[ 91.899754][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 2026/04/21 03:44:30 parsed 1 programs [ 98.978894][ T5831] cgroup: Unknown subsys name 'net' [ 99.219083][ T5831] cgroup: Unknown subsys name 'cpuset' [ 99.274245][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.226247][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.032249][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 107.317940][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.319052][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.319243][ T5871] bridge_slave_0: entered allmulticast mode [ 107.321863][ T5871] bridge_slave_0: entered promiscuous mode [ 107.351774][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.352725][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.353521][ T5871] bridge_slave_1: entered allmulticast mode [ 107.371140][ T5871] bridge_slave_1: entered promiscuous mode [ 107.438407][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.442990][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.507375][ T5871] team0: Port device team_slave_0 added [ 107.511105][ T5871] team0: Port device team_slave_1 added [ 107.559706][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.559720][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.559740][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.562996][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.563006][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.563026][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.811677][ T5871] hsr_slave_0: entered promiscuous mode [ 107.813544][ T5871] hsr_slave_1: entered promiscuous mode [ 108.411619][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.431371][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.432287][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.467296][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.468067][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.510187][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.510977][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.550147][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.702686][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.737879][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.766524][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.766930][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.807218][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.809745][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.128365][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.207945][ T5871] veth0_vlan: entered promiscuous mode [ 109.227231][ T5871] veth1_vlan: entered promiscuous mode [ 109.278309][ T5871] veth0_macvtap: entered promiscuous mode [ 109.292842][ T5871] veth1_macvtap: entered promiscuous mode [ 109.332690][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.356578][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.388057][ T1428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.391644][ T1428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.391690][ T1428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.391727][ T1428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.119828][ T1480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.288681][ T1480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.758414][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.762424][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.792191][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.803144][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.820065][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.392691][ T1480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.673519][ T1480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.584128][ T1480] bridge_slave_1: left allmulticast mode [ 113.584234][ T1480] bridge_slave_1: left promiscuous mode [ 113.590234][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.715759][ T1480] bridge_slave_0: left allmulticast mode [ 113.715791][ T1480] bridge_slave_0: left promiscuous mode [ 113.716053][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.444773][ T1480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.504658][ T1480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.547610][ T1480] bond0 (unregistering): Released all slaves [ 114.595919][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 114.933855][ T1480] hsr_slave_0: left promiscuous mode [ 114.973880][ T1480] hsr_slave_1: left promiscuous mode [ 114.975496][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.975575][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.019253][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.019281][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.115686][ T1480] veth1_macvtap: left promiscuous mode [ 115.115942][ T1480] veth0_macvtap: left promiscuous mode [ 115.116275][ T1480] veth1_vlan: left promiscuous mode [ 115.116599][ T1480] veth0_vlan: left promiscuous mode [ 115.864661][ T1480] team0 (unregistering): Port device team_slave_1 removed [ 115.924679][ T1480] team0 (unregistering): Port device team_slave_0 removed [ 116.154667][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.807623][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.807645][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.963500][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.963521][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.065254][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 2026/04/21 03:44:54 executed programs: 0 [ 118.272982][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.300177][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.302816][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.314536][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.330565][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.608693][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 119.087397][ T5998] chnl_net:caif_netlink_parms(): no params data found [ 119.243596][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.251857][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.252124][ T5998] bridge_slave_0: entered allmulticast mode [ 119.275074][ T5998] bridge_slave_0: entered promiscuous mode [ 119.286403][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.286747][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.286983][ T5998] bridge_slave_1: entered allmulticast mode [ 119.289345][ T5998] bridge_slave_1: entered promiscuous mode [ 119.373461][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.388730][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.454193][ T5998] team0: Port device team_slave_0 added [ 119.459575][ T5998] team0: Port device team_slave_1 added [ 119.540744][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.540761][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.540787][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.600017][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.600033][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.600056][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.711448][ T5998] hsr_slave_0: entered promiscuous mode [ 119.713029][ T5998] hsr_slave_1: entered promiscuous mode [ 120.375565][ T5143] Bluetooth: hci0: command tx timeout [ 122.453879][ T5143] Bluetooth: hci0: command tx timeout [ 122.491367][ T5998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.520335][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.521506][ T5998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.560148][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.561288][ T5998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.609818][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.611026][ T5998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.639241][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.856972][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.947411][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.968869][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.969106][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.007442][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.007753][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.749761][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.974861][ T5998] veth0_vlan: entered promiscuous mode [ 124.020940][ T5998] veth1_vlan: entered promiscuous mode [ 124.163614][ T5998] veth0_macvtap: entered promiscuous mode [ 124.195903][ T5998] veth1_macvtap: entered promiscuous mode [ 124.250142][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.282444][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.343513][ T1480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.348965][ T1480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.349108][ T1480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.349213][ T1480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.535472][ T5143] Bluetooth: hci0: command tx timeout [ 124.916436][ T1488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.916458][ T1488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.009491][ T1480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.009511][ T1480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/21 03:45:01 executed programs: 2 [ 125.167387][ T6128] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 125.317267][ C0] [ 125.317279][ C0] ====================================================== [ 125.317288][ C0] WARNING: possible circular locking dependency detected [ 125.317311][ C0] syzkaller #0 Not tainted [ 125.317323][ C0] ------------------------------------------------------ [ 125.317331][ C0] syz.0.17/6130 is trying to acquire lock: [ 125.317343][ C0] ffff88803976da20 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 125.317418][ C0] [ 125.317418][ C0] but task is already holding lock: [ 125.317426][ C0] ffff88803976e2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 125.317474][ C0] [ 125.317474][ C0] which lock already depends on the new lock. [ 125.317474][ C0] [ 125.317482][ C0] [ 125.317482][ C0] the existing dependency chain (in reverse order) is: [ 125.317489][ C0] [ 125.317489][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 125.317518][ C0] rt_spin_lock+0x83/0x400 [ 125.317547][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 125.317567][ C0] phonet_rcv+0x781/0xc40 [ 125.317593][ C0] process_backlog+0x5e1/0xc60 [ 125.317614][ C0] __napi_poll+0xab/0x550 [ 125.317632][ C0] net_rx_action+0x696/0xe00 [ 125.317652][ C0] handle_softirqs+0x1de/0x6d0 [ 125.317673][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 125.317693][ C0] netif_rx+0xb9/0xf0 [ 125.317730][ C0] pn_send+0x62a/0x8e0 [ 125.317753][ C0] pn_skb_send+0x218/0x530 [ 125.317776][ C0] pipe_snd_status+0x1f1/0x320 [ 125.317801][ C0] pipe_do_rcv+0xf15/0x16a0 [ 125.317827][ C0] __sk_receive_skb+0x962/0x9e0 [ 125.317845][ C0] pep_do_rcv+0x685/0xaa0 [ 125.317872][ C0] __release_sock+0x2a9/0x3d0 [ 125.317898][ C0] release_sock+0x1be/0x290 [ 125.317916][ C0] pep_sock_accept+0xd47/0x11e0 [ 125.317943][ C0] pn_socket_accept+0xc1/0x310 [ 125.317964][ C0] do_accept+0x6ca/0x930 [ 125.317983][ C0] __sys_accept4+0x139/0x230 [ 125.318002][ C0] __x64_sys_accept4+0x9a/0xb0 [ 125.318021][ C0] do_syscall_64+0x15f/0xf80 [ 125.318040][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.318060][ C0] [ 125.318060][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 125.318094][ C0] __lock_acquire+0x15a5/0x2cf0 [ 125.318120][ C0] lock_acquire+0x106/0x350 [ 125.318144][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 125.318171][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 125.318191][ C0] pep_do_rcv+0x685/0xaa0 [ 125.318218][ C0] __sk_receive_skb+0x962/0x9e0 [ 125.318262][ C0] phonet_rcv+0x781/0xc40 [ 125.318288][ C0] process_backlog+0x5e1/0xc60 [ 125.318308][ C0] __napi_poll+0xab/0x550 [ 125.318325][ C0] net_rx_action+0x696/0xe00 [ 125.318344][ C0] handle_softirqs+0x1de/0x6d0 [ 125.318364][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 125.318383][ C0] netif_rx+0xb9/0xf0 [ 125.318407][ C0] pn_send+0x62a/0x8e0 [ 125.318432][ C0] pn_skb_send+0x218/0x530 [ 125.318458][ C0] pipe_skb_send+0x2f7/0x540 [ 125.318485][ C0] pep_sendmsg+0x9ca/0xb00 [ 125.318513][ C0] pn_socket_sendmsg+0x1e5/0x250 [ 125.318536][ C0] sock_sendmsg_nosec+0x112/0x150 [ 125.318567][ C0] sock_write_iter+0x308/0x410 [ 125.318596][ C0] vfs_write+0x629/0xba0 [ 125.318623][ C0] ksys_write+0x156/0x270 [ 125.318651][ C0] do_syscall_64+0x15f/0xf80 [ 125.318675][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.318697][ C0] [ 125.318697][ C0] other info that might help us debug this: [ 125.318697][ C0] [ 125.318704][ C0] Possible unsafe locking scenario: [ 125.318704][ C0] [ 125.318710][ C0] CPU0 CPU1 [ 125.318717][ C0] ---- ---- [ 125.318724][ C0] lock(slock-AF_PHONET); [ 125.318738][ C0] lock(slock-AF_PHONET/1); [ 125.318758][ C0] lock(slock-AF_PHONET); [ 125.318773][ C0] lock(slock-AF_PHONET/1); [ 125.318792][ C0] [ 125.318792][ C0] *** DEADLOCK *** [ 125.318792][ C0] [ 125.318797][ C0] 6 locks held by syz.0.17/6130: [ 125.318810][ C0] #0: ffff88803aded218 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sendmsg+0x7b6/0xb00 [ 125.318870][ C0] #1: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 125.318919][ C0] #2: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 125.318966][ C0] #3: ffff88803976e2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 125.319014][ C0] #4: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 125.319070][ C0] #5: ffff88803976e398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 125.319125][ C0] [ 125.319125][ C0] stack backtrace: [ 125.319154][ C0] CPU: 0 UID: 0 PID: 6130 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.319179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.319200][ C0] Call Trace: [ 125.319208][ C0] [ 125.319217][ C0] dump_stack_lvl+0xe8/0x150 [ 125.319241][ C0] print_circular_bug+0x2e1/0x300 [ 125.319281][ C0] check_noncircular+0x12e/0x150 [ 125.319316][ C0] __lock_acquire+0x15a5/0x2cf0 [ 125.319346][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 125.319386][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 125.319405][ C0] lock_acquire+0x106/0x350 [ 125.319431][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 125.319454][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 125.319488][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 125.319518][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 125.319539][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 125.319568][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 125.319594][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 125.319626][ C0] ? rt_spin_lock+0x1e0/0x400 [ 125.319658][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 125.319685][ C0] pep_do_rcv+0x685/0xaa0 [ 125.319716][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 125.319748][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 125.319778][ C0] ? phonet_rcv+0x781/0xc40 [ 125.319805][ C0] __sk_receive_skb+0x962/0x9e0 [ 125.319831][ C0] phonet_rcv+0x781/0xc40 [ 125.319858][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.319887][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 125.319917][ C0] ? process_backlog+0x271/0xc60 [ 125.319939][ C0] ? process_backlog+0x271/0xc60 [ 125.319960][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 125.319989][ C0] process_backlog+0x5e1/0xc60 [ 125.320020][ C0] __napi_poll+0xab/0x550 [ 125.320041][ C0] net_rx_action+0x696/0xe00 [ 125.320071][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 125.320092][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 125.320117][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 125.320163][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 125.320201][ C0] handle_softirqs+0x1de/0x6d0 [ 125.320226][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 125.320255][ C0] netif_rx+0xb9/0xf0 [ 125.320283][ C0] pn_send+0x62a/0x8e0 [ 125.320313][ C0] pn_skb_send+0x218/0x530 [ 125.320342][ C0] pipe_skb_send+0x2f7/0x540 [ 125.320373][ C0] pep_sendmsg+0x9ca/0xb00 [ 125.320410][ C0] ? __pfx_pep_sendmsg+0x10/0x10 [ 125.320443][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 125.320472][ C0] ? pn_socket_bind+0x40d/0x550 [ 125.320497][ C0] pn_socket_sendmsg+0x1e5/0x250 [ 125.320524][ C0] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 125.320550][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 125.320578][ C0] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.320599][ C0] ? aa_sock_msg_perm+0x122/0x200 [ 125.320626][ C0] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 125.320651][ C0] sock_sendmsg_nosec+0x112/0x150 [ 125.320685][ C0] sock_write_iter+0x308/0x410 [ 125.320718][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 125.320759][ C0] vfs_write+0x629/0xba0 [ 125.320794][ C0] ? __pfx_vfs_write+0x10/0x10 [ 125.320828][ C0] ? __fget_files+0x2a/0x420 [ 125.320858][ C0] ksys_write+0x156/0x270 [ 125.320889][ C0] ? __pfx_ksys_write+0x10/0x10 [ 125.320923][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.320945][ C0] do_syscall_64+0x15f/0xf80 [ 125.320966][ C0] ? trace_irq_disable+0x3b/0x140 [ 125.320990][ C0] ? clear_bhb_loop+0x40/0x90 [ 125.321015][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.321036][ C0] RIP: 0033:0x7fd74410c819 [ 125.321071][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.321089][ C0] RSP: 002b:00007fd743745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.321129][ C0] RAX: ffffffffffffffda RBX: 00007fd744386090 RCX: 00007fd74410c819 [ 125.321145][ C0] RDX: 00000000000003db RSI: 0000200000000480 RDI: 0000000000000006 [ 125.321159][ C0] RBP: 00007fd7441a2c91 R08: 0000000000000000 R09: 0000000000000000 [ 125.321173][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.321186][ C0] R13: 00007fd744386128 R14: 00007fd744386090 R15: 00007fff7efc5418 [ 125.321210][ C0] [ 125.541603][ T6137] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 126.409751][ T6151] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 126.613760][ T5143] Bluetooth: hci0: command tx timeout [ 127.286907][ T6155] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 128.167500][ T6160] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 129.046872][ T6168] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 129.926835][ T6172] netlink: 'syz.0.23': attribute type 2 has an invalid length. 2026/04/21 03:45:07 executed programs: 9 [ 130.806596][ T6176] netlink: 'syz.0.24': attribute type 2 has an invalid length. [ 131.687234][ T6180] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 131.886559][ T6184] netlink: 'syz.0.26': attribute type 2 has an invalid length. [ 132.766387][ T6188] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 132.856291][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856372][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.646265][ T6192] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 134.526008][ T6196] netlink: 'syz.0.29': attribute type 2 has an invalid length.