BUG: MAX_LOCKDEP_CHAIN_HLOCKS too low! turning off the locking correctness validator. CPU: 1 PID: 8752 Comm: syz.5.761 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x1c0/0x1ec arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3772 [inline] validate_chain kernel/locking/lockdep.c:3793 [inline] __lock_acquire+0x1864/0x6800 kernel/locking/lockdep.c:5049 lock_acquire+0x20c/0x63c kernel/locking/lockdep.c:5662 local_lock_acquire+0x4c/0x19c include/linux/local_lock_internal.h:29 get_random_u8+0x158/0x580 drivers/char/random.c:511 get_random_u32_below include/linux/random.h:79 [inline] prandom_u32_max include/linux/prandom.h:29 [inline] kfence_guarded_alloc+0x44/0xb64 mm/kfence/core.c:365 __kfence_alloc+0x3a4/0x460 mm/kfence/core.c:1083 kfence_alloc include/linux/kfence.h:128 [inline] slab_alloc_node mm/slub.c:3283 [inline] slab_alloc mm/slub.c:3367 [inline] __kmem_cache_alloc_lru mm/slub.c:3374 [inline] kmem_cache_alloc+0x2c4/0x308 mm/slub.c:3383 skb_clone+0x190/0x304 net/core/skbuff.c:1660 dev_queue_xmit_nit+0x210/0x994 net/core/dev.c:2334 xmit_one net/core/dev.c:3691 [inline] dev_hard_start_xmit+0xf8/0x8cc net/core/dev.c:3711 sch_direct_xmit+0x210/0x474 net/sched/sch_generic.c:345 __dev_xmit_skb net/core/dev.c:3932 [inline] __dev_queue_xmit+0x13bc/0x3118 net/core/dev.c:4337 dev_queue_xmit include/linux/netdevice.h:3051 [inline] neigh_hh_output include/net/neighbour.h:529 [inline] neigh_output include/net/neighbour.h:543 [inline] ip_finish_output2+0xb98/0x109c net/ipv4/ip_output.c:228 __ip_finish_output+0x1b0/0x448 net/ipv4/ip_output.c:-1 ip_finish_output+0x40/0x264 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0x3c8/0x568 net/ipv4/ip_output.c:434 dst_output include/net/dst.h:453 [inline] ip_local_out net/ipv4/ip_output.c:126 [inline] __ip_queue_xmit+0xc84/0x1674 net/ipv4/ip_output.c:538 ip_queue_xmit+0x5c/0x7c net/ipv4/ip_output.c:552 __tcp_transmit_skb+0x17d8/0x2b88 net/ipv4/tcp_output.c:1405 tcp_transmit_skb net/ipv4/tcp_output.c:1423 [inline] tcp_write_xmit+0x11bc/0x4ba4 net/ipv4/tcp_output.c:2720 __tcp_push_pending_frames+0x98/0x228 net/ipv4/tcp_output.c:2905 tcp_push_pending_frames include/net/tcp.h:1986 [inline] tcp_data_snd_check net/ipv4/tcp_input.c:5600 [inline] tcp_rcv_established+0xe60/0x1d20 net/ipv4/tcp_input.c:6024 tcp_v4_do_rcv+0x38c/0xa7c net/ipv4/tcp_ipv4.c:1684 tcp_v4_rcv+0x1f2c/0x24cc net/ipv4/tcp_ipv4.c:2115 ip_protocol_deliver_rcu+0x350/0x778 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x250/0x488 net/ipv4/ip_input.c:233 NF_HOOK+0x2dc/0x36c include/linux/netfilter.h:302 ip_local_deliver+0x120/0x194 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:463 [inline] ip_sublist_rcv_finish net/ipv4/ip_input.c:580 [inline] ip_list_rcv_finish net/ipv4/ip_input.c:631 [inline] ip_sublist_rcv+0x8a8/0xb90 net/ipv4/ip_input.c:639 ip_list_rcv+0x394/0x3f0 net/ipv4/ip_input.c:674 __netif_receive_skb_list_ptype net/core/dev.c:5662 [inline] __netif_receive_skb_list_core+0x4e8/0x67c net/core/dev.c:5710 __netif_receive_skb_list net/core/dev.c:5762 [inline] netif_receive_skb_list_internal+0x6f0/0x998 net/core/dev.c:5853 gro_normal_list include/net/gro.h:433 [inline] napi_complete_done+0x258/0x604 net/core/dev.c:6194 gve_napi_poll_dqo+0x120/0x1c4 drivers/net/ethernet/google/gve/gve_main.c:260 __napi_poll+0xb4/0x3f0 net/core/dev.c:6628 napi_poll net/core/dev.c:6695 [inline] net_rx_action+0x514/0xb18 net/core/dev.c:6809 handle_softirqs+0x318/0xc60 kernel/softirq.c:596 __do_softirq+0x14/0x20 kernel/softirq.c:630 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:477 [inline] __irq_exit_rcu+0x23c/0x438 kernel/softirq.c:679 irq_exit_rcu+0x14/0x84 kernel/softirq.c:691 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x54 arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline] lock_acquire+0x24c/0x63c kernel/locking/lockdep.c:5665 __might_fault+0xc4/0x124 mm/memory.c:5850 do_recvmmsg+0x3d0/0xa0c net/socket.c:2879 __sys_recvmmsg net/socket.c:2952 [inline] __do_sys_recvmmsg net/socket.c:2975 [inline] __se_sys_recvmmsg net/socket.c:2968 [inline] __arm64_sys_recvmmsg+0x17c/0x23c net/socket.c:2968 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585