Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
BUG: MAX_LOCKDEP_CHAINS too low!
turning off the locking correctness validator.
CPU: 0 PID: 4321 Comm: kworker/u5:1 Not tainted 6.1.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: hci6 hci_rx_work
Call trace:
 dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
 __dump_stack+0x30/0x40 lib/dump_stack.c:88
 dump_stack_lvl+0xf8/0x160 lib/dump_stack.c:106
 dump_stack+0x1c/0x5c lib/dump_stack.c:113
 add_chain_cache kernel/locking/lockdep.c:-1 [inline]
 lookup_chain_cache_add kernel/locking/lockdep.c:3772 [inline]
 validate_chain kernel/locking/lockdep.c:3793 [inline]
 __lock_acquire+0x1b40/0x6544 kernel/locking/lockdep.c:5049
 lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
 seqcount_lockdep_reader_access include/linux/seqlock.h:102 [inline]
 read_seqbegin+0x60/0x15c include/linux/seqlock.h:893
 zone_span_seqbegin include/linux/memory_hotplug.h:132 [inline]
 page_outside_zone_boundaries mm/page_alloc.c:627 [inline]
 bad_range+0x9c/0x260 mm/page_alloc.c:654
 rmqueue mm/page_alloc.c:3887 [inline]
 get_page_from_freelist+0x1e70/0x1fc0 mm/page_alloc.c:4325
 __alloc_pages+0x1cc/0x53c mm/page_alloc.c:5614
 alloc_pages+0x434/0x6f8 mm/mempolicy.c:-1
 __stack_depot_save+0x36c/0x4b8 lib/stackdepot.c:474
 kasan_save_stack mm/kasan/common.c:46 [inline]
 kasan_set_track+0x64/0x80 mm/kasan/common.c:52
 kasan_save_alloc_info+0x28/0x34 mm/kasan/generic.c:505
 __kasan_slab_alloc+0x70/0x88 mm/kasan/common.c:328
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook+0x74/0x43c mm/slab.h:737
 slab_alloc_node mm/slub.c:3398 [inline]
 slab_alloc mm/slub.c:3406 [inline]
 __kmem_cache_alloc_lru mm/slub.c:3413 [inline]
 kmem_cache_alloc+0x234/0x318 mm/slub.c:3422
 kmem_cache_zalloc include/linux/slab.h:689 [inline]
 fill_pool lib/debugobjects.c:169 [inline]
 debug_objects_fill_pool+0x2e4/0x58c lib/debugobjects.c:607
 __debug_object_init+0x38/0x408 lib/debugobjects.c:617
 debug_object_init+0x20/0x2c lib/debugobjects.c:659
 __init_work+0x58/0x68 kernel/workqueue.c:523
 l2cap_conn_add+0x6d0/0x96c net/bluetooth/l2cap_core.c:7975
 l2cap_connect_cfm+0x120/0xd64 net/bluetooth/l2cap_core.c:8324
 hci_connect_cfm+0x98/0x130 include/net/bluetooth/hci_core.h:1787
 le_conn_complete_evt+0xaa4/0xf8c net/bluetooth/hci_event.c:5835
 hci_le_conn_complete_evt+0x114/0x3f8 net/bluetooth/hci_event.c:5861
 hci_le_meta_evt+0x2c0/0x4a4 net/bluetooth/hci_event.c:7031
 hci_event_func net/bluetooth/hci_event.c:7342 [inline]
 hci_event_packet+0x6ac/0xf08 net/bluetooth/hci_event.c:7397
 hci_rx_work+0x324/0xaa0 net/bluetooth/hci_core.c:4083
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:849