Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. 2026/05/04 15:45:59 parsed 1 programs [ 64.993070][ T4199] cgroup: Unknown subsys name 'net' [ 65.153718][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.614936][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.782230][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 69.855472][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.863390][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.873287][ T4250] device bridge_slave_0 entered promiscuous mode [ 69.883561][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.892310][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.900871][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.931166][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.943418][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.976291][ T4250] team0: Port device team_slave_0 added [ 69.984751][ T4250] team0: Port device team_slave_1 added [ 70.010936][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.018016][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.046296][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.059804][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.066957][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.093278][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.131438][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.139248][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.270348][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.280673][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.292080][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.305547][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.355963][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.363393][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.371586][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.378834][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.472061][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.486237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.502287][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.516646][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.531576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.571545][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.588563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.597900][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.605005][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.617107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.627363][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.634578][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.654235][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.668709][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.677266][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.686880][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.700454][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.711999][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.720262][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.803542][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.811673][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.824395][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.840581][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.849571][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.865929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.875142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.886589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.894885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.905121][ T4250] device veth0_vlan entered promiscuous mode [ 70.916563][ T4250] device veth1_vlan entered promiscuous mode [ 70.949130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.957682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.969182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.978359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.989014][ T4250] device veth0_macvtap entered promiscuous mode [ 70.997998][ T4250] device veth1_macvtap entered promiscuous mode [ 71.036684][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.045490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.055179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.063919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.073101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.084369][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.094015][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.103024][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.134612][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.144642][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.153573][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.162628][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.260892][ T4250] syz-executor (4250) used greatest stack depth: 20472 bytes left [ 71.521965][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.528895][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.909982][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.929494][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.941993][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.977260][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.985964][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.996456][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/04 15:46:09 executed programs: 0 [ 72.847446][ T4303] chnl_net:caif_netlink_parms(): no params data found [ 72.913412][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.920755][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.929267][ T4303] device bridge_slave_0 entered promiscuous mode [ 72.938832][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.945975][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.954363][ T4303] device bridge_slave_1 entered promiscuous mode [ 72.982678][ T4303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.994726][ T4303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.024214][ T4303] team0: Port device team_slave_0 added [ 73.032670][ T4303] team0: Port device team_slave_1 added [ 73.056676][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.064081][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.100856][ T4303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.113909][ T4303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.124034][ T4303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.150301][ T4303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.187815][ T4303] device hsr_slave_0 entered promiscuous mode [ 73.194825][ T4303] device hsr_slave_1 entered promiscuous mode [ 73.202509][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.210865][ T4303] Cannot create hsr debugfs directory [ 73.304325][ T4303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.718862][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 76.514953][ T4303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.587955][ T4303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.631744][ T4303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.769119][ T4303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.780134][ T4303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.789362][ T4303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.798185][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 76.810490][ T4303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.857565][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.884634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.893077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.903518][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.930655][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.939636][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.947993][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.955106][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.965079][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.976222][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.985497][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.994161][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.001565][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.013780][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.040991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.052763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.062090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.072781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.094452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.103651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.114949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.126468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.148638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.157140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.168681][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.262197][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.270266][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.292179][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.320584][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.329701][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.347257][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.356029][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.367012][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.375909][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.401095][ T154] device hsr_slave_0 left promiscuous mode [ 77.407768][ T154] device hsr_slave_1 left promiscuous mode [ 77.414674][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.423466][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.432121][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.440991][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.449206][ T154] device bridge_slave_1 left promiscuous mode [ 77.456242][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.470953][ T154] device bridge_slave_0 left promiscuous mode [ 77.477245][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.494442][ T154] device veth1_macvtap left promiscuous mode [ 77.501577][ T154] device veth0_macvtap left promiscuous mode [ 77.507759][ T154] device veth1_vlan left promiscuous mode [ 77.513995][ T154] device veth0_vlan left promiscuous mode [ 77.656947][ T154] team0 (unregistering): Port device team_slave_1 removed [ 77.674289][ T154] team0 (unregistering): Port device team_slave_0 removed [ 77.686952][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.704213][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.756280][ T154] bond0 (unregistering): Released all slaves [ 77.803702][ T4303] device veth0_vlan entered promiscuous mode [ 77.817354][ T4303] device veth1_vlan entered promiscuous mode [ 77.835060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.843878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.852575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.861580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.872617][ T4303] device veth0_macvtap entered promiscuous mode [ 77.888472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.902025][ T4303] device veth1_macvtap entered promiscuous mode [ 77.921027][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.928624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.937517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.949829][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.958879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.969437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.986148][ T4303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.995830][ T4303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005355][ T4303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.017933][ T4303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.095255][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.104238][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.115365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.137462][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.145847][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.155251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.216519][ T4326] [ 78.219087][ T4326] ============================= [ 78.224148][ T4326] WARNING: suspicious RCU usage [ 78.231138][ T4326] syzkaller #0 Not tainted [ 78.235678][ T4326] ----------------------------- [ 78.244082][ T4326] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 78.253150][ T4326] [ 78.253150][ T4326] other info that might help us debug this: [ 78.253150][ T4326] [ 78.264075][ T4326] [ 78.264075][ T4326] rcu_scheduler_active = 2, debug_locks = 1 [ 78.272481][ T4326] 1 lock held by syz.0.17/4326: [ 78.277445][ T4326] #0: ffffffff8c31eca0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 78.287965][ T4326] [ 78.287965][ T4326] stack backtrace: [ 78.294676][ T4326] CPU: 0 PID: 4326 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.301913][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.312127][ T4326] Call Trace: [ 78.315453][ T4326] [ 78.318413][ T4326] dump_stack_lvl+0x188/0x250 [ 78.323210][ T4326] ? load_image+0x400/0x400 [ 78.327734][ T4326] ? show_regs_print_info+0x20/0x20 [ 78.332966][ T4326] ? print_tainted+0x148/0x170 [ 78.337858][ T4326] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.343430][ T4326] get_callchain_entry+0x2a5/0x3b0 [ 78.348642][ T4326] get_perf_callchain+0xab/0x460 [ 78.353719][ T4326] ? put_callchain_entry+0xb0/0xb0 [ 78.358872][ T4326] ? mark_lock+0x94/0x320 [ 78.363224][ T4326] ? verify_lock_unused+0x140/0x140 [ 78.368449][ T4326] ? __lock_acquire+0x13bc/0x7d10 [ 78.373529][ T4326] __bpf_get_stack+0x2db/0x530 [ 78.378413][ T4326] ? stack_map_get_build_id_offset+0x860/0x860 [ 78.384605][ T4326] ? __cant_sleep+0x220/0x220 [ 78.389301][ T4326] ? bpf_prog_14d9fb3786f83342+0x3d/0xc30 [ 78.395042][ T4326] bpf_get_stack_raw_tp+0x189/0x1c0 [ 78.400269][ T4326] bpf_prog_14d9fb3786f83342+0x3d/0xc30 [ 78.405859][ T4326] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 78.411270][ T4326] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 78.416934][ T4326] ? sock_gen_cookie+0x60/0x60 [ 78.421748][ T4326] ? __fdget+0x150/0x210 [ 78.426016][ T4326] ? sock_gen_cookie+0x60/0x60 [ 78.430898][ T4326] bpf_prog_test_run+0x31e/0x390 [ 78.435858][ T4326] __sys_bpf+0x5a5/0x6f0 [ 78.440122][ T4326] ? bpf_link_show_fdinfo+0x380/0x380 [ 78.445661][ T4326] ? vtime_user_exit+0x2c8/0x3e0 [ 78.450906][ T4326] __x64_sys_bpf+0x78/0x90 [ 78.455613][ T4326] do_syscall_64+0x4c/0xa0 [ 78.460063][ T4326] ? clear_bhb_loop+0x30/0x80 [ 78.464847][ T4326] ? clear_bhb_loop+0x30/0x80 [ 78.469724][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.475724][ T4326] RIP: 0033:0x7f5abac51dd9 [ 78.480165][ T4326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.499879][ T4326] RSP: 002b:00007ffe6bd319c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.508420][ T4326] RAX: ffffffffffffffda RBX: 00007f5abaecafa0 RCX: 00007f5abac51dd9 [ 78.516797][ T4326] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 78.525503][ T4326] RBP: 00007f5abace7d69 R08: 0000000000000000 R09: 0000000000000000 [ 78.533928][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.542100][ T4326] R13: 00007f5abaecafac R14: 00007f5abaecafa0 R15: 00007f5abaecafa0 [ 78.550201][ T4326] [ 78.563404][ T4326] [ 78.565781][ T4326] ============================= [ 78.571112][ T4326] WARNING: suspicious RCU usage [ 78.576075][ T4326] syzkaller #0 Not tainted [ 78.582245][ T4326] ----------------------------- [ 78.587552][ T4326] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 78.597148][ T4326] [ 78.597148][ T4326] other info that might help us debug this: [ 78.597148][ T4326] [ 78.608108][ T4326] [ 78.608108][ T4326] rcu_scheduler_active = 2, debug_locks = 1 [ 78.616306][ T4326] 1 lock held by syz.0.17/4326: [ 78.621557][ T4326] #0: ffffffff8c31eca0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 78.631990][ T4326] [ 78.631990][ T4326] stack backtrace: [ 78.637989][ T4326] CPU: 0 PID: 4326 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.645300][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.655466][ T4326] Call Trace: [ 78.658852][ T4326] [ 78.661799][ T4326] dump_stack_lvl+0x188/0x250 [ 78.666504][ T4326] ? load_image+0x400/0x400 [ 78.671030][ T4326] ? show_regs_print_info+0x20/0x20 [ 78.676261][ T4326] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.682492][ T4326] perf_callchain_kernel+0x5f1/0x720 [ 78.687997][ T4326] ? load_image+0x400/0x400 [ 78.692610][ T4326] ? show_regs_print_info+0x20/0x20 [ 78.698005][ T4326] ? print_tainted+0x148/0x170 [ 78.703164][ T4326] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 78.709101][ T4326] ? get_callchain_entry+0x181/0x3b0 [ 78.714499][ T4326] get_perf_callchain+0x356/0x460 [ 78.719556][ T4326] ? put_callchain_entry+0xb0/0xb0 [ 78.724698][ T4326] ? mark_lock+0x94/0x320 [ 78.729052][ T4326] ? verify_lock_unused+0x140/0x140 [ 78.734275][ T4326] ? __lock_acquire+0x13bc/0x7d10 [ 78.739339][ T4326] __bpf_get_stack+0x2db/0x530 [ 78.744144][ T4326] ? stack_map_get_build_id_offset+0x860/0x860 [ 78.750524][ T4326] ? __cant_sleep+0x220/0x220 [ 78.755314][ T4326] ? bpf_prog_14d9fb3786f83342+0x3d/0xc30 [ 78.761159][ T4326] bpf_get_stack_raw_tp+0x189/0x1c0 [ 78.766393][ T4326] bpf_prog_14d9fb3786f83342+0x3d/0xc30 [ 78.772047][ T4326] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 78.777446][ T4326] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 78.783540][ T4326] ? sock_gen_cookie+0x60/0x60 [ 78.788606][ T4326] ? __fdget+0x150/0x210 [ 78.792884][ T4326] ? sock_gen_cookie+0x60/0x60 [ 78.797761][ T4326] bpf_prog_test_run+0x31e/0x390 [ 78.802725][ T4326] __sys_bpf+0x5a5/0x6f0 [ 78.806999][ T4326] ? bpf_link_show_fdinfo+0x380/0x380 [ 78.812411][ T4326] ? vtime_user_exit+0x2c8/0x3e0 [ 78.817386][ T4326] __x64_sys_bpf+0x78/0x90 [ 78.821914][ T4326] do_syscall_64+0x4c/0xa0 [ 78.826453][ T4326] ? clear_bhb_loop+0x30/0x80 [ 78.831157][ T4326] ? clear_bhb_loop+0x30/0x80 [ 78.835863][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.841783][ T4326] RIP: 0033:0x7f5abac51dd9 [ 78.846226][ T4326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.865941][ T4326] RSP: 002b:00007ffe6bd319c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.874552][ T4326] RAX: ffffffffffffffda RBX: 00007f5abaecafa0 RCX: 00007f5abac51dd9 [ 78.882638][ T4326] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 78.890847][ T4326] RBP: 00007f5abace7d69 R08: 0000000000000000 R09: 0000000000000000 [ 78.898852][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.906943][ T4326] R13: 00007f5abaecafac R14: 00007f5abaecafa0 R15: 00007f5abaecafa0 [ 78.915232][ T4326] [ 78.920008][ T4320] Bluetooth: hci0: command 0x040f tx timeout