Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. 2025/11/30 23:10:09 parsed 1 programs [ 61.155238][ T4189] cgroup: Unknown subsys name 'net' [ 61.289341][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.855441][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.321830][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.342532][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.361925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.379181][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.388013][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.406662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.960651][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 66.026146][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.034325][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.042613][ T4246] device bridge_slave_0 entered promiscuous mode [ 66.052670][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.060292][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.069065][ T4246] device bridge_slave_1 entered promiscuous mode [ 66.102215][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.115587][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.150998][ T4246] team0: Port device team_slave_0 added [ 66.159347][ T4246] team0: Port device team_slave_1 added [ 66.179899][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.187098][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.214153][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.227861][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.235579][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.262112][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.295657][ T4246] device hsr_slave_0 entered promiscuous mode [ 66.303183][ T4246] device hsr_slave_1 entered promiscuous mode [ 66.433585][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.445116][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.454446][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.465123][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.527481][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.538438][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.551207][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.558508][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.644569][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.659752][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.681940][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.691890][ T4237] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.702432][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.737618][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.751775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.760541][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.767686][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.785171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.794932][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.802404][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.816819][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.826354][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.837514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.849745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.862128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.872689][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.962773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.971614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.986367][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.002005][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.011336][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.030072][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.039701][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.049347][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.057279][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.088278][ T4246] device veth0_vlan entered promiscuous mode [ 67.099299][ T4246] device veth1_vlan entered promiscuous mode [ 67.134921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.143481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.151555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.160809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.171622][ T4246] device veth0_macvtap entered promiscuous mode [ 67.184383][ T4246] device veth1_macvtap entered promiscuous mode [ 67.216128][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.224213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.232275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.241132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.250072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.262577][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.270707][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.280197][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.312563][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.322574][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.331997][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.341238][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.448007][ T4246] syz-executor (4246) used greatest stack depth: 20512 bytes left 2025/11/30 23:10:18 executed programs: 0 [ 68.919837][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 68.979488][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.986956][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.995218][ T4297] device bridge_slave_0 entered promiscuous mode [ 69.005961][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.013461][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.021735][ T4297] device bridge_slave_1 entered promiscuous mode [ 69.049605][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.061559][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.092766][ T4297] team0: Port device team_slave_0 added [ 69.101701][ T4297] team0: Port device team_slave_1 added [ 69.126429][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.133547][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.160392][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.174135][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.181290][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.207813][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.247011][ T4297] device hsr_slave_0 entered promiscuous mode [ 69.256452][ T4297] device hsr_slave_1 entered promiscuous mode [ 69.263714][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.271478][ T4297] Cannot create hsr debugfs directory [ 69.360764][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.823854][ T4313] Bluetooth: hci0: command 0x0409 tx timeout [ 71.467584][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.474537][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.740311][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.817520][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.895610][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.906910][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 73.051697][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.061234][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.070416][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.080758][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.147331][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.177851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.187727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.198403][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.220124][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.229855][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.239148][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.246275][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.254939][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.276897][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.286057][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.295961][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.303609][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.325416][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.334669][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.344491][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.353855][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.362465][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.371952][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.382090][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.391424][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.400347][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.417200][ T436] device hsr_slave_0 left promiscuous mode [ 73.423748][ T436] device hsr_slave_1 left promiscuous mode [ 73.430474][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.438432][ T436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.446928][ T436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.455595][ T436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.463988][ T436] device bridge_slave_1 left promiscuous mode [ 73.471090][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.485226][ T436] device bridge_slave_0 left promiscuous mode [ 73.491618][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.508601][ T436] device veth1_macvtap left promiscuous mode [ 73.515564][ T436] device veth0_macvtap left promiscuous mode [ 73.522236][ T436] device veth1_vlan left promiscuous mode [ 73.529760][ T436] device veth0_vlan left promiscuous mode [ 73.677310][ T436] team0 (unregistering): Port device team_slave_1 removed [ 73.690462][ T436] team0 (unregistering): Port device team_slave_0 removed [ 73.707037][ T436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.721690][ T436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.772788][ T436] bond0 (unregistering): Released all slaves [ 73.836331][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.845255][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.855348][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.975369][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.984176][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.998034][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.032186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.041785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.055826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.064568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.073457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.081701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.092184][ T4297] device veth0_vlan entered promiscuous mode [ 74.107871][ T4297] device veth1_vlan entered promiscuous mode [ 74.125857][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.135333][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.144372][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.153223][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.164357][ T4297] device veth0_macvtap entered promiscuous mode [ 74.174116][ T4297] device veth1_macvtap entered promiscuous mode [ 74.184923][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.193445][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.210757][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.220478][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.231250][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.244903][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.253596][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.264298][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.275027][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284037][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292838][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301860][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.386333][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.399602][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.421400][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.424768][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.438067][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.451126][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.510602][ T4325] [ 74.513029][ T4325] ====================================================== [ 74.520139][ T4325] WARNING: possible circular locking dependency detected [ 74.527254][ T4325] syzkaller #0 Not tainted [ 74.532144][ T4325] ------------------------------------------------------ [ 74.539393][ T4325] syz.0.17/4325 is trying to acquire lock: [ 74.545388][ T4325] ffff88807f048120 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 74.555176][ T4325] [ 74.555176][ T4325] but task is already holding lock: [ 74.562813][ T4325] ffffc900018c5c20 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 74.572582][ T4325] [ 74.572582][ T4325] which lock already depends on the new lock. [ 74.572582][ T4325] [ 74.583192][ T4325] [ 74.583192][ T4325] the existing dependency chain (in reverse order) is: [ 74.592307][ T4325] [ 74.592307][ T4325] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 74.600345][ T4325] _raw_spin_lock+0x2a/0x40 [ 74.605406][ T4325] __inet_hash+0xe3/0x960 [ 74.610363][ T4325] inet_csk_listen_start+0x22f/0x320 [ 74.616667][ T4325] inet_listen+0x2e1/0x590 [ 74.622216][ T4325] __sys_listen+0x19d/0x220 [ 74.627275][ T4325] __x64_sys_listen+0x56/0x60 [ 74.632590][ T4325] do_syscall_64+0x4c/0xa0 [ 74.637621][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.644293][ T4325] [ 74.644293][ T4325] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 74.652147][ T4325] __lock_acquire+0x2c33/0x7c60 [ 74.657540][ T4325] lock_acquire+0x197/0x3f0 [ 74.662660][ T4325] mptcp_diag_get_info+0x1db/0x990 [ 74.668302][ T4325] inet_sk_diag_fill+0xef6/0x1b50 [ 74.673870][ T4325] mptcp_diag_dump+0xcca/0x1290 [ 74.679539][ T4325] __inet_diag_dump+0x1f6/0x380 [ 74.684914][ T4325] inet_diag_dump_compat+0x161/0x200 [ 74.690809][ T4325] netlink_dump+0x676/0xcd0 [ 74.695917][ T4325] __netlink_dump_start+0x523/0x700 [ 74.701657][ T4325] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 74.708158][ T4325] sock_diag_rcv_msg+0x164/0x3e0 [ 74.713900][ T4325] netlink_rcv_skb+0x1e0/0x430 [ 74.719440][ T4325] sock_diag_rcv+0x26/0x40 [ 74.724395][ T4325] netlink_unicast+0x774/0x920 [ 74.729698][ T4325] netlink_sendmsg+0x8ab/0xbc0 [ 74.734980][ T4325] ____sys_sendmsg+0x5a2/0x8c0 [ 74.740347][ T4325] ___sys_sendmsg+0x1f0/0x260 [ 74.745631][ T4325] __se_sys_sendmsg+0x190/0x250 [ 74.751090][ T4325] do_syscall_64+0x4c/0xa0 [ 74.756028][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.762537][ T4325] [ 74.762537][ T4325] other info that might help us debug this: [ 74.762537][ T4325] [ 74.773224][ T4325] Possible unsafe locking scenario: [ 74.773224][ T4325] [ 74.780780][ T4325] CPU0 CPU1 [ 74.786338][ T4325] ---- ---- [ 74.791694][ T4325] lock(&h->lhash2[i].lock); [ 74.796463][ T4325] lock(sk_lock-AF_INET); [ 74.803678][ T4325] lock(&h->lhash2[i].lock); [ 74.810874][ T4325] lock(sk_lock-AF_INET); [ 74.815287][ T4325] [ 74.815287][ T4325] *** DEADLOCK *** [ 74.815287][ T4325] [ 74.823691][ T4325] 6 locks held by syz.0.17/4325: [ 74.828823][ T4325] #0: ffffffff8d242568 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 74.838238][ T4325] #1: ffffffff8d242428 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 74.848654][ T4325] #2: ffff888074b05698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 74.859475][ T4325] #3: ffffffff8d31c948 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 74.869760][ T4325] #4: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 74.879071][ T4325] #5: ffffc900018c5c20 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 74.889100][ T4325] [ 74.889100][ T4325] stack backtrace: [ 74.894984][ T4325] CPU: 0 PID: 4325 Comm: syz.0.17 Not tainted syzkaller #0 [ 74.902174][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.912485][ T4325] Call Trace: [ 74.915775][ T4325] [ 74.918875][ T4325] dump_stack_lvl+0x168/0x230 [ 74.923815][ T4325] ? load_image+0x3b0/0x3b0 [ 74.928407][ T4325] ? show_regs_print_info+0x20/0x20 [ 74.933881][ T4325] ? print_circular_bug+0x12b/0x1a0 [ 74.939208][ T4325] check_noncircular+0x274/0x310 [ 74.944560][ T4325] ? add_chain_block+0x940/0x940 [ 74.949605][ T4325] ? lockdep_lock+0xdc/0x1e0 [ 74.954219][ T4325] ? __lock_acquire+0x13ad/0x7c60 [ 74.959250][ T4325] ? mark_lock+0x94/0x320 [ 74.963588][ T4325] __lock_acquire+0x2c33/0x7c60 [ 74.968634][ T4325] ? mark_lock+0x94/0x320 [ 74.973050][ T4325] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 74.979118][ T4325] ? verify_lock_unused+0x140/0x140 [ 74.984319][ T4325] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 74.990334][ T4325] ? __local_bh_enable_ip+0xcb/0x1b0 [ 74.995641][ T4325] ? __local_bh_enable_ip+0x12a/0x1b0 [ 75.001139][ T4325] ? lockdep_hardirqs_on+0x94/0x140 [ 75.006449][ T4325] ? __local_bh_enable_ip+0x12a/0x1b0 [ 75.011828][ T4325] ? _local_bh_enable+0xa0/0xa0 [ 75.016681][ T4325] ? skb_put+0x117/0x210 [ 75.020928][ T4325] lock_acquire+0x197/0x3f0 [ 75.025431][ T4325] ? inet_sk_diag_fill+0xef6/0x1b50 [ 75.030636][ T4325] ? memcpy+0x3c/0x60 [ 75.034709][ T4325] ? nla_put+0x130/0x1e0 [ 75.039022][ T4325] ? read_lock_is_recursive+0x10/0x10 [ 75.044499][ T4325] ? sock_diag_put_meminfo+0xb1/0x100 [ 75.050030][ T4325] ? sock_diag_save_cookie+0xc0/0xc0 [ 75.055419][ T4325] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 75.062094][ T4325] ? inet_sk_diag_fill+0xef6/0x1b50 [ 75.067396][ T4325] mptcp_diag_get_info+0x1db/0x990 [ 75.072610][ T4325] ? inet_sk_diag_fill+0xef6/0x1b50 [ 75.077896][ T4325] inet_sk_diag_fill+0xef6/0x1b50 [ 75.083014][ T4325] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 75.088737][ T4325] ? do_raw_spin_lock+0x11d/0x280 [ 75.093858][ T4325] ? inet_diag_bc_sk+0x187/0x10c0 [ 75.099168][ T4325] mptcp_diag_dump+0xcca/0x1290 [ 75.104159][ T4325] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 75.110963][ T4325] __inet_diag_dump+0x1f6/0x380 [ 75.115924][ T4325] inet_diag_dump_compat+0x161/0x200 [ 75.121212][ T4325] ? inet_diag_dump_start_compat+0x20/0x20 [ 75.127194][ T4325] ? memset+0x1e/0x40 [ 75.131184][ T4325] ? __alloc_skb+0x473/0x750 [ 75.135777][ T4325] netlink_dump+0x676/0xcd0 [ 75.140290][ T4325] ? netlink_lookup+0x1d0/0x1d0 [ 75.145225][ T4325] ? __inet_diag_dump_start+0x805/0x970 [ 75.150772][ T4325] __netlink_dump_start+0x523/0x700 [ 75.155973][ T4325] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 75.161606][ T4325] ? inet_diag_unregister+0xb0/0xb0 [ 75.166970][ T4325] ? mutex_lock_io_nested+0x60/0x60 [ 75.172193][ T4325] ? __inet_diag_dump+0x380/0x380 [ 75.177225][ T4325] ? inet_diag_dump_start_compat+0x20/0x20 [ 75.183250][ T4325] ? inet_diag_dump+0x50/0x50 [ 75.188003][ T4325] ? dev_queue_xmit+0x20/0x20 [ 75.192677][ T4325] ? memcpy+0x3c/0x60 [ 75.196659][ T4325] ? sock_diag_rcv+0x17/0x40 [ 75.201359][ T4325] ? sock_diag_rcv+0x17/0x40 [ 75.206044][ T4325] ? inet_diag_unregister+0xb0/0xb0 [ 75.211251][ T4325] sock_diag_rcv_msg+0x164/0x3e0 [ 75.216314][ T4325] netlink_rcv_skb+0x1e0/0x430 [ 75.221089][ T4325] ? sock_diag_bind+0xa0/0xa0 [ 75.225765][ T4325] ? netlink_ack+0xb60/0xb60 [ 75.230354][ T4325] ? __lock_acquire+0x7c60/0x7c60 [ 75.235385][ T4325] sock_diag_rcv+0x26/0x40 [ 75.239990][ T4325] netlink_unicast+0x774/0x920 [ 75.244756][ T4325] netlink_sendmsg+0x8ab/0xbc0 [ 75.249723][ T4325] ? netlink_getsockopt+0x560/0x560 [ 75.254980][ T4325] ? aa_sock_msg_perm+0x94/0x150 [ 75.259947][ T4325] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 75.265723][ T4325] ? security_socket_sendmsg+0x7c/0xa0 [ 75.271203][ T4325] ? netlink_getsockopt+0x560/0x560 [ 75.276429][ T4325] ____sys_sendmsg+0x5a2/0x8c0 [ 75.281209][ T4325] ? memset+0x1e/0x40 [ 75.285503][ T4325] ? __sys_sendmsg_sock+0x30/0x30 [ 75.290620][ T4325] ? import_iovec+0x6f/0xa0 [ 75.295127][ T4325] ___sys_sendmsg+0x1f0/0x260 [ 75.299803][ T4325] ? __sys_sendmsg+0x250/0x250 [ 75.304666][ T4325] ? __context_tracking_exit+0x4c/0x80 [ 75.310554][ T4325] ? __fdget+0x150/0x210 [ 75.314891][ T4325] __se_sys_sendmsg+0x190/0x250 [ 75.319950][ T4325] ? __x64_sys_sendmsg+0x80/0x80 [ 75.325076][ T4325] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.331153][ T4325] ? lockdep_hardirqs_on+0x94/0x140 [ 75.336438][ T4325] do_syscall_64+0x4c/0xa0 [ 75.340856][ T4325] ? clear_bhb_loop+0x30/0x80 [ 75.345530][ T4325] ? clear_bhb_loop+0x30/0x80 [ 75.350313][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.356210][ T4325] RIP: 0033:0x7f1abe634749 [ 75.360624][ T4325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.380316][ T4325] RSP: 002b:00007ffc8472a5a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.388735][ T4325] RAX: ffffffffffffffda RBX: 00007f1abe88afa0 RCX: 00007f1abe634749 [ 75.396973][ T4325] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 75.405062][ T4325] RBP: 00007f1abe6b8f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.413058][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.421042][ T4325] R13: 00007f1abe88afa0 R14: 00007f1abe88afa0 R15: 0000000000000003 [ 75.429383][ T4325] [ 75.434008][ T4325] BUG: sleeping function called from invalid context at net/core/sock.c:3288 [ 75.443456][ T4325] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4325, name: syz.0.17 [ 75.452966][ T4325] INFO: lockdep is turned off. [ 75.458108][ T4325] Preemption disabled at: [ 75.458120][ T4325] [<0000000000000000>] 0x0 [ 75.467048][ T4325] CPU: 0 PID: 4325 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.474366][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.484877][ T4325] Call Trace: [ 75.488153][ T4325] [ 75.491265][ T4325] dump_stack_lvl+0x168/0x230 [ 75.496045][ T4325] ? show_regs_print_info+0x20/0x20 [ 75.501238][ T4325] ? load_image+0x3b0/0x3b0 [ 75.505738][ T4325] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.511993][ T4325] ___might_sleep+0x47c/0x600 [ 75.516940][ T4325] ? __might_sleep+0xf0/0xf0 [ 75.521644][ T4325] ? nla_put+0x130/0x1e0 [ 75.526003][ T4325] ? read_lock_is_recursive+0x10/0x10 [ 75.531580][ T4325] ? sock_diag_put_meminfo+0xb1/0x100 [ 75.537134][ T4325] ? sock_diag_save_cookie+0xc0/0xc0 [ 75.542523][ T4325] __lock_sock_fast+0x2f/0xe0 [ 75.547194][ T4325] ? inet_sk_diag_fill+0xef6/0x1b50 [ 75.552500][ T4325] mptcp_diag_get_info+0x1e7/0x990 [ 75.557619][ T4325] inet_sk_diag_fill+0xef6/0x1b50 [ 75.562963][ T4325] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 75.568700][ T4325] ? do_raw_spin_lock+0x11d/0x280 [ 75.573823][ T4325] ? inet_diag_bc_sk+0x187/0x10c0 [ 75.579222][ T4325] mptcp_diag_dump+0xcca/0x1290 [ 75.584162][ T4325] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 75.590749][ T4325] __inet_diag_dump+0x1f6/0x380 [ 75.595602][ T4325] inet_diag_dump_compat+0x161/0x200 [ 75.601194][ T4325] ? inet_diag_dump_start_compat+0x20/0x20 [ 75.607171][ T4325] ? memset+0x1e/0x40 [ 75.611162][ T4325] ? __alloc_skb+0x473/0x750 [ 75.615762][ T4325] netlink_dump+0x676/0xcd0 [ 75.620360][ T4325] ? netlink_lookup+0x1d0/0x1d0 [ 75.625293][ T4325] ? __inet_diag_dump_start+0x805/0x970 [ 75.631143][ T4325] __netlink_dump_start+0x523/0x700 [ 75.636347][ T4325] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 75.641989][ T4325] ? inet_diag_unregister+0xb0/0xb0 [ 75.647688][ T4325] ? mutex_lock_io_nested+0x60/0x60 [ 75.652902][ T4325] ? __inet_diag_dump+0x380/0x380 [ 75.657929][ T4325] ? inet_diag_dump_start_compat+0x20/0x20 [ 75.663810][ T4325] ? inet_diag_dump+0x50/0x50 [ 75.668489][ T4325] ? dev_queue_xmit+0x20/0x20 [ 75.673257][ T4325] ? memcpy+0x3c/0x60 [ 75.677250][ T4325] ? sock_diag_rcv+0x17/0x40 [ 75.681951][ T4325] ? sock_diag_rcv+0x17/0x40 [ 75.686532][ T4325] ? inet_diag_unregister+0xb0/0xb0 [ 75.691720][ T4325] sock_diag_rcv_msg+0x164/0x3e0 [ 75.696647][ T4325] netlink_rcv_skb+0x1e0/0x430 [ 75.701399][ T4325] ? sock_diag_bind+0xa0/0xa0 [ 75.706360][ T4325] ? netlink_ack+0xb60/0xb60 [ 75.710939][ T4325] ? __lock_acquire+0x7c60/0x7c60 [ 75.716333][ T4325] sock_diag_rcv+0x26/0x40 [ 75.720745][ T4325] netlink_unicast+0x774/0x920 [ 75.725695][ T4325] netlink_sendmsg+0x8ab/0xbc0 [ 75.730911][ T4325] ? netlink_getsockopt+0x560/0x560 [ 75.736120][ T4325] ? aa_sock_msg_perm+0x94/0x150 [ 75.741239][ T4325] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 75.746530][ T4325] ? security_socket_sendmsg+0x7c/0xa0 [ 75.752173][ T4325] ? netlink_getsockopt+0x560/0x560 [ 75.757453][ T4325] ____sys_sendmsg+0x5a2/0x8c0 [ 75.762447][ T4325] ? memset+0x1e/0x40 [ 75.766580][ T4325] ? __sys_sendmsg_sock+0x30/0x30 [ 75.771782][ T4325] ? import_iovec+0x6f/0xa0 [ 75.776582][ T4325] ___sys_sendmsg+0x1f0/0x260 [ 75.781293][ T4325] ? __sys_sendmsg+0x250/0x250 [ 75.786250][ T4325] ? __context_tracking_exit+0x4c/0x80 [ 75.791844][ T4325] ? __fdget+0x150/0x210 [ 75.796202][ T4325] __se_sys_sendmsg+0x190/0x250 [ 75.801073][ T4325] ? __x64_sys_sendmsg+0x80/0x80 [ 75.806362][ T4325] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 75.812500][ T4325] ? lockdep_hardirqs_on+0x94/0x140 [ 75.817918][ T4325] do_syscall_64+0x4c/0xa0 [ 75.822350][ T4325] ? clear_bhb_loop+0x30/0x80 [ 75.827733][ T4325] ? clear_bhb_loop+0x30/0x80 [ 75.832569][ T4325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.838496][ T4325] RIP: 0033:0x7f1abe634749 [ 75.842916][ T4325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.862612][ T4325] RSP: 002b:00007ffc8472a5a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.871128][ T4325] RAX: ffffffffffffffda RBX: 00007f1abe88afa0 RCX: 00007f1abe634749 [ 75.879300][ T4325] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 75.887709][ T4325] RBP: 00007f1abe6b8f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.896155][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.904633][ T4325] R13: 00007f1abe88afa0 R14: 00007f1abe88afa0 R15: 0000000000000003 [ 75.912774][ T4325] [ 75.916764][ T4313] Bluetooth: hci0: command 0x040f tx timeout