Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. 2026/05/04 16:47:53 parsed 1 programs [ 80.857403][ T4285] cgroup: Unknown subsys name 'net' [ 80.957546][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.552232][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.234266][ T4346] chnl_net:caif_netlink_parms(): no params data found [ 86.289089][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.296908][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.304992][ T4346] device bridge_slave_0 entered promiscuous mode [ 86.327282][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.334661][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.342881][ T4346] device bridge_slave_1 entered promiscuous mode [ 86.363432][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.384470][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.405796][ T4346] team0: Port device team_slave_0 added [ 86.415082][ T4346] team0: Port device team_slave_1 added [ 86.440862][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.448287][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.475569][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.488189][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.495512][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.522811][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.559346][ T4346] device hsr_slave_0 entered promiscuous mode [ 86.566441][ T4346] device hsr_slave_1 entered promiscuous mode [ 86.674057][ T4346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.684984][ T4346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.695559][ T4346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.705288][ T4346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.737918][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.745319][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.753473][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.760721][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.825564][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.839610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.855216][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.864623][ T14] cfg80211: failed to load regulatory.db [ 86.871192][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.881334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 86.899775][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.923896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.933698][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.940940][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.977993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.989458][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.996836][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.010519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.034406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.046446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.057329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.068322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.080438][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.449339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.457399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.468240][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.484639][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.494413][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.516526][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.525223][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.535078][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.543350][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.557547][ T4346] device veth0_vlan entered promiscuous mode [ 87.569769][ T4346] device veth1_vlan entered promiscuous mode [ 87.589285][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.598038][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.606257][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.615287][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.629806][ T4346] device veth0_macvtap entered promiscuous mode [ 87.640136][ T4346] device veth1_macvtap entered promiscuous mode [ 87.655889][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.664828][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.673676][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.681616][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.690964][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.705386][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.713366][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.723098][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.736918][ T4346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.747303][ T4346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.756408][ T4346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.765560][ T4346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.905327][ T4361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.913926][ T4361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.921647][ T4361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.931763][ T4361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.940419][ T4361] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.948038][ T4361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.189104][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.210796][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221674][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.231044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.252430][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.260481][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.268643][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/04 16:48:03 executed programs: 0 [ 89.271791][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.280403][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.290433][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.300630][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.309015][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.316603][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.438868][ T4383] chnl_net:caif_netlink_parms(): no params data found [ 89.484495][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.491771][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.500470][ T4383] device bridge_slave_0 entered promiscuous mode [ 89.513754][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.521055][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.529252][ T4383] device bridge_slave_1 entered promiscuous mode [ 89.548567][ T4383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.559520][ T4383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.583475][ T4383] team0: Port device team_slave_0 added [ 89.594901][ T4383] team0: Port device team_slave_1 added [ 89.611201][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.618634][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.645335][ T4383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.657547][ T4383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.665288][ T4383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.691515][ T4383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.723422][ T4383] device hsr_slave_0 entered promiscuous mode [ 89.730534][ T4383] device hsr_slave_1 entered promiscuous mode [ 89.737633][ T4383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.746061][ T4383] Cannot create hsr debugfs directory [ 90.303609][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.352860][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 92.343465][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.413929][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.254213][ T4383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.286566][ T4383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.297613][ T4383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.311659][ T4383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.422357][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 93.442276][ T11] device hsr_slave_0 left promiscuous mode [ 93.454773][ T11] device hsr_slave_1 left promiscuous mode [ 93.461776][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.469818][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.482543][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.490167][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.500818][ T11] device bridge_slave_1 left promiscuous mode [ 93.519472][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.533198][ T11] device bridge_slave_0 left promiscuous mode [ 93.539520][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.567680][ T11] device veth1_macvtap left promiscuous mode [ 93.576520][ T11] device veth0_macvtap left promiscuous mode [ 93.584097][ T11] device veth1_vlan left promiscuous mode [ 93.590228][ T11] device veth0_vlan left promiscuous mode [ 93.949927][ T11] team0 (unregistering): Port device team_slave_1 removed [ 93.984943][ T11] team0 (unregistering): Port device team_slave_0 removed [ 94.016604][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.049487][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.255907][ T11] bond0 (unregistering): Released all slaves [ 94.350792][ T4383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.363626][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.371497][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.383533][ T4383] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.395951][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.409347][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.419335][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.426698][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.439808][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.453018][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.469838][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.483540][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.490999][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.514470][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.523632][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.533649][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.550349][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.560863][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.570897][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.579476][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.587936][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.596634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.605431][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.616271][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.635783][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.816247][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.824496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.838403][ T4383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.869739][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.881717][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.903629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.913442][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.922845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.930824][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.941022][ T4383] device veth0_vlan entered promiscuous mode [ 94.955198][ T4383] device veth1_vlan entered promiscuous mode [ 94.975183][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.984240][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.993365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.002280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.013320][ T4383] device veth0_macvtap entered promiscuous mode [ 95.022771][ T4383] device veth1_macvtap entered promiscuous mode [ 95.049662][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.058537][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.078312][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.088763][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.098138][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.116705][ T4383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.126850][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.140833][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.152671][ T4383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.161653][ T4383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.170911][ T4383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.180469][ T4383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.235685][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.248212][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.256961][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.275787][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.284701][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.294113][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.345815][ C0] [ 95.345824][ C0] ================================ [ 95.345829][ C0] WARNING: inconsistent lock state [ 95.345834][ C0] syzkaller #0 Not tainted [ 95.345843][ C0] -------------------------------- [ 95.345847][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 95.345855][ C0] syz.0.17/4425 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 95.345873][ C0] ffff8880732f7940 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 95.345923][ C0] {INITIAL USE} state was registered at: [ 95.345929][ C0] lock_acquire+0x1bb/0x4a0 [ 95.345952][ C0] _raw_spin_lock+0x2a/0x40 [ 95.345969][ C0] htab_lock_bucket+0x179/0x2f0 [ 95.345985][ C0] htab_map_delete_elem+0x19e/0x5b0 [ 95.346001][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 95.346017][ C0] bpf_overflow_handler+0x522/0x7c0 [ 95.346035][ C0] __perf_event_overflow+0x448/0x610 [ 95.346056][ C0] perf_swevent_event+0x315/0x570 [ 95.346076][ C0] perf_bp_event+0x312/0x3f0 [ 95.346095][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 95.346115][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 95.346132][ C0] notify_die+0x141/0x1a0 [ 95.346147][ C0] notify_debug+0x20/0x30 [ 95.346165][ C0] noist_exc_debug+0x73/0x120 [ 95.346178][ C0] asm_exc_debug+0x2f/0x40 [ 95.346196][ C0] irq event stamp: 1992 [ 95.346201][ C0] hardirqs last enabled at (1991): [] do_syscall_64+0x58/0xa0 [ 95.346226][ C0] hardirqs last disabled at (1992): [] noist_exc_debug+0x49/0x120 [ 95.346243][ C0] softirqs last enabled at (1934): [] bpf_prog_load+0x1127/0x1560 [ 95.346266][ C0] softirqs last disabled at (1932): [] bpf_ksym_add+0x29/0x340 [ 95.346283][ C0] [ 95.346283][ C0] other info that might help us debug this: [ 95.346288][ C0] Possible unsafe locking scenario: [ 95.346288][ C0] [ 95.346298][ C0] CPU0 [ 95.346301][ C0] ---- [ 95.346303][ C0] lock(&htab->lockdep_key); [ 95.346314][ C0] [ 95.346316][ C0] lock(&htab->lockdep_key); [ 95.346326][ C0] [ 95.346326][ C0] *** DEADLOCK *** [ 95.346326][ C0] [ 95.346329][ C0] 2 locks held by syz.0.17/4425: [ 95.346338][ C0] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x2c/0x2b0 [ 95.346381][ C0] #1: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 95.346427][ C0] [ 95.346427][ C0] stack backtrace: [ 95.346432][ C0] CPU: 0 PID: 4425 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.346448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.346456][ C0] Call Trace: [ 95.346469][ C0] <#DB> [ 95.346475][ C0] dump_stack_lvl+0x188/0x24e [ 95.346499][ C0] ? show_regs_print_info+0x12/0x12 [ 95.346525][ C0] ? print_usage_bug+0x42a/0x690 [ 95.346546][ C0] ? verify_lock_unused+0x18/0x140 [ 95.346569][ C0] lock_acquire+0x2df/0x4a0 [ 95.346592][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 95.346610][ C0] ? read_lock_is_recursive+0x10/0x10 [ 95.346632][ C0] _raw_spin_lock+0x2a/0x40 [ 95.346648][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 95.346665][ C0] htab_lock_bucket+0x179/0x2f0 [ 95.346683][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 95.346702][ C0] ? look_up_lock_class+0x75/0x140 [ 95.346719][ C0] ? verify_lock_unused+0x18/0x140 [ 95.346740][ C0] ? htab_map_hash+0x329/0x6d0 [ 95.346758][ C0] htab_map_delete_elem+0x19e/0x5b0 [ 95.346776][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 95.346794][ C0] ? htab_map_update_elem+0xb00/0xb00 [ 95.346815][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 95.346833][ C0] bpf_overflow_handler+0x522/0x7c0 [ 95.346853][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 95.346871][ C0] ? perf_swevent_overflow+0x230/0x230 [ 95.346893][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 95.346918][ C0] __perf_event_overflow+0x448/0x610 [ 95.346944][ C0] perf_swevent_event+0x315/0x570 [ 95.346968][ C0] ? perf_tp_event+0xc30/0xc30 [ 95.346995][ C0] perf_bp_event+0x312/0x3f0 [ 95.347020][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 95.347054][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 95.347073][ C0] ? read_lock_is_recursive+0x10/0x10 [ 95.347097][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 95.347121][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 95.347139][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 95.347160][ C0] notify_die+0x141/0x1a0 [ 95.347179][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 95.347203][ C0] notify_debug+0x20/0x30 [ 95.347220][ C0] exc_debug+0xd9/0x130 [ 95.347237][ C0] asm_exc_debug+0x1a/0x40 [ 95.347255][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 95.347281][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 95.347294][ C0] RSP: 0000:ffffc90003407560 EFLAGS: 00040802 [ 95.347309][ C0] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff8880733cbb80 [ 95.347322][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 95.347333][ C0] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 95.347344][ C0] R10: ffffffff8fa0e010 R11: ffffffff8fa0e003 R12: 00000000ffffffff [ 95.347355][ C0] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0 [ 95.347373][ C0] [ 95.347378][ C0] [ 95.347383][ C0] perf_callchain_user+0x55d/0x13c0 [ 95.347412][ C0] get_perf_callchain+0x39e/0x490 [ 95.347436][ C0] ? put_callchain_entry+0xb0/0xb0 [ 95.347468][ C0] ? __perf_event_header__init_id+0x42c/0x530 [ 95.347493][ C0] perf_prepare_sample+0x399/0x2020 [ 95.347519][ C0] ? read_lock_is_recursive+0x10/0x10 [ 95.347541][ C0] ? perf_callchain+0x190/0x190 [ 95.347561][ C0] ? mark_lock+0x94/0x320 [ 95.347583][ C0] ? verify_lock_unused+0x140/0x140 [ 95.347607][ C0] perf_event_output_forward+0x197/0x2f0 [ 95.347631][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 95.347653][ C0] ? perf_get_page_size+0x430/0x430 [ 95.347681][ C0] bpf_overflow_handler+0x60f/0x7c0 [ 95.347699][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 95.347717][ C0] ? perf_swevent_overflow+0x230/0x230 [ 95.347738][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 95.347762][ C0] __perf_event_overflow+0x448/0x610 [ 95.347787][ C0] perf_swevent_event+0x315/0x570 [ 95.347810][ C0] ? perf_tp_event+0xc30/0xc30 [ 95.347836][ C0] perf_bp_event+0x312/0x3f0 [ 95.347858][ C0] ? verify_lock_unused+0x140/0x140 [ 95.347881][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 95.347904][ C0] ? __fdget+0x146/0x200 [ 95.347939][ C0] ? read_lock_is_recursive+0x10/0x10 [ 95.347961][ C0] ? do_futex+0x2e2/0x320 [ 95.347978][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 95.348002][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 95.348020][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 95.348039][ C0] notify_die+0x141/0x1a0 [ 95.348057][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 95.348078][ C0] ? rcu_is_watching+0x11/0xa0 [ 95.348101][ C0] notify_debug+0x20/0x30 [ 95.348119][ C0] noist_exc_debug+0x73/0x120 [ 95.348134][ C0] ? clear_bhb_loop+0x60/0xb0 [ 95.348153][ C0] asm_exc_debug+0x2f/0x40 [ 95.348171][ C0] RIP: 0033:0x7ff1ebf7bb7d [ 95.348184][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 95.348197][ C0] RSP: 002b:00007ffc5e3a56f8 EFLAGS: 00000283 [ 95.348210][ C0] RAX: 0000000000000300 RBX: 00007ffc5e3a5c30 RCX: 2f666c65732f636f [ 95.348220][ C0] RDX: 0000200000000300 RSI: 00007ff1ec05d0c0 RDI: 0000200000000300 [ 95.348231][ C0] RBP: 0000200000000300 R08: 00007ffc5e3a5e60 R09: 00000000ffffffff [ 95.348242][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 95.348251][ C0] R13: 0000000000000073 R14: 00007ff1ec032033 R15: 00007ffc5e3a5cf0 [ 95.348268][ C0] [ 96.146674][ T47] Bluetooth: hci0: command 0x040f tx timeout