Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. 2026/06/16 16:24:19 parsed 1 programs [ 63.072371][ T4199] cgroup: Unknown subsys name 'net' [ 63.201602][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.452179][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.160973][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.171768][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.182156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.202438][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.210310][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.218004][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.827784][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 66.885739][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.893607][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.901972][ T4239] device bridge_slave_0 entered promiscuous mode [ 66.911556][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.918816][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.926862][ T4239] device bridge_slave_1 entered promiscuous mode [ 66.951280][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.963067][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.989422][ T4239] team0: Port device team_slave_0 added [ 66.997229][ T4239] team0: Port device team_slave_1 added [ 67.018892][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.025938][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.051872][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.064793][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.072076][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.098708][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.134655][ T4239] device hsr_slave_0 entered promiscuous mode [ 67.141636][ T4239] device hsr_slave_1 entered promiscuous mode [ 67.273258][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.285289][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.294872][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.304765][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.381205][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.394636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.405362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.417017][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.430676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.440581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.449903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.457143][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.466564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.475501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.484290][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.491498][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.499315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.510033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.526524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.535858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.549602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.559038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.579111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.588801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.603711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.616630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.625332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.635161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.646888][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.744441][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.752298][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.765244][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.780347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.790182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.808342][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.816596][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.825199][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.833922][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.843336][ T4239] device veth0_vlan entered promiscuous mode [ 67.854172][ T4239] device veth1_vlan entered promiscuous mode [ 67.873500][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.881694][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.890366][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.901005][ T4239] device veth0_macvtap entered promiscuous mode [ 67.911295][ T4239] device veth1_macvtap entered promiscuous mode [ 67.948513][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.956988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.965196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.974174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.997268][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.004808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.014103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.025406][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034609][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.044449][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.053887][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.151243][ T4239] syz-executor (4239) used greatest stack depth: 20784 bytes left 2026/06/16 16:24:27 executed programs: 0 [ 69.980238][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 70.030190][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.037799][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.045532][ T4300] device bridge_slave_0 entered promiscuous mode [ 70.054151][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.061744][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.070882][ T4300] device bridge_slave_1 entered promiscuous mode [ 70.093704][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.106401][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.134523][ T4300] team0: Port device team_slave_0 added [ 70.142628][ T4300] team0: Port device team_slave_1 added [ 70.162250][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.169465][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.195582][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.207300][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.214447][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.240610][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.281996][ T1157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.300832][ T4300] device hsr_slave_0 entered promiscuous mode [ 70.307886][ T4300] device hsr_slave_1 entered promiscuous mode [ 70.315008][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.323338][ T4300] Cannot create hsr debugfs directory [ 71.378747][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.385399][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.936735][ T4254] Bluetooth: hci0: command 0x0409 tx timeout [ 73.504149][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.541315][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.623191][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.018259][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 74.450752][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.459862][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.469916][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.480171][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.539637][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.568417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.576845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.587441][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.596493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.605146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.614381][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.621486][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.631101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.650916][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.659617][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.668414][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.675468][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.684113][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.694257][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.718032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.728069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.736719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.746963][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.755499][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.770106][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.778897][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.806756][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.815653][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.826885][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.930051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.938069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.965178][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.983531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.992593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.016179][ T1157] device hsr_slave_0 left promiscuous mode [ 75.023192][ T1157] device hsr_slave_1 left promiscuous mode [ 75.029935][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.038330][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.047312][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.054974][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.062850][ T1157] device bridge_slave_1 left promiscuous mode [ 75.069936][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.082333][ T1157] device bridge_slave_0 left promiscuous mode [ 75.089949][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.104449][ T1157] device veth1_macvtap left promiscuous mode [ 75.110928][ T1157] device veth0_macvtap left promiscuous mode [ 75.117686][ T1157] device veth1_vlan left promiscuous mode [ 75.123583][ T1157] device veth0_vlan left promiscuous mode [ 75.265121][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 75.279407][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 75.292064][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.304980][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.357643][ T1157] bond0 (unregistering): Released all slaves [ 75.392050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.400281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.408759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.416592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.432048][ T4300] device veth0_vlan entered promiscuous mode [ 75.443998][ T4300] device veth1_vlan entered promiscuous mode [ 75.462888][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.471203][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.479695][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.488426][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.501773][ T4300] device veth0_macvtap entered promiscuous mode [ 75.512352][ T4300] device veth1_macvtap entered promiscuous mode [ 75.528051][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.535502][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.544224][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.552518][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.561528][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.575032][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.582468][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.593637][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.605593][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.614618][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.623580][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.632835][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.682030][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.692325][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.700403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.725726][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.734031][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.746388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.819637][ T4359] [ 75.822119][ T4359] ============================= [ 75.828237][ T4359] WARNING: suspicious RCU usage [ 75.833091][ T4359] syzkaller #0 Not tainted [ 75.838060][ T4359] ----------------------------- [ 75.842913][ T4359] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 75.851842][ T4359] [ 75.851842][ T4359] other info that might help us debug this: [ 75.851842][ T4359] [ 75.864152][ T4359] [ 75.864152][ T4359] rcu_scheduler_active = 2, debug_locks = 1 [ 75.872626][ T4359] 1 lock held by syz.0.17/4359: [ 75.877879][ T4359] #0: ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 75.888109][ T4359] [ 75.888109][ T4359] stack backtrace: [ 75.894013][ T4359] CPU: 0 PID: 4359 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.901213][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.911378][ T4359] Call Trace: [ 75.914655][ T4359] [ 75.917754][ T4359] dump_stack_lvl+0x188/0x250 [ 75.922450][ T4359] ? load_image+0x400/0x400 [ 75.926957][ T4359] ? show_regs_print_info+0x20/0x20 [ 75.932151][ T4359] ? print_tainted+0x148/0x170 [ 75.936929][ T4359] ? lockdep_rcu_suspicious+0x110/0x180 [ 75.942569][ T4359] get_callchain_entry+0x2a5/0x3b0 [ 75.947691][ T4359] get_perf_callchain+0xab/0x460 [ 75.952628][ T4359] ? put_callchain_entry+0xb0/0xb0 [ 75.957745][ T4359] ? mark_lock+0x94/0x320 [ 75.962081][ T4359] __bpf_get_stack+0x2db/0x530 [ 75.966946][ T4359] ? stack_map_get_build_id_offset+0x860/0x860 [ 75.973111][ T4359] ? bpf_prog_118ee59fc6e897db_F+0x29/0x374 [ 75.979261][ T4359] bpf_get_stack_raw_tp+0x189/0x1c0 [ 75.984487][ T4359] bpf_prog_118ee59fc6e897db_F+0x29/0x374 [ 75.990206][ T4359] bpf_prog_19484586d131c401+0x18/0xb9c [ 75.995753][ T4359] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 76.001136][ T4359] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 76.006787][ T4359] ? sock_gen_cookie+0x60/0x60 [ 76.011570][ T4359] ? __fdget+0x150/0x210 [ 76.015816][ T4359] ? sock_gen_cookie+0x60/0x60 [ 76.020731][ T4359] bpf_prog_test_run+0x31e/0x390 [ 76.025694][ T4359] __sys_bpf+0x5a5/0x6f0 [ 76.029957][ T4359] ? bpf_link_show_fdinfo+0x380/0x380 [ 76.035352][ T4359] ? vtime_user_exit+0x2c8/0x3e0 [ 76.040307][ T4359] __x64_sys_bpf+0x78/0x90 [ 76.044742][ T4359] do_syscall_64+0x4c/0xa0 [ 76.049160][ T4359] ? clear_bhb_loop+0x30/0x80 [ 76.053837][ T4359] ? clear_bhb_loop+0x30/0x80 [ 76.058530][ T4359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.064476][ T4359] RIP: 0033:0x7fe5864b8e59 [ 76.069252][ T4359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.088971][ T4359] RSP: 002b:00007ffe19098ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.097496][ T4359] RAX: ffffffffffffffda RBX: 00007fe586731fa0 RCX: 00007fe5864b8e59 [ 76.105484][ T4359] RDX: 0000000000000010 RSI: 0000200000001ac0 RDI: 000000000000000a [ 76.113456][ T4359] RBP: 00007fe58654ed6f R08: 0000000000000000 R09: 0000000000000000 [ 76.121523][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.129584][ T4359] R13: 00007fe586731fac R14: 00007fe586731fa0 R15: 00007fe586731fa0 [ 76.137669][ T4359] [ 76.143794][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 76.158527][ T4359] [ 76.160882][ T4359] ============================= [ 76.165737][ T4359] WARNING: suspicious RCU usage [ 76.171119][ T4359] syzkaller #0 Not tainted [ 76.175533][ T4359] ----------------------------- [ 76.181570][ T4359] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 76.191311][ T4359] [ 76.191311][ T4359] other info that might help us debug this: [ 76.191311][ T4359] [ 76.202095][ T4359] [ 76.202095][ T4359] rcu_scheduler_active = 2, debug_locks = 1 [ 76.210745][ T4359] 1 lock held by syz.0.17/4359: [ 76.215601][ T4359] #0: ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 76.226166][ T4359] [ 76.226166][ T4359] stack backtrace: [ 76.232062][ T4359] CPU: 0 PID: 4359 Comm: syz.0.17 Not tainted syzkaller #0 [ 76.239298][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.249355][ T4359] Call Trace: [ 76.252643][ T4359] [ 76.255568][ T4359] dump_stack_lvl+0x188/0x250 [ 76.260262][ T4359] ? load_image+0x400/0x400 [ 76.264856][ T4359] ? show_regs_print_info+0x20/0x20 [ 76.270238][ T4359] ? lockdep_rcu_suspicious+0x110/0x180 [ 76.275795][ T4359] perf_callchain_kernel+0x5f1/0x720 [ 76.281172][ T4359] ? load_image+0x400/0x400 [ 76.285679][ T4359] ? show_regs_print_info+0x20/0x20 [ 76.290877][ T4359] ? print_tainted+0x148/0x170 [ 76.295644][ T4359] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 76.301468][ T4359] ? get_callchain_entry+0x181/0x3b0 [ 76.306758][ T4359] get_perf_callchain+0x356/0x460 [ 76.311799][ T4359] ? put_callchain_entry+0xb0/0xb0 [ 76.317094][ T4359] ? mark_lock+0x94/0x320 [ 76.321445][ T4359] __bpf_get_stack+0x2db/0x530 [ 76.326230][ T4359] ? stack_map_get_build_id_offset+0x860/0x860 [ 76.332390][ T4359] ? bpf_prog_118ee59fc6e897db_F+0x29/0x374 [ 76.338292][ T4359] bpf_get_stack_raw_tp+0x189/0x1c0 [ 76.343514][ T4359] bpf_prog_118ee59fc6e897db_F+0x29/0x374 [ 76.349420][ T4359] bpf_prog_19484586d131c401+0x18/0xb9c [ 76.355068][ T4359] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 76.360469][ T4359] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 76.366116][ T4359] ? sock_gen_cookie+0x60/0x60 [ 76.370902][ T4359] ? __fdget+0x150/0x210 [ 76.375139][ T4359] ? sock_gen_cookie+0x60/0x60 [ 76.380011][ T4359] bpf_prog_test_run+0x31e/0x390 [ 76.385058][ T4359] __sys_bpf+0x5a5/0x6f0 [ 76.389324][ T4359] ? bpf_link_show_fdinfo+0x380/0x380 [ 76.394826][ T4359] ? vtime_user_exit+0x2c8/0x3e0 [ 76.399967][ T4359] __x64_sys_bpf+0x78/0x90 [ 76.404405][ T4359] do_syscall_64+0x4c/0xa0 [ 76.408828][ T4359] ? clear_bhb_loop+0x30/0x80 [ 76.413510][ T4359] ? clear_bhb_loop+0x30/0x80 [ 76.418199][ T4359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.424109][ T4359] RIP: 0033:0x7fe5864b8e59 [ 76.428541][ T4359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.448355][ T4359] RSP: 002b:00007ffe19098ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.456801][ T4359] RAX: ffffffffffffffda RBX: 00007fe586731fa0 RCX: 00007fe5864b8e59 [ 76.464881][ T4359] RDX: 0000000000000010 RSI: 0000200000001ac0 RDI: 000000000000000a [ 76.472860][ T4359] RBP: 00007fe58654ed6f R08: 0000000000000000 R09: 0000000000000000 [ 76.481359][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.489330][ T4359] R13: 00007fe586731fac R14: 00007fe586731fa0 R15: 00007fe586731fa0 [ 76.497326][ T4359]