Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. [ 81.776303][ T127] cfg80211: failed to load regulatory.db 2025/12/02 03:16:40 parsed 1 programs [ 84.453374][ T4279] cgroup: Unknown subsys name 'net' [ 84.600248][ T4279] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.124820][ T4279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 87.539922][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.548899][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.557022][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.565355][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.573080][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.580902][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.605322][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 88.715590][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.723103][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.731771][ T4308] device bridge_slave_0 entered promiscuous mode [ 88.746093][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.753883][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.762188][ T4308] device bridge_slave_1 entered promiscuous mode [ 88.784463][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.795894][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.819442][ T4308] team0: Port device team_slave_0 added [ 88.827290][ T4308] team0: Port device team_slave_1 added [ 88.845552][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.852723][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.878971][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.891706][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.898899][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.925917][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.957640][ T4308] device hsr_slave_0 entered promiscuous mode [ 88.964867][ T4308] device hsr_slave_1 entered promiscuous mode [ 89.087396][ T4308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.098608][ T4308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.108827][ T4308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.130158][ T4308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.158117][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.166095][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.174041][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.181353][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.233751][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.248572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.258957][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.267900][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.277453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 89.300287][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.313100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.322054][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.329792][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.355470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.364316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.371769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.399118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.409238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.419664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.428132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.449476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.460716][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.687464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.699053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.715546][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.736973][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.746597][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.767008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.776224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.785126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.793651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.806526][ T4308] device veth0_vlan entered promiscuous mode [ 89.818859][ T4308] device veth1_vlan entered promiscuous mode [ 89.839664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.848565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.857587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.867328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.878318][ T4308] device veth0_macvtap entered promiscuous mode [ 89.889195][ T4308] device veth1_macvtap entered promiscuous mode [ 89.905052][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.913028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.922622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.932190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.941873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.955529][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.963547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.973118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.985225][ T4308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.995249][ T4308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.004072][ T4308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.013405][ T4308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.151727][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.139359][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.165662][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.177970][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.192157][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.200351][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.209326][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/02 03:16:49 executed programs: 0 [ 92.141958][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.152207][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.161388][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.170143][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.180378][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.187854][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.307588][ T4368] chnl_net:caif_netlink_parms(): no params data found [ 92.352181][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.360021][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.368340][ T4368] device bridge_slave_0 entered promiscuous mode [ 92.377150][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.384284][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.392683][ T4368] device bridge_slave_1 entered promiscuous mode [ 92.413906][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.425740][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.449053][ T4368] team0: Port device team_slave_0 added [ 92.459423][ T4368] team0: Port device team_slave_1 added [ 92.482576][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.502559][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.510031][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.536535][ T4368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.548828][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.556298][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.583432][ T4368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.614806][ T4368] device hsr_slave_0 entered promiscuous mode [ 92.621902][ T4368] device hsr_slave_1 entered promiscuous mode [ 92.628997][ T4368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.637035][ T4368] Cannot create hsr debugfs directory [ 94.255252][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 94.867528][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.927338][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.782901][ T4368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.793331][ T4368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.808436][ T4368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.835435][ T4368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.881987][ T11] device hsr_slave_0 left promiscuous mode [ 95.892174][ T11] device hsr_slave_1 left promiscuous mode [ 95.900391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.910706][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.921134][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.931621][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.949518][ T11] device bridge_slave_1 left promiscuous mode [ 95.957554][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.969540][ T11] device bridge_slave_0 left promiscuous mode [ 95.977646][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.996079][ T11] device veth1_macvtap left promiscuous mode [ 96.002496][ T11] device veth0_macvtap left promiscuous mode [ 96.009567][ T11] device veth1_vlan left promiscuous mode [ 96.016136][ T11] device veth0_vlan left promiscuous mode [ 96.348612][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 96.358078][ T11] team0 (unregistering): Port device team_slave_1 removed [ 96.392150][ T11] team0 (unregistering): Port device team_slave_0 removed [ 96.422361][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.454093][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.748799][ T11] bond0 (unregistering): Released all slaves [ 96.871820][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.889564][ T4368] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.897594][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.907356][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.919896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.929375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.938979][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.946781][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.956289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.967590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.980920][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.989588][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.996792][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.010170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.029896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.043617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.052846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.062140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.073130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.082566][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.100304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.114331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.127933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.139549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.151219][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.367477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.383870][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.418905][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.453882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.463410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.484055][ T4368] device veth0_vlan entered promiscuous mode [ 97.492779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.501422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.518059][ T4368] device veth1_vlan entered promiscuous mode [ 97.534168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.543129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.558244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.567068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.597787][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.607971][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.622053][ T4368] device veth0_macvtap entered promiscuous mode [ 97.632467][ T4368] device veth1_macvtap entered promiscuous mode [ 97.649148][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.658370][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.667668][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.676449][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.686559][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.700994][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.712129][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.721251][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.732437][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.742963][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.752180][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761845][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.819067][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.845940][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.847853][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.856110][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.869672][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.881653][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.930523][ C1] [ 97.930532][ C1] ================================ [ 97.930536][ C1] WARNING: inconsistent lock state [ 97.930541][ C1] syzkaller #0 Not tainted [ 97.930549][ C1] -------------------------------- [ 97.930553][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 97.930561][ C1] syz.0.17/4426 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 97.930578][ C1] ffff888078b3f820 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 97.930629][ C1] {INITIAL USE} state was registered at: [ 97.930635][ C1] lock_acquire+0x1b4/0x490 [ 97.930654][ C1] _raw_spin_lock+0x2a/0x40 [ 97.930673][ C1] htab_lock_bucket+0x17d/0x300 [ 97.930686][ C1] htab_lru_map_delete_elem+0x1ad/0x760 [ 97.930701][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 97.930717][ C1] bpf_overflow_handler+0x525/0x7b0 [ 97.930731][ C1] __perf_event_overflow+0x448/0x610 [ 97.930750][ C1] perf_swevent_event+0x4ad/0x530 [ 97.930767][ C1] perf_bp_event+0x23a/0x2a0 [ 97.930786][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 97.930816][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 97.930830][ C1] notify_die+0x12d/0x180 [ 97.930843][ C1] notify_debug+0x20/0x30 [ 97.930859][ C1] noist_exc_debug+0x73/0x120 [ 97.930875][ C1] asm_exc_debug+0x2f/0x40 [ 97.930887][ C1] irq event stamp: 2248 [ 97.930892][ C1] hardirqs last enabled at (2247): [] exc_debug+0xf0/0x130 [ 97.930913][ C1] hardirqs last disabled at (2248): [] exc_debug+0x6e/0x130 [ 97.930933][ C1] softirqs last enabled at (1894): [] bpf_prog_load+0x117f/0x15a0 [ 97.930954][ C1] softirqs last disabled at (1892): [] bpf_ksym_add+0x29/0x340 [ 97.930977][ C1] [ 97.930977][ C1] other info that might help us debug this: [ 97.930982][ C1] Possible unsafe locking scenario: [ 97.930982][ C1] [ 97.930986][ C1] CPU0 [ 97.930988][ C1] ---- [ 97.930991][ C1] lock(&htab->lockdep_key); [ 97.931002][ C1] [ 97.931005][ C1] lock(&htab->lockdep_key); [ 97.931015][ C1] [ 97.931015][ C1] *** DEADLOCK *** [ 97.931015][ C1] [ 97.931018][ C1] no locks held by syz.0.17/4426. [ 97.931024][ C1] [ 97.931024][ C1] stack backtrace: [ 97.931029][ C1] CPU: 1 PID: 4426 Comm: syz.0.17 Not tainted syzkaller #0 [ 97.931042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.931049][ C1] Call Trace: [ 97.931054][ C1] <#DB> [ 97.931059][ C1] dump_stack_lvl+0x168/0x22e [ 97.931078][ C1] ? show_regs_print_info+0x12/0x12 [ 97.931098][ C1] ? print_usage_bug+0x42a/0x690 [ 97.931117][ C1] ? verify_lock_unused+0x18/0x140 [ 97.931136][ C1] lock_acquire+0x2ce/0x490 [ 97.931155][ C1] ? htab_lock_bucket+0x17d/0x300 [ 97.931171][ C1] ? read_lock_is_recursive+0x10/0x10 [ 97.931194][ C1] _raw_spin_lock+0x2a/0x40 [ 97.931214][ C1] ? htab_lock_bucket+0x17d/0x300 [ 97.931230][ C1] htab_lock_bucket+0x17d/0x300 [ 97.931244][ C1] ? htab_lru_map_delete_node+0x610/0x610 [ 97.931263][ C1] ? htab_map_hash+0x329/0x6d0 [ 97.931279][ C1] htab_lru_map_delete_elem+0x1ad/0x760 [ 97.931297][ C1] ? htab_lru_map_update_elem+0xe70/0xe70 [ 97.931315][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 97.931333][ C1] bpf_overflow_handler+0x525/0x7b0 [ 97.931349][ C1] ? bpf_overflow_handler+0xcb/0x7b0 [ 97.931363][ C1] ? perf_event_switch_output+0x680/0x680 [ 97.931380][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 97.931403][ C1] __perf_event_overflow+0x448/0x610 [ 97.931426][ C1] perf_swevent_event+0x4ad/0x530 [ 97.931448][ C1] perf_bp_event+0x23a/0x2a0 [ 97.931470][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 97.931500][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 97.931517][ C1] ? read_lock_is_recursive+0x10/0x10 [ 97.931539][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 97.931560][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 97.931576][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 97.931594][ C1] notify_die+0x12d/0x180 [ 97.931609][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 97.931631][ C1] notify_debug+0x20/0x30 [ 97.931647][ C1] exc_debug+0xd9/0x130 [ 97.931666][ C1] asm_exc_debug+0x1a/0x40 [ 97.931681][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 97.931702][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 97.931715][ C1] RSP: 0018:ffffc90003407b40 EFLAGS: 00050202 [ 97.931729][ C1] RAX: ffffffff84072901 RBX: 0000000000000078 RCX: 0000000000000036 [ 97.931740][ C1] RDX: 0000000000000078 RSI: 0000200000000302 RDI: ffffc9000256b08a [ 97.931750][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff520004ad618 [ 97.931760][ C1] R10: fffff520004ad618 R11: 1ffff920004ad609 R12: 00007fffffffef88 [ 97.931770][ C1] R13: 1ffff92000680f84 R14: ffffc9000256b048 R15: 00002000000002c0 [ 97.931784][ C1] ? _copy_from_user+0x61/0x170 [ 97.931814][ C1] [ 97.931819][ C1] [ 97.931823][ C1] _copy_from_user+0xf4/0x170 [ 97.931841][ C1] copy_from_bpfptr+0x67/0x80 [ 97.931860][ C1] bpf_prog_load+0xb4b/0x15a0 [ 97.931882][ C1] ? map_freeze+0x390/0x390 [ 97.931899][ C1] ? __might_fault+0xa6/0x120 [ 97.931917][ C1] ? __might_fault+0xa6/0x120 [ 97.931930][ C1] ? __might_fault+0xc2/0x120 [ 97.931942][ C1] ? __might_fault+0xa6/0x120 [ 97.931955][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 97.931970][ C1] ? security_bpf+0x7a/0xa0 [ 97.931993][ C1] __sys_bpf+0x520/0x6d0 [ 97.932011][ C1] ? bpf_link_show_fdinfo+0x340/0x340 [ 97.932032][ C1] ? lock_chain_count+0x20/0x20 [ 97.932052][ C1] __x64_sys_bpf+0x78/0x90 [ 97.932070][ C1] do_syscall_64+0x4c/0xa0 [ 97.932086][ C1] ? clear_bhb_loop+0x60/0xb0 [ 97.932102][ C1] ? clear_bhb_loop+0x60/0xb0 [ 97.932119][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.932134][ C1] RIP: 0033:0x7fc9a858f749 [ 97.932146][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.932158][ C1] RSP: 002b:00007ffcb4c1fc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.932174][ C1] RAX: ffffffffffffffda RBX: 00007fc9a87e5fa0 RCX: 00007fc9a858f749 [ 97.932185][ C1] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 97.932195][ C1] RBP: 00007fc9a8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.932204][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.932214][ C1] R13: 00007fc9a87e5fa0 R14: 00007fc9a87e5fa0 R15: 0000000000000003 [ 97.932230][ C1] [ 98.616388][ T48] Bluetooth: hci0: command 0x040f tx timeout