Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. 2026/09/15 07:38:17 parsed 1 programs 2026/09/15 07:38:17 serving rpc on tcp://46291 syzkaller login: [ 66.597684][ T4283] cgroup: Unknown subsys name 'net' [ 66.707292][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.002544][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.022949][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 70.063135][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070763][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.078722][ T4313] device bridge_slave_0 entered promiscuous mode [ 70.087312][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.095010][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.103137][ T4313] device bridge_slave_1 entered promiscuous mode [ 70.126923][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.137442][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.157406][ T4313] team0: Port device team_slave_0 added [ 70.169920][ T4313] team0: Port device team_slave_1 added [ 70.186726][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.193713][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.219686][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.232010][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.239112][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.265035][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.293188][ T4313] device hsr_slave_0 entered promiscuous mode [ 70.300071][ T4313] device hsr_slave_1 entered promiscuous mode [ 70.399568][ T4313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.409719][ T4313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.419732][ T4313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.434358][ T4313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.454244][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.461413][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.469341][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.476438][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.525385][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.542617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.551991][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.560517][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.574891][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.588296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.596994][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.604134][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.629610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.638290][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.645597][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.655023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.666764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.690333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.699423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.709559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.721220][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.889279][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.897879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.910717][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.927662][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.937629][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.957621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.966748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.975465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.984436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.996852][ T4313] device veth0_vlan entered promiscuous mode [ 71.007649][ T4313] device veth1_vlan entered promiscuous mode [ 71.027215][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.035822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.045063][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.059032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.072805][ T4313] device veth0_macvtap entered promiscuous mode [ 71.081753][ T4313] device veth1_macvtap entered promiscuous mode [ 71.097999][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.105898][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.114183][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.122607][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.131130][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.145303][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.152914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.161731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.176144][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185070][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194463][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.203411][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.295349][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300831][ T4313] syz-executor (4313) used greatest stack depth: 20560 bytes left [ 71.309051][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.534286][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.592818][ T4358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.601038][ T4358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.609324][ T4358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.618046][ T4358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.633779][ T4358] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.643823][ T4358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.865203][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.877460][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.887768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.909655][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.917690][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.926469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/09/15 07:38:25 executed programs: 0 [ 73.244434][ T4358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.253703][ T4358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.261424][ T4358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.269948][ T4358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.279171][ T4358] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.286518][ T4358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.396460][ T4372] chnl_net:caif_netlink_parms(): no params data found [ 73.439709][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.447842][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.455842][ T4372] device bridge_slave_0 entered promiscuous mode [ 73.464232][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.471316][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.482030][ T4372] device bridge_slave_1 entered promiscuous mode [ 73.499581][ T4372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.510944][ T4372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.530898][ T4372] team0: Port device team_slave_0 added [ 73.538417][ T4372] team0: Port device team_slave_1 added [ 73.554320][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.561285][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587396][ T4372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.599209][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.606327][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.632416][ T4372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.659160][ T4372] device hsr_slave_0 entered promiscuous mode [ 73.666247][ T4372] device hsr_slave_1 entered promiscuous mode [ 73.673397][ T4372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.681195][ T4372] Cannot create hsr debugfs directory [ 74.032848][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.372893][ T4358] Bluetooth: hci0: command 0x0409 tx timeout [ 76.334966][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.381727][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.200525][ T47] device hsr_slave_0 left promiscuous mode [ 77.215239][ T47] device hsr_slave_1 left promiscuous mode [ 77.221823][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.229721][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.240488][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.249061][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.259154][ T47] device bridge_slave_1 left promiscuous mode [ 77.266532][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.280480][ T47] device bridge_slave_0 left promiscuous mode [ 77.287523][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.310285][ T47] device veth1_macvtap left promiscuous mode [ 77.316719][ T47] device veth0_macvtap left promiscuous mode [ 77.322992][ T47] device veth1_vlan left promiscuous mode [ 77.328955][ T47] device veth0_vlan left promiscuous mode [ 77.452680][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 77.629207][ T47] team0 (unregistering): Port device team_slave_1 removed [ 77.657074][ T47] team0 (unregistering): Port device team_slave_0 removed [ 77.682704][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.710596][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.870904][ T47] bond0 (unregistering): Released all slaves [ 77.941030][ T4372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.950024][ T4372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.958878][ T4372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.976921][ T4372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.033043][ T4372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.049935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.068060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.079004][ T4372] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.088308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.097468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.106197][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.113325][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.121187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.138962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.149295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.158179][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.165358][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.176127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.187486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.199512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.208940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.226149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.235370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.244719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.261090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.269986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.278676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.287176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.296785][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.492067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.500686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.520697][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.554458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.563698][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.610221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.619196][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.629490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.637975][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.648607][ T4372] device veth0_vlan entered promiscuous mode [ 78.659315][ T4372] device veth1_vlan entered promiscuous mode [ 78.676428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.686028][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.694923][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.703584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.714176][ T4372] device veth0_macvtap entered promiscuous mode [ 78.723555][ T4372] device veth1_macvtap entered promiscuous mode [ 78.737249][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.744636][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.754679][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.762716][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.771946][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.784264][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.794215][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.803282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.812646][ T4372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.821378][ T4372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.830448][ T4372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.839240][ T4372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.885878][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.898632][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.906970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.923335][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.931203][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.940283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.998299][ C0] [ 78.998307][ C0] ================================ [ 78.998311][ C0] WARNING: inconsistent lock state [ 78.998320][ C0] syzkaller #0 Not tainted [ 78.998328][ C0] -------------------------------- [ 78.998331][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 78.998337][ C0] syz.0.17/4433 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 78.998353][ C0] ffffffff8cc844b8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xd60 [ 78.998404][ C0] {INITIAL USE} state was registered at: [ 78.998410][ C0] lock_acquire+0x1bb/0x4a0 [ 78.998429][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 78.998450][ C0] kernfs_rename_ns+0x55d/0x990 [ 78.998466][ C0] sysfs_rename_link_ns+0x171/0x1b0 [ 78.998484][ C0] device_rename+0x11c/0x1a0 [ 78.998502][ C0] dev_change_name+0x37b/0x910 [ 78.998515][ C0] do_setlink+0x967/0x29c0 [ 78.998527][ C0] rtnl_newlink+0x16e4/0x1f90 [ 78.998538][ C0] rtnetlink_rcv_msg+0x863/0xfb0 [ 78.998552][ C0] netlink_rcv_skb+0x1ef/0x440 [ 78.998564][ C0] netlink_unicast+0x7ad/0x920 [ 78.998576][ C0] netlink_sendmsg+0x8ad/0xbd0 [ 78.998588][ C0] __sys_sendto+0x497/0x650 [ 78.998599][ C0] __x64_sys_sendto+0xda/0xf0 [ 78.998611][ C0] do_syscall_64+0x4c/0xa0 [ 78.998624][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.998650][ C0] irq event stamp: 3846 [ 78.998655][ C0] hardirqs last enabled at (3845): [] syscall_enter_from_user_mode+0x21/0x80 [ 78.998683][ C0] hardirqs last disabled at (3846): [] exc_debug+0x6e/0x130 [ 78.998705][ C0] softirqs last enabled at (3716): [] bpf_prog_load+0x111d/0x1530 [ 78.998729][ C0] softirqs last disabled at (3714): [] bpf_ksym_add+0x28/0x330 [ 78.998745][ C0] [ 78.998745][ C0] other info that might help us debug this: [ 78.998749][ C0] Possible unsafe locking scenario: [ 78.998749][ C0] [ 78.998752][ C0] CPU0 [ 78.998755][ C0] ---- [ 78.998757][ C0] lock(kernfs_rename_lock); [ 78.998768][ C0] [ 78.998771][ C0] lock(kernfs_rename_lock); [ 78.998779][ C0] [ 78.998779][ C0] *** DEADLOCK *** [ 78.998779][ C0] [ 78.998782][ C0] no locks held by syz.0.17/4433. [ 78.998788][ C0] [ 78.998788][ C0] stack backtrace: [ 78.998801][ C0] CPU: 0 PID: 4433 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.998814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.998830][ C0] Call Trace: [ 78.998835][ C0] <#DB> [ 78.998840][ C0] dump_stack_lvl+0x188/0x24e [ 78.998857][ C0] ? show_regs_print_info+0x12/0x12 [ 78.998875][ C0] ? print_usage_bug+0x42a/0x690 [ 78.998894][ C0] ? verify_lock_unused+0x15/0x140 [ 78.998916][ C0] lock_acquire+0x2df/0x4a0 [ 78.998935][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 78.998952][ C0] ? read_lock_is_recursive+0x10/0x10 [ 78.998970][ C0] ? look_up_lock_class+0x75/0x140 [ 78.998989][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 78.999009][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 78.999026][ C0] ? _raw_spin_lock+0x40/0x40 [ 78.999051][ C0] ? rcu_is_watching+0x11/0xa0 [ 78.999072][ C0] ? lock_release+0xcf/0x920 [ 78.999091][ C0] ? percpu_ref_tryget+0x15/0x180 [ 78.999111][ C0] kernfs_path_from_node+0x84/0xd60 [ 78.999127][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 78.999146][ C0] ? kernfs_name+0x140/0x140 [ 78.999161][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 78.999179][ C0] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 78.999198][ C0] get_mm_memcg_path+0xb9/0x360 [ 78.999219][ C0] __mmap_lock_do_trace_acquire_returned+0xe7/0x390 [ 78.999243][ C0] ? get_mm_memcg_path+0x360/0x360 [ 78.999267][ C0] ? __init_rwsem+0x160/0x160 [ 78.999285][ C0] stack_map_get_build_id_offset+0x699/0x9d0 [ 78.999307][ C0] ? pcpu_freelist_pop+0x126/0x180 [ 78.999327][ C0] ? __pcpu_freelist_pop+0x850/0x850 [ 78.999346][ C0] ? __bpf_get_stackid+0x920/0x920 [ 78.999365][ C0] __bpf_get_stackid+0x55d/0x920 [ 78.999385][ C0] bpf_prog_12712c88fd19bd5b+0x21/0x25 [ 78.999406][ C0] bpf_overflow_handler+0x50b/0x790 [ 78.999423][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 78.999437][ C0] ? perf_swevent_overflow+0x230/0x230 [ 78.999454][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 78.999475][ C0] __perf_event_overflow+0x457/0x630 [ 78.999498][ C0] perf_swevent_event+0x315/0x570 [ 78.999518][ C0] ? perf_tp_event+0xc10/0xc10 [ 78.999540][ C0] perf_bp_event+0x311/0x3f0 [ 78.999561][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 78.999590][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 78.999608][ C0] ? read_lock_is_recursive+0x10/0x10 [ 78.999631][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 78.999653][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 78.999670][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 78.999687][ C0] notify_die+0x141/0x1a0 [ 78.999703][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 78.999725][ C0] notify_debug+0x20/0x30 [ 78.999743][ C0] exc_debug+0xd9/0x130 [ 78.999759][ C0] asm_exc_debug+0x1a/0x40 [ 78.999771][ C0] RIP: 0010:copy_user_short_string+0xd/0x40 [ 78.999788][ C0] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 78.999799][ C0] RSP: 0018:ffffc900033b7a18 EFLAGS: 00040202 [ 78.999812][ C0] RAX: ffffffff84164501 RBX: 0000000000000010 RCX: 0000000000000002 [ 78.999821][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc900033b7cc0 [ 78.999829][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 1ffff92000676f99 [ 78.999837][ C0] R10: dffffc0000000000 R11: fffff52000676f9a R12: 00007fffffffeff0 [ 78.999847][ C0] R13: 0000000000000010 R14: ffffc900033b7cc0 R15: 0000200000000300 [ 78.999859][ C0] ? _copy_from_user+0x21/0x170 [ 78.999878][ C0] [ 78.999882][ C0] [ 78.999885][ C0] _copy_from_user+0xf4/0x170 [ 78.999900][ C0] iovec_from_user+0x143/0x360 [ 78.999923][ C0] __import_iovec+0x6c/0x510 [ 78.999945][ C0] import_iovec+0x6f/0xa0 [ 78.999966][ C0] ___sys_sendmsg+0x252/0x360 [ 78.999982][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 78.999995][ C0] ? memset+0x1e/0x40 [ 79.000011][ C0] ? futex_wake+0x3f6/0x4f0 [ 79.000045][ C0] __se_sys_sendmsg+0x1c3/0x2b0 [ 79.000060][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 79.000079][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 79.000097][ C0] do_syscall_64+0x4c/0xa0 [ 79.000110][ C0] ? clear_bhb_loop+0x60/0xb0 [ 79.000124][ C0] ? clear_bhb_loop+0x60/0xb0 [ 79.000137][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.000156][ C0] RIP: 0033:0x7f8a82b9e159 [ 79.000166][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.000176][ C0] RSP: 002b:00007fff9c2fadc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.000189][ C0] RAX: ffffffffffffffda RBX: 00007f8a82e25fa0 RCX: 00007f8a82b9e159 [ 79.000198][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 79.000206][ C0] RBP: 00007f8a82c3503b R08: 0000000000000000 R09: 0000000000000000 [ 79.000214][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.000221][ C0] R13: 00007f8a82e25fac R14: 00007f8a82e25fa0 R15: 00007f8a82e25fa0 [ 79.000234][ C0] [ 79.723283][ T4358] Bluetooth: hci0: command 0x040f tx timeout