Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 2026/05/24 10:32:47 parsed 1 programs [ 68.958395][ T4202] cgroup: Unknown subsys name 'net' [ 69.115019][ T4202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.606489][ T4202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.221809][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.228338][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.019277][ T4212] chnl_net:caif_netlink_parms(): no params data found [ 72.067025][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.075083][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.084411][ T4212] device bridge_slave_0 entered promiscuous mode [ 72.093570][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.100792][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.108892][ T4212] device bridge_slave_1 entered promiscuous mode [ 72.130156][ T4212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.142409][ T4212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.167965][ T4212] team0: Port device team_slave_0 added [ 72.175498][ T4212] team0: Port device team_slave_1 added [ 72.193080][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.200091][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.226074][ T4212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.238861][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.245829][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.271942][ T4212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.304225][ T4212] device hsr_slave_0 entered promiscuous mode [ 72.311056][ T4212] device hsr_slave_1 entered promiscuous mode [ 72.416869][ T4212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.427706][ T4212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.437431][ T4212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.447250][ T4212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.470983][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.478203][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.486133][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.493224][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.542002][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.554702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.565710][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.574879][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.584232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.597761][ T4212] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.609208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.617840][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.624966][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.637111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.645678][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.652772][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.672786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.681668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.695025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.707502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.719204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.731490][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.818370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.826943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.840124][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.859905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.878231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.887324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.895239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.906007][ T4212] device veth0_vlan entered promiscuous mode [ 72.919391][ T4212] device veth1_vlan entered promiscuous mode [ 72.941452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.949707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.957858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.970924][ T4212] device veth0_macvtap entered promiscuous mode [ 72.981264][ T4212] device veth1_macvtap entered promiscuous mode [ 72.997402][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.005854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.015145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.027273][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.035861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.044788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.056008][ T4212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.065004][ T4212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.075259][ T4212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.084388][ T4212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.221798][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.075351][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.423393][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.476379][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.794238][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.809365][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.822733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.854429][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.864299][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.874223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.187168][ T155] device hsr_slave_0 left promiscuous mode [ 79.194369][ T155] device hsr_slave_1 left promiscuous mode [ 79.203091][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.210926][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.221668][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.229189][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.237019][ T155] device bridge_slave_1 left promiscuous mode [ 79.245666][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.265140][ T155] device bridge_slave_0 left promiscuous mode [ 79.271500][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.295773][ T155] device veth1_macvtap left promiscuous mode [ 79.302499][ T155] device veth0_macvtap left promiscuous mode [ 79.309607][ T155] device veth1_vlan left promiscuous mode [ 79.315667][ T155] device veth0_vlan left promiscuous mode [ 79.525811][ T155] team0 (unregistering): Port device team_slave_1 removed [ 79.541085][ T155] team0 (unregistering): Port device team_slave_0 removed [ 79.555232][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.570161][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.624924][ T155] bond0 (unregistering): Released all slaves 2026/05/24 10:33:04 executed programs: 0 [ 83.240783][ T4435] chnl_net:caif_netlink_parms(): no params data found [ 83.320859][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.328106][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.336398][ T4435] device bridge_slave_0 entered promiscuous mode [ 83.345305][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.352682][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.361293][ T4435] device bridge_slave_1 entered promiscuous mode [ 83.382893][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.417318][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.441325][ T4435] team0: Port device team_slave_0 added [ 83.449350][ T4435] team0: Port device team_slave_1 added [ 83.492902][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.500142][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.526629][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.539502][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.546853][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.573727][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.624177][ T4435] device hsr_slave_0 entered promiscuous mode [ 83.631359][ T4435] device hsr_slave_1 entered promiscuous mode [ 84.283669][ T4435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.327109][ T4435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.345378][ T4435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.363361][ T4435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.512042][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.545322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.558951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.581418][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.601100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.629249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.659097][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.666252][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.698963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.733557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.759730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.788913][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.796030][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.831959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.867061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.892473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.903329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.927281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.950312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.969751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.987008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.997763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.023015][ T4435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.035209][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.059276][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 85.069080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.088902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.302003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.318654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.332489][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.371983][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.389306][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.418251][ T4435] device veth0_vlan entered promiscuous mode [ 85.439522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.459733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.479020][ T4435] device veth1_vlan entered promiscuous mode [ 85.486944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.496600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.506684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.541567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.559393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.577243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.588060][ T4435] device veth0_macvtap entered promiscuous mode [ 85.600513][ T4435] device veth1_macvtap entered promiscuous mode [ 85.617563][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.632489][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.649216][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.661094][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.678970][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.692317][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.700813][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.719457][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.741366][ T4435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.758540][ T4435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.769506][ T4435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778245][ T4435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.881186][ T3104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.895443][ T3104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.930342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.953678][ T3104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.964260][ T3104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.983851][ T3104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.055605][ T4516] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 86.159381][ T4522] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 86.586451][ T1324] cfg80211: failed to load regulatory.db [ 87.068633][ T4555] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 87.140267][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 87.890063][ T4597] netlink: 'syz.0.20': attribute type 2 has an invalid length. 2026/05/24 10:33:10 executed programs: 6 [ 88.751385][ T4638] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 89.219261][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 89.604745][ T4693] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 90.452698][ T4697] netlink: 'syz.0.23': attribute type 2 has an invalid length. [ 91.302055][ T4700] netlink: 'syz.0.24': attribute type 2 has an invalid length. [ 91.308719][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 92.148310][ T4703] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 92.225700][ T4706] netlink: 'syz.0.26': attribute type 2 has an invalid length. [ 93.074924][ T4709] netlink: 'syz.0.27': attribute type 2 has an invalid length. 2026/05/24 10:33:15 executed programs: 13 [ 93.921820][ T4712] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 94.771467][ T4715] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 95.631852][ T4718] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 96.467010][ T4721] netlink: 'syz.0.31': attribute type 2 has an invalid length. [ 97.315361][ T4724] netlink: 'syz.0.32': attribute type 2 has an invalid length. [ 98.171325][ T4727] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 98.231498][ T4728] [ 98.233872][ T4728] ================================ [ 98.238971][ T4728] WARNING: inconsistent lock state [ 98.244078][ T4728] syzkaller #0 Not tainted [ 98.248491][ T4728] -------------------------------- [ 98.253595][ T4728] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 98.260431][ T4728] syz.0.33/4728 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 98.266598][ T4728] ffff888022d7c560 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980 [ 98.276086][ T4728] {IN-SOFTIRQ-W} state was registered at: [ 98.281799][ T4728] lock_acquire+0x19e/0x400 [ 98.286400][ T4728] _raw_spin_lock_nested+0x2e/0x40 [ 98.291602][ T4728] __sk_receive_skb+0x17b/0x980 [ 98.296544][ T4728] __sk_receive_skb+0x42c/0x980 [ 98.301496][ T4728] phonet_rcv+0x7e4/0xc70 [ 98.305919][ T4728] __netif_receive_skb+0xcc/0x290 [ 98.311063][ T4728] process_backlog+0x370/0x790 [ 98.315936][ T4728] __napi_poll+0xc0/0x430 [ 98.320382][ T4728] net_rx_action+0x4d4/0xa10 [ 98.325056][ T4728] handle_softirqs+0x339/0x830 [ 98.329931][ T4728] run_ksoftirqd+0xa4/0x100 [ 98.334537][ T4728] smpboot_thread_fn+0x4f6/0x970 [ 98.339595][ T4728] kthread+0x436/0x520 [ 98.343766][ T4728] ret_from_fork+0x1f/0x30 [ 98.348300][ T4728] irq event stamp: 79 [ 98.352288][ T4728] hardirqs last enabled at (79): [] __local_bh_enable_ip+0x136/0x1c0 [ 98.362194][ T4728] hardirqs last disabled at (77): [] __local_bh_enable_ip+0xd7/0x1c0 [ 98.371991][ T4728] softirqs last enabled at (78): [] __release_sock+0xa8/0x450 [ 98.381136][ T4728] softirqs last disabled at (76): [] release_sock+0x2b/0x1b0 [ 98.390078][ T4728] [ 98.390078][ T4728] other info that might help us debug this: [ 98.398130][ T4728] Possible unsafe locking scenario: [ 98.398130][ T4728] [ 98.405574][ T4728] CPU0 [ 98.408849][ T4728] ---- [ 98.412125][ T4728] lock(slock-AF_PHONET/1); [ 98.416729][ T4728] [ 98.420176][ T4728] lock(slock-AF_PHONET/1); [ 98.424949][ T4728] [ 98.424949][ T4728] *** DEADLOCK *** [ 98.424949][ T4728] [ 98.433085][ T4728] 1 lock held by syz.0.33/4728: [ 98.437927][ T4728] #0: ffff8880746e13e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0xb5/0x1190 [ 98.447761][ T4728] [ 98.447761][ T4728] stack backtrace: [ 98.453670][ T4728] CPU: 1 PID: 4728 Comm: syz.0.33 Not tainted syzkaller #0 [ 98.460875][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.470937][ T4728] Call Trace: [ 98.474244][ T4728] [ 98.477204][ T4728] dump_stack_lvl+0x188/0x250 [ 98.481905][ T4728] ? show_regs_print_info+0x20/0x20 [ 98.487124][ T4728] ? unwind_get_return_address+0x49/0x80 [ 98.492786][ T4728] valid_state+0x13b/0x1d0 [ 98.497201][ T4728] mark_lock_irq+0xa9/0x900 [ 98.501724][ T4728] ? stack_trace_save+0xa6/0xf0 [ 98.506573][ T4728] ? save_trace+0xa80/0xa80 [ 98.511081][ T4728] ? lockdep_count_forward_deps+0x200/0x200 [ 98.516981][ T4728] ? save_trace+0x5a/0xa80 [ 98.521397][ T4728] mark_lock+0x208/0x320 [ 98.525726][ T4728] __lock_acquire+0xd47/0x7d10 [ 98.530512][ T4728] ? try_to_wake_up+0x6cf/0x1050 [ 98.535456][ T4728] ? mark_lock+0x94/0x320 [ 98.539793][ T4728] ? __lock_acquire+0x13bc/0x7d10 [ 98.544822][ T4728] ? verify_lock_unused+0x140/0x140 [ 98.550021][ T4728] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 98.556010][ T4728] lock_acquire+0x19e/0x400 [ 98.560537][ T4728] ? __sk_receive_skb+0x17b/0x980 [ 98.565597][ T4728] ? read_lock_is_recursive+0x10/0x10 [ 98.570992][ T4728] ? sk_filter_trim_cap+0x59c/0x810 [ 98.576191][ T4728] ? __local_bh_enable_ip+0x136/0x1c0 [ 98.581570][ T4728] ? lockdep_hardirqs_on+0x94/0x140 [ 98.586780][ T4728] _raw_spin_lock_nested+0x2e/0x40 [ 98.591896][ T4728] ? __sk_receive_skb+0x17b/0x980 [ 98.596933][ T4728] __sk_receive_skb+0x17b/0x980 [ 98.601780][ T4728] ? pep_do_rcv+0x4ea/0x800 [ 98.606286][ T4728] __release_sock+0x1e1/0x450 [ 98.610992][ T4728] release_sock+0x5b/0x1b0 [ 98.615427][ T4728] pep_sock_accept+0xc73/0x1190 [ 98.620278][ T4728] ? pep_sock_connect+0x1b0/0x1b0 [ 98.625399][ T4728] ? aa_sk_perm+0x7dc/0x910 [ 98.629934][ T4728] pn_socket_accept+0x126/0x360 [ 98.634803][ T4728] ? pn_socket_connect+0xb90/0xb90 [ 98.639961][ T4728] ? bpf_lsm_socket_accept+0x5/0x10 [ 98.645169][ T4728] ? pn_socket_connect+0xb90/0xb90 [ 98.650313][ T4728] do_accept+0x509/0x6f0 [ 98.654563][ T4728] ? __ia32_sys_listen+0x60/0x60 [ 98.659505][ T4728] ? alloc_fd+0x598/0x630 [ 98.663835][ T4728] __sys_accept4+0x103/0x170 [ 98.668434][ T4728] __x64_sys_accept4+0x96/0xb0 [ 98.673224][ T4728] do_syscall_64+0x4c/0xa0 [ 98.677644][ T4728] ? clear_bhb_loop+0x30/0x80 [ 98.682321][ T4728] ? clear_bhb_loop+0x30/0x80 [ 98.687000][ T4728] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.692901][ T4728] RIP: 0033:0x7f97fe296e59 [ 98.697313][ T4728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.716919][ T4728] RSP: 002b:00007f97fd8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 98.725339][ T4728] RAX: ffffffffffffffda RBX: 00007f97fe510090 RCX: 00007f97fe296e59 [ 98.733313][ T4728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 98.741282][ T4728] RBP: 00007f97fe32cd6f R08: 0000000000000000 R09: 0000000000000000 [ 98.749258][ T4728] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 98.757247][ T4728] R13: 00007f97fe510128 R14: 00007f97fe510090 R15: 00007fff25b4a928 [ 98.765232][ T4728] [ 98.782934][ T4730] netlink: 'syz.0.34': attribute type 2 has an invalid length. 2026/05/24 10:33:20 executed programs: 20 [ 99.627057][ T4733] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 100.472157][ T4736] netlink: 'syz.0.36': attribute type 2 has an invalid length. [ 101.316029][ T4739] netlink: 'syz.0.37': attribute type 2 has an invalid length. [ 102.160266][ T4743] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 103.003923][ T4747] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 103.847456][ T4751] netlink: 'syz.0.40': attribute type 2 has an invalid length. 2026/05/24 10:33:26 executed programs: 26 [ 104.691563][ T4755] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 104.763602][ T4758] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 105.607850][ T4762] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 106.452116][ T4766] netlink: 'syz.0.44': attribute type 2 has an invalid length. [ 107.295495][ T4769] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 108.140677][ T4772] netlink: 'syz.0.46': attribute type 2 has an invalid length.