261.548614][ T6147] team0: Port device team_slave_1 added [ 261.670575][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.673795][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.698657][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.739472][ T3244] hsr_slave_0: left promiscuous mode [ 261.742273][ T3244] hsr_slave_1: left promiscuous mode [ 261.747863][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.759649][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.767541][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.770958][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.802446][ T3244] veth1_macvtap: left promiscuous mode [ 261.804837][ T3244] veth0_macvtap: left promiscuous mode [ 261.807078][ T3244] veth1_vlan: left promiscuous mode [ 261.817639][ T3244] veth0_vlan: left promiscuous mode [ 262.167217][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 262.194761][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 262.428133][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.431567][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.445857][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.554730][ T6147] hsr_slave_0: entered promiscuous mode [ 262.559346][ T6147] hsr_slave_1: entered promiscuous mode [ 262.913212][ T4681] Bluetooth: hci0: command tx timeout [ 263.132332][ T6147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.151909][ T6147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.169946][ T6147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.184627][ T6147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.312100][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.336183][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.362122][ T3244] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.366624][ T3244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.392893][ T3244] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.395967][ T3244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.665527][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.701629][ T6147] veth0_vlan: entered promiscuous mode [ 263.716499][ T6147] veth1_vlan: entered promiscuous mode [ 263.739670][ T6147] veth0_macvtap: entered promiscuous mode [ 263.745262][ T6147] veth1_macvtap: entered promiscuous mode [ 263.759182][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.768451][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.776557][ T3244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.784831][ T3244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.798955][ T3244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.816449][ T3244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.846398][ T3244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.868624][ T3244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.899054][ T3244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.902462][ T3244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:35:32 executed programs: 602 [ 263.998076][ T6189] validate_nla: 346 callbacks suppressed [ 263.998089][ T6189] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 264.005986][ T6189] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.032731][ T6189] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 264.084110][ T6190] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 264.098964][ T6190] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 264.143464][ T6191] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 264.149451][ T6191] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 264.172735][ T6192] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 264.180471][ T6192] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 264.200344][ T6193] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 264.205067][ T6193] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 264.991376][ T4681] Bluetooth: hci0: command tx timeout [ 265.872901][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.875731][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.067799][ T4681] Bluetooth: hci0: command tx timeout 2026/01/18 18:35:37 executed programs: 828 [ 269.021485][ T6418] validate_nla: 448 callbacks suppressed [ 269.021498][ T6418] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 269.032211][ T6418] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 269.053620][ T6419] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 269.061019][ T6419] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 269.084595][ T6420] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 269.092076][ T6420] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 269.112093][ T6421] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 269.121852][ T6421] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 269.143051][ T6422] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 269.148250][ T4681] Bluetooth: hci0: command tx timeout [ 269.151747][ T6422] netlink: 'syz.0.850': attribute type 10 has an invalid length. 2026/01/18 18:35:42 executed programs: 1073 [ 274.048189][ T6662] validate_nla: 478 callbacks suppressed [ 274.048203][ T6662] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 274.056877][ T6662] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 274.101948][ T6663] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 274.106475][ T6663] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 274.129790][ T6664] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 274.135766][ T6664] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 274.158783][ T6665] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 274.164727][ T6665] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 274.189141][ T6666] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 274.193503][ T6666] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 276.713431][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.719872][ T46] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.724209][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.730571][ T46] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.733814][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.921769][ T1074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.935348][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 276.967371][ T1074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.010734][ T1074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.042152][ T1074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.057337][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.064406][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.068315][ T6790] bridge_slave_0: entered allmulticast mode [ 277.071793][ T6790] bridge_slave_0: entered promiscuous mode [ 277.082785][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.085532][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.089695][ T6790] bridge_slave_1: entered allmulticast mode [ 277.093620][ T6790] bridge_slave_1: entered promiscuous mode [ 277.157197][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.177327][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.208652][ T1074] bridge_slave_1: left allmulticast mode [ 277.210895][ T1074] bridge_slave_1: left promiscuous mode [ 277.213436][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.218738][ T1074] bridge_slave_0: left allmulticast mode [ 277.221381][ T1074] bridge_slave_0: left promiscuous mode [ 277.223738][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.401408][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.406607][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.412111][ T1074] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 277.415844][ T1074] bond0 (unregistering): Released all slaves [ 277.433343][ T6790] team0: Port device team_slave_0 added [ 277.440597][ T6790] team0: Port device team_slave_1 added [ 277.547797][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.550656][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.580992][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.619494][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.622487][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.661951][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.694895][ T1074] hsr_slave_0: left promiscuous mode [ 277.701436][ T1074] hsr_slave_1: left promiscuous mode [ 277.707943][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.711168][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.729147][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.732146][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.753102][ T1074] veth1_macvtap: left promiscuous mode [ 277.755573][ T1074] veth0_macvtap: left promiscuous mode [ 277.767941][ T1074] veth1_vlan: left promiscuous mode [ 277.770382][ T1074] veth0_vlan: left promiscuous mode [ 278.120988][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 278.144479][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 278.452069][ T6790] hsr_slave_0: entered promiscuous mode [ 278.454789][ T6790] hsr_slave_1: entered promiscuous mode [ 278.747680][ T46] Bluetooth: hci1: command tx timeout [ 279.046337][ T6790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.062925][ T6790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.080071][ T6790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.091919][ T6790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.220143][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.245731][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.264011][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.266933][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.282486][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.285330][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.507031][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.536298][ T6790] veth0_vlan: entered promiscuous mode [ 279.544026][ T6790] veth1_vlan: entered promiscuous mode [ 279.567007][ T6790] veth0_macvtap: entered promiscuous mode [ 279.573851][ T6790] veth1_macvtap: entered promiscuous mode [ 279.585146][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.596131][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.606249][ T3171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.613282][ T3171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.616709][ T3171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.631503][ T3171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.684615][ T3171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.688908][ T3171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.719311][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.722517][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:35:48 executed programs: 1202 [ 279.777058][ T6835] validate_nla: 244 callbacks suppressed [ 279.777072][ T6835] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 279.786666][ T6835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 279.794445][ T6835] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 279.823212][ T6836] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 279.833381][ T6836] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 279.853887][ T6837] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 279.862380][ T6837] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 279.880480][ T6838] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 279.885228][ T6838] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 279.906033][ T6839] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 279.910661][ T6839] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 280.827965][ T46] Bluetooth: hci1: command tx timeout [ 282.908050][ T46] Bluetooth: hci1: command tx timeout [ 284.785913][ T7077] validate_nla: 474 callbacks suppressed [ 284.785926][ T7077] netlink: 'syz.0.1459': attribute type 10 has an invalid length. [ 284.796342][ T7077] netlink: 'syz.0.1459': attribute type 10 has an invalid length. 2026/01/18 18:35:53 executed programs: 1443 [ 284.819092][ T7078] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 284.823788][ T7078] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 284.850670][ T7079] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 284.855380][ T7079] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 284.873868][ T7080] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 284.880992][ T7080] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 284.898131][ T7081] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 284.902536][ T7081] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 284.988479][ T46] Bluetooth: hci1: command tx timeout [ 289.789429][ T7322] validate_nla: 480 callbacks suppressed [ 289.789442][ T7322] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 289.796432][ T7322] netlink: 'syz.0.1704': attribute type 10 has an invalid length. 2026/01/18 18:35:58 executed programs: 1689 [ 289.823283][ T7323] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 289.830932][ T7323] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 289.849974][ T7324] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 289.854465][ T7324] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 289.873545][ T7325] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 289.880135][ T7325] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 289.903803][ T7326] netlink: 'syz.0.1708': attribute type 10 has an invalid length. [ 289.908472][ T7326] netlink: 'syz.0.1708': attribute type 10 has an invalid length. [ 292.254018][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.258551][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.262160][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.266700][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.279176][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.390605][ T3171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.444681][ T3171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.494505][ T3171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.512799][ T7436] chnl_net:caif_netlink_parms(): no params data found [ 292.544450][ T3171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.689665][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.692365][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.695577][ T7436] bridge_slave_0: entered allmulticast mode [ 292.699603][ T7436] bridge_slave_0: entered promiscuous mode [ 292.704742][ T3171] bridge_slave_1: left allmulticast mode [ 292.707222][ T3171] bridge_slave_1: left promiscuous mode [ 292.713787][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.719998][ T3171] bridge_slave_0: left allmulticast mode [ 292.722297][ T3171] bridge_slave_0: left promiscuous mode [ 292.724595][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.909134][ T3171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.914833][ T3171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.920483][ T3171] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 292.924542][ T3171] bond0 (unregistering): Released all slaves [ 292.931365][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.934642][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.938822][ T7436] bridge_slave_1: entered allmulticast mode [ 292.942814][ T7436] bridge_slave_1: entered promiscuous mode [ 293.042010][ T7436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.071310][ T7436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.192083][ T3171] hsr_slave_0: left promiscuous mode [ 293.199356][ T3171] hsr_slave_1: left promiscuous mode [ 293.208690][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.211810][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.224088][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.237620][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.254330][ T3171] veth1_macvtap: left promiscuous mode [ 293.268022][ T3171] veth0_macvtap: left promiscuous mode [ 293.271332][ T3171] veth1_vlan: left promiscuous mode [ 293.273686][ T3171] veth0_vlan: left promiscuous mode [ 293.651607][ T3171] team0 (unregistering): Port device team_slave_1 removed [ 293.676286][ T3171] team0 (unregistering): Port device team_slave_0 removed [ 293.902114][ T7436] team0: Port device team_slave_0 added [ 293.913548][ T7436] team0: Port device team_slave_1 added [ 293.977737][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.980849][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.007605][ T7436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.025929][ T7436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.038818][ T7436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.067643][ T7436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.169686][ T7436] hsr_slave_0: entered promiscuous mode [ 294.178309][ T7436] hsr_slave_1: entered promiscuous mode [ 294.349127][ T4681] Bluetooth: hci0: command tx timeout [ 294.681180][ T7436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.695264][ T7436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.702675][ T7436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.720347][ T7436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.851485][ T7436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.873522][ T7436] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.895238][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.898300][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.922750][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.925825][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.233449][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.300784][ T7436] veth0_vlan: entered promiscuous mode [ 295.319141][ T7436] veth1_vlan: entered promiscuous mode [ 295.370065][ T7436] veth0_macvtap: entered promiscuous mode [ 295.379677][ T7436] veth1_macvtap: entered promiscuous mode [ 295.402018][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.419458][ T7436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.436447][ T1057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.467125][ T1057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.493275][ T1057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.508506][ T1057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.559034][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.562156][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.610174][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.613757][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:36:04 executed programs: 1802 [ 295.733646][ T7490] validate_nla: 216 callbacks suppressed [ 295.733656][ T7490] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 295.758657][ T7490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.771016][ T7490] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 295.805433][ T7491] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 295.813270][ T7491] netlink: 'syz.0.1818': attribute type 10 has an invalid length. [ 295.835275][ T7492] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 295.840919][ T7492] netlink: 'syz.0.1819': attribute type 10 has an invalid length. [ 295.863948][ T7493] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 295.872143][ T7493] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 295.892582][ T7494] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 295.898690][ T7494] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 296.427868][ T4681] Bluetooth: hci0: command tx timeout [ 298.507763][ T4681] Bluetooth: hci0: command tx timeout [ 300.591246][ T4681] Bluetooth: hci0: command tx timeout 2026/01/18 18:36:09 executed programs: 2039 [ 300.745937][ T7730] validate_nla: 470 callbacks suppressed [ 300.745947][ T7730] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 300.755514][ T7730] netlink: 'syz.0.2057': attribute type 10 has an invalid length. [ 300.776483][ T7731] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 300.783409][ T7731] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 300.802678][ T7732] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 300.809711][ T7732] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 300.831756][ T7733] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 300.836443][ T7733] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 300.855391][ T7734] netlink: 'syz.0.2061': attribute type 10 has an invalid length. [ 300.860779][ T7734] netlink: 'syz.0.2061': attribute type 10 has an invalid length. 2026/01/18 18:36:14 executed programs: 2288 [ 305.771756][ T7978] validate_nla: 486 callbacks suppressed [ 305.771770][ T7978] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 305.780009][ T7978] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 305.798820][ T7979] netlink: 'syz.0.2306': attribute type 10 has an invalid length. [ 305.803221][ T7979] netlink: 'syz.0.2306': attribute type 10 has an invalid length. [ 305.822932][ T7980] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 305.832009][ T7980] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 305.851168][ T7981] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 305.855496][ T7981] netlink: 'syz.0.2308': attribute type 10 has an invalid length. [ 305.875140][ T7982] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 305.880398][ T7982] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 308.110390][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.114260][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.117363][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.121167][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.124314][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.276973][ T3171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.303591][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 308.339622][ T3171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.392444][ T3171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.412745][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.416095][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.422066][ T8091] bridge_slave_0: entered allmulticast mode [ 308.425934][ T8091] bridge_slave_0: entered promiscuous mode [ 308.441012][ T3171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.450462][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.453969][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.461436][ T8091] bridge_slave_1: entered allmulticast mode [ 308.465406][ T8091] bridge_slave_1: entered promiscuous mode [ 308.498679][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.520694][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.593079][ T8091] team0: Port device team_slave_0 added [ 308.598299][ T3171] bridge_slave_1: left allmulticast mode [ 308.600695][ T3171] bridge_slave_1: left promiscuous mode [ 308.603306][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.623861][ T3171] bridge_slave_0: left allmulticast mode [ 308.626474][ T3171] bridge_slave_0: left promiscuous mode [ 308.638159][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.008614][ T3171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.014159][ T3171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.020077][ T3171] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 309.024154][ T3171] bond0 (unregistering): Released all slaves [ 309.034217][ T8091] team0: Port device team_slave_1 added [ 309.105116][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.117665][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.137882][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.169026][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.172261][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.197568][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.333714][ T3171] hsr_slave_0: left promiscuous mode [ 309.336281][ T3171] hsr_slave_1: left promiscuous mode [ 309.347817][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.352078][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.372663][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.375875][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.399004][ T3171] veth1_macvtap: left promiscuous mode [ 309.401565][ T3171] veth0_macvtap: left promiscuous mode [ 309.403997][ T3171] veth1_vlan: left promiscuous mode [ 309.406351][ T3171] veth0_vlan: left promiscuous mode [ 309.782110][ T3171] team0 (unregistering): Port device team_slave_1 removed [ 309.804893][ T3171] team0 (unregistering): Port device team_slave_0 removed [ 310.069752][ T8091] hsr_slave_0: entered promiscuous mode [ 310.076069][ T8091] hsr_slave_1: entered promiscuous mode [ 310.188613][ T46] Bluetooth: hci0: command tx timeout [ 310.584646][ T8091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.601315][ T8091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.610426][ T8091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.624542][ T8091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.768914][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.789696][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.801327][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.804507][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.835473][ T1057] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.838713][ T1057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.155005][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.219141][ T8091] veth0_vlan: entered promiscuous mode [ 311.230024][ T8091] veth1_vlan: entered promiscuous mode [ 311.284985][ T8091] veth0_macvtap: entered promiscuous mode [ 311.302456][ T8091] veth1_macvtap: entered promiscuous mode [ 311.329931][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.341644][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.364813][ T3171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.374369][ T3171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.391765][ T3171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.406769][ T3171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.488179][ T3171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.491200][ T3171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.535240][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.539872][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:36:20 executed programs: 2402 [ 311.637074][ T8151] validate_nla: 214 callbacks suppressed [ 311.637084][ T8151] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 311.661726][ T8151] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.679932][ T8151] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 311.740563][ T8154] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 311.750640][ T8154] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 311.802568][ T8155] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 311.807379][ T8155] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 311.832538][ T8156] netlink: 'syz.0.2420': attribute type 10 has an invalid length. [ 311.837253][ T8156] netlink: 'syz.0.2420': attribute type 10 has an invalid length. [ 311.859174][ T8157] netlink: 'syz.0.2421': attribute type 10 has an invalid length. [ 311.863966][ T8157] netlink: 'syz.0.2421': attribute type 10 has an invalid length. [ 312.267954][ T46] Bluetooth: hci0: command tx timeout [ 314.348172][ T46] Bluetooth: hci0: command tx timeout [ 316.428692][ T46] Bluetooth: hci0: command tx timeout 2026/01/18 18:36:25 executed programs: 2630 [ 316.644854][ T8391] validate_nla: 454 callbacks suppressed [ 316.644867][ T8391] netlink: 'syz.0.2649': attribute type 10 has an invalid length. [ 316.653987][ T8391] netlink: 'syz.0.2649': attribute type 10 has an invalid length. [ 316.680859][ T8392] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 316.685637][ T8392] netlink: 'syz.0.2650': attribute type 10 has an invalid length. [ 316.706226][ T8393] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 316.714246][ T8393] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 316.731447][ T8394] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 316.736181][ T8394] netlink: 'syz.0.2652': attribute type 10 has an invalid length. [ 316.760769][ T8395] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 316.765739][ T8395] netlink: 'syz.0.2653': attribute type 10 has an invalid length. 2026/01/18 18:36:30 executed programs: 2871 [ 321.648152][ T8632] validate_nla: 472 callbacks suppressed [ 321.648166][ T8632] netlink: 'syz.0.2890': attribute type 10 has an invalid length. [ 321.655511][ T8632] netlink: 'syz.0.2890': attribute type 10 has an invalid length. [ 321.674872][ T8633] netlink: 'syz.0.2891': attribute type 10 has an invalid length. [ 321.681434][ T8633] netlink: 'syz.0.2891': attribute type 10 has an invalid length. [ 321.700409][ T8634] netlink: 'syz.0.2892': attribute type 10 has an invalid length. [ 321.705021][ T8634] netlink: 'syz.0.2892': attribute type 10 has an invalid length. [ 321.724032][ T8635] netlink: 'syz.0.2893': attribute type 10 has an invalid length. [ 321.729051][ T8635] netlink: 'syz.0.2893': attribute type 10 has an invalid length. [ 321.749572][ T8636] netlink: 'syz.0.2894': attribute type 10 has an invalid length. [ 321.755183][ T8636] netlink: 'syz.0.2894': attribute type 10 has an invalid length. [ 324.291677][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.295509][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.300443][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.303762][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.307923][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.448636][ T3171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.496553][ T3171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.510970][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 324.542263][ T3171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.598109][ T3171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.615699][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.619447][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.622625][ T8762] bridge_slave_0: entered allmulticast mode [ 324.626685][ T8762] bridge_slave_0: entered promiscuous mode [ 324.638419][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.641728][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.645258][ T8762] bridge_slave_1: entered allmulticast mode [ 324.653770][ T8762] bridge_slave_1: entered promiscuous mode [ 324.735617][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.746466][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.794750][ T3171] bridge_slave_1: left allmulticast mode [ 324.796880][ T3171] bridge_slave_1: left promiscuous mode [ 324.807725][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.819881][ T3171] bridge_slave_0: left allmulticast mode [ 324.822251][ T3171] bridge_slave_0: left promiscuous mode [ 324.824632][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.248200][ T3171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.253675][ T3171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.258731][ T3171] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 325.262465][ T3171] bond0 (unregistering): Released all slaves [ 325.286818][ T8762] team0: Port device team_slave_0 added [ 325.299558][ T8762] team0: Port device team_slave_1 added [ 325.396297][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.410205][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.433961][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.455176][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.462810][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.497777][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.605344][ T3171] hsr_slave_0: left promiscuous mode [ 325.619414][ T3171] hsr_slave_1: left promiscuous mode [ 325.622225][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.625181][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.638242][ T3171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.642122][ T3171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.665939][ T3171] veth1_macvtap: left promiscuous mode [ 325.669103][ T3171] veth0_macvtap: left promiscuous mode [ 325.671618][ T3171] veth1_vlan: left promiscuous mode [ 325.673937][ T3171] veth0_vlan: left promiscuous mode [ 325.983860][ T3171] team0 (unregistering): Port device team_slave_1 removed [ 326.009336][ T3171] team0 (unregistering): Port device team_slave_0 removed [ 326.250867][ T8762] hsr_slave_0: entered promiscuous mode [ 326.253654][ T8762] hsr_slave_1: entered promiscuous mode [ 326.357945][ T4681] Bluetooth: hci0: command tx timeout [ 326.836632][ T8762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.853308][ T8762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.871470][ T8762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.893259][ T8762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.039973][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.062871][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.074197][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.076896][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.100170][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.103325][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.315396][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.320453][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.419447][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.488558][ T8762] veth0_vlan: entered promiscuous mode [ 327.501282][ T8762] veth1_vlan: entered promiscuous mode [ 327.544953][ T8762] veth0_macvtap: entered promiscuous mode [ 327.565606][ T8762] veth1_macvtap: entered promiscuous mode [ 327.600658][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.618575][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.633261][ T1074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.644405][ T1074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.655678][ T1074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.673167][ T1074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.708662][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.711627][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.738478][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.741602][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:36:36 executed programs: 3002 [ 327.792968][ T8815] validate_nla: 244 callbacks suppressed [ 327.792978][ T8815] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 327.802163][ T8815] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.806712][ T8815] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 327.832004][ T8816] netlink: 'syz.0.3018': attribute type 10 has an invalid length. [ 327.836658][ T8816] netlink: 'syz.0.3018': attribute type 10 has an invalid length. [ 327.857253][ T8817] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 327.862522][ T8817] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 327.884907][ T8818] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 327.890983][ T8818] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 327.910346][ T8819] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 327.914992][ T8819] netlink: 'syz.0.3021': attribute type 10 has an invalid length. [ 328.427769][ T4681] Bluetooth: hci0: command tx timeout [ 330.507774][ T4681] Bluetooth: hci0: command tx timeout [ 332.587909][ T4681] Bluetooth: hci0: command tx timeout [ 332.797599][ T9054] validate_nla: 468 callbacks suppressed [ 332.797613][ T9054] netlink: 'syz.0.3256': attribute type 10 has an invalid length. [ 332.804648][ T9054] netlink: 'syz.0.3256': attribute type 10 has an invalid length. 2026/01/18 18:36:41 executed programs: 3240 [ 332.827353][ T9055] netlink: 'syz.0.3257': attribute type 10 has an invalid length. [ 332.836036][ T9055] netlink: 'syz.0.3257': attribute type 10 has an invalid length. [ 332.853882][ T9056] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 332.859068][ T9056] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 332.876048][ T9057] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 332.883490][ T9057] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 332.902911][ T9058] netlink: 'syz.0.3260': attribute type 10 has an invalid length. [ 332.908972][ T9058] netlink: 'syz.0.3260': attribute type 10 has an invalid length. [ 337.809289][ T9301] validate_nla: 485 callbacks suppressed [ 337.809305][ T9301] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 337.830375][ T9302] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 337.835269][ T9302] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 337.855189][ T9303] netlink: 'syz.0.3505': attribute type 10 has an invalid length. [ 337.860501][ T9303] netlink: 'syz.0.3505': attribute type 10 has an invalid length. 2026/01/18 18:36:46 executed programs: 3489 [ 337.884365][ T9304] netlink: 'syz.0.3506': attribute type 10 has an invalid length. [ 337.892519][ T9304] netlink: 'syz.0.3506': attribute type 10 has an invalid length. [ 337.910489][ T9305] netlink: 'syz.0.3507': attribute type 10 has an invalid length. [ 337.915055][ T9305] netlink: 'syz.0.3507': attribute type 10 has an invalid length. [ 337.935736][ T9306] netlink: 'syz.0.3508': attribute type 10 has an invalid length. [ 340.195542][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.201070][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.204326][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.208093][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.212992][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.335929][ T3244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.390247][ T3244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.406981][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 340.445345][ T3244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.493654][ T3244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.512400][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.515528][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.521639][ T9418] bridge_slave_0: entered allmulticast mode [ 340.525263][ T9418] bridge_slave_0: entered promiscuous mode [ 340.531592][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.534529][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.539175][ T9418] bridge_slave_1: entered allmulticast mode [ 340.542715][ T9418] bridge_slave_1: entered promiscuous mode [ 340.610991][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.630231][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.662826][ T3244] bridge_slave_1: left allmulticast mode [ 340.665555][ T3244] bridge_slave_1: left promiscuous mode [ 340.677754][ T3244] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.682647][ T3244] bridge_slave_0: left allmulticast mode [ 340.685073][ T3244] bridge_slave_0: left promiscuous mode [ 340.698552][ T3244] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.049277][ T3244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.054672][ T3244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.060317][ T3244] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 341.064190][ T3244] bond0 (unregistering): Released all slaves [ 341.121579][ T9418] team0: Port device team_slave_0 added [ 341.125977][ T9418] team0: Port device team_slave_1 added [ 341.226175][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.234766][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.255583][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.310377][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.317750][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.341054][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.370513][ T3244] hsr_slave_0: left promiscuous mode [ 341.380440][ T3244] hsr_slave_1: left promiscuous mode [ 341.383305][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.386616][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.408159][ T3244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.411152][ T3244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.430508][ T3244] veth1_macvtap: left promiscuous mode [ 341.432781][ T3244] veth0_macvtap: left promiscuous mode [ 341.435067][ T3244] veth1_vlan: left promiscuous mode [ 341.437176][ T3244] veth0_vlan: left promiscuous mode [ 341.794741][ T3244] team0 (unregistering): Port device team_slave_1 removed [ 341.817200][ T3244] team0 (unregistering): Port device team_slave_0 removed [ 342.143898][ T9418] hsr_slave_0: entered promiscuous mode [ 342.160188][ T9418] hsr_slave_1: entered promiscuous mode [ 342.267572][ T46] Bluetooth: hci0: command tx timeout [ 342.722672][ T9418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.739128][ T9418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.744697][ T9418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.758923][ T9418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.870419][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.898105][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.908596][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.911707][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.936013][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.938870][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.230979][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.299049][ T9418] veth0_vlan: entered promiscuous mode [ 343.314654][ T9418] veth1_vlan: entered promiscuous mode [ 343.356973][ T9418] veth0_macvtap: entered promiscuous mode [ 343.375345][ T9418] veth1_macvtap: entered promiscuous mode [ 343.411871][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.431635][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.450223][ T1074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.459574][ T1074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.463239][ T1074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.467036][ T1074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.555812][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.571417][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.611699][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.615237][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:36:52 executed programs: 3602 [ 343.716607][ T9475] validate_nla: 217 callbacks suppressed [ 343.716620][ T9475] netlink: 'syz.0.3617': attribute type 10 has an invalid length. [ 343.749018][ T9475] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 343.759737][ T9475] netlink: 'syz.0.3617': attribute type 10 has an invalid length. [ 343.823788][ T9477] netlink: 'syz.0.3618': attribute type 10 has an invalid length. [ 343.829783][ T9477] netlink: 'syz.0.3618': attribute type 10 has an invalid length. [ 343.851332][ T9478] netlink: 'syz.0.3619': attribute type 10 has an invalid length. [ 343.856347][ T9478] netlink: 'syz.0.3619': attribute type 10 has an invalid length. [ 343.880739][ T9479] netlink: 'syz.0.3620': attribute type 10 has an invalid length. [ 343.885060][ T9479] netlink: 'syz.0.3620': attribute type 10 has an invalid length. [ 343.904234][ T9480] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 343.910859][ T9480] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 344.347805][ T46] Bluetooth: hci0: command tx timeout [ 346.429651][ T46] Bluetooth: hci0: command tx timeout [ 348.508096][ T46] Bluetooth: hci0: command tx timeout [ 348.720097][ T9714] validate_nla: 467 callbacks suppressed [ 348.720110][ T9714] netlink: 'syz.0.3855': attribute type 10 has an invalid length. 2026/01/18 18:36:57 executed programs: 3839 [ 348.743261][ T9715] netlink: 'syz.0.3856': attribute type 10 has an invalid length. [ 348.751871][ T9715] netlink: 'syz.0.3856': attribute type 10 has an invalid length. [ 348.772901][ T9716] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 348.780205][ T9716] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 348.802253][ T9717] netlink: 'syz.0.3858': attribute type 10 has an invalid length. [ 348.806761][ T9717] netlink: 'syz.0.3858': attribute type 10 has an invalid length. [ 348.825654][ T9718] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 348.835622][ T9718] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 348.858348][ T9719] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 353.740429][ T9960] validate_nla: 481 callbacks suppressed [ 353.740442][ T9960] netlink: 'syz.0.4101': attribute type 10 has an invalid length. 2026/01/18 18:37:02 executed programs: 4085 [ 353.750683][ T9960] netlink: 'syz.0.4101': attribute type 10 has an invalid length. [ 353.768791][ T9961] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 353.773490][ T9961] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 353.792755][ T9962] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 353.796689][ T9962] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 353.819345][ T9963] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 353.824169][ T9963] netlink: 'syz.0.4104': attribute type 10 has an invalid length. [ 353.841630][ T9964] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 353.846003][ T9964] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 356.142191][ T4681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.146345][ T4681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.151722][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.158201][ T4681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.162104][ T4681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.341962][ T2939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.356285][T10078] chnl_net:caif_netlink_parms(): no params data found [ 356.421283][ T2939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.499242][ T2939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.559215][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.562279][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.565332][T10078] bridge_slave_0: entered allmulticast mode [ 356.580781][T10078] bridge_slave_0: entered promiscuous mode [ 356.605611][ T2939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.629015][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.632324][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.635515][T10078] bridge_slave_1: entered allmulticast mode [ 356.658739][T10078] bridge_slave_1: entered promiscuous mode [ 356.707539][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.716515][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.792427][T10078] team0: Port device team_slave_0 added [ 356.801987][T10078] team0: Port device team_slave_1 added [ 356.869845][ T2939] bridge_slave_1: left allmulticast mode [ 356.872453][ T2939] bridge_slave_1: left promiscuous mode [ 356.875501][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.891036][ T2939] bridge_slave_0: left allmulticast mode [ 356.893629][ T2939] bridge_slave_0: left promiscuous mode [ 356.896292][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.209641][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.215348][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.223521][ T2939] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 357.228167][ T2939] bond0 (unregistering): Released all slaves [ 357.233963][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.236644][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.248024][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.274472][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.281694][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.301455][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.421684][T10078] hsr_slave_0: entered promiscuous mode [ 357.443900][T10078] hsr_slave_1: entered promiscuous mode [ 357.447245][T10078] debugfs: 'hsr0' already exists in 'hsr' [ 357.450938][T10078] Cannot create hsr debugfs directory [ 357.471389][ T2939] hsr_slave_0: left promiscuous mode [ 357.473901][ T2939] hsr_slave_1: left promiscuous mode [ 357.482360][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.485661][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.498380][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.501584][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.524321][ T2939] veth1_macvtap: left promiscuous mode [ 357.526840][ T2939] veth0_macvtap: left promiscuous mode [ 357.547661][ T2939] veth1_vlan: left promiscuous mode [ 357.550174][ T2939] veth0_vlan: left promiscuous mode [ 357.955028][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 357.978460][ T2939] team0 (unregistering): Port device team_slave_0 removed [ 358.188752][ T4681] Bluetooth: hci0: command tx timeout [ 358.781489][T10078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.799032][T10078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.804765][T10078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.821745][T10078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.948910][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.974112][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.991844][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.994741][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.016016][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.019064][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.331077][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.408621][T10078] veth0_vlan: entered promiscuous mode [ 359.415321][T10078] veth1_vlan: entered promiscuous mode [ 359.460207][T10078] veth0_macvtap: entered promiscuous mode [ 359.478648][T10078] veth1_macvtap: entered promiscuous mode [ 359.508247][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.521728][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.545043][ T2939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.559982][ T2939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.580078][ T2939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.583656][ T2939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.656673][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.669721][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.715120][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.719616][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 18:37:08 executed programs: 4202 [ 359.815818][T10141] validate_nla: 222 callbacks suppressed [ 359.815833][T10141] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 359.829820][T10141] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.848726][T10141] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 359.852698][ T2939] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 359.857801][ T2939] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 359.861086][ T2939] CPU: 0 UID: 0 PID: 2939 Comm: kworker/u4:13 Not tainted syzkaller #0 PREEMPT(full) [ 359.865080][ T2939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.869520][ T2939] Workqueue: events_unbound cfg80211_wiphy_work [ 359.872338][ T2939] RIP: 0010:ieee80211_put_srates_elem+0x42/0x640 [ 359.875434][ T2939] Code: 18 89 54 24 28 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 ae 3f e3 f6 48 89 5c 24 38 4c 8d 6b 18 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 27 84 c0 0f 85 19 05 00 00 41 8b 5d 00 31 ff 89 de e8 [ 359.885318][ T2939] RSP: 0018:ffffc9000ef877b8 EFLAGS: 00010206 [ 359.888554][ T2939] RAX: ffffffff8addc7b2 RBX: 0000000000000000 RCX: ffff888038714980 [ 359.892616][ T2939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888041b833c0 [ 359.896835][ T2939] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 359.900575][ T2939] R10: dffffc0000000000 R11: ffffed10065f880b R12: dffffc0000000000 [ 359.903859][ T2939] R13: 0000000000000018 R14: ffff888041b833c0 R15: 0000000000000003 [ 359.907341][ T2939] FS: 0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 359.910881][ T2939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.913549][ T2939] CR2: 00007ffcd2d0fe50 CR3: 00000000427e7000 CR4: 0000000000352ef0 [ 359.916459][ T2939] Call Trace: [ 359.917922][ T2939] [ 359.919197][ T2939] ieee80211_mesh_build_beacon+0xa83/0x1b50 [ 359.921752][ T2939] ? ieee80211_mesh_build_beacon+0x292/0x1b50 [ 359.924174][ T2939] ieee80211_mesh_rebuild_beacon+0xc7/0x170 [ 359.926592][ T2939] ieee80211_mesh_finish_csa+0x131/0x210 [ 359.929052][ T2939] ieee80211_csa_finalize+0x633/0x1150 [ 359.931344][ T2939] ? __pfx_ieee80211_csa_finalize+0x10/0x10 [ 359.933875][ T2939] ? ieee80211_csa_finalize_work+0x176/0x1e0 [ 359.936355][ T2939] cfg80211_wiphy_work+0x2ab/0x450 [ 359.938618][ T2939] ? process_scheduled_works+0x9ef/0x1770 [ 359.941063][ T2939] process_scheduled_works+0xad1/0x1770 [ 359.943375][ T2939] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.945789][ T2939] ? do_raw_spin_lock+0x121/0x290 [ 359.947994][ T2939] worker_thread+0x8a0/0xda0 [ 359.949856][ T2939] ? __kthread_parkme+0x7b/0x200 [ 359.951866][ T2939] kthread+0x711/0x8a0 [ 359.953549][ T2939] ? __pfx_worker_thread+0x10/0x10 [ 359.955588][ T2939] ? __pfx_kthread+0x10/0x10 [ 359.957199][ T2939] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.959319][ T2939] ? __pfx_kthread+0x10/0x10 [ 359.961171][ T2939] ret_from_fork+0x510/0xa50 [ 359.963036][ T2939] ? __pfx_ret_from_fork+0x10/0x10 [ 359.965153][ T2939] ? __switch_to+0xc9e/0x1480 [ 359.966835][ T2939] ? __pfx_kthread+0x10/0x10 [ 359.968723][ T2939] ret_from_fork_asm+0x1a/0x30 [ 359.970776][ T2939] [ 359.972107][ T2939] Modules linked in: [ 359.974221][ T2939] ---[ end trace 0000000000000000 ]--- [ 359.998217][ T2939] RIP: 0010:ieee80211_put_srates_elem+0x42/0x640 [ 360.001162][ T2939] Code: 18 89 54 24 28 48 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 ae 3f e3 f6 48 89 5c 24 38 4c 8d 6b 18 4d 89 ef 49 c1 ef 03 <43> 0f b6 04 27 84 c0 0f 85 19 05 00 00 41 8b 5d 00 31 ff 89 de e8 [ 360.010413][ T2939] RSP: 0018:ffffc9000ef877b8 EFLAGS: 00010206 [ 360.013103][ T2939] RAX: ffffffff8addc7b2 RBX: 0000000000000000 RCX: ffff888038714980 [ 360.016637][ T2939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888041b833c0 [ 360.021565][ T2939] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 360.025041][ T2939] R10: dffffc0000000000 R11: ffffed10065f880b R12: dffffc0000000000 [ 360.028925][ T2939] R13: 0000000000000018 R14: ffff888041b833c0 R15: 0000000000000003 [ 360.032397][ T2939] FS: 0000000000000000(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 360.036101][ T2939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.039163][ T2939] CR2: 000055d21adc6138 CR3: 0000000033236000 CR4: 0000000000352ef0 [ 360.042596][ T2939] Kernel panic - not syncing: Fatal exception [ 360.045583][ T2939] Kernel Offset: disabled [ 360.047479][ T2939] Rebooting in 86400 seconds..