Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. 2026/05/05 04:45:24 parsed 1 programs [ 84.524112][ T4282] cgroup: Unknown subsys name 'net' [ 84.632410][ T4282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.234534][ T4282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 89.241817][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.249907][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.257789][ T4324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.267672][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.275985][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.283337][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.526984][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.535034][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.552005][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.583743][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.591781][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.600065][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.002652][ T4346] chnl_net:caif_netlink_parms(): no params data found [ 90.064134][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.072053][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.080677][ T4346] device bridge_slave_0 entered promiscuous mode [ 90.090406][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.097739][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.105867][ T4346] device bridge_slave_1 entered promiscuous mode [ 90.139983][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.151680][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.184521][ T4346] team0: Port device team_slave_0 added [ 90.194787][ T4346] team0: Port device team_slave_1 added [ 90.213005][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.220153][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.246296][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.266776][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.273764][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.299928][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.339840][ T4346] device hsr_slave_0 entered promiscuous mode [ 90.346838][ T4346] device hsr_slave_1 entered promiscuous mode [ 90.469208][ T4346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.480603][ T4346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.492123][ T4346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.502440][ T4346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.587842][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.601657][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 90.616998][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.628678][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.641663][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.659872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.669027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.680544][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.687946][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.699739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.713031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.723316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.734016][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.744403][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.779050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.799482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.810334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.820270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.833949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.847287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.860001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.872832][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.078267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.086548][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.112119][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.130541][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.149744][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.158944][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.169660][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.178439][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.196534][ T4346] device veth0_vlan entered promiscuous mode [ 91.209092][ T4346] device veth1_vlan entered promiscuous mode [ 91.239525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.248791][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.257885][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.268193][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.282588][ T4346] device veth0_macvtap entered promiscuous mode [ 91.292489][ T4346] device veth1_macvtap entered promiscuous mode [ 91.309787][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.321363][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.330175][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.339404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.347775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.357748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.367641][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.376693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.393157][ T4346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.403364][ T4346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413383][ T4346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.422745][ T4346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.899408][ T14] cfg80211: failed to load regulatory.db [ 91.952032][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/05 04:45:35 executed programs: 0 [ 93.039994][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.048497][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.058370][ T4324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.067400][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.075027][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.083473][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.212205][ T4379] chnl_net:caif_netlink_parms(): no params data found [ 93.262472][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.269931][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.278581][ T4379] device bridge_slave_0 entered promiscuous mode [ 93.287644][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.294806][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.303694][ T4379] device bridge_slave_1 entered promiscuous mode [ 93.329284][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.340537][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.365965][ T4379] team0: Port device team_slave_0 added [ 93.373427][ T4379] team0: Port device team_slave_1 added [ 93.392412][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.400419][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.426649][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.439230][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.446466][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.472614][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.507056][ T4379] device hsr_slave_0 entered promiscuous mode [ 93.514100][ T4379] device hsr_slave_1 entered promiscuous mode [ 93.521641][ T4379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.529685][ T4379] Cannot create hsr debugfs directory [ 93.997088][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.156324][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 96.014696][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.079002][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.988889][ T59] device hsr_slave_0 left promiscuous mode [ 96.997971][ T59] device hsr_slave_1 left promiscuous mode [ 97.004967][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.015320][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.024276][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.034271][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.042727][ T59] device bridge_slave_1 left promiscuous mode [ 97.052348][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.064442][ T59] device bridge_slave_0 left promiscuous mode [ 97.074670][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.107843][ T59] device veth1_macvtap left promiscuous mode [ 97.114315][ T59] device veth0_macvtap left promiscuous mode [ 97.121233][ T59] device veth1_vlan left promiscuous mode [ 97.129866][ T59] device veth0_vlan left promiscuous mode [ 97.235611][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 97.544880][ T59] team0 (unregistering): Port device team_slave_1 removed [ 97.573481][ T59] team0 (unregistering): Port device team_slave_0 removed [ 97.602756][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.632990][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.825135][ T59] bond0 (unregistering): Released all slaves [ 97.910733][ T4379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.921403][ T4379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.931568][ T4379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.941306][ T4379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.019316][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.040601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.051430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.064016][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.074072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.083944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.096798][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.104625][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.113072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.137411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.147954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.156778][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.163892][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.172974][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.185370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.207270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.217250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.226830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.235887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.244441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.253769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.262722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.271816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.285162][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.308601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.546588][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.554197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.567960][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.586843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.596733][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.616029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.624595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.634163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.642755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.653310][ T4379] device veth0_vlan entered promiscuous mode [ 98.665738][ T4379] device veth1_vlan entered promiscuous mode [ 98.698187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.706702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.714875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.724697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.735854][ T4379] device veth0_macvtap entered promiscuous mode [ 98.759030][ T4379] device veth1_macvtap entered promiscuous mode [ 98.777527][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.784990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.793669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.802617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.811492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.834723][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.843403][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.853176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.866072][ T4379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.874835][ T4379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.883913][ T4379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.893132][ T4379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.971119][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.979237][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.992409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.026211][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.034094][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.043003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.095426][ C1] [ 99.095433][ C1] ================================ [ 99.095436][ C1] WARNING: inconsistent lock state [ 99.095448][ C1] syzkaller #0 Not tainted [ 99.095461][ C1] -------------------------------- [ 99.095510][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 99.095518][ C1] syz.0.17/4425 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 99.095537][ C1] ffff88805e2359a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 99.095602][ C1] {INITIAL USE} state was registered at: [ 99.095607][ C1] lock_acquire+0x1bb/0x4a0 [ 99.095626][ C1] _raw_spin_lock+0x2a/0x40 [ 99.095640][ C1] htab_lock_bucket+0x179/0x2f0 [ 99.095655][ C1] htab_map_delete_elem+0x19e/0x5b0 [ 99.095669][ C1] bpf_prog_2eee0e635ca9ce2f+0x3a/0x3e [ 99.095685][ C1] bpf_overflow_handler+0x522/0x7c0 [ 99.095700][ C1] __perf_event_overflow+0x448/0x610 [ 99.095720][ C1] perf_swevent_overflow+0x19b/0x230 [ 99.095739][ C1] perf_swevent_event+0x458/0x570 [ 99.095760][ C1] perf_bp_event+0x312/0x3f0 [ 99.095780][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 99.095800][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 99.095816][ C1] notify_die+0x141/0x1a0 [ 99.095829][ C1] notify_debug+0x20/0x30 [ 99.095846][ C1] noist_exc_debug+0x73/0x120 [ 99.095857][ C1] asm_exc_debug+0x2f/0x40 [ 99.095873][ C1] irq event stamp: 3554 [ 99.095877][ C1] hardirqs last enabled at (3553): [] pcpu_memcg_post_alloc_hook+0x26d/0x490 [ 99.095901][ C1] hardirqs last disabled at (3554): [] exc_debug+0x6e/0x130 [ 99.095916][ C1] softirqs last enabled at (3024): [] bpf_prog_load+0x1127/0x1560 [ 99.095940][ C1] softirqs last disabled at (3022): [] bpf_ksym_add+0x29/0x340 [ 99.095956][ C1] [ 99.095956][ C1] other info that might help us debug this: [ 99.095959][ C1] Possible unsafe locking scenario: [ 99.095959][ C1] [ 99.095962][ C1] CPU0 [ 99.095964][ C1] ---- [ 99.095966][ C1] lock(&htab->lockdep_key); [ 99.095974][ C1] [ 99.095976][ C1] lock(&htab->lockdep_key); [ 99.095984][ C1] [ 99.095984][ C1] *** DEADLOCK *** [ 99.095984][ C1] [ 99.095987][ C1] no locks held by syz.0.17/4425. [ 99.095992][ C1] [ 99.095992][ C1] stack backtrace: [ 99.096001][ C1] CPU: 1 PID: 4425 Comm: syz.0.17 Not tainted syzkaller #0 [ 99.096015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.096026][ C1] Call Trace: [ 99.096033][ C1] <#DB> [ 99.096038][ C1] dump_stack_lvl+0x188/0x24e [ 99.096060][ C1] ? show_regs_print_info+0x12/0x12 [ 99.096084][ C1] ? print_usage_bug+0x42a/0x690 [ 99.096105][ C1] ? verify_lock_unused+0x18/0x140 [ 99.096126][ C1] lock_acquire+0x2df/0x4a0 [ 99.096147][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 99.096164][ C1] ? read_lock_is_recursive+0x10/0x10 [ 99.096189][ C1] _raw_spin_lock+0x2a/0x40 [ 99.096203][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 99.096219][ C1] htab_lock_bucket+0x179/0x2f0 [ 99.096236][ C1] ? htab_lru_map_delete_node+0x630/0x630 [ 99.096253][ C1] ? look_up_lock_class+0x75/0x140 [ 99.096268][ C1] ? verify_lock_unused+0x18/0x140 [ 99.096289][ C1] ? htab_map_hash+0x2ed/0x6d0 [ 99.096306][ C1] htab_map_delete_elem+0x19e/0x5b0 [ 99.096322][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 99.096338][ C1] ? htab_map_update_elem+0xb00/0xb00 [ 99.096357][ C1] bpf_prog_2eee0e635ca9ce2f+0x3a/0x3e [ 99.096371][ C1] bpf_overflow_handler+0x522/0x7c0 [ 99.096388][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 99.096404][ C1] ? perf_swevent_overflow+0x230/0x230 [ 99.096422][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 99.096447][ C1] __perf_event_overflow+0x448/0x610 [ 99.096471][ C1] perf_swevent_overflow+0x19b/0x230 [ 99.096490][ C1] perf_swevent_event+0x458/0x570 [ 99.096513][ C1] ? perf_tp_event+0xc30/0xc30 [ 99.096538][ C1] perf_bp_event+0x312/0x3f0 [ 99.096561][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 99.096592][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 99.096608][ C1] ? read_lock_is_recursive+0x10/0x10 [ 99.096631][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 99.096677][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 99.096699][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 99.096723][ C1] notify_die+0x141/0x1a0 [ 99.096751][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 99.096772][ C1] notify_debug+0x20/0x30 [ 99.096788][ C1] exc_debug+0xd9/0x130 [ 99.096801][ C1] asm_exc_debug+0x1a/0x40 [ 99.096818][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 99.096841][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 99.096857][ C1] RSP: 0018:ffffc90003437b40 EFLAGS: 00050206 [ 99.096869][ C1] RAX: ffffffff84114901 RBX: 0000000000000088 RCX: 0000000000000007 [ 99.096879][ C1] RDX: 0000000000000088 RSI: 0000200000000301 RDI: ffffc9000258e0c9 [ 99.096889][ C1] RBP: 0000000000000000 R08: ffffc9000258e0cf R09: 1ffff920004b1c19 [ 99.096898][ C1] R10: dffffc0000000000 R11: fffff520004b1c1a R12: 00007fffffffef78 [ 99.096909][ C1] R13: 1ffff92000686f84 R14: ffffc9000258e048 R15: 0000200000000280 [ 99.096922][ C1] ? _copy_from_user+0x11/0x170 [ 99.096943][ C1] [ 99.096947][ C1] [ 99.096951][ C1] _copy_from_user+0xf4/0x170 [ 99.096970][ C1] copy_from_bpfptr+0x67/0x80 [ 99.096990][ C1] bpf_prog_load+0xb47/0x1560 [ 99.097014][ C1] ? map_freeze+0x390/0x390 [ 99.097033][ C1] ? __might_fault+0xa6/0x120 [ 99.097051][ C1] ? __might_fault+0xa6/0x120 [ 99.097065][ C1] ? __might_fault+0xc2/0x120 [ 99.097078][ C1] ? __might_fault+0xa6/0x120 [ 99.097092][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 99.097107][ C1] ? security_bpf+0x7a/0xa0 [ 99.097122][ C1] __sys_bpf+0x5b8/0x780 [ 99.097142][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 99.097162][ C1] ? do_sys_openat2+0x20c/0x4b0 [ 99.097186][ C1] ? lock_chain_count+0x20/0x20 [ 99.097208][ C1] __x64_sys_bpf+0x78/0x90 [ 99.097226][ C1] do_syscall_64+0x4c/0xa0 [ 99.097246][ C1] ? clear_bhb_loop+0x60/0xb0 [ 99.097264][ C1] ? clear_bhb_loop+0x60/0xb0 [ 99.097283][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.097301][ C1] RIP: 0033:0x7f4b7739cdd9 [ 99.097311][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.097322][ C1] RSP: 002b:00007ffea11031d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.097335][ C1] RAX: ffffffffffffffda RBX: 00007f4b77615fa0 RCX: 00007f4b7739cdd9 [ 99.097345][ C1] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 99.097353][ C1] RBP: 00007f4b77432d69 R08: 0000000000000000 R09: 0000000000000000 [ 99.097362][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.097370][ C1] R13: 00007f4b77615fac R14: 00007f4b77615fa0 R15: 00007f4b77615fa0 [ 99.097384][ C1] [ 99.794955][ T48] Bluetooth: hci0: command 0x040f tx timeout