Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. 2025/07/07 11:50:32 ignoring optional flag "sandboxArg"="0" [ 76.736525][ T30] audit: type=1400 audit(1751889032.892:62): avc: denied { write } for pid=5828 comm="syz-execprog" path="pipe:[4330]" dev="pipefs" ino=4330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2025/07/07 11:50:33 parsed 1 programs [ 77.482748][ T30] audit: type=1400 audit(1751889033.632:63): avc: denied { node_bind } for pid=5828 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 79.357133][ T30] audit: type=1400 audit(1751889035.512:64): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 79.360429][ T5836] cgroup: Unknown subsys name 'net' [ 79.379938][ T30] audit: type=1400 audit(1751889035.512:65): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.409627][ T30] audit: type=1400 audit(1751889035.572:66): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.586453][ T5836] cgroup: Unknown subsys name 'cpuset' [ 79.594521][ T5836] cgroup: Unknown subsys name 'rlimit' [ 79.819167][ T30] audit: type=1400 audit(1751889035.972:67): avc: denied { setattr } for pid=5836 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.851570][ T30] audit: type=1400 audit(1751889035.972:68): avc: denied { create } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.883721][ T30] audit: type=1400 audit(1751889035.972:69): avc: denied { write } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.905069][ T30] audit: type=1400 audit(1751889035.972:70): avc: denied { read } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.925578][ T30] audit: type=1400 audit(1751889035.982:71): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 79.945126][ T5838] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 80.846447][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.156608][ T1204] cfg80211: failed to load regulatory.db [ 82.443989][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 82.444004][ T30] audit: type=1400 audit(1751889038.592:78): avc: denied { execmem } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 82.492329][ T30] audit: type=1400 audit(1751889038.622:79): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 82.516184][ T30] audit: type=1400 audit(1751889038.622:80): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.538445][ T30] audit: type=1400 audit(1751889038.622:81): avc: denied { read } for pid=5843 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.559974][ T30] audit: type=1400 audit(1751889038.622:82): avc: denied { open } for pid=5843 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.583692][ T30] audit: type=1400 audit(1751889038.622:83): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.605093][ T30] audit: type=1400 audit(1751889038.672:84): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.627950][ T30] audit: type=1400 audit(1751889038.672:85): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.650421][ T30] audit: type=1401 audit(1751889038.672:86): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 82.662391][ T30] audit: type=1400 audit(1751889038.742:87): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.721708][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.095097][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.108515][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.138236][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.147143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.139586][ T5888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.147910][ T5888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.155482][ T5888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.163437][ T5888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.171355][ T5888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.845745][ T5903] chnl_net:caif_netlink_parms(): no params data found [ 84.911841][ T5903] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.919316][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.926497][ T5903] bridge_slave_0: entered allmulticast mode [ 84.933151][ T5903] bridge_slave_0: entered promiscuous mode [ 84.941630][ T5903] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.948830][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.956485][ T5903] bridge_slave_1: entered allmulticast mode [ 84.963616][ T5903] bridge_slave_1: entered promiscuous mode [ 84.985358][ T5903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.998400][ T5903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.021933][ T5903] team0: Port device team_slave_0 added [ 85.029446][ T5903] team0: Port device team_slave_1 added [ 85.049558][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.057125][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.083081][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.096141][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.103087][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.129269][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.165321][ T5903] hsr_slave_0: entered promiscuous mode [ 85.171587][ T5903] hsr_slave_1: entered promiscuous mode [ 85.267423][ T5903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.277548][ T5903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.286745][ T5903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.296415][ T5903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.346410][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.366536][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.378920][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.386062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.397384][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.404487][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.527684][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.559168][ T5903] veth0_vlan: entered promiscuous mode [ 85.568345][ T5903] veth1_vlan: entered promiscuous mode [ 85.588762][ T5903] veth0_macvtap: entered promiscuous mode [ 85.597215][ T5903] veth1_macvtap: entered promiscuous mode [ 85.611462][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.623178][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.634833][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643599][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652336][ T5903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.661189][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.763494][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.834743][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.904591][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.971482][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/07 11:50:42 executed programs: 0 [ 86.328522][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.336345][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.343748][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.351730][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.360898][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.460991][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 86.507061][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.515294][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.522424][ T5933] bridge_slave_0: entered allmulticast mode [ 86.529318][ T5933] bridge_slave_0: entered promiscuous mode [ 86.537024][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.544384][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.551476][ T5933] bridge_slave_1: entered allmulticast mode [ 86.558269][ T5933] bridge_slave_1: entered promiscuous mode [ 86.582590][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.593390][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.623506][ T5933] team0: Port device team_slave_0 added [ 86.631394][ T5933] team0: Port device team_slave_1 added [ 86.650877][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.658048][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.684005][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.696307][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.703250][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.729171][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.765996][ T5933] hsr_slave_0: entered promiscuous mode [ 86.772026][ T5933] hsr_slave_1: entered promiscuous mode [ 86.778030][ T5933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.785760][ T5933] Cannot create hsr debugfs directory [ 88.434148][ T5152] Bluetooth: hci0: command tx timeout [ 88.963888][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 88.963904][ T30] audit: type=1400 audit(1751889045.112:109): avc: denied { search } for pid=5496 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.035203][ T30] audit: type=1400 audit(1751889045.112:110): avc: denied { search } for pid=5496 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.037564][ T49] bridge_slave_1: left allmulticast mode [ 89.056975][ T30] audit: type=1400 audit(1751889045.112:111): avc: denied { search } for pid=5496 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.070399][ T49] bridge_slave_1: left promiscuous mode [ 89.091458][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.097684][ T30] audit: type=1400 audit(1751889045.242:112): avc: denied { read open } for pid=5945 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.126794][ T49] bridge_slave_0: left allmulticast mode [ 89.132444][ T49] bridge_slave_0: left promiscuous mode [ 89.134678][ T30] audit: type=1400 audit(1751889045.242:113): avc: denied { getattr } for pid=5945 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.138543][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.320304][ T30] audit: type=1400 audit(1751889045.472:114): avc: denied { add_name } for pid=5943 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.408966][ T30] audit: type=1400 audit(1751889045.562:115): avc: denied { remove_name } for pid=5955 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2031 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.436630][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.447892][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.459286][ T49] bond0 (unregistering): Released all slaves [ 89.539242][ T49] hsr_slave_0: left promiscuous mode [ 89.545358][ T49] hsr_slave_1: left promiscuous mode [ 89.551161][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.558849][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.569887][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.577517][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.597384][ T49] veth1_macvtap: left promiscuous mode [ 89.603044][ T49] veth0_macvtap: left promiscuous mode [ 89.609641][ T49] veth1_vlan: left promiscuous mode [ 89.616055][ T49] veth0_vlan: left promiscuous mode [ 89.932511][ T49] team0 (unregistering): Port device team_slave_1 removed [ 89.953479][ T49] team0 (unregistering): Port device team_slave_0 removed [ 90.330977][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.342949][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.355918][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.367113][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.523748][ T5152] Bluetooth: hci0: command tx timeout [ 90.546547][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.567467][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.591989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.599103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.618707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.625870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.852432][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.898908][ T5933] veth0_vlan: entered promiscuous mode [ 90.910886][ T5933] veth1_vlan: entered promiscuous mode [ 90.943398][ T5933] veth0_macvtap: entered promiscuous mode [ 90.955498][ T5933] veth1_macvtap: entered promiscuous mode [ 90.976147][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.991230][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.006642][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.016754][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.027295][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.036242][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.104979][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.118689][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.146907][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.155790][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.224113][ T6018] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 91.246001][ T6018] team0: Port device wlan1 added 2025/07/07 11:50:47 executed programs: 3 [ 91.278520][ T6020] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 91.326464][ T6022] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 91.371589][ T6024] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 91.408164][ T6026] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 91.433521][ T6027] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 91.482692][ T6029] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 91.539138][ T6033] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 91.565529][ T6034] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 91.597045][ T6035] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 92.593759][ T5152] Bluetooth: hci0: command tx timeout [ 94.673783][ T5152] Bluetooth: hci0: command tx timeout [ 96.251348][ T6291] validate_nla: 233 callbacks suppressed [ 96.251360][ T6291] netlink: 'syz.0.259': attribute type 10 has an invalid length. [ 96.282407][ T6292] netlink: 'syz.0.260': attribute type 10 has an invalid length. 2025/07/07 11:50:52 executed programs: 246 [ 96.311204][ T6293] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 96.332785][ T6294] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 96.361679][ T6295] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 96.386368][ T6296] netlink: 'syz.0.264': attribute type 10 has an invalid length. [ 96.409013][ T6297] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 96.443563][ T6298] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 96.468379][ T6299] netlink: 'syz.0.267': attribute type 10 has an invalid length. [ 96.489635][ T6300] netlink: 'syz.0.268': attribute type 10 has an invalid length. 2025/07/07 11:50:57 executed programs: 529 [ 101.258553][ T6576] validate_nla: 273 callbacks suppressed [ 101.258565][ T6576] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 101.280820][ T6577] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 101.297077][ T6578] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 101.328457][ T6579] netlink: 'syz.0.545': attribute type 10 has an invalid length. [ 101.345908][ T6580] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 101.361464][ T6581] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 101.388564][ T6582] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 101.405176][ T6583] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 101.420787][ T6584] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 101.458964][ T6585] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 102.638323][ T5888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.648628][ T5888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.656570][ T5888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.667894][ T5888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.675494][ T5888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.780731][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 102.825119][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.832176][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.839560][ T6653] bridge_slave_0: entered allmulticast mode [ 102.846513][ T6653] bridge_slave_0: entered promiscuous mode [ 102.854182][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.861280][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.868844][ T6653] bridge_slave_1: entered allmulticast mode [ 102.875533][ T6653] bridge_slave_1: entered promiscuous mode [ 102.898513][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.921801][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.932777][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.947501][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.974680][ T6653] team0: Port device team_slave_0 added [ 102.981601][ T6653] team0: Port device team_slave_1 added [ 103.008885][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.022829][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.030131][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.056141][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.069098][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.076084][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.102161][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.127679][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.157709][ T6653] hsr_slave_0: entered promiscuous mode [ 103.163778][ T6653] hsr_slave_1: entered promiscuous mode [ 103.277767][ T13] bridge_slave_1: left allmulticast mode [ 103.283433][ T13] bridge_slave_1: left promiscuous mode [ 103.291632][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.302849][ T13] bridge_slave_0: left allmulticast mode [ 103.309411][ T13] bridge_slave_0: left promiscuous mode [ 103.318247][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.593280][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.608014][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.619684][ T13] bond0 (unregistering): Released all slaves [ 103.712269][ T13] [ 103.714626][ T13] ====================================================== [ 103.721644][ T13] WARNING: possible circular locking dependency detected [ 103.728660][ T13] 6.16.0-rc5-syzkaller #0 Not tainted [ 103.734023][ T13] ------------------------------------------------------ [ 103.741031][ T13] kworker/u8:1/13 is trying to acquire lock: [ 103.747000][ T13] ffff88802c66ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x31/0x1b0 [ 103.756590][ T13] [ 103.756590][ T13] but task is already holding lock: [ 103.763947][ T13] ffff8880340b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 103.774224][ T13] [ 103.774224][ T13] which lock already depends on the new lock. [ 103.774224][ T13] [ 103.784618][ T13] [ 103.784618][ T13] the existing dependency chain (in reverse order) is: [ 103.793623][ T13] [ 103.793623][ T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 103.801351][ T13] __mutex_lock+0x199/0xb90 [ 103.806382][ T13] ieee80211_open+0x132/0x210 [ 103.811584][ T13] __dev_open+0x2e4/0x7d0 [ 103.816438][ T13] netif_open+0xf2/0x160 [ 103.821200][ T13] dev_open+0xb2/0x260 [ 103.825795][ T13] team_add_slave+0xaf0/0x21a0 [ 103.831084][ T13] do_set_master+0x40f/0x730 [ 103.836197][ T13] do_setlink.constprop.0+0xbd8/0x4380 [ 103.842187][ T13] rtnl_newlink+0x1446/0x2000 [ 103.847390][ T13] rtnetlink_rcv_msg+0x95e/0xe90 [ 103.852857][ T13] netlink_rcv_skb+0x155/0x420 [ 103.858142][ T13] netlink_unicast+0x53a/0x7f0 [ 103.863424][ T13] netlink_sendmsg+0x8d1/0xdd0 [ 103.868707][ T13] ____sys_sendmsg+0xa95/0xc70 [ 103.873990][ T13] ___sys_sendmsg+0x134/0x1d0 [ 103.879196][ T13] __sys_sendmsg+0x16d/0x220 [ 103.884307][ T13] do_syscall_64+0xcd/0x4c0 [ 103.889324][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.895712][ T13] [ 103.895712][ T13] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 103.903851][ T13] __lock_acquire+0x126f/0x1c90 [ 103.909195][ T13] lock_acquire+0x179/0x350 [ 103.914190][ T13] __mutex_lock+0x199/0xb90 [ 103.919204][ T13] team_del_slave+0x31/0x1b0 [ 103.924293][ T13] team_device_event+0xd0/0x770 [ 103.929641][ T13] notifier_call_chain+0xbc/0x410 [ 103.935173][ T13] call_netdevice_notifiers_info+0xbe/0x140 [ 103.941562][ T13] unregister_netdevice_many_notify+0xf9d/0x2700 [ 103.948387][ T13] unregister_netdevice_queue+0x305/0x3f0 [ 103.954605][ T13] _cfg80211_unregister_wdev+0x64b/0x830 [ 103.960730][ T13] ieee80211_remove_interfaces+0x34e/0x720 [ 103.967032][ T13] ieee80211_unregister_hw+0x55/0x3a0 [ 103.972903][ T13] hwsim_exit_net+0x3ac/0x7d0 [ 103.978074][ T13] ops_undo_list+0x2ee/0xab0 [ 103.983161][ T13] cleanup_net+0x408/0x890 [ 103.988074][ T13] process_one_work+0x9cf/0x1b70 [ 103.993505][ T13] worker_thread+0x6c8/0xf10 [ 103.998586][ T13] kthread+0x3c5/0x780 [ 104.003151][ T13] ret_from_fork+0x5d4/0x6f0 [ 104.008238][ T13] ret_from_fork_asm+0x1a/0x30 [ 104.013507][ T13] [ 104.013507][ T13] other info that might help us debug this: [ 104.013507][ T13] [ 104.023719][ T13] Possible unsafe locking scenario: [ 104.023719][ T13] [ 104.031147][ T13] CPU0 CPU1 [ 104.036492][ T13] ---- ---- [ 104.041837][ T13] lock(&rdev->wiphy.mtx); [ 104.046325][ T13] lock(team->team_lock_key#2); [ 104.053763][ T13] lock(&rdev->wiphy.mtx); [ 104.060767][ T13] lock(team->team_lock_key#2); [ 104.065680][ T13] [ 104.065680][ T13] *** DEADLOCK *** [ 104.065680][ T13] [ 104.073802][ T13] 5 locks held by kworker/u8:1/13: [ 104.078892][ T13] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 104.089219][ T13] #1: ffffc90000127d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 104.099101][ T13] #2: ffffffff9034bed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 104.108379][ T13] #3: ffffffff90361f28 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 104.118179][ T13] #4: ffff8880340b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 104.128846][ T13] [ 104.128846][ T13] stack backtrace: [ 104.134717][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 104.134731][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.134739][ T13] Workqueue: netns cleanup_net [ 104.134757][ T13] Call Trace: [ 104.134762][ T13] [ 104.134766][ T13] dump_stack_lvl+0x116/0x1f0 [ 104.134782][ T13] print_circular_bug+0x275/0x350 [ 104.134799][ T13] check_noncircular+0x14c/0x170 [ 104.134816][ T13] ? __pfx___up_read+0x10/0x10 [ 104.134830][ T13] __lock_acquire+0x126f/0x1c90 [ 104.134842][ T13] lock_acquire+0x179/0x350 [ 104.134851][ T13] ? team_del_slave+0x31/0x1b0 [ 104.134869][ T13] ? __pfx___might_resched+0x10/0x10 [ 104.134882][ T13] ? __pfx___mutex_trylock_common+0x10/0x10 [ 104.134893][ T13] __mutex_lock+0x199/0xb90 [ 104.134908][ T13] ? team_del_slave+0x31/0x1b0 [ 104.134924][ T13] ? team_del_slave+0x31/0x1b0 [ 104.134939][ T13] ? xsk_notifier+0x167/0x280 [ 104.134950][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 104.134966][ T13] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.134983][ T13] ? team_del_slave+0x31/0x1b0 [ 104.134998][ T13] team_del_slave+0x31/0x1b0 [ 104.135014][ T13] team_device_event+0xd0/0x770 [ 104.135030][ T13] notifier_call_chain+0xbc/0x410 [ 104.135045][ T13] ? __pfx_team_device_event+0x10/0x10 [ 104.135062][ T13] call_netdevice_notifiers_info+0xbe/0x140 [ 104.135073][ T13] unregister_netdevice_many_notify+0xf9d/0x2700 [ 104.135091][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 104.135110][ T13] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 104.135122][ T13] ? find_held_lock+0x2b/0x80 [ 104.135135][ T13] unregister_netdevice_queue+0x305/0x3f0 [ 104.135151][ T13] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 104.135168][ T13] _cfg80211_unregister_wdev+0x64b/0x830 [ 104.135181][ T13] ieee80211_remove_interfaces+0x34e/0x720 [ 104.135196][ T13] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 104.135213][ T13] ieee80211_unregister_hw+0x55/0x3a0 [ 104.135229][ T13] hwsim_exit_net+0x3ac/0x7d0 [ 104.135243][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 104.135254][ T13] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 104.135265][ T13] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 104.135280][ T13] ? __pfx_hwsim_exit_net+0x10/0x10 [ 104.135292][ T13] ops_undo_list+0x2ee/0xab0 [ 104.135308][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 104.135323][ T13] ? __local_bh_enable_ip+0xa4/0x120 [ 104.135341][ T13] cleanup_net+0x408/0x890 [ 104.135357][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 104.135373][ T13] ? rcu_is_watching+0x12/0xc0 [ 104.135388][ T13] process_one_work+0x9cf/0x1b70 [ 104.135403][ T13] ? __pfx_process_one_work+0x10/0x10 [ 104.135415][ T13] ? assign_work+0x1a0/0x250 [ 104.135426][ T13] worker_thread+0x6c8/0xf10 [ 104.135438][ T13] ? __pfx_worker_thread+0x10/0x10 [ 104.135449][ T13] kthread+0x3c5/0x780 [ 104.135459][ T13] ? __pfx_kthread+0x10/0x10 [ 104.135479][ T13] ? rcu_is_watching+0x12/0xc0 [ 104.135492][ T13] ? __pfx_kthread+0x10/0x10 [ 104.135501][ T13] ret_from_fork+0x5d4/0x6f0 [ 104.135517][ T13] ? __pfx_kthread+0x10/0x10 [ 104.135526][ T13] ret_from_fork_asm+0x1a/0x30 [ 104.135540][ T13] [ 104.445366][ T13] team0: Port device wlan1 removed [ 104.571767][ T13] hsr_slave_0: left promiscuous mode [ 104.581276][ T13] hsr_slave_1: left promiscuous mode [ 104.587167][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.594564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.602123][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.609562][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.622478][ T13] veth1_macvtap: left promiscuous mode [ 104.628020][ T13] veth0_macvtap: left promiscuous mode [ 104.633557][ T13] veth1_vlan: left promiscuous mode [ 104.638870][ T13] veth0_vlan: left promiscuous mode [ 104.751766][ T13] team0 (unregistering): Port device team_slave_1 removed [ 104.758972][ T5152] Bluetooth: hci1: command tx timeout [ 104.771439][ T13] team0 (unregistering): Port device team_slave_0 removed [ 104.859453][ T6653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.868940][ T6653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.882939][ T6653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.892906][ T6653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.969969][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.994902][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.004161][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.011214][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.026306][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.033412][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.167778][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.203158][ T6653] veth0_vlan: entered promiscuous mode [ 105.212099][ T6653] veth1_vlan: entered promiscuous mode [ 105.231965][ T6653] veth0_macvtap: entered promiscuous mode [ 105.242435][ T6653] veth1_macvtap: entered promiscuous mode [ 105.255383][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.270354][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.279755][ T6653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.289131][ T6653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.300434][ T6653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.309885][ T6653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.336518][ T6653] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 105.357275][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.359283][ T6653] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 105.375428][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.392617][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.403082][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.444618][ T6748] team0: Port device wlan1 added 2025/07/07 11:51:02 executed programs: 654 [ 106.297152][ T6808] validate_nla: 115 callbacks suppressed [ 106.297169][ T6808] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 106.317494][ T6809] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 106.330161][ T6810] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 106.358048][ T6811] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 106.371912][ T6812] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 106.385557][ T6813] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 106.416705][ T6814] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 106.430511][ T6815] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 106.443382][ T6816] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 106.476966][ T6817] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 106.835204][ T5152] Bluetooth: hci1: command tx timeout [ 108.913889][ T5152] Bluetooth: hci1: command tx timeout [ 110.993856][ T5152] Bluetooth: hci1: command tx timeout 2025/07/07 11:51:07 executed programs: 951 [ 111.307542][ T7106] validate_nla: 287 callbacks suppressed [ 111.307553][ T7106] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 111.326823][ T7107] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 111.339894][ T7108] netlink: 'syz.0.966': attribute type 10 has an invalid length. [ 111.367049][ T7109] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 111.380425][ T7110] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 111.393095][ T7111] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 111.427826][ T7112] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 111.440917][ T7113] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 111.453608][ T7114] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 111.486985][ T7115] netlink: 'syz.0.973': attribute type 10 has an invalid length.