Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. 2026/05/24 11:43:03 parsed 1 programs [ 70.162626][ T4202] cgroup: Unknown subsys name 'net' [ 70.298239][ T4202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.385331][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.391893][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.823554][ T4202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.453950][ T4216] chnl_net:caif_netlink_parms(): no params data found [ 73.508095][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.516023][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.524955][ T4216] device bridge_slave_0 entered promiscuous mode [ 73.537779][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.544954][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.553221][ T4216] device bridge_slave_1 entered promiscuous mode [ 73.574855][ T4216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.586056][ T4216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.608229][ T4216] team0: Port device team_slave_0 added [ 73.619023][ T4216] team0: Port device team_slave_1 added [ 73.637314][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.644375][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.670402][ T4216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.683561][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.690551][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.716904][ T4216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.750636][ T4216] device hsr_slave_0 entered promiscuous mode [ 73.757587][ T4216] device hsr_slave_1 entered promiscuous mode [ 73.867560][ T4216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.878614][ T4216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.888864][ T4216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.901155][ T4216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.924074][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.931293][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.939255][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.946385][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.994339][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.007500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.018027][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.026814][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.035239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.057304][ T4216] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.069103][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.078525][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.085696][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.112688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.123956][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.131105][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.140911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.163696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.172907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.183149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.197381][ T4216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.210119][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.219815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.344672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.353372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.367334][ T4216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.390803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.416281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.426649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.434749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.445803][ T4216] device veth0_vlan entered promiscuous mode [ 74.460022][ T4216] device veth1_vlan entered promiscuous mode [ 74.487740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.499114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.511652][ T4216] device veth0_macvtap entered promiscuous mode [ 74.522597][ T4216] device veth1_macvtap entered promiscuous mode [ 74.543258][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.551156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.562521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.570631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.579582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.593725][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.601454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.613762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.627583][ T4216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.637671][ T4216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.646840][ T4216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656227][ T4216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.758515][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.299323][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.317683][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.339912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.359459][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.368269][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.376918][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/24 11:43:12 executed programs: 0 [ 77.229037][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 77.273750][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.280899][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.289321][ T4289] device bridge_slave_0 entered promiscuous mode [ 77.297981][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.305282][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.313777][ T4289] device bridge_slave_1 entered promiscuous mode [ 77.334989][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.346136][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.368891][ T4289] team0: Port device team_slave_0 added [ 77.377416][ T4289] team0: Port device team_slave_1 added [ 77.395613][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.402618][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.428664][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.440819][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.448047][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.474125][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.505630][ T4289] device hsr_slave_0 entered promiscuous mode [ 77.512440][ T4289] device hsr_slave_1 entered promiscuous mode [ 77.519515][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.527620][ T4289] Cannot create hsr debugfs directory [ 77.858444][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.233194][ T4223] Bluetooth: hci0: command 0x0409 tx timeout [ 79.477057][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.530415][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.328241][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.337994][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.366389][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.375552][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.435473][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.447631][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.455753][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.481199][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.491415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.500380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.511292][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.518428][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.528131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.557939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.568544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.577780][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.584879][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.596739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.628697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.641305][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.651018][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.659967][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.689808][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.700403][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.712371][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.720833][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.752353][ T4289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.765804][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.774676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.785013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.810508][ T9] device hsr_slave_0 left promiscuous mode [ 80.819855][ T9] device hsr_slave_1 left promiscuous mode [ 80.827836][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.838131][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.847972][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.862677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.871004][ T9] device bridge_slave_1 left promiscuous mode [ 80.880961][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.898717][ T9] device bridge_slave_0 left promiscuous mode [ 80.905488][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.923635][ T9] device veth1_macvtap left promiscuous mode [ 80.929995][ T9] device veth0_macvtap left promiscuous mode [ 80.937119][ T9] device veth1_vlan left promiscuous mode [ 80.943735][ T9] device veth0_vlan left promiscuous mode [ 81.137468][ T9] team0 (unregistering): Port device team_slave_1 removed [ 81.151784][ T9] team0 (unregistering): Port device team_slave_0 removed [ 81.166631][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.182901][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.247127][ T9] bond0 (unregistering): Released all slaves [ 81.312079][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 81.365799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.374502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.387803][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.427166][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.436111][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.455130][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.464553][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.474027][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.482456][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.501121][ T4289] device veth0_vlan entered promiscuous mode [ 81.517361][ T4289] device veth1_vlan entered promiscuous mode [ 81.538196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.546649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.555694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.565428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.576497][ T4289] device veth0_macvtap entered promiscuous mode [ 81.594074][ T4289] device veth1_macvtap entered promiscuous mode [ 81.615433][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.625896][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.634472][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.643054][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.651932][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.664395][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.679185][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.688911][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.700508][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.709694][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.719548][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.728588][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.811307][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.825431][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.842122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.869864][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.879081][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.887055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.957437][ T4339] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 82.063169][ T4342] netlink: 'syz.0.18': attribute type 2 has an invalid length. 2026/05/24 11:43:18 executed programs: 4 [ 82.953505][ T4346] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 83.382504][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 83.763925][ T4351] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 84.627036][ T4355] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 85.462361][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 85.479471][ T4359] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 86.329877][ T4363] netlink: 'syz.0.23': attribute type 2 has an invalid length. [ 86.750877][ T1108] cfg80211: failed to load regulatory.db [ 87.183762][ T4367] netlink: 'syz.0.24': attribute type 2 has an invalid length. 2026/05/24 11:43:23 executed programs: 10 [ 88.033730][ T4371] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 88.093503][ C0] [ 88.095895][ C0] ================================ [ 88.101041][ C0] WARNING: inconsistent lock state [ 88.106154][ C0] syzkaller #0 Not tainted [ 88.110575][ C0] -------------------------------- [ 88.115680][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 88.122535][ C0] ksoftirqd/0/14 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 88.128782][ C0] ffff88807d8ea620 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980 [ 88.138292][ C0] {SOFTIRQ-ON-W} state was registered at: [ 88.144015][ C0] lock_acquire+0x19e/0x400 [ 88.148644][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 88.153851][ C0] __sk_receive_skb+0x17b/0x980 [ 88.158805][ C0] __release_sock+0x1e1/0x450 [ 88.163568][ C0] release_sock+0x5b/0x1b0 [ 88.168081][ C0] pep_sock_accept+0xc73/0x1190 [ 88.173203][ C0] pn_socket_accept+0x126/0x360 [ 88.178168][ C0] do_accept+0x509/0x6f0 [ 88.182512][ C0] __sys_accept4+0x103/0x170 [ 88.187220][ C0] __x64_sys_accept4+0x96/0xb0 [ 88.192092][ C0] do_syscall_64+0x4c/0xa0 [ 88.196784][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.202796][ C0] irq event stamp: 193772 [ 88.207130][ C0] hardirqs last enabled at (193772): [] process_backlog+0x644/0x790 [ 88.216799][ C0] hardirqs last disabled at (193771): [] process_backlog+0x486/0x790 [ 88.226534][ C0] softirqs last enabled at (193738): [] run_ksoftirqd+0xa4/0x100 [ 88.235929][ C0] softirqs last disabled at (193743): [] run_ksoftirqd+0xa4/0x100 [ 88.245577][ C0] [ 88.245577][ C0] other info that might help us debug this: [ 88.253914][ C0] Possible unsafe locking scenario: [ 88.253914][ C0] [ 88.261386][ C0] CPU0 [ 88.264677][ C0] ---- [ 88.267968][ C0] lock(slock-AF_PHONET/1); [ 88.272566][ C0] [ 88.276278][ C0] lock(slock-AF_PHONET/1); [ 88.281072][ C0] [ 88.281072][ C0] *** DEADLOCK *** [ 88.281072][ C0] [ 88.289222][ C0] 3 locks held by ksoftirqd/0/14: [ 88.294260][ C0] #0: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 88.303603][ C0] #1: ffff88807f244560 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18a/0x980 [ 88.313367][ C0] #2: ffff88807f2445e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x7e4/0xc70 [ 88.322799][ C0] [ 88.322799][ C0] stack backtrace: [ 88.328715][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 88.336018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.346100][ C0] Call Trace: [ 88.349394][ C0] [ 88.352332][ C0] dump_stack_lvl+0x188/0x250 [ 88.357031][ C0] ? show_regs_print_info+0x20/0x20 [ 88.362260][ C0] valid_state+0x13b/0x1d0 [ 88.366713][ C0] mark_lock_irq+0xa9/0x900 [ 88.371245][ C0] ? stack_trace_save+0xa6/0xf0 [ 88.376124][ C0] ? save_trace+0xa80/0xa80 [ 88.380652][ C0] ? arch_stack_walk+0x10c/0x140 [ 88.385687][ C0] ? lockdep_count_forward_deps+0x200/0x200 [ 88.391606][ C0] ? save_trace+0x5a/0xa80 [ 88.396053][ C0] mark_lock+0x208/0x320 [ 88.400313][ C0] __lock_acquire+0xc64/0x7d10 [ 88.405096][ C0] ? verify_lock_unused+0x140/0x140 [ 88.410327][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.416321][ C0] lock_acquire+0x19e/0x400 [ 88.420844][ C0] ? __sk_receive_skb+0x17b/0x980 [ 88.425893][ C0] ? read_lock_is_recursive+0x10/0x10 [ 88.431284][ C0] ? sk_filter_trim_cap+0x59c/0x810 [ 88.436673][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 88.441843][ C0] ? __sk_receive_skb+0x17b/0x980 [ 88.446909][ C0] __sk_receive_skb+0x17b/0x980 [ 88.451795][ C0] ? pep_do_rcv+0x4ea/0x800 [ 88.456451][ C0] ? phonet_rcv+0x7e4/0xc70 [ 88.460975][ C0] __sk_receive_skb+0x42c/0x980 [ 88.465856][ C0] phonet_rcv+0x7e4/0xc70 [ 88.470217][ C0] ? phonet_proto_unregister+0x120/0x120 [ 88.475865][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.481881][ C0] ? read_lock_is_recursive+0x10/0x10 [ 88.487278][ C0] ? lock_chain_count+0x20/0x20 [ 88.492149][ C0] ? phonet_proto_unregister+0x120/0x120 [ 88.497797][ C0] __netif_receive_skb+0xcc/0x290 [ 88.502845][ C0] process_backlog+0x370/0x790 [ 88.507728][ C0] ? rps_trigger_softirq+0x210/0x210 [ 88.513034][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.519043][ C0] ? lock_chain_count+0x20/0x20 [ 88.523909][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.529922][ C0] __napi_poll+0xc0/0x430 [ 88.534267][ C0] ? net_rx_action+0x307/0xa10 [ 88.539047][ C0] net_rx_action+0x4d4/0xa10 [ 88.543647][ C0] ? lockdep_softirqs_on+0x580/0x580 [ 88.548952][ C0] ? net_tx_action+0x880/0x880 [ 88.553723][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 88.559725][ C0] ? lock_chain_count+0x20/0x20 [ 88.564599][ C0] handle_softirqs+0x339/0x830 [ 88.569378][ C0] ? run_ksoftirqd+0xa4/0x100 [ 88.574065][ C0] ? do_softirq+0x210/0x210 [ 88.578583][ C0] ? run_ksoftirqd+0x81/0x100 [ 88.583266][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 88.588484][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 88.593784][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 88.599004][ C0] run_ksoftirqd+0xa4/0x100 [ 88.603602][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 88.608904][ C0] smpboot_thread_fn+0x4f6/0x970 [ 88.613856][ C0] kthread+0x436/0x520 [ 88.617944][ C0] ? cpu_report_death+0x180/0x180 [ 88.622976][ C0] ? kthread_blkcg+0xd0/0xd0 [ 88.627785][ C0] ret_from_fork+0x1f/0x30 [ 88.632234][ C0] [ 88.650527][ T4374] netlink: 'syz.0.26': attribute type 2 has an invalid length. [ 89.495414][ T4378] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.339377][ T4382] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 91.183718][ T4386] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 92.029276][ T4390] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 92.874488][ T4394] netlink: 'syz.0.31': attribute type 2 has an invalid length. 2026/05/24 11:43:29 executed programs: 17 [ 93.716641][ T4398] netlink: 'syz.0.32': attribute type 2 has an invalid length. [ 94.562338][ T4402] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 94.633451][ T4405] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 95.478203][ T4409] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 96.323469][ T4413] netlink: 'syz.0.36': attribute type 2 has an invalid length. [ 97.166655][ T4417] netlink: 'syz.0.37': attribute type 2 has an invalid length. [ 98.010467][ T4421] netlink: 'syz.0.38': attribute type 2 has an invalid length.