[ 484.336313][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.396128][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.417374][ T1499] bond0 (unregistering): Released all slaves [ 484.459901][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 484.969064][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 485.378481][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 485.636489][ T1499] hsr_slave_0: left promiscuous mode [ 485.675553][ T1499] hsr_slave_1: left promiscuous mode [ 485.682320][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.682348][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.718067][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.718092][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.796697][ T1499] veth1_macvtap: left promiscuous mode [ 485.796758][ T1499] veth0_macvtap: left promiscuous mode [ 485.796913][ T1499] veth1_vlan: left promiscuous mode [ 485.797030][ T1499] veth0_vlan: left promiscuous mode [ 486.426618][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 486.476011][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 486.639278][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 489.140419][ T8401] chnl_net:caif_netlink_parms(): no params data found [ 489.223834][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.224061][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.224200][ T8401] bridge_slave_0: entered allmulticast mode [ 489.228602][ T8401] bridge_slave_0: entered promiscuous mode [ 489.234792][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.235049][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.239259][ T8401] bridge_slave_1: entered allmulticast mode [ 489.242443][ T8401] bridge_slave_1: entered promiscuous mode [ 489.293750][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.307669][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.339929][ T8401] team0: Port device team_slave_0 added [ 489.342740][ T8401] team0: Port device team_slave_1 added [ 489.379367][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.379377][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.379389][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.381154][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.381162][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.381174][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.473957][ T8401] hsr_slave_0: entered promiscuous mode [ 489.476379][ T8401] hsr_slave_1: entered promiscuous mode [ 491.370534][ T8401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 491.414399][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.418690][ T8401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.450853][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.452310][ T8401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.490892][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.492647][ T8401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.528967][ T8401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.678440][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.731564][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.756410][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.757216][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.780895][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.781139][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.962810][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.057839][ T8401] veth0_vlan: entered promiscuous mode [ 492.081231][ T8401] veth1_vlan: entered promiscuous mode [ 492.158454][ T8401] veth0_macvtap: entered promiscuous mode [ 492.173054][ T8401] veth1_macvtap: entered promiscuous mode [ 492.208579][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.228488][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.254481][ T1499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.265029][ T1499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.284098][ T1499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.284411][ T1499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 492.623285][ T8505] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 492.920753][ T8521] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 493.204263][ T8535] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 493.484299][ T8546] netlink: 'syz-executor220': attribute type 2 has an invalid length. [ 493.565838][ C1] [ 493.565846][ C1] ====================================================== [ 493.565850][ C1] WARNING: possible circular locking dependency detected [ 493.565867][ C1] syzkaller #0 Not tainted [ 493.565872][ C1] ------------------------------------------------------ [ 493.565876][ C1] syz-executor220/8545 is trying to acquire lock: [ 493.565883][ C1] ffff88803ef5ae60 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 493.565920][ C1] executing program [ 493.565920][ C1] but task is already holding lock: [ 493.565923][ C1] ffff88801ebde2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 493.565945][ C1] [ 493.565945][ C1] which lock already depends on the new lock. [ 493.565945][ C1] [ 493.565948][ C1] [ 493.565948][ C1] the existing dependency chain (in reverse order) is: [ 493.565952][ C1] [ 493.565952][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 493.565965][ C1] rt_spin_lock+0x83/0x400 [ 493.565980][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 493.565989][ C1] phonet_rcv+0x781/0xc40 [ 493.566001][ C1] process_backlog+0x5e1/0xc60 [ 493.566011][ C1] __napi_poll+0xab/0x550 [ 493.566019][ C1] net_rx_action+0x696/0xe00 [ 493.566028][ C1] handle_softirqs+0x1de/0x6d0 [ 493.566038][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 493.566047][ C1] netif_rx+0xb9/0xf0 [ 493.566059][ C1] pn_send+0x62a/0x8e0 [ 493.566070][ C1] pn_skb_send+0x218/0x530 [ 493.566082][ C1] pipe_snd_status+0x1f1/0x320 [ 493.566095][ C1] pipe_do_rcv+0xf15/0x16a0 [ 493.566108][ C1] __sk_receive_skb+0x962/0x9e0 [ 493.566118][ C1] pep_do_rcv+0x685/0xaa0 [ 493.566131][ C1] __release_sock+0x2a9/0x3d0 [ 493.566143][ C1] release_sock+0x1be/0x290 [ 493.566152][ C1] pep_sock_accept+0xd47/0x11e0 [ 493.566166][ C1] pn_socket_accept+0xc1/0x310 [ 493.566177][ C1] do_accept+0x6ca/0x930 [ 493.566186][ C1] __sys_accept4+0x139/0x230 [ 493.566195][ C1] __x64_sys_accept4+0x9a/0xb0 [ 493.566205][ C1] do_syscall_64+0x15f/0xf80 [ 493.566215][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.566225][ C1] [ 493.566225][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 493.566240][ C1] __lock_acquire+0x15a5/0x2cf0 [ 493.566252][ C1] lock_acquire+0x106/0x350 [ 493.566263][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 493.566276][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 493.566285][ C1] pep_do_rcv+0x685/0xaa0 [ 493.566299][ C1] __sk_receive_skb+0x962/0x9e0 [ 493.566308][ C1] phonet_rcv+0x781/0xc40 [ 493.566320][ C1] process_backlog+0x5e1/0xc60 [ 493.566336][ C1] __napi_poll+0xab/0x550 [ 493.566344][ C1] net_rx_action+0x696/0xe00 [ 493.566359][ C1] handle_softirqs+0x1de/0x6d0 [ 493.566368][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 493.566376][ C1] netif_rx+0xb9/0xf0 [ 493.566388][ C1] pn_send+0x62a/0x8e0 [ 493.566399][ C1] pn_skb_send+0x218/0x530 executing program [ 493.566411][ C1] pep_sock_close+0x2c1/0x5b0 [ 493.566424][ C1] pn_socket_release+0x9b/0xc0 [ 493.566435][ C1] __sock_release+0xb9/0x250 [ 493.566448][ C1] sock_close+0x1c/0x30 [ 493.566462][ C1] __fput+0x461/0xa70 [ 493.566472][ C1] fput_close_sync+0x11f/0x240 [ 493.566483][ C1] __x64_sys_close+0x7e/0x110 [ 493.566494][ C1] do_syscall_64+0x15f/0xf80 [ 493.566503][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.566512][ C1] [ 493.566512][ C1] other info that might help us debug this: [ 493.566512][ C1] [ 493.566516][ C1] Possible unsafe locking scenario: [ 493.566516][ C1] [ 493.566519][ C1] CPU0 CPU1 [ 493.566522][ C1] ---- ---- [ 493.566525][ C1] lock(slock-AF_PHONET); [ 493.566532][ C1] lock(slock-AF_PHONET/1); [ 493.566541][ C1] lock(slock-AF_PHONET); [ 493.566548][ C1] lock(slock-AF_PHONET/1); [ 493.566557][ C1] [ 493.566557][ C1] *** DEADLOCK *** [ 493.566557][ C1] [ 493.566560][ C1] 7 locks held by syz-executor220/8545: [ 493.566566][ C1] #0: ffff88804d147578 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 493.566597][ C1] #1: ffff88801ebd8c18 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 493.566630][ C1] #2: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 493.566652][ C1] #3: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 493.566675][ C1] #4: ffff88801ebde2e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 493.566698][ C1] #5: ffffffff8e3c8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 493.566724][ C1] #6: ffff88801ebde398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 493.566754][ C1] [ 493.566754][ C1] stack backtrace: [ 493.566767][ C1] CPU: 1 UID: 0 PID: 8545 Comm: syz-executor220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 493.566780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.566791][ C1] Call Trace: [ 493.566796][ C1] [ 493.566800][ C1] dump_stack_lvl+0xe8/0x150 [ 493.566812][ C1] print_circular_bug+0x2e1/0x300 [ 493.566828][ C1] check_noncircular+0x12e/0x150 [ 493.566843][ C1] __lock_acquire+0x15a5/0x2cf0 [ 493.566856][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 493.566869][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 493.566879][ C1] lock_acquire+0x106/0x350 [ 493.566890][ C1] ? __sk_receive_skb+0x1bf/0x9e0 executing program [ 493.566900][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 493.566917][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 493.566930][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 493.566940][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 493.566954][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 493.566965][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 493.566983][ C1] ? rt_spin_lock+0x1e0/0x400 [ 493.567010][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 493.567030][ C1] pep_do_rcv+0x685/0xaa0 [ 493.567045][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 493.567061][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 493.567075][ C1] ? phonet_rcv+0x781/0xc40 [ 493.567087][ C1] __sk_receive_skb+0x962/0x9e0 [ 493.567099][ C1] phonet_rcv+0x781/0xc40 [ 493.567111][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 493.567125][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 493.567139][ C1] ? process_backlog+0x271/0xc60 [ 493.567148][ C1] ? process_backlog+0x271/0xc60 [ 493.567158][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 493.567171][ C1] process_backlog+0x5e1/0xc60 [ 493.567184][ C1] __napi_poll+0xab/0x550 [ 493.567194][ C1] net_rx_action+0x696/0xe00 [ 493.567207][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 493.567217][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 493.567229][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 493.567245][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 493.567261][ C1] handle_softirqs+0x1de/0x6d0 [ 493.567273][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 493.567283][ C1] netif_rx+0xb9/0xf0 [ 493.567296][ C1] pn_send+0x62a/0x8e0 [ 493.567310][ C1] pn_skb_send+0x218/0x530 [ 493.567324][ C1] pep_sock_close+0x2c1/0x5b0 [ 493.567339][ C1] pn_socket_release+0x9b/0xc0 [ 493.567351][ C1] __sock_release+0xb9/0x250 [ 493.567411][ C1] ? __pfx_sock_close+0x10/0x10 [ 493.567426][ C1] sock_close+0x1c/0x30 [ 493.567439][ C1] __fput+0x461/0xa70 [ 493.567452][ C1] fput_close_sync+0x11f/0x240 [ 493.567464][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 493.567476][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.567486][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.567496][ C1] __x64_sys_close+0x7e/0x110 [ 493.567508][ C1] do_syscall_64+0x15f/0xf80 [ 493.567519][ C1] ? trace_irq_disable+0x3b/0x140 [ 493.567530][ C1] ? clear_bhb_loop+0x40/0x90 [ 493.567544][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.567558][ C1] RIP: 0033:0x7f1251e9b98e [ 493.567574][ C1] Code: 08 0f 85 65 e1 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08 executing program [ 493.567583][ C1] RSP: 002b:00007ffdde912fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 493.567594][ C1] RAX: ffffffffffffffda RBX: 0000555572330400 RCX: 00007f1251e9b98e [ 493.567601][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 493.567610][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 493.567616][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000007870a [ 493.567622][ C1] R13: 000000000007873c R14: 00007f1251f36b7c R15: 00007f1251f36b60 [ 493.567633][ C1] [ 493.618704][ T8549] netlink: 'syz-executor220': attribute type 2 has an invalid length. [ 493.883116][ T8553] netlink: 'syz-executor220': attribute type 2 has an invalid length. [ 494.147956][ T8557] netlink: 'syz-executor220': attribute type 2 has an invalid length. [ 494.417600][ T8562] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 494.669415][ T8566] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 494.934068][ T8570] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 497.758518][ T8616] validate_nla: 11 callbacks suppressed [ 497.758530][ T8616] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 498.023500][ T8620] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 498.289625][ T8624] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 498.554465][ T8628] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 498.819273][ T8632] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 499.084880][ T8637] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 499.340133][ T8641] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 499.442563][ T8644] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 499.708449][ T8649] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 499.973634][ T8653] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program executing program executing program executing program executing program executing program [ 501.537357][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537400][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 executing program executing program executing program executing program executing program executing program [ 502.971287][ T8703] validate_nla: 11 callbacks suppressed [ 502.971299][ T8703] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 503.236854][ T8707] netlink: 'syz-executor220': attribute type 2 has an invalid length. executing program [ 503.369583][ T8710] netlink: 'syz-executor220': attribute type 2 has an invalid length.