Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2026/06/05 08:00:57 parsed 1 programs [ 68.147780][ T4200] cgroup: Unknown subsys name 'net' [ 68.256338][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.796033][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.219119][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.225691][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.546809][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.556508][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.568250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.592318][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.600390][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.608001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.168776][ T4226] syz-executor (4226) used greatest stack depth: 21136 bytes left [ 72.291727][ T4231] chnl_net:caif_netlink_parms(): no params data found [ 72.359115][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.368202][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.376497][ T4231] device bridge_slave_0 entered promiscuous mode [ 72.387681][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.394837][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.403164][ T4231] device bridge_slave_1 entered promiscuous mode [ 72.433541][ T4231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.447474][ T4231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.476938][ T4231] team0: Port device team_slave_0 added [ 72.484879][ T4231] team0: Port device team_slave_1 added [ 72.509727][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.516756][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.543047][ T4231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.558719][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.567064][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.594613][ T4231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.635398][ T4231] device hsr_slave_0 entered promiscuous mode [ 72.643742][ T4231] device hsr_slave_1 entered promiscuous mode [ 72.793901][ T4231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.807854][ T4231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.818069][ T4231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.828831][ T4231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.912374][ T4231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.930326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.942319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.954918][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.968986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.979857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.990013][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.997366][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.019721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.029845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.039375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.050150][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.057303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.069615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.079656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.100848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.113979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.125225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.137827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.154413][ T4231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.165799][ T4231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.179811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.188360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.198600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.207208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.338586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.347454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.361381][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.398633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.421806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.430555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.438511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.451201][ T4231] device veth0_vlan entered promiscuous mode [ 73.465397][ T4231] device veth1_vlan entered promiscuous mode [ 73.515168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.523707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.533669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.558184][ T4231] device veth0_macvtap entered promiscuous mode [ 73.567533][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.583463][ T4231] device veth1_macvtap entered promiscuous mode [ 73.601265][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.610428][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.619661][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.630518][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.639524][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.648680][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.659629][ T4231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.668803][ T4231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.677620][ T4231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.686430][ T4231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/05 08:01:07 executed programs: 0 [ 76.081163][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.224150][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 76.269930][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.277097][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.285043][ T4297] device bridge_slave_0 entered promiscuous mode [ 76.293798][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.301313][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.309422][ T4297] device bridge_slave_1 entered promiscuous mode [ 76.330107][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.342317][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.365550][ T4297] team0: Port device team_slave_0 added [ 76.374589][ T4297] team0: Port device team_slave_1 added [ 76.392678][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.399795][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.427227][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.439459][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.446725][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.472810][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.506872][ T4297] device hsr_slave_0 entered promiscuous mode [ 76.514008][ T4297] device hsr_slave_1 entered promiscuous mode [ 76.521616][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.529618][ T4297] Cannot create hsr debugfs directory [ 78.176339][ T4249] Bluetooth: hci0: command 0x0409 tx timeout [ 79.233255][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.273205][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.353286][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.255745][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 80.283328][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.295370][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.306528][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.339048][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.417148][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.430142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.439544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.450564][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.472017][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.480819][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.489732][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.496892][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.504835][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.513864][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.523037][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.530198][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.537966][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.566821][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.581500][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.592790][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.603641][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.612881][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.628961][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.638032][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.647165][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.656367][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.668141][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.677322][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.711978][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.825356][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.832984][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.867037][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.884658][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.893778][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.931058][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.940419][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.950063][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.958268][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.969811][ T4297] device veth0_vlan entered promiscuous mode [ 80.986646][ T154] device hsr_slave_0 left promiscuous mode [ 80.993176][ T154] device hsr_slave_1 left promiscuous mode [ 80.999895][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.008196][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.017294][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.024702][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.033699][ T154] device bridge_slave_1 left promiscuous mode [ 81.040626][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.054665][ T154] device bridge_slave_0 left promiscuous mode [ 81.061015][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.079512][ T154] device veth1_macvtap left promiscuous mode [ 81.085953][ T154] device veth0_macvtap left promiscuous mode [ 81.092059][ T154] device veth1_vlan left promiscuous mode [ 81.098951][ T154] device veth0_vlan left promiscuous mode [ 81.288403][ T154] team0 (unregistering): Port device team_slave_1 removed [ 81.301839][ T154] team0 (unregistering): Port device team_slave_0 removed [ 81.317944][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.333729][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.393167][ T154] bond0 (unregistering): Released all slaves [ 81.461259][ T4297] device veth1_vlan entered promiscuous mode [ 81.471989][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.493099][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.502722][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.513905][ T4297] device veth0_macvtap entered promiscuous mode [ 81.525324][ T4297] device veth1_macvtap entered promiscuous mode [ 81.541833][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.560181][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.571194][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.579757][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.589597][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.601089][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.608960][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.618479][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.629446][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.640672][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.649550][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.658581][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.723715][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.739407][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.760106][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.773780][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.785843][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.794164][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.840891][ T4360] [ 81.846785][ T4360] ============================= [ 81.851685][ T4360] WARNING: suspicious RCU usage [ 81.857986][ T4360] syzkaller #0 Not tainted [ 81.862448][ T4360] ----------------------------- [ 81.877046][ T4360] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 81.886045][ T4360] [ 81.886045][ T4360] other info that might help us debug this: [ 81.886045][ T4360] [ 81.896895][ T4360] [ 81.896895][ T4360] rcu_scheduler_active = 2, debug_locks = 1 [ 81.905001][ T4360] 1 lock held by syz.0.17/4360: [ 81.910555][ T4360] #0: ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 81.928610][ T4360] [ 81.928610][ T4360] stack backtrace: [ 81.934598][ T4360] CPU: 1 PID: 4360 Comm: syz.0.17 Not tainted syzkaller #0 [ 81.941831][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.951909][ T4360] Call Trace: [ 81.955220][ T4360] [ 81.958157][ T4360] dump_stack_lvl+0x188/0x250 [ 81.962865][ T4360] ? load_image+0x400/0x400 [ 81.967374][ T4360] ? show_regs_print_info+0x20/0x20 [ 81.972604][ T4360] ? print_tainted+0x148/0x170 [ 81.977390][ T4360] ? lockdep_rcu_suspicious+0x110/0x180 [ 81.982961][ T4360] get_callchain_entry+0x2a5/0x3b0 [ 81.988103][ T4360] get_perf_callchain+0xab/0x460 [ 81.993054][ T4360] ? put_callchain_entry+0xb0/0xb0 [ 81.998175][ T4360] ? mark_lock+0x94/0x320 [ 82.002531][ T4360] ? verify_lock_unused+0x140/0x140 [ 82.007769][ T4360] ? __lock_acquire+0x13bc/0x7d10 [ 82.012817][ T4360] __bpf_get_stack+0x2db/0x530 [ 82.017605][ T4360] ? stack_map_get_build_id_offset+0x860/0x860 [ 82.023795][ T4360] ? __cant_sleep+0x220/0x220 [ 82.028500][ T4360] ? bpf_prog_d43750871481577d+0x3d/0x5a4 [ 82.034226][ T4360] bpf_get_stack_raw_tp+0x189/0x1c0 [ 82.039433][ T4360] bpf_prog_d43750871481577d+0x3d/0x5a4 [ 82.045068][ T4360] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 82.050454][ T4360] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 82.056115][ T4360] ? sock_gen_cookie+0x60/0x60 [ 82.060926][ T4360] ? __fdget+0x150/0x210 [ 82.065278][ T4360] ? sock_gen_cookie+0x60/0x60 [ 82.070054][ T4360] bpf_prog_test_run+0x31e/0x390 [ 82.075002][ T4360] __sys_bpf+0x5a5/0x6f0 [ 82.079250][ T4360] ? bpf_link_show_fdinfo+0x380/0x380 [ 82.084662][ T4360] ? vtime_user_exit+0x2c8/0x3e0 [ 82.089639][ T4360] __x64_sys_bpf+0x78/0x90 [ 82.094073][ T4360] do_syscall_64+0x4c/0xa0 [ 82.098538][ T4360] ? clear_bhb_loop+0x30/0x80 [ 82.103240][ T4360] ? clear_bhb_loop+0x30/0x80 [ 82.107924][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.113922][ T4360] RIP: 0033:0x7fa1bd281e59 [ 82.118346][ T4360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.137993][ T4360] RSP: 002b:00007ffe5970ba58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.146451][ T4360] RAX: ffffffffffffffda RBX: 00007fa1bd4fafa0 RCX: 00007fa1bd281e59 [ 82.154485][ T4360] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 82.162506][ T4360] RBP: 00007fa1bd317d6f R08: 0000000000000000 R09: 0000000000000000 [ 82.170521][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.178536][ T4360] R13: 00007fa1bd4fafac R14: 00007fa1bd4fafa0 R15: 00007fa1bd4fafa0 [ 82.186560][ T4360] [ 82.193464][ T4360] [ 82.196633][ T4360] ============================= [ 82.202051][ T4360] WARNING: suspicious RCU usage [ 82.208298][ T4360] syzkaller #0 Not tainted [ 82.212894][ T4360] ----------------------------- [ 82.218684][ T4360] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 82.228971][ T4360] [ 82.228971][ T4360] other info that might help us debug this: [ 82.228971][ T4360] [ 82.239295][ T4360] [ 82.239295][ T4360] rcu_scheduler_active = 2, debug_locks = 1 [ 82.247578][ T4360] 1 lock held by syz.0.17/4360: [ 82.252470][ T4360] #0: ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 82.263146][ T4360] [ 82.263146][ T4360] stack backtrace: [ 82.269430][ T4360] CPU: 1 PID: 4360 Comm: syz.0.17 Not tainted syzkaller #0 [ 82.276660][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.286739][ T4360] Call Trace: [ 82.290043][ T4360] [ 82.292994][ T4360] dump_stack_lvl+0x188/0x250 [ 82.297753][ T4360] ? load_image+0x400/0x400 [ 82.302311][ T4360] ? show_regs_print_info+0x20/0x20 [ 82.307551][ T4360] ? lockdep_rcu_suspicious+0x110/0x180 [ 82.313132][ T4360] perf_callchain_kernel+0x5f1/0x720 [ 82.318474][ T4360] ? load_image+0x400/0x400 [ 82.323011][ T4360] ? show_regs_print_info+0x20/0x20 [ 82.328244][ T4360] ? print_tainted+0x148/0x170 [ 82.333058][ T4360] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 82.338912][ T4360] ? get_callchain_entry+0x181/0x3b0 [ 82.344235][ T4360] get_perf_callchain+0x356/0x460 [ 82.349294][ T4360] ? put_callchain_entry+0xb0/0xb0 [ 82.354439][ T4360] ? mark_lock+0x94/0x320 [ 82.358801][ T4360] ? verify_lock_unused+0x140/0x140 [ 82.364030][ T4360] ? __lock_acquire+0x13bc/0x7d10 [ 82.369091][ T4360] __bpf_get_stack+0x2db/0x530 [ 82.373900][ T4360] ? stack_map_get_build_id_offset+0x860/0x860 [ 82.380095][ T4360] ? __cant_sleep+0x220/0x220 [ 82.384804][ T4360] ? bpf_prog_d43750871481577d+0x3d/0x5a4 [ 82.390557][ T4360] bpf_get_stack_raw_tp+0x189/0x1c0 [ 82.395786][ T4360] bpf_prog_d43750871481577d+0x3d/0x5a4 [ 82.401406][ T4360] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 82.406818][ T4360] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 82.412484][ T4360] ? sock_gen_cookie+0x60/0x60 [ 82.417281][ T4360] ? __fdget+0x150/0x210 [ 82.421555][ T4360] ? sock_gen_cookie+0x60/0x60 [ 82.426349][ T4360] bpf_prog_test_run+0x31e/0x390 [ 82.431320][ T4360] __sys_bpf+0x5a5/0x6f0 [ 82.435676][ T4360] ? bpf_link_show_fdinfo+0x380/0x380 [ 82.441095][ T4360] ? vtime_user_exit+0x2c8/0x3e0 [ 82.446069][ T4360] __x64_sys_bpf+0x78/0x90 [ 82.450517][ T4360] do_syscall_64+0x4c/0xa0 [ 82.454961][ T4360] ? clear_bhb_loop+0x30/0x80 [ 82.459663][ T4360] ? clear_bhb_loop+0x30/0x80 [ 82.464382][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.470303][ T4360] RIP: 0033:0x7fa1bd281e59 [ 82.474744][ T4360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.494377][ T4360] RSP: 002b:00007ffe5970ba58 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.502824][ T4360] RAX: ffffffffffffffda RBX: 00007fa1bd4fafa0 RCX: 00007fa1bd281e59 [ 82.510841][ T4360] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 82.518850][ T4360] RBP: 00007fa1bd317d6f R08: 0000000000000000 R09: 0000000000000000 [ 82.526850][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.534845][ T4360] R13: 00007fa1bd4fafac R14: 00007fa1bd4fafa0 R15: 00007fa1bd4fafa0 [ 82.542866][ T4360] [ 82.549675][ T4238] Bluetooth: hci0: command 0x040f tx timeout