Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. 2026/01/14 01:47:46 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 91.394807][ T4605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.674444][ T4641] chnl_net:caif_netlink_parms(): no params data found [ 93.725836][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.733110][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.742595][ T4641] device bridge_slave_0 entered promiscuous mode [ 93.754285][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.762905][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.771182][ T4641] device bridge_slave_1 entered promiscuous mode [ 93.798767][ T4641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.810363][ T4641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.841438][ T4641] team0: Port device team_slave_0 added [ 93.849702][ T4641] team0: Port device team_slave_1 added [ 93.871799][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.879995][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.907840][ T4641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.920457][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.929822][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.957404][ T4641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.992129][ T4641] device hsr_slave_0 entered promiscuous mode [ 94.000082][ T4641] device hsr_slave_1 entered promiscuous mode [ 94.600358][ T4641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.613913][ T4641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.623648][ T4641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.634185][ T4641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.698744][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.711221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.723082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.736094][ T4641] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.748080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.758750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.768197][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.775309][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.811595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.819747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.829812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.839048][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.846131][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.854932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.864240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.873414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.884065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.893396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.902609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.932465][ T4641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.945322][ T4641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.957872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.966190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.976119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.985026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.994307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.024291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.144146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.153454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.166174][ T4641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.203755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.214004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.233473][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.242122][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.252099][ T4641] device veth0_vlan entered promiscuous mode [ 95.260126][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.268546][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.281372][ T4641] device veth1_vlan entered promiscuous mode [ 95.316775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.324934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.333545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.342508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.354874][ T4641] device veth0_macvtap entered promiscuous mode [ 95.375751][ T4641] device veth1_macvtap entered promiscuous mode [ 95.398487][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.405875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.414861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.423259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.432334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.444506][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.463841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.472977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.484300][ T4641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493342][ T4641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.503480][ T4641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.514135][ T4641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.594353][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.606426][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.626103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.646768][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.655743][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.678832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/01/14 01:47:55 executed programs: 0 [ 97.381299][ T1398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.498973][ T4814] chnl_net:caif_netlink_parms(): no params data found [ 97.549656][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.557192][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.565288][ T4814] device bridge_slave_0 entered promiscuous mode [ 97.573784][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.581042][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.589056][ T4814] device bridge_slave_1 entered promiscuous mode [ 97.615195][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.628638][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.660310][ T4814] team0: Port device team_slave_0 added [ 97.672617][ T4814] team0: Port device team_slave_1 added [ 97.695491][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.704651][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.733433][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.745946][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.755253][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.784665][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.817402][ T4814] device hsr_slave_0 entered promiscuous mode [ 97.824331][ T4814] device hsr_slave_1 entered promiscuous mode [ 97.831576][ T4814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.843058][ T4814] Cannot create hsr debugfs directory [ 99.356620][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 100.200352][ T1398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.270525][ T1398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.321759][ T1398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.170381][ T4814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.180602][ T4814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.203016][ T4814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.211587][ T4814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.272009][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.283425][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.291666][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.314193][ T4814] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.323965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.332758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.341767][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.348959][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.356753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.369688][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.378693][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.387451][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.394501][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.402644][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.420728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.429382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.437376][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 101.438886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.453688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.475006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.483657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.494726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.503749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.515616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.524279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.534963][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.630782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.638611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.662769][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.679103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.688011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.714573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.723008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.731923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.739994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.749151][ T4814] device veth0_vlan entered promiscuous mode [ 101.768535][ T4814] device veth1_vlan entered promiscuous mode [ 101.785025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.793749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.802358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.811048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.822240][ T4814] device veth0_macvtap entered promiscuous mode [ 101.833694][ T4814] device veth1_macvtap entered promiscuous mode [ 101.853749][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.864801][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.878105][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.885926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.894855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.903724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.912357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.924235][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.935517][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.947124][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.959697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.968654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.980588][ T4814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.989576][ T4814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.001526][ T4814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.010755][ T4814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.022852][ T1398] device hsr_slave_0 left promiscuous mode [ 102.030250][ T1398] device hsr_slave_1 left promiscuous mode [ 102.036726][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.044105][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.052096][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.059710][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.067335][ T1398] device bridge_slave_1 left promiscuous mode [ 102.073509][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.081755][ T1398] device bridge_slave_0 left promiscuous mode [ 102.088580][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.099814][ T1398] device veth1_macvtap left promiscuous mode [ 102.105852][ T1398] device veth0_macvtap left promiscuous mode [ 102.111994][ T1398] device veth1_vlan left promiscuous mode [ 102.118083][ T1398] device veth0_vlan left promiscuous mode [ 102.227167][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 102.239283][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 102.252025][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.264505][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.312335][ T1398] bond0 (unregistering): Released all slaves [ 102.382588][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.391465][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.405132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.418682][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/01/14 01:48:00 executed programs: 2 [ 102.434033][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.448294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.526069][ C0] [ 102.526076][ C0] ================================ [ 102.526078][ C0] WARNING: inconsistent lock state [ 102.526084][ C0] syzkaller #0 Not tainted [ 102.526088][ C0] -------------------------------- [ 102.526090][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 102.526094][ C0] syz.0.17/5098 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 102.526103][ C0] ffff88807d1fdb68 (&htab->lockdep_key){....}-{2:2}, at: htab_lru_map_delete_elem+0x1b1/0x640 [ 102.526136][ C0] {INITIAL USE} state was registered at: [ 102.526139][ C0] lock_acquire+0x197/0x3f0 [ 102.526149][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 102.526157][ C0] htab_lru_map_update_elem+0x37a/0xc40 [ 102.526165][ C0] bpf_map_update_value+0x57d/0x650 [ 102.526172][ C0] generic_map_update_batch+0x525/0x7c0 [ 102.526179][ C0] bpf_map_do_batch+0x466/0x600 [ 102.526186][ C0] __sys_bpf+0x601/0x670 [ 102.526193][ C0] __x64_sys_bpf+0x78/0x90 [ 102.526199][ C0] do_syscall_64+0x4c/0xa0 [ 102.526207][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.526217][ C0] irq event stamp: 27926 [ 102.526220][ C0] hardirqs last enabled at (27925): [] kasan_quarantine_put+0xd4/0x220 [ 102.526233][ C0] hardirqs last disabled at (27926): [] exc_debug+0x6e/0x130 [ 102.526242][ C0] softirqs last enabled at (27790): [] bpf_prog_load+0x1150/0x1550 [ 102.526252][ C0] softirqs last disabled at (27788): [] bpf_ksym_add+0x29/0x340 [ 102.526264][ C0] [ 102.526264][ C0] other info that might help us debug this: [ 102.526266][ C0] Possible unsafe locking scenario: [ 102.526266][ C0] [ 102.526268][ C0] CPU0 [ 102.526269][ C0] ---- [ 102.526270][ C0] lock(&htab->lockdep_key); [ 102.526275][ C0] [ 102.526281][ C0] lock(&htab->lockdep_key); [ 102.526288][ C0] [ 102.526288][ C0] *** DEADLOCK *** [ 102.526288][ C0] [ 102.526291][ C0] no locks held by syz.0.17/5098. [ 102.526296][ C0] [ 102.526296][ C0] stack backtrace: [ 102.526300][ C0] CPU: 0 PID: 5098 Comm: syz.0.17 Not tainted syzkaller #0 [ 102.526311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.526323][ C0] Call Trace: [ 102.526328][ C0] <#DB> [ 102.526333][ C0] dump_stack_lvl+0x168/0x230 [ 102.526349][ C0] ? show_regs_print_info+0x20/0x20 [ 102.526364][ C0] ? print_usage_bug+0x42a/0x690 [ 102.526376][ C0] ? verify_lock_unused+0x18/0x140 [ 102.526390][ C0] lock_acquire+0x2b2/0x3f0 [ 102.526399][ C0] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 102.526408][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.526417][ C0] ? look_up_lock_class+0x71/0x110 [ 102.526426][ C0] ? verify_lock_unused+0x18/0x140 [ 102.526434][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 102.526442][ C0] ? htab_lru_map_delete_elem+0x1b1/0x640 [ 102.526450][ C0] ? _raw_spin_lock+0x40/0x40 [ 102.526458][ C0] ? htab_map_hash+0x269/0x6d0 [ 102.526465][ C0] htab_lru_map_delete_elem+0x1b1/0x640 [ 102.526476][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x54c [ 102.526484][ C0] bpf_overflow_handler+0x1c4/0x4c0 [ 102.526494][ C0] ? perf_event_switch_output+0x650/0x650 [ 102.526504][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 102.526512][ C0] __perf_event_overflow+0x364/0x530 [ 102.526520][ C0] perf_swevent_event+0x4ad/0x530 [ 102.526529][ C0] perf_bp_event+0x224/0x290 [ 102.526537][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 102.526550][ C0] ? rcu_lock_acquire+0x9/0x30 [ 102.526559][ C0] ? read_lock_is_recursive+0x10/0x10 [ 102.526569][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 102.526578][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 102.526587][ C0] notify_die+0x12d/0x180 [ 102.526595][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 102.526604][ C0] ? exc_debug+0x6e/0x130 [ 102.526612][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 102.526621][ C0] notify_debug+0x20/0x30 [ 102.526630][ C0] exc_debug+0xcf/0x130 [ 102.526638][ C0] asm_exc_debug+0x1a/0x40 [ 102.526650][ C0] RIP: 0010:copy_user_generic_unrolled+0xa2/0xc0 [ 102.526661][ C0] Code: ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 88 07 <48> ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 90 90 90 90 90 90 [ 102.526668][ C0] RSP: 0018:ffffc9000331f0f8 EFLAGS: 00040202 [ 102.526675][ C0] RAX: ffffffff83dae130 RBX: 0000000000000004 RCX: 0000000000000004 [ 102.526681][ C0] RDX: 0000000000000004 RSI: ffff88807d5c866c RDI: 0000200000000300 [ 102.526686][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fab90ce [ 102.526692][ C0] R10: ffffed100fab90ce R11: 1ffff1100fab90cd R12: 00007ffffffff000 [ 102.526697][ C0] R13: 0000200000000304 R14: ffff88807d5c866c R15: 0000200000000300 [ 102.526704][ C0] ? _copy_to_user+0xa0/0x130 [ 102.526713][ C0] [ 102.526715][ C0] [ 102.526718][ C0] _copy_to_user+0xf0/0x130 [ 102.526726][ C0] bpf_verifier_vlog+0x1b5/0x350 [ 102.526735][ C0] verbose+0x1dc/0x2a0 [ 102.526743][ C0] ? __kernel_text_address+0x9a/0x100 [ 102.526753][ C0] ? bpf_check+0xf090/0xf090 [ 102.526770][ C0] do_check+0x4785/0xeac0 [ 102.526782][ C0] ? bpf_check+0x31f3/0xf090 [ 102.526789][ C0] ? do_syscall_64+0x4c/0xa0 [ 102.526801][ C0] ? mark_reg_unknown+0x5a0/0x5a0 [ 102.526810][ C0] ? bpf_check+0xf090/0xf090 [ 102.526817][ C0] ? mark_reg_not_init+0x5a0/0x5a0 [ 102.526824][ C0] ? btf_check_subprog_arg_match+0x13e/0x290 [ 102.526835][ C0] do_check_common+0xe67/0x16c0 [ 102.526846][ C0] bpf_check+0x31f3/0xf090 [ 102.526857][ C0] ? mark_lock+0x94/0x320 [ 102.526866][ C0] ? bpf_get_btf_vmlinux+0x10/0x10 [ 102.526874][ C0] ? mark_lock+0x94/0x320 [ 102.526885][ C0] ? verify_lock_unused+0x140/0x140 [ 102.526895][ C0] ? verify_lock_unused+0x140/0x140 [ 102.526903][ C0] ? rcu_lock_release+0x5/0x20 [ 102.526913][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 102.526923][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 102.526932][ C0] ? lock_chain_count+0x20/0x20 [ 102.526941][ C0] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 102.526951][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 102.526960][ C0] ? ktime_get_with_offset+0xff/0x320 [ 102.526968][ C0] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 102.526976][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 102.526986][ C0] ? __might_fault+0xb3/0x110 [ 102.526994][ C0] ? memset+0x1e/0x40 [ 102.527002][ C0] ? bpf_obj_name_cpy+0x190/0x1d0 [ 102.527010][ C0] bpf_prog_load+0x1043/0x1550 [ 102.527020][ C0] ? map_freeze+0x350/0x350 [ 102.527027][ C0] ? __might_fault+0xb7/0x110 [ 102.527036][ C0] ? __might_fault+0xb3/0x110 [ 102.527044][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 102.527053][ C0] ? security_bpf+0x7a/0xa0 [ 102.527061][ C0] __sys_bpf+0x4c2/0x670 [ 102.527069][ C0] ? bpf_link_show_fdinfo+0x340/0x340 [ 102.527079][ C0] ? vtime_user_exit+0x2dc/0x400 [ 102.527089][ C0] __x64_sys_bpf+0x78/0x90 [ 102.527096][ C0] do_syscall_64+0x4c/0xa0 [ 102.527103][ C0] ? clear_bhb_loop+0x30/0x80 [ 102.527111][ C0] ? clear_bhb_loop+0x30/0x80 [ 102.527118][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.527126][ C0] RIP: 0033:0x7fb119e4d749 [ 102.527132][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.527138][ C0] RSP: 002b:00007fb1194bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.527146][ C0] RAX: ffffffffffffffda RBX: 00007fb11a0a3fa0 RCX: 00007fb119e4d749 [ 102.527151][ C0] RDX: 000000000000002a RSI: 0000200000000240 RDI: 0000000000000005 [ 102.527156][ C0] RBP: 00007fb119ed1f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.527161][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.527165][ C0] R13: 00007fb11a0a4038 R14: 00007fb11a0a3fa0 R15: 00007ffefb248938 [ 102.527173][ C0] [ 103.516549][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 105.596491][ T1324] Bluetooth: hci0: command 0x0419 tx timeout 2026/01/14 01:48:05 executed programs: 156 2026/01/14 01:48:10 executed programs: 349