no interfaces have a carrier [ 39.024185][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.033877][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. 2026/05/03 16:06:48 parsed 1 programs syzkaller login: [ 64.749368][ T4200] cgroup: Unknown subsys name 'net' [ 64.863108][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.217510][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.436495][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.446944][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.457047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.474642][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.482635][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.490659][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.754842][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 69.798148][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.806046][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.814308][ T4283] device bridge_slave_0 entered promiscuous mode [ 69.824065][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.831439][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.839339][ T4283] device bridge_slave_1 entered promiscuous mode [ 69.873225][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.884160][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.904858][ T4283] team0: Port device team_slave_0 added [ 69.912967][ T4283] team0: Port device team_slave_1 added [ 69.945112][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.952287][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.978313][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.990699][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.997741][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.023906][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.066782][ T4283] device hsr_slave_0 entered promiscuous mode [ 70.073606][ T4283] device hsr_slave_1 entered promiscuous mode [ 70.185098][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.195403][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.204222][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.214244][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.251202][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.258433][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.266095][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.273219][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.324721][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.350631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.360552][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.368776][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.382287][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.407481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.415990][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.423074][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.439099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.449404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.458634][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.465702][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.474413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.483014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.495817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.504731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.513865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.523242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.531919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.549907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.559144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.567522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.577501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.588875][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.704679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.714791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.729426][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.749465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.758688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.778925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.787262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.796408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.805433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.814645][ T4283] device veth0_vlan entered promiscuous mode [ 70.826734][ T4283] device veth1_vlan entered promiscuous mode [ 70.856022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.865747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.874130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.883879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.895530][ T4283] device veth0_macvtap entered promiscuous mode [ 70.905670][ T4283] device veth1_macvtap entered promiscuous mode [ 70.922212][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.931659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.940998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.949344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.958116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.969322][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.976604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.985443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.998037][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.004499][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.018887][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.030724][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.039917][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.050313][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/03 16:06:57 executed programs: 0 [ 71.853277][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 71.907228][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.915179][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.925136][ T4305] device bridge_slave_0 entered promiscuous mode [ 71.933556][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.941358][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.949379][ T4305] device bridge_slave_1 entered promiscuous mode [ 71.972253][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.984635][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.008445][ T4305] team0: Port device team_slave_0 added [ 72.015746][ T4305] team0: Port device team_slave_1 added [ 72.037181][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.044384][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.072004][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.084637][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.091944][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.119035][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.155158][ T4305] device hsr_slave_0 entered promiscuous mode [ 72.162202][ T4305] device hsr_slave_1 entered promiscuous mode [ 72.169069][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.177151][ T4305] Cannot create hsr debugfs directory [ 72.252860][ T4305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.789205][ T2307] Bluetooth: hci0: command 0x0409 tx timeout [ 74.996844][ T4305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.794195][ T4305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.842978][ T4305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.868154][ T2307] Bluetooth: hci0: command 0x041b tx timeout [ 76.109064][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.119345][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.128596][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.136991][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.194518][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.206665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.214934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.225421][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.244790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.253626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.262482][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.269605][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.283004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.292450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.301154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.309792][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.316847][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.343757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.353295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.368539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.378073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.386483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.395342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.404386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.420677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.429108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.440307][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.452338][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.470019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.479773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.533292][ T155] device hsr_slave_0 left promiscuous mode [ 76.540249][ T155] device hsr_slave_1 left promiscuous mode [ 76.546541][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.554235][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.562582][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.570751][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.578417][ T155] device bridge_slave_1 left promiscuous mode [ 76.584992][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.597346][ T155] device bridge_slave_0 left promiscuous mode [ 76.604043][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.621358][ T155] device veth1_macvtap left promiscuous mode [ 76.628802][ T155] device veth0_macvtap left promiscuous mode [ 76.634862][ T155] device veth1_vlan left promiscuous mode [ 76.641261][ T155] device veth0_vlan left promiscuous mode [ 76.783413][ T155] team0 (unregistering): Port device team_slave_1 removed [ 76.796537][ T155] team0 (unregistering): Port device team_slave_0 removed [ 76.809408][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.824843][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.877138][ T155] bond0 (unregistering): Released all slaves [ 76.968166][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.975687][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.993843][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.011141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.020443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.050895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.060249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.071108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.079559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.088665][ T4305] device veth0_vlan entered promiscuous mode [ 77.099145][ T4305] device veth1_vlan entered promiscuous mode [ 77.125303][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.133670][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.142026][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.150484][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.161791][ T4305] device veth0_macvtap entered promiscuous mode [ 77.172624][ T4305] device veth1_macvtap entered promiscuous mode [ 77.186377][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.194861][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.202868][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.210949][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.219399][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.238481][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.246884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.256523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.268769][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.278287][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.286995][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.295803][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.358926][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.366766][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.394207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/05/03 16:07:03 executed programs: 2 [ 77.408141][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.415971][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.424094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.464643][ T4318] netlink: 'syz.0.17': attribute type 2 has an invalid length. [ 77.568201][ T4321] netlink: 'syz.0.18': attribute type 2 has an invalid length. [ 77.947938][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 78.414349][ T4324] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 79.263498][ T4327] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 80.027775][ T2307] Bluetooth: hci0: command 0x0419 tx timeout [ 80.111610][ T4330] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 80.956812][ T4333] netlink: 'syz.0.22': attribute type 2 has an invalid length. [ 81.805859][ T4336] netlink: 'syz.0.23': attribute type 2 has an invalid length. 2026/05/03 16:07:08 executed programs: 9 [ 82.651844][ T4339] netlink: 'syz.0.24': attribute type 2 has an invalid length. [ 83.499304][ T4342] netlink: 'syz.0.25': attribute type 2 has an invalid length. [ 83.572919][ T4345] netlink: 'syz.0.26': attribute type 2 has an invalid length. [ 84.419414][ T4348] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 85.267436][ T4351] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 86.113951][ T4354] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 86.349304][ T7] cfg80211: failed to load regulatory.db [ 86.967454][ T4357] netlink: 'syz.0.30': attribute type 2 has an invalid length. 2026/05/03 16:07:13 executed programs: 16 [ 87.814310][ T4360] netlink: 'syz.0.31': attribute type 2 has an invalid length. [ 88.664501][ T4363] netlink: 'syz.0.32': attribute type 2 has an invalid length. [ 89.512450][ T4366] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 89.572005][ T4367] [ 89.574353][ T4367] ================================ [ 89.579444][ T4367] WARNING: inconsistent lock state [ 89.584546][ T4367] syzkaller #0 Not tainted [ 89.588984][ T4367] -------------------------------- [ 89.594073][ T4367] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 89.601006][ T4367] syz.0.33/4367 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 89.607151][ T4367] ffff88802a735e60 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x17b/0x980 [ 89.616628][ T4367] {IN-SOFTIRQ-W} state was registered at: [ 89.622331][ T4367] lock_acquire+0x19e/0x400 [ 89.626926][ T4367] _raw_spin_lock_nested+0x2e/0x40 [ 89.632113][ T4367] __sk_receive_skb+0x17b/0x980 [ 89.637039][ T4367] __sk_receive_skb+0x42c/0x980 [ 89.641972][ T4367] phonet_rcv+0x7e4/0xc70 [ 89.646397][ T4367] __netif_receive_skb+0xcc/0x290 [ 89.651679][ T4367] process_backlog+0x370/0x790 [ 89.656539][ T4367] __napi_poll+0xc0/0x430 [ 89.660948][ T4367] net_rx_action+0x4d4/0xa10 [ 89.665623][ T4367] handle_softirqs+0x339/0x830 [ 89.670478][ T4367] run_ksoftirqd+0xa4/0x100 [ 89.675055][ T4367] smpboot_thread_fn+0x4f6/0x970 [ 89.680087][ T4367] kthread+0x436/0x520 [ 89.684237][ T4367] ret_from_fork+0x1f/0x30 [ 89.688728][ T4367] irq event stamp: 59 [ 89.692693][ T4367] hardirqs last enabled at (59): [] __local_bh_enable_ip+0x136/0x1c0 [ 89.702417][ T4367] hardirqs last disabled at (57): [] __local_bh_enable_ip+0xd7/0x1c0 [ 89.712038][ T4367] softirqs last enabled at (58): [] __release_sock+0xa8/0x450 [ 89.721178][ T4367] softirqs last disabled at (56): [] release_sock+0x2b/0x1b0 [ 89.730106][ T4367] [ 89.730106][ T4367] other info that might help us debug this: [ 89.738161][ T4367] Possible unsafe locking scenario: [ 89.738161][ T4367] [ 89.745596][ T4367] CPU0 [ 89.748869][ T4367] ---- [ 89.752150][ T4367] lock(slock-AF_PHONET/1); [ 89.756737][ T4367] [ 89.760211][ T4367] lock(slock-AF_PHONET/1); [ 89.764978][ T4367] [ 89.764978][ T4367] *** DEADLOCK *** [ 89.764978][ T4367] [ 89.773125][ T4367] 1 lock held by syz.0.33/4367: [ 89.777974][ T4367] #0: ffff88807d6677e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0xb5/0x1190 [ 89.787813][ T4367] [ 89.787813][ T4367] stack backtrace: [ 89.793714][ T4367] CPU: 0 PID: 4367 Comm: syz.0.33 Not tainted syzkaller #0 [ 89.800896][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.810949][ T4367] Call Trace: [ 89.814226][ T4367] [ 89.817146][ T4367] dump_stack_lvl+0x188/0x250 [ 89.821822][ T4367] ? show_regs_print_info+0x20/0x20 [ 89.827028][ T4367] ? unwind_get_return_address+0x49/0x80 [ 89.832684][ T4367] valid_state+0x13b/0x1d0 [ 89.837128][ T4367] mark_lock_irq+0xa9/0x900 [ 89.841626][ T4367] ? stack_trace_save+0xa6/0xf0 [ 89.846471][ T4367] ? save_trace+0xa80/0xa80 [ 89.850980][ T4367] ? lockdep_count_forward_deps+0x200/0x200 [ 89.856876][ T4367] ? save_trace+0x5a/0xa80 [ 89.861315][ T4367] mark_lock+0x208/0x320 [ 89.865556][ T4367] __lock_acquire+0xd47/0x7d10 [ 89.870316][ T4367] ? try_to_wake_up+0x6cf/0x1050 [ 89.875261][ T4367] ? mark_lock+0x94/0x320 [ 89.879595][ T4367] ? __lock_acquire+0x13bc/0x7d10 [ 89.884619][ T4367] ? verify_lock_unused+0x140/0x140 [ 89.889815][ T4367] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 89.895816][ T4367] lock_acquire+0x19e/0x400 [ 89.900315][ T4367] ? __sk_receive_skb+0x17b/0x980 [ 89.905340][ T4367] ? read_lock_is_recursive+0x10/0x10 [ 89.910717][ T4367] ? sk_filter_trim_cap+0x59c/0x810 [ 89.915925][ T4367] ? __local_bh_enable_ip+0x136/0x1c0 [ 89.921310][ T4367] ? lockdep_hardirqs_on+0x94/0x140 [ 89.926507][ T4367] _raw_spin_lock_nested+0x2e/0x40 [ 89.931618][ T4367] ? __sk_receive_skb+0x17b/0x980 [ 89.936647][ T4367] __sk_receive_skb+0x17b/0x980 [ 89.941508][ T4367] ? pep_do_rcv+0x4ea/0x800 [ 89.946008][ T4367] __release_sock+0x1e1/0x450 [ 89.950681][ T4367] release_sock+0x5b/0x1b0 [ 89.955092][ T4367] pep_sock_accept+0xc73/0x1190 [ 89.959946][ T4367] ? pep_sock_connect+0x1b0/0x1b0 [ 89.964973][ T4367] ? aa_sk_perm+0x7dc/0x910 [ 89.969516][ T4367] pn_socket_accept+0x126/0x360 [ 89.974362][ T4367] ? pn_socket_connect+0xb90/0xb90 [ 89.979471][ T4367] ? bpf_lsm_socket_accept+0x5/0x10 [ 89.984669][ T4367] ? pn_socket_connect+0xb90/0xb90 [ 89.989783][ T4367] do_accept+0x509/0x6f0 [ 89.994030][ T4367] ? __ia32_sys_listen+0x60/0x60 [ 89.998976][ T4367] ? alloc_fd+0x598/0x630 [ 90.003328][ T4367] __sys_accept4+0x103/0x170 [ 90.007918][ T4367] __x64_sys_accept4+0x96/0xb0 [ 90.012683][ T4367] do_syscall_64+0x4c/0xa0 [ 90.017094][ T4367] ? clear_bhb_loop+0x30/0x80 [ 90.021766][ T4367] ? clear_bhb_loop+0x30/0x80 [ 90.026440][ T4367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.032341][ T4367] RIP: 0033:0x7fb96da91dd9 [ 90.036765][ T4367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.056362][ T4367] RSP: 002b:00007fb96d0d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 90.064770][ T4367] RAX: ffffffffffffffda RBX: 00007fb96dd0b090 RCX: 00007fb96da91dd9 [ 90.072770][ T4367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 90.080782][ T4367] RBP: 00007fb96db27d69 R08: 0000000000000000 R09: 0000000000000000 [ 90.088767][ T4367] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 90.096784][ T4367] R13: 00007fb96dd0b128 R14: 00007fb96dd0b090 R15: 00007ffc778645a8 [ 90.104965][ T4367] [ 90.122097][ T4369] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 90.966000][ T4372] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 91.809145][ T4375] netlink: 'syz.0.36': attribute type 2 has an invalid length. [ 92.651840][ T4378] netlink: 'syz.0.37': attribute type 2 has an invalid length. 2026/05/03 16:07:19 executed programs: 23 [ 93.493412][ T4381] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 94.339670][ T4384] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 95.177445][ T4387] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 96.021108][ T4390] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 96.090043][ T4393] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 96.937152][ T4396] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 97.777276][ T4399] netlink: 'syz.0.44': attribute type 2 has an invalid length. 2026/05/03 16:07:24 executed programs: 30 [ 98.619254][ T4402] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 99.462793][ T4405] netlink: 'syz.0.46': attribute type 2 has an invalid length.