Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. 2025/11/22 08:19:11 parsed 1 programs [ 61.434696][ T4187] cgroup: Unknown subsys name 'net' [ 61.575399][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.055624][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.384339][ T4230] chnl_net:caif_netlink_parms(): no params data found [ 65.453854][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.461793][ T4230] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.470431][ T4230] device bridge_slave_0 entered promiscuous mode [ 65.481586][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.488727][ T4230] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.497126][ T4230] device bridge_slave_1 entered promiscuous mode [ 65.529437][ T4230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.543177][ T4230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.574104][ T4230] team0: Port device team_slave_0 added [ 65.583475][ T4230] team0: Port device team_slave_1 added [ 65.610232][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.617298][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.644689][ T4230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.658022][ T4230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.666407][ T4230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.694022][ T4230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.735628][ T4230] device hsr_slave_0 entered promiscuous mode [ 65.744034][ T4230] device hsr_slave_1 entered promiscuous mode [ 65.880660][ T4230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.891672][ T4230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.906731][ T4230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.918017][ T4230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.004050][ T4230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.018483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.030041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.041981][ T4230] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.052905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.063964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.073390][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.080705][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.093012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.106335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.117205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.126245][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.133602][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.143169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.171014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.182946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.192690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.203176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.212920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.222616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.235825][ T4230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.246622][ T4230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.261365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.270486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.279343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.288237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.296948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.424563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.432462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.448561][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.466726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.475898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.501245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.512294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.522175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.538163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.558206][ T4230] device veth0_vlan entered promiscuous mode [ 66.585782][ T4230] device veth1_vlan entered promiscuous mode [ 66.619126][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.627574][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.637363][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.646129][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.663967][ T4230] device veth0_macvtap entered promiscuous mode [ 66.677714][ T4230] device veth1_macvtap entered promiscuous mode [ 66.695958][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.703640][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.711937][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.720155][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.728616][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.740787][ T4230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.751389][ T4230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.760645][ T4230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.769397][ T4230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779050][ T4230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.789573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.798433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.867772][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.888472][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.900188][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.908444][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.912183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.924756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/11/22 08:19:20 executed programs: 0 [ 68.666405][ T4290] chnl_net:caif_netlink_parms(): no params data found [ 68.732315][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.739976][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.748111][ T4290] device bridge_slave_0 entered promiscuous mode [ 68.757150][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.765488][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.773761][ T4290] device bridge_slave_1 entered promiscuous mode [ 68.802863][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.814637][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.846687][ T4290] team0: Port device team_slave_0 added [ 68.854986][ T4290] team0: Port device team_slave_1 added [ 68.880321][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.887334][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.913671][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.940322][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.947308][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.973745][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.011972][ T4290] device hsr_slave_0 entered promiscuous mode [ 69.018875][ T4290] device hsr_slave_1 entered promiscuous mode [ 69.025931][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.034336][ T4290] Cannot create hsr debugfs directory [ 69.118383][ T4290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.520467][ T4305] Bluetooth: hci0: command 0x0409 tx timeout [ 71.322105][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328628][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.125243][ T4290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.164177][ T4290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.266424][ T4290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.447169][ T4290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.456556][ T4290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.465224][ T4290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.475691][ T4290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.538360][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.565482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.574187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.584608][ T4290] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.595005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.603362][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 72.605051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.618875][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.626029][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.633863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.661296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.670487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.678921][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.686036][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.699250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.719590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.732783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.742065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.763105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.771687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.782262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.800291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.809703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.819894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.828421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.844114][ T156] device hsr_slave_0 left promiscuous mode [ 72.851154][ T156] device hsr_slave_1 left promiscuous mode [ 72.857534][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.866614][ T156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.875046][ T156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.882960][ T156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.890783][ T156] device bridge_slave_1 left promiscuous mode [ 72.897552][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.909341][ T156] device bridge_slave_0 left promiscuous mode [ 72.916497][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.933831][ T156] device veth1_macvtap left promiscuous mode [ 72.940626][ T156] device veth0_macvtap left promiscuous mode [ 72.946797][ T156] device veth1_vlan left promiscuous mode [ 72.953249][ T156] device veth0_vlan left promiscuous mode [ 73.095961][ T156] team0 (unregistering): Port device team_slave_1 removed [ 73.109135][ T156] team0 (unregistering): Port device team_slave_0 removed [ 73.122085][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.135405][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.188107][ T156] bond0 (unregistering): Released all slaves [ 73.249975][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.345826][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.354019][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.383578][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.400161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.408768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.426998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.435707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.444645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.452904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.463898][ T4290] device veth0_vlan entered promiscuous mode [ 73.477729][ T4290] device veth1_vlan entered promiscuous mode [ 73.495379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.504284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.513820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.522624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.533845][ T4290] device veth0_macvtap entered promiscuous mode [ 73.545328][ T4290] device veth1_macvtap entered promiscuous mode [ 73.559225][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.567621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.576212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.584511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.593496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.605641][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.616836][ T4290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.625756][ T4290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.635938][ T4290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.644744][ T4290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.655412][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.664598][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.728459][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.758934][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.769247][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.777610][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.792866][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.805401][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.857650][ T4320] [ 73.860036][ T4320] ====================================================== [ 73.867071][ T4320] WARNING: possible circular locking dependency detected [ 73.874277][ T4320] syzkaller #0 Not tainted [ 73.878705][ T4320] ------------------------------------------------------ [ 73.885816][ T4320] syz.0.17/4320 is trying to acquire lock: [ 73.891626][ T4320] ffff88807d7e0120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 73.901232][ T4320] [ 73.901232][ T4320] but task is already holding lock: [ 73.908618][ T4320] ffffc90001829208 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 73.918236][ T4320] [ 73.918236][ T4320] which lock already depends on the new lock. [ 73.918236][ T4320] [ 73.928747][ T4320] [ 73.928747][ T4320] the existing dependency chain (in reverse order) is: [ 73.937986][ T4320] [ 73.937986][ T4320] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 73.945931][ T4320] _raw_spin_lock+0x2a/0x40 [ 73.950978][ T4320] __inet_hash+0xe3/0x960 [ 73.955842][ T4320] inet_csk_listen_start+0x22f/0x320 [ 73.961678][ T4320] inet_listen+0x2e1/0x590 [ 73.966632][ T4320] __sys_listen+0x19d/0x220 [ 73.971679][ T4320] __x64_sys_listen+0x56/0x60 [ 73.976887][ T4320] do_syscall_64+0x4c/0xa0 [ 73.981833][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.988373][ T4320] [ 73.988373][ T4320] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 73.996224][ T4320] __lock_acquire+0x2c33/0x7c60 [ 74.001841][ T4320] lock_acquire+0x197/0x3f0 [ 74.006889][ T4320] mptcp_diag_get_info+0x1db/0x990 [ 74.012540][ T4320] inet_sk_diag_fill+0xef6/0x1b50 [ 74.018117][ T4320] mptcp_diag_dump+0xcca/0x1290 [ 74.023505][ T4320] __inet_diag_dump+0x1f6/0x380 [ 74.028886][ T4320] netlink_dump+0x676/0xcd0 [ 74.033929][ T4320] __netlink_dump_start+0x523/0x700 [ 74.039673][ T4320] inet_diag_handler_cmd+0x1be/0x290 [ 74.045507][ T4320] sock_diag_rcv_msg+0x164/0x3e0 [ 74.050990][ T4320] netlink_rcv_skb+0x1e0/0x430 [ 74.056288][ T4320] sock_diag_rcv+0x26/0x40 [ 74.061235][ T4320] netlink_unicast+0x774/0x920 [ 74.066660][ T4320] netlink_sendmsg+0x8ab/0xbc0 [ 74.071946][ T4320] sock_write_iter+0x29c/0x380 [ 74.077228][ T4320] do_iter_readv_writev+0x497/0x600 [ 74.082950][ T4320] do_iter_write+0x205/0x7b0 [ 74.088320][ T4320] do_writev+0x254/0x410 [ 74.093108][ T4320] do_syscall_64+0x4c/0xa0 [ 74.098052][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.104485][ T4320] [ 74.104485][ T4320] other info that might help us debug this: [ 74.104485][ T4320] [ 74.114798][ T4320] Possible unsafe locking scenario: [ 74.114798][ T4320] [ 74.122243][ T4320] CPU0 CPU1 [ 74.127612][ T4320] ---- ---- [ 74.132970][ T4320] lock(&h->lhash2[i].lock); [ 74.137647][ T4320] lock(sk_lock-AF_INET6); [ 74.144760][ T4320] lock(&h->lhash2[i].lock); [ 74.152129][ T4320] lock(sk_lock-AF_INET6); [ 74.156630][ T4320] [ 74.156630][ T4320] *** DEADLOCK *** [ 74.156630][ T4320] [ 74.165026][ T4320] 6 locks held by syz.0.17/4320: [ 74.169970][ T4320] #0: ffffffff8d242568 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 74.179287][ T4320] #1: ffffffff8d242428 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 74.189732][ T4320] #2: ffff88807d03f698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 74.200517][ T4320] #3: ffffffff8d31c948 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 74.210777][ T4320] #4: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 74.220081][ T4320] #5: ffffc90001829208 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 74.230083][ T4320] [ 74.230083][ T4320] stack backtrace: [ 74.235979][ T4320] CPU: 0 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0 [ 74.243174][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.253309][ T4320] Call Trace: [ 74.256589][ T4320] [ 74.259518][ T4320] dump_stack_lvl+0x168/0x230 [ 74.264198][ T4320] ? load_image+0x3b0/0x3b0 [ 74.268715][ T4320] ? show_regs_print_info+0x20/0x20 [ 74.274006][ T4320] ? print_circular_bug+0x12b/0x1a0 [ 74.279199][ T4320] check_noncircular+0x274/0x310 [ 74.284135][ T4320] ? add_chain_block+0x940/0x940 [ 74.289067][ T4320] ? lockdep_lock+0xdc/0x1e0 [ 74.293661][ T4320] ? __lock_acquire+0x289d/0x7c60 [ 74.298879][ T4320] ? mark_lock+0x94/0x320 [ 74.303207][ T4320] __lock_acquire+0x2c33/0x7c60 [ 74.308146][ T4320] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.314130][ T4320] ? verify_lock_unused+0x140/0x140 [ 74.319419][ T4320] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 74.325399][ T4320] ? verify_lock_unused+0x140/0x140 [ 74.330599][ T4320] ? __local_bh_enable_ip+0xcb/0x1b0 [ 74.335892][ T4320] ? __local_bh_enable_ip+0x12a/0x1b0 [ 74.341261][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 74.346466][ T4320] ? __local_bh_enable_ip+0x12a/0x1b0 [ 74.351833][ T4320] ? _local_bh_enable+0xa0/0xa0 [ 74.356689][ T4320] ? skb_put+0x117/0x210 [ 74.360955][ T4320] lock_acquire+0x197/0x3f0 [ 74.365497][ T4320] ? inet_sk_diag_fill+0xef6/0x1b50 [ 74.370692][ T4320] ? read_lock_is_recursive+0x10/0x10 [ 74.376066][ T4320] ? rcu_lock_release+0x5/0x20 [ 74.380829][ T4320] ? __lock_acquire+0x7c60/0x7c60 [ 74.385850][ T4320] ? inet_sk_diag_fill+0xef6/0x1b50 [ 74.391139][ T4320] mptcp_diag_get_info+0x1db/0x990 [ 74.396245][ T4320] ? inet_sk_diag_fill+0xef6/0x1b50 [ 74.401544][ T4320] inet_sk_diag_fill+0xef6/0x1b50 [ 74.406572][ T4320] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 74.412289][ T4320] ? do_raw_spin_lock+0x11d/0x280 [ 74.417310][ T4320] ? inet_diag_bc_sk+0x187/0x10c0 [ 74.422332][ T4320] ? security_capable+0x85/0xb0 [ 74.427191][ T4320] mptcp_diag_dump+0xcca/0x1290 [ 74.432138][ T4320] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 74.438724][ T4320] __inet_diag_dump+0x1f6/0x380 [ 74.443575][ T4320] netlink_dump+0x676/0xcd0 [ 74.448092][ T4320] ? netlink_lookup+0x1d0/0x1d0 [ 74.452939][ T4320] ? __inet_diag_dump_start+0x805/0x970 [ 74.458496][ T4320] __netlink_dump_start+0x523/0x700 [ 74.463698][ T4320] inet_diag_handler_cmd+0x1be/0x290 [ 74.468983][ T4320] ? rcu_lock_release+0x20/0x20 [ 74.473828][ T4320] ? inet_diag_handler_get_info+0xb80/0xb80 [ 74.479728][ T4320] ? inet_diag_dump_start+0x20/0x20 [ 74.485093][ T4320] ? inet_diag_dump+0x50/0x50 [ 74.489765][ T4320] ? dev_queue_xmit+0x20/0x20 [ 74.494439][ T4320] ? memcpy+0x3c/0x60 [ 74.498416][ T4320] ? sock_diag_rcv+0x17/0x40 [ 74.503003][ T4320] ? sock_diag_rcv+0x17/0x40 [ 74.507605][ T4320] ? rcu_lock_release+0x20/0x20 [ 74.512452][ T4320] sock_diag_rcv_msg+0x164/0x3e0 [ 74.517391][ T4320] netlink_rcv_skb+0x1e0/0x430 [ 74.522148][ T4320] ? sock_diag_bind+0xa0/0xa0 [ 74.526820][ T4320] ? netlink_ack+0xb60/0xb60 [ 74.531408][ T4320] ? __lock_acquire+0x7c60/0x7c60 [ 74.536457][ T4320] sock_diag_rcv+0x26/0x40 [ 74.540870][ T4320] netlink_unicast+0x774/0x920 [ 74.545635][ T4320] netlink_sendmsg+0x8ab/0xbc0 [ 74.550409][ T4320] ? netlink_getsockopt+0x560/0x560 [ 74.555602][ T4320] ? aa_sock_msg_perm+0x94/0x150 [ 74.560537][ T4320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 74.565859][ T4320] ? security_socket_sendmsg+0x7c/0xa0 [ 74.571315][ T4320] sock_write_iter+0x29c/0x380 [ 74.576075][ T4320] ? sock_read_iter+0x340/0x340 [ 74.580928][ T4320] do_iter_readv_writev+0x497/0x600 [ 74.586126][ T4320] ? generic_file_rw_checks+0x280/0x280 [ 74.591669][ T4320] ? common_file_perm+0x171/0x1c0 [ 74.597425][ T4320] ? fsnotify_perm+0x5d/0x560 [ 74.602120][ T4320] ? security_file_permission+0x75/0xa0 [ 74.607873][ T4320] do_iter_write+0x205/0x7b0 [ 74.612468][ T4320] ? import_iovec+0x6f/0xa0 [ 74.616990][ T4320] do_writev+0x254/0x410 [ 74.621255][ T4320] ? do_readv+0x3e0/0x3e0 [ 74.625619][ T4320] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.631707][ T4320] ? lock_chain_count+0x20/0x20 [ 74.636571][ T4320] ? vtime_user_exit+0x2dc/0x400 [ 74.641517][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 74.646721][ T4320] do_syscall_64+0x4c/0xa0 [ 74.651136][ T4320] ? clear_bhb_loop+0x30/0x80 [ 74.655810][ T4320] ? clear_bhb_loop+0x30/0x80 [ 74.660503][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.666403][ T4320] RIP: 0033:0x7f139ddc3749 [ 74.670818][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.690430][ T4320] RSP: 002b:00007ffe89d9d4f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 74.698861][ T4320] RAX: ffffffffffffffda RBX: 00007f139e019fa0 RCX: 00007f139ddc3749 [ 74.706917][ T4320] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 74.714973][ T4320] RBP: 00007f139de47f91 R08: 0000000000000000 R09: 0000000000000000 [ 74.722942][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.730909][ T4320] R13: 00007f139e019fa0 R14: 00007f139e019fa0 R15: 0000000000000003 [ 74.738881][ T4320] [ 74.743136][ T4320] BUG: sleeping function called from invalid context at net/core/sock.c:3288 [ 74.752274][ T4320] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4320, name: syz.0.17 [ 74.761182][ T4320] INFO: lockdep is turned off. [ 74.765955][ T4320] Preemption disabled at: [ 74.765965][ T4320] [<0000000000000000>] 0x0 [ 74.774909][ T4320] CPU: 0 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0 [ 74.782122][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.792349][ T4320] Call Trace: [ 74.795647][ T4320] [ 74.798692][ T4320] dump_stack_lvl+0x168/0x230 [ 74.803646][ T4320] ? show_regs_print_info+0x20/0x20 [ 74.808869][ T4320] ? load_image+0x3b0/0x3b0 [ 74.813373][ T4320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 74.819609][ T4320] ___might_sleep+0x47c/0x600 [ 74.824287][ T4320] ? __might_sleep+0xf0/0xf0 [ 74.828883][ T4320] ? read_lock_is_recursive+0x10/0x10 [ 74.834693][ T4320] ? rcu_lock_release+0x5/0x20 [ 74.839478][ T4320] __lock_sock_fast+0x2f/0xe0 [ 74.844148][ T4320] ? inet_sk_diag_fill+0xef6/0x1b50 [ 74.849391][ T4320] mptcp_diag_get_info+0x1e7/0x990 [ 74.854702][ T4320] inet_sk_diag_fill+0xef6/0x1b50 [ 74.859748][ T4320] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 74.865482][ T4320] ? do_raw_spin_lock+0x11d/0x280 [ 74.870505][ T4320] ? inet_diag_bc_sk+0x187/0x10c0 [ 74.875517][ T4320] ? security_capable+0x85/0xb0 [ 74.880403][ T4320] mptcp_diag_dump+0xcca/0x1290 [ 74.885317][ T4320] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 74.891910][ T4320] __inet_diag_dump+0x1f6/0x380 [ 74.896771][ T4320] netlink_dump+0x676/0xcd0 [ 74.901287][ T4320] ? netlink_lookup+0x1d0/0x1d0 [ 74.906158][ T4320] ? __inet_diag_dump_start+0x805/0x970 [ 74.911702][ T4320] __netlink_dump_start+0x523/0x700 [ 74.916901][ T4320] inet_diag_handler_cmd+0x1be/0x290 [ 74.922194][ T4320] ? rcu_lock_release+0x20/0x20 [ 74.927137][ T4320] ? inet_diag_handler_get_info+0xb80/0xb80 [ 74.933020][ T4320] ? inet_diag_dump_start+0x20/0x20 [ 74.938208][ T4320] ? inet_diag_dump+0x50/0x50 [ 74.942884][ T4320] ? dev_queue_xmit+0x20/0x20 [ 74.947823][ T4320] ? memcpy+0x3c/0x60 [ 74.951819][ T4320] ? sock_diag_rcv+0x17/0x40 [ 74.956406][ T4320] ? sock_diag_rcv+0x17/0x40 [ 74.960997][ T4320] ? rcu_lock_release+0x20/0x20 [ 74.965855][ T4320] sock_diag_rcv_msg+0x164/0x3e0 [ 74.970784][ T4320] netlink_rcv_skb+0x1e0/0x430 [ 74.975537][ T4320] ? sock_diag_bind+0xa0/0xa0 [ 74.980206][ T4320] ? netlink_ack+0xb60/0xb60 [ 74.984803][ T4320] ? __lock_acquire+0x7c60/0x7c60 [ 74.989824][ T4320] sock_diag_rcv+0x26/0x40 [ 74.994229][ T4320] netlink_unicast+0x774/0x920 [ 74.998994][ T4320] netlink_sendmsg+0x8ab/0xbc0 [ 75.003840][ T4320] ? netlink_getsockopt+0x560/0x560 [ 75.009027][ T4320] ? aa_sock_msg_perm+0x94/0x150 [ 75.013951][ T4320] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 75.019232][ T4320] ? security_socket_sendmsg+0x7c/0xa0 [ 75.024687][ T4320] sock_write_iter+0x29c/0x380 [ 75.029475][ T4320] ? sock_read_iter+0x340/0x340 [ 75.034318][ T4320] do_iter_readv_writev+0x497/0x600 [ 75.039527][ T4320] ? generic_file_rw_checks+0x280/0x280 [ 75.045074][ T4320] ? common_file_perm+0x171/0x1c0 [ 75.050106][ T4320] ? fsnotify_perm+0x5d/0x560 [ 75.054802][ T4320] ? security_file_permission+0x75/0xa0 [ 75.060339][ T4320] do_iter_write+0x205/0x7b0 [ 75.064918][ T4320] ? import_iovec+0x6f/0xa0 [ 75.069409][ T4320] do_writev+0x254/0x410 [ 75.073641][ T4320] ? do_readv+0x3e0/0x3e0 [ 75.077959][ T4320] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.084021][ T4320] ? lock_chain_count+0x20/0x20 [ 75.088869][ T4320] ? vtime_user_exit+0x2dc/0x400 [ 75.093902][ T4320] ? lockdep_hardirqs_on+0x94/0x140 [ 75.099089][ T4320] do_syscall_64+0x4c/0xa0 [ 75.103502][ T4320] ? clear_bhb_loop+0x30/0x80 [ 75.108249][ T4320] ? clear_bhb_loop+0x30/0x80 [ 75.112927][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.118809][ T4320] RIP: 0033:0x7f139ddc3749 [ 75.123212][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.142810][ T4320] RSP: 002b:00007ffe89d9d4f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 75.151307][ T4320] RAX: ffffffffffffffda RBX: 00007f139e019fa0 RCX: 00007f139ddc3749 [ 75.159270][ T4320] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 75.167236][ T4320] RBP: 00007f139de47f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.175368][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.183330][ T4320] R13: 00007f139e019fa0 R14: 00007f139e019fa0 R15: 0000000000000003 [ 75.191505][ T4320] [ 75.195541][ T4304] Bluetooth: hci0: command 0x040f tx timeout