Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. 2026/04/19 01:04:20 parsed 1 programs [ 67.158964][ T4271] cgroup: Unknown subsys name 'net' [ 67.256601][ T4271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.578388][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.110683][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.119073][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.127304][ T4297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.136040][ T4297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.147704][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.155100][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.737156][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 70.777695][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.785445][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.793547][ T4315] device bridge_slave_0 entered promiscuous mode [ 70.802399][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.809513][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.817863][ T4315] device bridge_slave_1 entered promiscuous mode [ 70.836308][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.847069][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.868007][ T4315] team0: Port device team_slave_0 added [ 70.875646][ T4315] team0: Port device team_slave_1 added [ 70.890415][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.897455][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.923813][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.936153][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.943179][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.970025][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.012066][ T4315] device hsr_slave_0 entered promiscuous mode [ 71.018863][ T4315] device hsr_slave_1 entered promiscuous mode [ 71.130802][ T4315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.141118][ T4315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.150349][ T4315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.160403][ T4315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.223986][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.247037][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.257357][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.268005][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.277286][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.288576][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.297741][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.304998][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.316120][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.338458][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.347789][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.356411][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.363580][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.376458][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.395302][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.406354][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.415097][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.425395][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426608][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.431998][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.459302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.476980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.485562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.497578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.506676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.518463][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.695694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.711443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.725615][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.745877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.755755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.772912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.781350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.791130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.799683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.809903][ T4315] device veth0_vlan entered promiscuous mode [ 71.820517][ T4315] device veth1_vlan entered promiscuous mode [ 71.844089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.853303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.861676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.870132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.881139][ T4315] device veth0_macvtap entered promiscuous mode [ 71.892087][ T4315] device veth1_macvtap entered promiscuous mode [ 71.907651][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.915319][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.924090][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.933338][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.942016][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.954133][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.962718][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.971792][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.983588][ T4315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.993505][ T4315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.002861][ T4315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.011817][ T4315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.143473][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.264544][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.277508][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.287445][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.309377][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.317319][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.325911][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/19 01:04:29 executed programs: 0 [ 73.922386][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.930325][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.938448][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.946757][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.954623][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.962708][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.065524][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 74.102864][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.110028][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.118997][ T4362] device bridge_slave_0 entered promiscuous mode [ 74.127043][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.135552][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.145312][ T4362] device bridge_slave_1 entered promiscuous mode [ 74.163418][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.174310][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.195454][ T4362] team0: Port device team_slave_0 added [ 74.203002][ T4362] team0: Port device team_slave_1 added [ 74.217983][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.225084][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.251080][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.264393][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.271401][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.297583][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.325307][ T4362] device hsr_slave_0 entered promiscuous mode [ 74.332217][ T4362] device hsr_slave_1 entered promiscuous mode [ 74.338970][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.346905][ T4362] Cannot create hsr debugfs directory [ 74.368685][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.982193][ T4297] Bluetooth: hci0: command 0x0409 tx timeout [ 76.543388][ T14] cfg80211: failed to load regulatory.db [ 76.707101][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.780562][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.674883][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.684595][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.695562][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.709643][ T9] device hsr_slave_0 left promiscuous mode [ 77.716204][ T9] device hsr_slave_1 left promiscuous mode [ 77.723642][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.731087][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.739377][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.747074][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.755135][ T9] device bridge_slave_1 left promiscuous mode [ 77.762170][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.773999][ T9] device bridge_slave_0 left promiscuous mode [ 77.780240][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.797592][ T9] device veth1_macvtap left promiscuous mode [ 77.804365][ T9] device veth0_macvtap left promiscuous mode [ 77.810434][ T9] device veth1_vlan left promiscuous mode [ 77.816523][ T9] device veth0_vlan left promiscuous mode [ 78.064304][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 78.135122][ T9] team0 (unregistering): Port device team_slave_1 removed [ 78.161957][ T9] team0 (unregistering): Port device team_slave_0 removed [ 78.188610][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.215949][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.385422][ T9] bond0 (unregistering): Released all slaves [ 78.438979][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.488957][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.517302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.526189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.536165][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.549710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.560334][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.569735][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.576955][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.585044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.595717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.605091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.613951][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.621037][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.632341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.655626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.667752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.678603][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.687610][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.701767][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.710703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.723598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.732067][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.744897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.753761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.768776][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.953932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.965656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.982589][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.000219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.010559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.033587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.046179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.056740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.065018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.079139][ T4362] device veth0_vlan entered promiscuous mode [ 79.092632][ T4362] device veth1_vlan entered promiscuous mode [ 79.115939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.125257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.134732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.143756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.159112][ T4362] device veth0_macvtap entered promiscuous mode [ 79.170254][ T4362] device veth1_macvtap entered promiscuous mode [ 79.189783][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.197514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.207114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.215583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.224994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.236517][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.245910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.254751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.266503][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.275414][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.284468][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.293373][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.339989][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.352903][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.363927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.379298][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/04/19 01:04:34 executed programs: 2 [ 79.387545][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.395152][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.436854][ T4412] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 79.585417][ T4416] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 80.147267][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 80.420490][ T4420] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 81.272146][ T4424] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 82.120350][ T4428] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 82.231244][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 82.973558][ T4432] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 83.845547][ T4436] netlink: 'syz.0.23': attribute type 2 has an invalid length. 2026/04/19 01:04:40 executed programs: 9 [ 84.678660][ T4440] netlink: 'syz.0.24': attribute type 2 has an invalid length. [ 85.529541][ T4444] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 85.642683][ C0] [ 85.645084][ C0] ================================ [ 85.650183][ C0] WARNING: inconsistent lock state [ 85.655395][ C0] syzkaller #0 Not tainted [ 85.659808][ C0] -------------------------------- [ 85.665362][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 85.672293][ C0] syz.0.25/4445 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 85.678647][ C0] ffff88807d89d1f0 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17c/0x980 [ 85.688143][ C0] {SOFTIRQ-ON-W} state was registered at: [ 85.693853][ C0] lock_acquire+0x1bb/0x4a0 [ 85.698447][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 85.703640][ C0] __sk_receive_skb+0x17c/0x980 [ 85.708572][ C0] __release_sock+0x1e1/0x450 [ 85.713325][ C0] release_sock+0x5b/0x1b0 [ 85.717905][ C0] pep_sock_accept+0xcb1/0x1200 [ 85.722836][ C0] pn_socket_accept+0x126/0x360 [ 85.727771][ C0] do_accept+0x509/0x6f0 [ 85.732090][ C0] __sys_accept4+0x97/0x100 [ 85.737094][ C0] __x64_sys_accept4+0x96/0xb0 [ 85.742031][ C0] do_syscall_64+0x4c/0xa0 [ 85.746562][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.752616][ C0] irq event stamp: 124 [ 85.756671][ C0] hardirqs last enabled at (124): [] _raw_spin_unlock_irq+0x1f/0x40 [ 85.766489][ C0] hardirqs last disabled at (123): [] _raw_spin_lock_irq+0x86/0xf0 [ 85.775977][ C0] softirqs last enabled at (102): [] netif_rx+0x75/0x90 [ 85.784579][ C0] softirqs last disabled at (103): [] do_softirq+0x142/0x210 [ 85.793512][ C0] [ 85.793512][ C0] other info that might help us debug this: [ 85.801565][ C0] Possible unsafe locking scenario: [ 85.801565][ C0] [ 85.809007][ C0] CPU0 [ 85.812296][ C0] ---- [ 85.815565][ C0] lock(slock-AF_PHONET/1); [ 85.820178][ C0] [ 85.823627][ C0] lock(slock-AF_PHONET/1); [ 85.828391][ C0] [ 85.828391][ C0] *** DEADLOCK *** [ 85.828391][ C0] [ 85.836635][ C0] 4 locks held by syz.0.25/4445: [ 85.841915][ C0] #0: ffff88807d89cc30 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sendmsg+0x795/0xad0 [ 85.851429][ C0] #1: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cb/0x6f0 [ 85.860912][ C0] #2: ffff88807d89c570 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18b/0x980 [ 85.870644][ C0] #3: ffff88807d89c5f0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x7c5/0xca0 [ 85.880211][ C0] [ 85.880211][ C0] stack backtrace: [ 85.886376][ C0] CPU: 0 PID: 4445 Comm: syz.0.25 Not tainted syzkaller #0 [ 85.893614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.903799][ C0] Call Trace: [ 85.907107][ C0] [ 85.909948][ C0] dump_stack_lvl+0x188/0x24e [ 85.914721][ C0] ? show_regs_print_info+0x12/0x12 [ 85.920103][ C0] ? unwind_get_return_address+0x49/0x80 [ 85.925831][ C0] valid_state+0x13b/0x1d0 [ 85.930273][ C0] mark_lock_irq+0xa9/0x900 [ 85.934791][ C0] ? stack_trace_save+0xa6/0xf0 [ 85.939643][ C0] ? save_trace+0xb60/0xb60 [ 85.944163][ C0] ? save_trace+0x5a/0xb60 [ 85.948594][ C0] mark_lock+0x208/0x320 [ 85.952865][ C0] __lock_acquire+0xc78/0x7d10 [ 85.957707][ C0] ? mark_lock+0x94/0x320 [ 85.962054][ C0] ? verify_lock_unused+0x140/0x140 [ 85.967259][ C0] ? sk_filter_trim_cap+0x14b/0x860 [ 85.972477][ C0] lock_acquire+0x1bb/0x4a0 [ 85.977007][ C0] ? __sk_receive_skb+0x17c/0x980 [ 85.982039][ C0] ? sk_filter_trim_cap+0x14b/0x860 [ 85.987239][ C0] ? read_lock_is_recursive+0x10/0x10 [ 85.992873][ C0] ? sk_filter_trim_cap+0x537/0x860 [ 85.998635][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 86.003770][ C0] ? __sk_receive_skb+0x17c/0x980 [ 86.008894][ C0] __sk_receive_skb+0x17c/0x980 [ 86.013761][ C0] ? phonet_rcv+0x7c5/0xca0 [ 86.018387][ C0] __sk_receive_skb+0x432/0x980 [ 86.023383][ C0] phonet_rcv+0x7c5/0xca0 [ 86.027720][ C0] ? qdisc_run+0x230/0x230 [ 86.032166][ C0] ? phonet_proto_unregister+0x120/0x120 [ 86.037901][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 86.044086][ C0] ? read_lock_is_recursive+0x10/0x10 [ 86.049505][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.054565][ C0] ? phonet_proto_unregister+0x120/0x120 [ 86.060280][ C0] __netif_receive_skb+0xcc/0x290 [ 86.065387][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 86.070600][ C0] ? process_backlog+0x2cb/0x6f0 [ 86.075583][ C0] process_backlog+0x38d/0x6f0 [ 86.080350][ C0] ? trigger_rx_softirq+0x60/0x60 [ 86.086072][ C0] ? slab_free_freelist_hook+0x131/0x1a0 [ 86.091714][ C0] __napi_poll+0xc0/0x460 [ 86.096100][ C0] net_rx_action+0x5dd/0xb20 [ 86.100702][ C0] ? net_tx_action+0x930/0x930 [ 86.105482][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 86.112524][ C0] ? lock_chain_count+0x20/0x20 [ 86.117439][ C0] ? sched_clock_cpu+0x6e/0x260 [ 86.122305][ C0] handle_softirqs+0x2a1/0x930 [ 86.127160][ C0] ? do_softirq+0x142/0x210 [ 86.131663][ C0] ? do_softirq+0x210/0x210 [ 86.136159][ C0] ? rcu_is_watching+0x11/0xa0 [ 86.140945][ C0] do_softirq+0x142/0x210 [ 86.145291][ C0] [ 86.148216][ C0] [ 86.151205][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 86.156586][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 86.162569][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 86.167947][ C0] ? netif_rx+0x75/0x90 [ 86.172096][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 86.177291][ C0] ? _local_bh_enable+0xa0/0xa0 [ 86.182136][ C0] ? rcu_is_watching+0x11/0xa0 [ 86.186902][ C0] ? trace_netif_rx_exit+0x9b/0x230 [ 86.193596][ C0] netif_rx+0x7f/0x90 [ 86.197583][ C0] pn_send+0x553/0x7f0 [ 86.201657][ C0] pn_skb_send+0x214/0x510 [ 86.206067][ C0] pipe_skb_send+0x2d7/0x500 [ 86.210666][ C0] pep_sendmsg+0x9a6/0xad0 [ 86.215134][ C0] ? pep_getsockopt+0x2c0/0x2c0 [ 86.219997][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 86.225462][ C0] ? _local_bh_enable+0xa0/0xa0 [ 86.230351][ C0] ? wait_woken+0x1c0/0x1c0 [ 86.234863][ C0] ? pn_socket_bind+0x3fd/0x530 [ 86.239728][ C0] ? pn_socket_bind+0x3fd/0x530 [ 86.244596][ C0] pn_socket_sendmsg+0x1cd/0x230 [ 86.249561][ C0] ? pn_socket_ioctl+0x350/0x350 [ 86.254679][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 86.259965][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 86.265424][ C0] sock_write_iter+0x2d9/0x3e0 [ 86.270212][ C0] ? sock_read_iter+0x3a0/0x3a0 [ 86.275078][ C0] ? common_file_perm+0x171/0x1c0 [ 86.280202][ C0] vfs_write+0x4b1/0xa30 [ 86.284443][ C0] ? file_end_write+0x250/0x250 [ 86.289377][ C0] ? __fget_files+0x43d/0x4b0 [ 86.294144][ C0] ? __fdget_pos+0x1d4/0x360 [ 86.298729][ C0] ? ksys_write+0x71/0x250 [ 86.303144][ C0] ksys_write+0x14c/0x250 [ 86.307490][ C0] ? __ia32_sys_read+0x80/0x80 [ 86.312245][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 86.317442][ C0] do_syscall_64+0x4c/0xa0 [ 86.321959][ C0] ? clear_bhb_loop+0x60/0xb0 [ 86.326635][ C0] ? clear_bhb_loop+0x60/0xb0 [ 86.331313][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.337297][ C0] RIP: 0033:0x7f8b0b79c819 [ 86.341726][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.361435][ C0] RSP: 002b:00007f8b0c697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.370365][ C0] RAX: ffffffffffffffda RBX: 00007f8b0ba16090 RCX: 00007f8b0b79c819 [ 86.378331][ C0] RDX: 00000000000003db RSI: 0000200000000480 RDI: 0000000000000006 [ 86.386296][ C0] RBP: 00007f8b0b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 86.394373][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.402343][ C0] R13: 00007f8b0ba16128 R14: 00007f8b0ba16090 R15: 00007ffc46153de8 [ 86.410338][ C0] [ 86.433176][ T4448] netlink: 'syz.0.26': attribute type 2 has an invalid length. [ 87.275973][ T4452] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 88.119153][ T4456] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 88.969048][ T4460] netlink: 'syz.0.29': attribute type 2 has an invalid length. 2026/04/19 01:04:45 executed programs: 15 [ 89.805113][ T4464] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 90.651976][ T4468] netlink: 'syz.0.31': attribute type 2 has an invalid length. [ 91.494146][ T4472] netlink: 'syz.0.32': attribute type 2 has an invalid length. [ 92.337776][ T4476] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 92.458831][ T4480] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 93.302324][ T4484] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 94.145926][ T4488] netlink: 'syz.0.36': attribute type 2 has an invalid length. 2026/04/19 01:04:50 executed programs: 22 [ 94.990192][ T4492] netlink: 'syz.0.37': attribute type 2 has an invalid length.