[ 48.859204][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.870125][ T37] device veth1_macvtap left promiscuous mode [ 48.876322][ T37] device veth0_macvtap left promiscuous mode [ 48.883266][ T37] device veth1_vlan left promiscuous mode [ 48.889163][ T37] device veth0_vlan left promiscuous mode [ 48.956118][ T37] team0 (unregistering): Port device team_slave_1 removed [ 48.967459][ T37] team0 (unregistering): Port device team_slave_0 removed [ 48.976210][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.986924][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.008840][ T37] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. 2024/05/11 16:25:03 ignoring optional flag "sandboxArg"="0" 2024/05/11 16:25:03 parsed 1 programs 2024/05/11 16:25:04 executed programs: 0 [ 64.580625][ T3949] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.613217][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.620849][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.628942][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.637415][ T3607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.645012][ T46] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.652255][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.691762][ T3957] chnl_net:caif_netlink_parms(): no params data found [ 64.709811][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.717025][ T3957] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.724941][ T3957] device bridge_slave_0 entered promiscuous mode [ 64.732818][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.740344][ T3957] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.747682][ T3957] device bridge_slave_1 entered promiscuous mode [ 64.758716][ T3957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.769127][ T3957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.783563][ T3957] team0: Port device team_slave_0 added [ 64.790023][ T3957] team0: Port device team_slave_1 added [ 64.799836][ T3957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.807000][ T3957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.833209][ T3957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.844591][ T3957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.851675][ T3957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.877676][ T3957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.894188][ T3957] device hsr_slave_0 entered promiscuous mode [ 64.901194][ T3957] device hsr_slave_1 entered promiscuous mode [ 65.210174][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.217315][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.248116][ T3957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.257461][ T3957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.266883][ T3957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.275705][ T3957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.289946][ T3957] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.297917][ T3957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.305248][ T3957] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.312433][ T3957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.336356][ T3957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.347138][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.357143][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.365927][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.373939][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.385268][ T3957] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.395467][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.405028][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.412816][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.430357][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.439931][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.447086][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.455617][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.464783][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.473622][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.482623][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.491602][ T3957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.501406][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.584020][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.592216][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.601793][ T3957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.614421][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.628678][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.637058][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.645851][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.654399][ T3957] device veth0_vlan entered promiscuous mode [ 65.664484][ T3957] device veth1_vlan entered promiscuous mode [ 65.676016][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.684917][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.693107][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.703218][ T3957] device veth0_macvtap entered promiscuous mode [ 65.712351][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.721879][ T3957] device veth1_macvtap entered promiscuous mode [ 65.733474][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.742508][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.751382][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.762222][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.774233][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.783639][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.793234][ T3957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803104][ T3957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.812037][ T3957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.821592][ T3957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.855581][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.869715][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.878737][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.892779][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.901789][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.910726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.931547][ T4052] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 65.941626][ T4052] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.967305][ T4052] team0: Port device wlan0 added [ 65.980077][ T4052] [ 65.982422][ T4052] ====================================================== [ 65.989425][ T4052] WARNING: possible circular locking dependency detected [ 65.996782][ T4052] 6.1.90-syzkaller #0 Not tainted [ 66.001800][ T4052] ------------------------------------------------------ [ 66.008806][ T4052] syz-executor.0/4052 is trying to acquire lock: [ 66.015120][ T4052] ffff8881146e0d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x29/0xe0 [ 66.024418][ T4052] [ 66.024418][ T4052] but task is already holding lock: [ 66.031764][ T4052] ffff8881230a07c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x77/0x90 [ 66.041740][ T4052] [ 66.041740][ T4052] which lock already depends on the new lock. [ 66.041740][ T4052] [ 66.052417][ T4052] [ 66.052417][ T4052] the existing dependency chain (in reverse order) is: [ 66.061553][ T4052] [ 66.061553][ T4052] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 66.069430][ T4052] __mutex_lock+0x99/0x970 [ 66.074348][ T4052] ieee80211_open+0x93/0xc0 [ 66.079381][ T4052] __dev_open+0x1b8/0x230 [ 66.084654][ T4052] dev_open+0x4c/0x110 [ 66.089306][ T4052] team_add_slave+0x455/0x1190 [ 66.094595][ T4052] do_setlink+0x751/0x1d60 [ 66.099508][ T4052] rtnl_setlink+0x2d1/0x320 [ 66.104508][ T4052] rtnetlink_rcv_msg+0x54e/0xa00 [ 66.109940][ T4052] netlink_rcv_skb+0x10a/0x1d0 [ 66.115198][ T4052] netlink_unicast+0x46d/0x530 [ 66.120563][ T4052] netlink_sendmsg+0x57b/0x650 [ 66.125896][ T4052] ____sys_sendmsg+0x296/0x3c0 [ 66.131156][ T4052] ___sys_sendmsg+0x2f0/0x330 [ 66.136331][ T4052] __se_sys_sendmsg+0x142/0x1b0 [ 66.141675][ T4052] do_syscall_64+0x3b/0xb0 [ 66.146597][ T4052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.153001][ T4052] [ 66.153001][ T4052] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 66.161050][ T4052] __lock_acquire+0x146d/0x2830 [ 66.166510][ T4052] lock_acquire+0xe3/0x270 [ 66.171504][ T4052] __mutex_lock+0x99/0x970 [ 66.176413][ T4052] team_del_slave+0x29/0xe0 [ 66.181412][ T4052] team_device_event+0x17f/0x2b0 [ 66.186855][ T4052] raw_notifier_call_chain+0x63/0xa0 [ 66.192648][ T4052] unregister_netdevice_many+0x65a/0x980 [ 66.198958][ T4052] unregister_netdevice_queue+0xd4/0x100 [ 66.205290][ T4052] _cfg80211_unregister_wdev+0xb2/0x310 [ 66.211359][ T4052] ieee80211_if_remove+0xa4/0x120 [ 66.217086][ T4052] ieee80211_del_iface+0x15/0x20 [ 66.222606][ T4052] cfg80211_remove_virtual_intf+0x15c/0x330 [ 66.229004][ T4052] genl_rcv_msg+0x579/0x610 [ 66.234200][ T4052] netlink_rcv_skb+0x10a/0x1d0 [ 66.239565][ T4052] genl_rcv+0x24/0x40 [ 66.244039][ T4052] netlink_unicast+0x46d/0x530 [ 66.249301][ T4052] netlink_sendmsg+0x57b/0x650 [ 66.254555][ T4052] ____sys_sendmsg+0x296/0x3c0 [ 66.259818][ T4052] ___sys_sendmsg+0x2f0/0x330 [ 66.264992][ T4052] __se_sys_sendmsg+0x142/0x1b0 [ 66.270338][ T4052] do_syscall_64+0x3b/0xb0 [ 66.275251][ T4052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.281639][ T4052] [ 66.281639][ T4052] other info that might help us debug this: [ 66.281639][ T4052] [ 66.291870][ T4052] Possible unsafe locking scenario: [ 66.291870][ T4052] [ 66.299299][ T4052] CPU0 CPU1 [ 66.304650][ T4052] ---- ---- [ 66.310077][ T4052] lock(&rdev->wiphy.mtx); [ 66.314557][ T4052] lock(team->team_lock_key); [ 66.321831][ T4052] lock(&rdev->wiphy.mtx); [ 66.329277][ T4052] lock(team->team_lock_key); [ 66.334550][ T4052] [ 66.334550][ T4052] *** DEADLOCK *** [ 66.334550][ T4052] [ 66.342851][ T4052] 3 locks held by syz-executor.0/4052: [ 66.348294][ T4052] #0: ffffffff870473e8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 66.356467][ T4052] #1: ffffffff8702ebd8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x4d/0x4f0 [ 66.365744][ T4052] #2: ffff8881230a07c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x77/0x90 [ 66.375888][ T4052] [ 66.375888][ T4052] stack backtrace: [ 66.381764][ T4052] CPU: 1 PID: 4052 Comm: syz-executor.0 Not tainted 6.1.90-syzkaller #0 [ 66.390169][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 66.400370][ T4052] Call Trace: [ 66.403624][ T4052] [ 66.406531][ T4052] dump_stack_lvl+0xfa/0x181 [ 66.411111][ T4052] print_circular_bug+0x2c5/0x300 [ 66.416198][ T4052] check_noncircular+0x106/0x110 [ 66.421131][ T4052] __lock_acquire+0x146d/0x2830 [ 66.425960][ T4052] ? team_del_slave+0x29/0xe0 [ 66.430613][ T4052] lock_acquire+0xe3/0x270 [ 66.435093][ T4052] ? team_del_slave+0x29/0xe0 [ 66.439747][ T4052] ? team_del_slave+0x29/0xe0 [ 66.444501][ T4052] __mutex_lock+0x99/0x970 [ 66.448899][ T4052] ? team_del_slave+0x29/0xe0 [ 66.453559][ T4052] team_del_slave+0x29/0xe0 [ 66.458043][ T4052] team_device_event+0x17f/0x2b0 [ 66.462956][ T4052] raw_notifier_call_chain+0x63/0xa0 [ 66.468230][ T4052] unregister_netdevice_many+0x65a/0x980 [ 66.473841][ T4052] ? kernfs_remove_by_name_ns+0x89/0xa0 [ 66.479361][ T4052] unregister_netdevice_queue+0xd4/0x100 [ 66.484966][ T4052] _cfg80211_unregister_wdev+0xb2/0x310 [ 66.490561][ T4052] ? nl80211_new_interface+0x6b1/0x720 [ 66.496011][ T4052] ieee80211_if_remove+0xa4/0x120 [ 66.501109][ T4052] ieee80211_del_iface+0x15/0x20 [ 66.506034][ T4052] cfg80211_remove_virtual_intf+0x15c/0x330 [ 66.511930][ T4052] ? nl80211_new_interface+0x720/0x720 [ 66.517381][ T4052] genl_rcv_msg+0x579/0x610 [ 66.521873][ T4052] ? nl80211_new_interface+0x720/0x720 [ 66.527322][ T4052] ? genl_rcv+0x15/0x40 [ 66.531461][ T4052] netlink_rcv_skb+0x10a/0x1d0 [ 66.536209][ T4052] ? genl_bind+0x1a0/0x1a0 [ 66.540606][ T4052] genl_rcv+0x24/0x40 [ 66.544565][ T4052] netlink_unicast+0x46d/0x530 [ 66.549414][ T4052] netlink_sendmsg+0x57b/0x650 [ 66.554160][ T4052] ____sys_sendmsg+0x296/0x3c0 [ 66.559082][ T4052] ___sys_sendmsg+0x2f0/0x330 [ 66.563753][ T4052] __se_sys_sendmsg+0x142/0x1b0 [ 66.568582][ T4052] do_syscall_64+0x3b/0xb0 [ 66.572978][ T4052] ? clear_bhb_loop+0x45/0xa0 [ 66.577631][ T4052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.583502][ T4052] RIP: 0033:0x7fd042c7dda9 [ 66.587983][ T4052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.607648][ T4052] RSP: 002b:00007fd04396d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.616035][ T4052] RAX: ffffffffffffffda RBX: 00007fd042dabf80 RCX: 00007fd042c7dda9 [ 66.624008][ T4052] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 66.631957][ T4052] RBP: 00007fd042cca47a R08: 0000000000000000 R09: 0000000000000000 [ 66.639902][ T4052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.647942][ T4052] R13: 000000000000000b R14: 00007fd042dabf80 R15: 00007ffd2e2620f8 [ 66.656015][ T4052] [ 66.661478][ T4052] team0: Port device wlan0 removed [ 66.721801][ T4075] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.730117][ T4075] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.738354][ T46] Bluetooth: hci0: command tx timeout [ 66.772733][ T4084] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.781423][ T4084] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.820324][ T4096] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.828848][ T4096] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.864021][ T4105] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.872777][ T4105] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.909899][ T4116] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.918073][ T4116] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.955128][ T4124] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 66.963587][ T4124] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.999088][ T4135] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 67.007261][ T4135] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.050160][ T4144] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 67.058360][ T4144] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.092404][ T4156] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 67.101122][ T4156] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.818393][ T46] Bluetooth: hci0: command tx timeout 2024/05/11 16:25:09 executed programs: 119 [ 70.328459][ T26] cfg80211: failed to load regulatory.db [ 70.898433][ T46] Bluetooth: hci0: command tx timeout [ 70.948183][ T5071] validate_nla: 181 callbacks suppressed [ 70.948192][ T5071] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 70.962020][ T5071] __nla_validate_parse: 181 callbacks suppressed [ 70.962026][ T5071] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.995967][ T5075] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.004438][ T5075] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.030755][ T5079] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.039058][ T5079] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.066596][ T5083] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.074996][ T5083] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.101947][ T5087] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.110253][ T5087] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.138043][ T5091] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.147168][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.174114][ T5095] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.182518][ T5095] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.209652][ T5099] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.217869][ T5099] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.245180][ T5103] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.253395][ T5103] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.279728][ T5107] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.287896][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.968353][ T46] Bluetooth: hci0: command tx timeout 2024/05/11 16:25:14 executed programs: 384 [ 75.957994][ T6148] validate_nla: 259 callbacks suppressed [ 75.958003][ T6148] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 75.972024][ T6148] __nla_validate_parse: 259 callbacks suppressed [ 75.972029][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.