Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts.
2026/03/12 05:10:03 parsed 1 programs
syzkaller login: [ 61.314822][ T4189] cgroup: Unknown subsys name 'net'
[ 61.481628][ T4189] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 63.064325][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 64.750180][ T4206] chnl_net:caif_netlink_parms(): no params data found
[ 64.797704][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.805283][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.813446][ T4206] device bridge_slave_0 entered promiscuous mode
[ 64.826550][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.833811][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.842388][ T4206] device bridge_slave_1 entered promiscuous mode
[ 64.865391][ T4206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 64.877123][ T4206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 64.898410][ T4206] team0: Port device team_slave_0 added
[ 64.907138][ T4206] team0: Port device team_slave_1 added
[ 64.934690][ T4206] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 64.942443][ T4206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 64.969817][ T4206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 64.985258][ T4206] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 64.992708][ T4206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 65.020020][ T4206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.051752][ T4206] device hsr_slave_0 entered promiscuous mode
[ 65.058716][ T4206] device hsr_slave_1 entered promiscuous mode
[ 65.169132][ T4206] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 65.182106][ T4206] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 65.195212][ T4206] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 65.207713][ T4206] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 65.239629][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.247282][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 65.255345][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.262700][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 65.331869][ T4206] 8021q: adding VLAN 0 to HW filter on device bond0
[ 65.349150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 65.361446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.371651][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.380480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 65.395387][ T4206] 8021q: adding VLAN 0 to HW filter on device team0
[ 65.410017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 65.419232][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.426413][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 65.448143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 65.457839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.464935][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 65.487675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 65.499427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 65.518370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 65.527317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 65.537949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 65.550748][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 65.699439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 65.708046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 65.732853][ T4206] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.753478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 65.765275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 65.791330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 65.801354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 65.823916][ T4206] device veth0_vlan entered promiscuous mode
[ 65.832808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 65.841485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 65.857481][ T4206] device veth1_vlan entered promiscuous mode
[ 65.882563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 65.894141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 65.904856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 65.915626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 65.927242][ T4206] device veth0_macvtap entered promiscuous mode
[ 65.940808][ T4206] device veth1_macvtap entered promiscuous mode
[ 65.960169][ T4206] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.971089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 65.981624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 65.991395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 66.000326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 66.015960][ T4206] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.023761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 66.034441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 66.057948][ T4206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.067025][ T4206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.076351][ T4206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.085063][ T4206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.230129][ T4206] syz-executor (4206) used greatest stack depth: 20056 bytes left
[ 66.563299][ T162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.582588][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.592895][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.608042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 66.625623][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.633918][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.643164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 68.936358][ T162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.290869][ T162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.333799][ T162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.560221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.567622][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.376558][ T162] device hsr_slave_0 left promiscuous mode
[ 72.384930][ T162] device hsr_slave_1 left promiscuous mode
[ 72.392690][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 72.416326][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 72.427282][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 72.434720][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 72.450928][ T162] device bridge_slave_1 left promiscuous mode
[ 72.458186][ T162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.474152][ T162] device bridge_slave_0 left promiscuous mode
[ 72.483697][ T162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.509726][ T162] device veth1_macvtap left promiscuous mode
[ 72.522240][ T162] device veth0_macvtap left promiscuous mode
[ 72.529337][ T162] device veth1_vlan left promiscuous mode
[ 72.536200][ T162] device veth0_vlan left promiscuous mode
[ 72.764158][ T162] team0 (unregistering): Port device team_slave_1 removed
[ 72.777538][ T162] team0 (unregistering): Port device team_slave_0 removed
[ 72.791380][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 72.804882][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 72.857776][ T162] bond0 (unregistering): Released all slaves
2026/03/12 05:10:17 executed programs: 0
[ 73.858366][ T4341] chnl_net:caif_netlink_parms(): no params data found
[ 73.960602][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.968032][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.976454][ T4341] device bridge_slave_0 entered promiscuous mode
[ 73.985916][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.993180][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.002165][ T4341] device bridge_slave_1 entered promiscuous mode
[ 74.033310][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.047316][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.077329][ T4341] team0: Port device team_slave_0 added
[ 74.086291][ T4341] team0: Port device team_slave_1 added
[ 74.110837][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.118210][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.146030][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.158733][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.168093][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.194909][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.237528][ T4341] device hsr_slave_0 entered promiscuous mode
[ 74.244611][ T4341] device hsr_slave_1 entered promiscuous mode
[ 74.857107][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.867208][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.886256][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.908692][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.959059][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.966629][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.974073][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.981402][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.996923][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.005080][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.061947][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.079715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 75.090585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.102320][ T4341] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.116575][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 75.125608][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.152819][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.159987][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.168746][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 75.177866][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.186974][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.194128][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.204237][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 75.225932][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 75.246480][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 75.267169][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.286662][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.312831][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 75.325083][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.339124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 75.357841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.378959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 75.391790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.400681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 75.409472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.428964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.596250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.604771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.619368][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.648690][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 75.659758][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.695842][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 75.704926][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.714119][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.722865][ T4202] Bluetooth: hci0: command 0x0409 tx timeout
[ 75.723453][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.749763][ T4341] device veth0_vlan entered promiscuous mode
[ 75.771464][ T4341] device veth1_vlan entered promiscuous mode
[ 75.807316][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.815419][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.833274][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.845085][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.863840][ T4341] device veth0_macvtap entered promiscuous mode
[ 75.881196][ T4341] device veth1_macvtap entered promiscuous mode
[ 75.912253][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.922321][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.934518][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.943228][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.952604][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.967691][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.976334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.985296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.999230][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.008939][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.018778][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.027821][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.156395][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.164258][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.174752][ T3035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.202223][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.212613][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.223431][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 76.300825][ T4435]
[ 76.303204][ T4435] ======================================================
[ 76.310240][ T4435] WARNING: possible circular locking dependency detected
[ 76.317365][ T4435] syzkaller #0 Not tainted
[ 76.321897][ T4435] ------------------------------------------------------
[ 76.329022][ T4435] syz.0.17/4435 is trying to acquire lock:
[ 76.334860][ T4435] ffff88807b5c0120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.344817][ T4435]
[ 76.344817][ T4435] but task is already holding lock:
[ 76.352375][ T4435] ffffc900018317b8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0
[ 76.362066][ T4435]
[ 76.362066][ T4435] which lock already depends on the new lock.
[ 76.362066][ T4435]
[ 76.372602][ T4435]
[ 76.372602][ T4435] the existing dependency chain (in reverse order) is:
[ 76.381727][ T4435]
[ 76.381727][ T4435] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}:
[ 76.389744][ T4435] _raw_spin_lock+0x2a/0x40
[ 76.394797][ T4435] __inet_hash+0xe3/0x960
[ 76.399828][ T4435] inet_csk_listen_start+0x22f/0x320
[ 76.405696][ T4435] inet_listen+0x2e1/0x590
[ 76.410780][ T4435] __sys_listen+0x19d/0x220
[ 76.416103][ T4435] __x64_sys_listen+0x56/0x60
[ 76.421516][ T4435] do_syscall_64+0x4c/0xa0
[ 76.426586][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 76.433120][ T4435]
[ 76.433120][ T4435] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 76.441196][ T4435] __lock_acquire+0x2c42/0x7d10
[ 76.447260][ T4435] lock_acquire+0x19e/0x400
[ 76.452420][ T4435] mptcp_diag_get_info+0x1f2/0x9e0
[ 76.458089][ T4435] inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.463674][ T4435] mptcp_diag_dump+0xce6/0x12b0
[ 76.469345][ T4435] __inet_diag_dump+0x1f6/0x380
[ 76.474959][ T4435] netlink_dump+0x694/0xcf0
[ 76.480010][ T4435] __netlink_dump_start+0x523/0x700
[ 76.485753][ T4435] inet_diag_handler_cmd+0x1d3/0x2b0
[ 76.491591][ T4435] sock_diag_rcv_msg+0x164/0x3e0
[ 76.497083][ T4435] netlink_rcv_skb+0x1f5/0x440
[ 76.502616][ T4435] sock_diag_rcv+0x26/0x40
[ 76.507594][ T4435] netlink_unicast+0x774/0x920
[ 76.513174][ T4435] netlink_sendmsg+0x8ba/0xbe0
[ 76.518490][ T4435] sock_write_iter+0x2a6/0x3a0
[ 76.523813][ T4435] do_iter_readv_writev+0x47e/0x5f0
[ 76.529655][ T4435] do_iter_write+0x205/0x7b0
[ 76.534802][ T4435] do_writev+0x281/0x480
[ 76.539592][ T4435] do_syscall_64+0x4c/0xa0
[ 76.544565][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 76.551021][ T4435]
[ 76.551021][ T4435] other info that might help us debug this:
[ 76.551021][ T4435]
[ 76.561266][ T4435] Possible unsafe locking scenario:
[ 76.561266][ T4435]
[ 76.568829][ T4435] CPU0 CPU1
[ 76.574219][ T4435] ---- ----
[ 76.579618][ T4435] lock(&h->lhash2[i].lock);
[ 76.584326][ T4435] lock(sk_lock-AF_INET6);
[ 76.591466][ T4435] lock(&h->lhash2[i].lock);
[ 76.598936][ T4435] lock(sk_lock-AF_INET6);
[ 76.603491][ T4435]
[ 76.603491][ T4435] *** DEADLOCK ***
[ 76.603491][ T4435]
[ 76.611750][ T4435] 6 locks held by syz.0.17/4435:
[ 76.616729][ T4435] #0: ffffffff8d4466e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40
[ 76.626427][ T4435] #1: ffffffff8d4465a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0
[ 76.637061][ T4435] #2: ffff8880732c3698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700
[ 76.648018][ T4435] #3: ffffffff8d520588 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380
[ 76.658427][ T4435] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[ 76.667779][ T4435] #5: ffffc900018317b8 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0
[ 76.677836][ T4435]
[ 76.677836][ T4435] stack backtrace:
[ 76.683831][ T4435] CPU: 1 PID: 4435 Comm: syz.0.17 Not tainted syzkaller #0
[ 76.691155][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 76.701496][ T4435] Call Trace:
[ 76.704974][ T4435]
[ 76.708110][ T4435] dump_stack_lvl+0x188/0x250
[ 76.713079][ T4435] ? load_image+0x400/0x400
[ 76.717717][ T4435] ? show_regs_print_info+0x20/0x20
[ 76.723034][ T4435] ? print_circular_bug+0x12b/0x1a0
[ 76.728266][ T4435] check_noncircular+0x296/0x330
[ 76.733239][ T4435] ? add_chain_block+0x940/0x940
[ 76.738307][ T4435] ? lockdep_lock+0xf1/0x1f0
[ 76.743018][ T4435] ? mark_lock+0x94/0x320
[ 76.747388][ T4435] __lock_acquire+0x2c42/0x7d10
[ 76.752301][ T4435] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 76.758495][ T4435] ? verify_lock_unused+0x140/0x140
[ 76.763727][ T4435] ? lockdep_hardirqs_on_prepare+0x770/0x770
[ 76.769854][ T4435] ? verify_lock_unused+0x140/0x140
[ 76.775371][ T4435] ? __local_bh_enable_ip+0xd7/0x1c0
[ 76.780695][ T4435] ? __local_bh_enable_ip+0x136/0x1c0
[ 76.786269][ T4435] ? lockdep_hardirqs_on+0x94/0x140
[ 76.791598][ T4435] ? __local_bh_enable_ip+0x136/0x1c0
[ 76.797003][ T4435] ? _local_bh_enable+0xa0/0xa0
[ 76.801880][ T4435] ? nla_put+0x130/0x1e0
[ 76.806156][ T4435] lock_acquire+0x19e/0x400
[ 76.810779][ T4435] ? inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.816019][ T4435] ? read_lock_is_recursive+0x10/0x10
[ 76.821419][ T4435] ? rcu_lock_release+0x5/0x20
[ 76.826213][ T4435] ? __lock_acquire+0x7d10/0x7d10
[ 76.831270][ T4435] ? inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.836497][ T4435] mptcp_diag_get_info+0x1f2/0x9e0
[ 76.841696][ T4435] ? inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.846930][ T4435] inet_sk_diag_fill+0xf5e/0x1ca0
[ 76.851991][ T4435] ? inet_diag_msg_attrs_fill+0x930/0x930
[ 76.857743][ T4435] ? do_raw_spin_lock+0x128/0x2f0
[ 76.862889][ T4435] ? __rwlock_init+0x140/0x140
[ 76.867676][ T4435] ? inet_diag_bc_sk+0x18b/0x1120
[ 76.872755][ T4435] mptcp_diag_dump+0xce6/0x12b0
[ 76.877646][ T4435] ? mptcp_token_join_cookie_init_state+0x460/0x460
[ 76.884404][ T4435] __inet_diag_dump+0x1f6/0x380
[ 76.889399][ T4435] netlink_dump+0x694/0xcf0
[ 76.893941][ T4435] ? netlink_lookup+0x1d0/0x1d0
[ 76.898864][ T4435] ? __inet_diag_dump_start+0x805/0x970
[ 76.904674][ T4435] __netlink_dump_start+0x523/0x700
[ 76.909910][ T4435] inet_diag_handler_cmd+0x1d3/0x2b0
[ 76.915428][ T4435] ? rcu_lock_release+0x20/0x20
[ 76.920331][ T4435] ? inet_diag_handler_get_info+0xb90/0xb90
[ 76.926322][ T4435] ? inet_diag_dump_start+0x20/0x20
[ 76.931780][ T4435] ? inet_diag_dump+0x50/0x50
[ 76.936470][ T4435] ? rcu_lock_release+0x20/0x20
[ 76.941502][ T4435] sock_diag_rcv_msg+0x164/0x3e0
[ 76.946458][ T4435] netlink_rcv_skb+0x1f5/0x440
[ 76.951243][ T4435] ? sock_diag_bind+0xa0/0xa0
[ 76.955914][ T4435] ? netlink_ack+0xb50/0xb50
[ 76.960506][ T4435] ? __lock_acquire+0x7d10/0x7d10
[ 76.965530][ T4435] sock_diag_rcv+0x26/0x40
[ 76.969960][ T4435] netlink_unicast+0x774/0x920
[ 76.974836][ T4435] netlink_sendmsg+0x8ba/0xbe0
[ 76.979699][ T4435] ? netlink_getsockopt+0x570/0x570
[ 76.984987][ T4435] ? aa_sock_msg_perm+0x94/0x150
[ 76.989931][ T4435] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 76.995415][ T4435] ? security_socket_sendmsg+0x7c/0xa0
[ 77.000875][ T4435] sock_write_iter+0x2a6/0x3a0
[ 77.005843][ T4435] ? sock_read_iter+0x380/0x380
[ 77.010817][ T4435] do_iter_readv_writev+0x47e/0x5f0
[ 77.016125][ T4435] ? aa_path_link+0x880/0x880
[ 77.021002][ T4435] ? generic_file_rw_checks+0x280/0x280
[ 77.026753][ T4435] ? common_file_perm+0x171/0x1c0
[ 77.031885][ T4435] ? fsnotify_perm+0x5d/0x560
[ 77.036735][ T4435] ? security_file_permission+0x75/0xa0
[ 77.042378][ T4435] do_iter_write+0x205/0x7b0
[ 77.047266][ T4435] ? import_iovec+0x6f/0xa0
[ 77.051775][ T4435] do_writev+0x281/0x480
[ 77.056144][ T4435] ? do_readv+0x460/0x460
[ 77.060489][ T4435] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 77.066586][ T4435] ? lock_chain_count+0x20/0x20
[ 77.071803][ T4435] ? vtime_user_exit+0x2c8/0x3e0
[ 77.076743][ T4435] ? lockdep_hardirqs_on+0x94/0x140
[ 77.082037][ T4435] do_syscall_64+0x4c/0xa0
[ 77.086462][ T4435] ? clear_bhb_loop+0x30/0x80
[ 77.091158][ T4435] ? clear_bhb_loop+0x30/0x80
[ 77.095943][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.102024][ T4435] RIP: 0033:0x7fe2570a9799
[ 77.106439][ T4435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.126248][ T4435] RSP: 002b:00007ffcf6ecf198 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 77.134859][ T4435] RAX: ffffffffffffffda RBX: 00007fe257322fa0 RCX: 00007fe2570a9799
[ 77.142917][ T4435] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[ 77.151191][ T4435] RBP: 00007fe25713fc99 R08: 0000000000000000 R09: 0000000000000000
[ 77.159281][ T4435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.167264][ T4435] R13: 00007fe257322fac R14: 00007fe257322fa0 R15: 00007fe257322fa0
[ 77.175765][ T4435]
[ 77.180557][ T4435] BUG: sleeping function called from invalid context at net/core/sock.c:3291
[ 77.189545][ T4435] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4435, name: syz.0.17
[ 77.198456][ T4435] INFO: lockdep is turned off.
[ 77.203233][ T4435] Preemption disabled at:
[ 77.203245][ T4435] [<0000000000000000>] 0x0
[ 77.212160][ T4435] CPU: 1 PID: 4435 Comm: syz.0.17 Not tainted syzkaller #0
[ 77.219383][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 77.229460][ T4435] Call Trace:
[ 77.233054][ T4435]
[ 77.236013][ T4435] dump_stack_lvl+0x188/0x250
[ 77.240714][ T4435] ? show_regs_print_info+0x20/0x20
[ 77.246166][ T4435] ? load_image+0x400/0x400
[ 77.250706][ T4435] ___might_sleep+0x493/0x610
[ 77.255420][ T4435] ? __might_sleep+0xf0/0xf0
[ 77.260131][ T4435] ? read_lock_is_recursive+0x10/0x10
[ 77.265566][ T4435] ? rcu_lock_release+0x5/0x20
[ 77.270367][ T4435] __lock_sock_fast+0x2f/0xe0
[ 77.275432][ T4435] ? inet_sk_diag_fill+0xf5e/0x1ca0
[ 77.280668][ T4435] mptcp_diag_get_info+0x1fe/0x9e0
[ 77.285898][ T4435] inet_sk_diag_fill+0xf5e/0x1ca0
[ 77.291406][ T4435] ? inet_diag_msg_attrs_fill+0x930/0x930
[ 77.297340][ T4435] ? do_raw_spin_lock+0x128/0x2f0
[ 77.302489][ T4435] ? __rwlock_init+0x140/0x140
[ 77.307494][ T4435] ? inet_diag_bc_sk+0x18b/0x1120
[ 77.312734][ T4435] mptcp_diag_dump+0xce6/0x12b0
[ 77.317802][ T4435] ? mptcp_token_join_cookie_init_state+0x460/0x460
[ 77.324430][ T4435] __inet_diag_dump+0x1f6/0x380
[ 77.329325][ T4435] netlink_dump+0x694/0xcf0
[ 77.334132][ T4435] ? netlink_lookup+0x1d0/0x1d0
[ 77.339141][ T4435] ? __inet_diag_dump_start+0x805/0x970
[ 77.344719][ T4435] __netlink_dump_start+0x523/0x700
[ 77.350056][ T4435] inet_diag_handler_cmd+0x1d3/0x2b0
[ 77.355518][ T4435] ? rcu_lock_release+0x20/0x20
[ 77.360651][ T4435] ? inet_diag_handler_get_info+0xb90/0xb90
[ 77.366593][ T4435] ? inet_diag_dump_start+0x20/0x20
[ 77.371916][ T4435] ? inet_diag_dump+0x50/0x50
[ 77.376724][ T4435] ? rcu_lock_release+0x20/0x20
[ 77.381789][ T4435] sock_diag_rcv_msg+0x164/0x3e0
[ 77.387026][ T4435] netlink_rcv_skb+0x1f5/0x440
[ 77.391822][ T4435] ? sock_diag_bind+0xa0/0xa0
[ 77.396531][ T4435] ? netlink_ack+0xb50/0xb50
[ 77.401258][ T4435] ? __lock_acquire+0x7d10/0x7d10
[ 77.406332][ T4435] sock_diag_rcv+0x26/0x40
[ 77.410970][ T4435] netlink_unicast+0x774/0x920
[ 77.415770][ T4435] netlink_sendmsg+0x8ba/0xbe0
[ 77.420753][ T4435] ? netlink_getsockopt+0x570/0x570
[ 77.426169][ T4435] ? aa_sock_msg_perm+0x94/0x150
[ 77.431240][ T4435] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 77.436833][ T4435] ? security_socket_sendmsg+0x7c/0xa0
[ 77.442460][ T4435] sock_write_iter+0x2a6/0x3a0
[ 77.447363][ T4435] ? sock_read_iter+0x380/0x380
[ 77.452248][ T4435] do_iter_readv_writev+0x47e/0x5f0
[ 77.457567][ T4435] ? aa_path_link+0x880/0x880
[ 77.462277][ T4435] ? generic_file_rw_checks+0x280/0x280
[ 77.467858][ T4435] ? common_file_perm+0x171/0x1c0
[ 77.473004][ T4435] ? fsnotify_perm+0x5d/0x560
[ 77.477798][ T4435] ? security_file_permission+0x75/0xa0
[ 77.483469][ T4435] do_iter_write+0x205/0x7b0
[ 77.488181][ T4435] ? import_iovec+0x6f/0xa0
[ 77.492719][ T4435] do_writev+0x281/0x480
[ 77.497025][ T4435] ? do_readv+0x460/0x460
[ 77.501394][ T4435] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 77.507610][ T4435] ? lock_chain_count+0x20/0x20
[ 77.512488][ T4435] ? vtime_user_exit+0x2c8/0x3e0
[ 77.517461][ T4435] ? lockdep_hardirqs_on+0x94/0x140
[ 77.522694][ T4435] do_syscall_64+0x4c/0xa0
[ 77.527151][ T4435] ? clear_bhb_loop+0x30/0x80
[ 77.532036][ T4435] ? clear_bhb_loop+0x30/0x80
[ 77.536959][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.542886][ T4435] RIP: 0033:0x7fe2570a9799
[ 77.547334][ T4435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.567085][ T4435] RSP: 002b:00007ffcf6ecf198 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 77.575992][ T4435] RAX: ffffffffffffffda RBX: 00007fe257322fa0 RCX: 00007fe2570a9799
[ 77.583993][ T4435] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[ 77.592145][ T4435] RBP: 00007fe25713fc99 R08: 0000000000000000 R09: 0000000000000000
[ 77.600211][ T4435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.608443][ T4435] R13: 00007fe257322fac R14: 00007fe257322fa0 R15: 00007fe257322fa0
[ 77.616771][ T4435]