Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. 2026/05/03 15:01:38 parsed 1 programs syzkaller login: [ 82.785272][ T4284] cgroup: Unknown subsys name 'net' [ 82.916188][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.431725][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.992479][ T4305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.001212][ T4305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.008879][ T4305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.018465][ T4305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.026402][ T4305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.033902][ T4305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.531932][ T27] cfg80211: failed to load regulatory.db [ 88.370147][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 88.418907][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.426878][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.435041][ T4341] device bridge_slave_0 entered promiscuous mode [ 88.444313][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.451557][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.459388][ T4341] device bridge_slave_1 entered promiscuous mode [ 88.481644][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.503541][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.526038][ T4341] team0: Port device team_slave_0 added [ 88.534128][ T4341] team0: Port device team_slave_1 added [ 88.563801][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.571011][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.596986][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.609534][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.616557][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.642483][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.674395][ T4341] device hsr_slave_0 entered promiscuous mode [ 88.681348][ T4341] device hsr_slave_1 entered promiscuous mode [ 88.806802][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.817104][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.840727][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.851278][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.873257][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.880553][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.888237][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.895418][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.951995][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.976652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.987643][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.996803][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.022031][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.034517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.043295][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.050475][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.061941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.071259][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.078353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.106997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.115927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.131947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.156029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.168871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.182402][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.431429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.438955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.454389][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.475717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.485032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.506986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.515700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.525005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.533202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.546247][ T4341] device veth0_vlan entered promiscuous mode [ 89.558299][ T4341] device veth1_vlan entered promiscuous mode [ 89.578578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.587525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.596524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.605330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.616376][ T4341] device veth0_macvtap entered promiscuous mode [ 89.629327][ T4341] device veth1_macvtap entered promiscuous mode [ 89.645480][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.653796][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.664959][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.673257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.682720][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.694541][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.705390][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.714751][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.726208][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.736727][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.746000][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754971][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107119][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.315541][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.325046][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.335158][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.357073][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.365289][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.375440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/03 15:01:48 executed programs: 0 [ 90.947756][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.956496][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.964233][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.973338][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.981154][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.991805][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.115152][ T4378] chnl_net:caif_netlink_parms(): no params data found [ 91.164082][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.171798][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.179789][ T4378] device bridge_slave_0 entered promiscuous mode [ 91.188569][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.195784][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.204174][ T4378] device bridge_slave_1 entered promiscuous mode [ 91.226767][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.237997][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.267224][ T4378] team0: Port device team_slave_0 added [ 91.274669][ T4378] team0: Port device team_slave_1 added [ 91.293196][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.300535][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.326839][ T4378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.341696][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.348743][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.374917][ T4378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.406283][ T4378] device hsr_slave_0 entered promiscuous mode [ 91.413297][ T4378] device hsr_slave_1 entered promiscuous mode [ 91.421146][ T4378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.428969][ T4378] Cannot create hsr debugfs directory [ 92.153373][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.012033][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 94.460784][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.502698][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.090731][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 95.339064][ T11] device hsr_slave_0 left promiscuous mode [ 95.355569][ T11] device hsr_slave_1 left promiscuous mode [ 95.365325][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.373138][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.382733][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.390696][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.398569][ T11] device bridge_slave_1 left promiscuous mode [ 95.405943][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.418013][ T11] device bridge_slave_0 left promiscuous mode [ 95.425487][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.452792][ T11] device veth1_macvtap left promiscuous mode [ 95.459202][ T11] device veth0_macvtap left promiscuous mode [ 95.468075][ T11] device veth1_vlan left promiscuous mode [ 95.474543][ T11] device veth0_vlan left promiscuous mode [ 95.902395][ T11] team0 (unregistering): Port device team_slave_1 removed [ 95.929734][ T11] team0 (unregistering): Port device team_slave_0 removed [ 95.957584][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.986711][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.169299][ T11] bond0 (unregistering): Released all slaves [ 96.275620][ T4378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.287101][ T4378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.304615][ T4378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.320166][ T4378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.379092][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.408382][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.415923][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.424375][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.439663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.449009][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.459256][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.466449][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.481453][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.489507][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.500745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.509410][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.516819][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.526639][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.545808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.556663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.566308][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.576053][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.587211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.602901][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.623183][ T4378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.636081][ T4378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.648494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.657680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.666561][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.675397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.710687][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.923994][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.931828][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.945153][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.963812][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.973566][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.993610][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.002772][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.013554][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.022365][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.031937][ T4378] device veth0_vlan entered promiscuous mode [ 97.043054][ T4378] device veth1_vlan entered promiscuous mode [ 97.063456][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.073769][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.082100][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.090989][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.111376][ T4378] device veth0_macvtap entered promiscuous mode [ 97.121137][ T4378] device veth1_macvtap entered promiscuous mode [ 97.137232][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.144892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.153874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.161998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.170524][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 97.177749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.201717][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.209075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.221920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.232843][ T4378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.242195][ T4378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.256360][ T4378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.265728][ T4378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.345202][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.358456][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.366356][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.385318][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.394581][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.402619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.675982][ C0] [ 97.675987][ C0] ================================ [ 97.675991][ C0] WARNING: inconsistent lock state [ 97.676000][ C0] syzkaller #0 Not tainted [ 97.676006][ C0] -------------------------------- [ 97.676009][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 97.676015][ C0] syz.0.17/4424 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 97.676029][ C0] ffff888074446a18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 97.676075][ C0] {INITIAL USE} state was registered at: [ 97.676080][ C0] lock_acquire+0x1bb/0x4a0 [ 97.676099][ C0] _raw_spin_lock+0x2a/0x40 [ 97.676112][ C0] htab_lock_bucket+0x179/0x2f0 [ 97.676126][ C0] htab_lru_map_update_elem+0x31e/0xe80 [ 97.676140][ C0] bpf_map_update_value+0x59e/0x670 [ 97.676156][ C0] generic_map_update_batch+0x54b/0x810 [ 97.676172][ C0] bpf_map_do_batch+0x466/0x600 [ 97.676191][ C0] __sys_bpf+0x6f7/0x780 [ 97.676208][ C0] __x64_sys_bpf+0x78/0x90 [ 97.676224][ C0] do_syscall_64+0x4c/0xa0 [ 97.676243][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.676259][ C0] irq event stamp: 200282 [ 97.676263][ C0] hardirqs last enabled at (200281): [] syscall_enter_from_user_mode+0x21/0x80 [ 97.676283][ C0] hardirqs last disabled at (200282): [] exc_debug+0x6e/0x130 [ 97.676297][ C0] softirqs last enabled at (200220): [] bpf_prog_load+0x1127/0x1560 [ 97.676320][ C0] softirqs last disabled at (200218): [] bpf_ksym_add+0x29/0x340 [ 97.676334][ C0] [ 97.676334][ C0] other info that might help us debug this: [ 97.676338][ C0] Possible unsafe locking scenario: [ 97.676338][ C0] [ 97.676341][ C0] CPU0 [ 97.676343][ C0] ---- [ 97.676345][ C0] lock(&htab->lockdep_key); [ 97.676352][ C0] [ 97.676354][ C0] lock(&htab->lockdep_key); [ 97.676362][ C0] [ 97.676362][ C0] *** DEADLOCK *** [ 97.676362][ C0] [ 97.676364][ C0] no locks held by syz.0.17/4424. [ 97.676370][ C0] [ 97.676370][ C0] stack backtrace: [ 97.676379][ C0] CPU: 0 PID: 4424 Comm: syz.0.17 Not tainted syzkaller #0 [ 97.676391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.676401][ C0] Call Trace: [ 97.676408][ C0] <#DB> [ 97.676413][ C0] dump_stack_lvl+0x188/0x24e [ 97.676434][ C0] ? show_regs_print_info+0x12/0x12 [ 97.676457][ C0] ? print_usage_bug+0x42a/0x690 [ 97.676476][ C0] ? verify_lock_unused+0x18/0x140 [ 97.676497][ C0] lock_acquire+0x2df/0x4a0 [ 97.676516][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 97.676533][ C0] ? read_lock_is_recursive+0x10/0x10 [ 97.676556][ C0] _raw_spin_lock+0x2a/0x40 [ 97.676570][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 97.676585][ C0] htab_lock_bucket+0x179/0x2f0 [ 97.676602][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 97.676620][ C0] ? htab_map_hash+0x329/0x6d0 [ 97.676637][ C0] htab_lru_map_delete_elem+0x1ad/0x780 [ 97.676653][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 97.676670][ C0] ? htab_lru_map_update_elem+0xe80/0xe80 [ 97.676688][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 97.676706][ C0] bpf_overflow_handler+0x522/0x7c0 [ 97.676723][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 97.676738][ C0] ? perf_swevent_overflow+0x230/0x230 [ 97.676755][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 97.676778][ C0] __perf_event_overflow+0x448/0x610 [ 97.676818][ C0] perf_swevent_event+0x315/0x570 [ 97.676839][ C0] ? perf_tp_event+0xc30/0xc30 [ 97.676861][ C0] perf_bp_event+0x312/0x3f0 [ 97.676882][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 97.676910][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 97.676925][ C0] ? read_lock_is_recursive+0x10/0x10 [ 97.676945][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 97.676967][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 97.676981][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 97.677015][ C0] notify_die+0x141/0x1a0 [ 97.677031][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 97.677051][ C0] notify_debug+0x20/0x30 [ 97.677068][ C0] exc_debug+0xd9/0x130 [ 97.677081][ C0] asm_exc_debug+0x1a/0x40 [ 97.677097][ C0] RIP: 0010:copy_user_short_string+0xd/0x40 [ 97.677119][ C0] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 97.677134][ C0] RSP: 0018:ffffc900034c7d48 EFLAGS: 00040203 [ 97.677145][ C0] RAX: ffffffff84114901 RBX: 000000000000000c RCX: 0000000000000001 [ 97.677154][ C0] RDX: 0000000000000004 RSI: 0000200000000300 RDI: ffffc900034c7dc0 [ 97.677164][ C0] RBP: 0000000000000000 R08: 00000100ffffffff R09: 1ffff92000698fb9 [ 97.677173][ C0] R10: dffffc0000000000 R11: fffff52000698fba R12: 00007fffffffeff4 [ 97.677183][ C0] R13: 000000000000000c R14: ffffc900034c7dc0 R15: 0000200000000300 [ 97.677194][ C0] ? _copy_from_user+0x11/0x170 [ 97.677215][ C0] [ 97.677218][ C0] [ 97.677222][ C0] _copy_from_user+0xf4/0x170 [ 97.677240][ C0] __sys_bpf+0x2ea/0x780 [ 97.677260][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 97.677284][ C0] ? lock_chain_count+0x20/0x20 [ 97.677305][ C0] __x64_sys_bpf+0x78/0x90 [ 97.677323][ C0] do_syscall_64+0x4c/0xa0 [ 97.677342][ C0] ? clear_bhb_loop+0x60/0xb0 [ 97.677360][ C0] ? clear_bhb_loop+0x60/0xb0 [ 97.677378][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.677395][ C0] RIP: 0033:0x7f8e3b39cdd9 [ 97.677405][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.677415][ C0] RSP: 002b:00007ffec158de78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.677428][ C0] RAX: ffffffffffffffda RBX: 00007f8e3b615fa0 RCX: 00007f8e3b39cdd9 [ 97.677437][ C0] RDX: 000000000000000c RSI: 0000200000000300 RDI: 000000000000000e [ 97.677445][ C0] RBP: 00007f8e3b432d69 R08: 0000000000000000 R09: 0000000000000000 [ 97.677453][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.677461][ C0] R13: 00007f8e3b615fac R14: 00007f8e3b615fa0 R15: 00007f8e3b615fa0 [ 97.677475][ C0]