Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. 2025/12/24 08:11:44 parsed 1 programs [ 64.481991][ T4187] cgroup: Unknown subsys name 'net' [ 64.650523][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.198113][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.843865][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.852158][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.875635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.896900][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.905548][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.916469][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.956325][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 70.071631][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.079417][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.087886][ T4247] device bridge_slave_0 entered promiscuous mode [ 70.097763][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.105148][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.113214][ T4247] device bridge_slave_1 entered promiscuous mode [ 70.136550][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.148186][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.175062][ T4247] team0: Port device team_slave_0 added [ 70.182523][ T4247] team0: Port device team_slave_1 added [ 70.203179][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.210458][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.236607][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.249250][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.256308][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.282662][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.313977][ T4247] device hsr_slave_0 entered promiscuous mode [ 70.321133][ T4247] device hsr_slave_1 entered promiscuous mode [ 70.422489][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.433882][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.443105][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.454308][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.482418][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.489681][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.497901][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.505044][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.561207][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.575436][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.588155][ T1272] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.596944][ T1272] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.606257][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.640661][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.655701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.665914][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.673416][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.688107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.697158][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.705116][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.748929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.759704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.772752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.791646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.827769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.840999][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.990719][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.998428][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.011267][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.052531][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.062508][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.106555][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.115307][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.142295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.150378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.159035][ T4247] device veth0_vlan entered promiscuous mode [ 71.171509][ T4247] device veth1_vlan entered promiscuous mode [ 71.208264][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.217064][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.226438][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.235169][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.247836][ T4247] device veth0_macvtap entered promiscuous mode [ 71.258885][ T4247] device veth1_macvtap entered promiscuous mode [ 71.297054][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.306964][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.316840][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.326146][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.336176][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.351355][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.367991][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.377572][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.386699][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.396642][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.410196][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.419744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.428444][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.590682][ T4247] syz-executor (4247) used greatest stack depth: 20128 bytes left 2025/12/24 08:11:54 executed programs: 0 [ 72.629148][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 72.688453][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.695848][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.704468][ T4297] device bridge_slave_0 entered promiscuous mode [ 72.716909][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.724165][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.732514][ T4297] device bridge_slave_1 entered promiscuous mode [ 72.762754][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.778400][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.821238][ T4297] team0: Port device team_slave_0 added [ 72.830045][ T4297] team0: Port device team_slave_1 added [ 72.857643][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.867436][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.895038][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.908151][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.915316][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.941826][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.987015][ T4297] device hsr_slave_0 entered promiscuous mode [ 72.995272][ T4297] device hsr_slave_1 entered promiscuous mode [ 73.002052][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.011859][ T4297] Cannot create hsr debugfs directory [ 73.109003][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.524962][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 76.181409][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.280261][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.341150][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.575956][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.586194][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.597357][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.604769][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 76.614859][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.697046][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.709476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.717850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.728538][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.741212][ T747] device hsr_slave_0 left promiscuous mode [ 76.748116][ T747] device hsr_slave_1 left promiscuous mode [ 76.755517][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.762972][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.771501][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.782907][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.791075][ T747] device bridge_slave_1 left promiscuous mode [ 76.798527][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.812358][ T747] device bridge_slave_0 left promiscuous mode [ 76.818916][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.836914][ T747] device veth1_macvtap left promiscuous mode [ 76.843316][ T747] device veth0_macvtap left promiscuous mode [ 76.849799][ T747] device veth1_vlan left promiscuous mode [ 76.856002][ T747] device veth0_vlan left promiscuous mode [ 77.019237][ T747] team0 (unregistering): Port device team_slave_1 removed [ 77.031244][ T747] team0 (unregistering): Port device team_slave_0 removed [ 77.044999][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.060394][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.124024][ T747] bond0 (unregistering): Released all slaves [ 77.213333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.222257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.230827][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.238113][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.248383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.261148][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.270319][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.280167][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.287310][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.308338][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.330023][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.339883][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.350243][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.359482][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.368747][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.377441][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.387429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.396319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.411694][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.422986][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.443046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.451929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.553383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.561063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.574956][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.594826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.604194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.625413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.635020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.644879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.652686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.665618][ T4297] device veth0_vlan entered promiscuous mode [ 77.681773][ T4297] device veth1_vlan entered promiscuous mode [ 77.706742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.716830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.726001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.736250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.747584][ T4297] device veth0_macvtap entered promiscuous mode [ 77.758748][ T4297] device veth1_macvtap entered promiscuous mode [ 77.779958][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.789213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.798640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.809008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.820706][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.829816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.839268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.850872][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.873889][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882641][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893117][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.972266][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.993018][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.014899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.030323][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.041311][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.052583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.140109][ T4317] [ 78.142753][ T4317] ============================= [ 78.148673][ T4317] WARNING: suspicious RCU usage [ 78.154462][ T4317] syzkaller #0 Not tainted [ 78.158916][ T4317] ----------------------------- [ 78.164610][ T4317] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 78.173143][ T4317] [ 78.173143][ T4317] other info that might help us debug this: [ 78.173143][ T4317] [ 78.185572][ T4317] [ 78.185572][ T4317] rcu_scheduler_active = 2, debug_locks = 1 [ 78.194143][ T4317] 1 lock held by syz.0.17/4317: [ 78.199134][ T4317] #0: ffffffff8c11c8a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 78.209954][ T4317] [ 78.209954][ T4317] stack backtrace: [ 78.216493][ T4317] CPU: 1 PID: 4317 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.223730][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.233830][ T4317] Call Trace: [ 78.237133][ T4317] [ 78.240087][ T4317] dump_stack_lvl+0x168/0x230 [ 78.244858][ T4317] ? load_image+0x3b0/0x3b0 [ 78.249395][ T4317] ? show_regs_print_info+0x20/0x20 [ 78.254631][ T4317] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.260212][ T4317] get_callchain_entry+0x2a5/0x3b0 [ 78.265367][ T4317] get_perf_callchain+0x9f/0x480 [ 78.270469][ T4317] ? put_callchain_entry+0xb0/0xb0 [ 78.275718][ T4317] ? mark_lock+0x94/0x320 [ 78.280104][ T4317] ? verify_lock_unused+0x140/0x140 [ 78.285487][ T4317] ? __lock_acquire+0x13ad/0x7c60 [ 78.290563][ T4317] __bpf_get_stack+0x2cb/0x4f0 [ 78.295380][ T4317] ? stack_map_get_build_id_offset+0x860/0x860 [ 78.301574][ T4317] ? __cant_sleep+0x210/0x210 [ 78.306275][ T4317] ? bpf_prog_d43750871481577d+0x3d/0xa0 [ 78.311941][ T4317] bpf_get_stack_raw_tp+0x189/0x1c0 [ 78.317176][ T4317] bpf_prog_d43750871481577d+0x3d/0xa0 [ 78.322663][ T4317] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 78.328076][ T4317] bpf_prog_test_run_syscall+0x354/0x4e0 [ 78.333757][ T4317] ? sock_gen_cookie+0x60/0x60 [ 78.338682][ T4317] ? __fdget+0x150/0x210 [ 78.342962][ T4317] ? sock_gen_cookie+0x60/0x60 [ 78.347771][ T4317] bpf_prog_test_run+0x31e/0x390 [ 78.352769][ T4317] __sys_bpf+0x535/0x670 [ 78.357212][ T4317] ? bpf_link_show_fdinfo+0x340/0x340 [ 78.362652][ T4317] ? vtime_user_exit+0x2dc/0x400 [ 78.367633][ T4317] __x64_sys_bpf+0x78/0x90 [ 78.372093][ T4317] do_syscall_64+0x4c/0xa0 [ 78.376660][ T4317] ? clear_bhb_loop+0x30/0x80 [ 78.381384][ T4317] ? clear_bhb_loop+0x30/0x80 [ 78.386112][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.392188][ T4317] RIP: 0033:0x7fba72d26749 [ 78.396652][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.416477][ T4317] RSP: 002b:00007ffc5afcdbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.424926][ T4317] RAX: ffffffffffffffda RBX: 00007fba72f7cfa0 RCX: 00007fba72d26749 [ 78.432926][ T4317] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 78.440937][ T4317] RBP: 00007fba72daaf91 R08: 0000000000000000 R09: 0000000000000000 [ 78.448945][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.456943][ T4317] R13: 00007fba72f7cfa0 R14: 00007fba72f7cfa0 R15: 0000000000000003 [ 78.465105][ T4317] [ 78.481249][ T4317] [ 78.483882][ T4317] ============================= [ 78.488762][ T4317] WARNING: suspicious RCU usage [ 78.493871][ T4317] syzkaller #0 Not tainted [ 78.498325][ T4317] ----------------------------- [ 78.503379][ T4317] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 78.512218][ T4317] [ 78.512218][ T4317] other info that might help us debug this: [ 78.512218][ T4317] [ 78.523338][ T4317] [ 78.523338][ T4317] rcu_scheduler_active = 2, debug_locks = 1 [ 78.532529][ T4317] 1 lock held by syz.0.17/4317: [ 78.537568][ T4317] #0: ffffffff8c11c8a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 78.548219][ T4317] [ 78.548219][ T4317] stack backtrace: [ 78.554286][ T4317] CPU: 1 PID: 4317 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.561521][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.571608][ T4317] Call Trace: [ 78.574916][ T4317] [ 78.578222][ T4317] dump_stack_lvl+0x168/0x230 [ 78.583039][ T4317] ? load_image+0x3b0/0x3b0 [ 78.587760][ T4317] ? show_regs_print_info+0x20/0x20 [ 78.593119][ T4317] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.598719][ T4317] perf_callchain_kernel+0x5bf/0x6d0 [ 78.604145][ T4317] ? load_image+0x3b0/0x3b0 [ 78.608786][ T4317] ? show_regs_print_info+0x20/0x20 [ 78.614037][ T4317] ? arch_perf_update_userpage+0x3b0/0x3b0 [ 78.620023][ T4317] ? get_callchain_entry+0x181/0x3b0 [ 78.625365][ T4317] get_perf_callchain+0x376/0x480 [ 78.630434][ T4317] ? put_callchain_entry+0xb0/0xb0 [ 78.635578][ T4317] ? mark_lock+0x94/0x320 [ 78.639949][ T4317] ? verify_lock_unused+0x140/0x140 [ 78.645176][ T4317] ? __lock_acquire+0x13ad/0x7c60 [ 78.650226][ T4317] __bpf_get_stack+0x2cb/0x4f0 [ 78.655030][ T4317] ? stack_map_get_build_id_offset+0x860/0x860 [ 78.661221][ T4317] ? __cant_sleep+0x210/0x210 [ 78.665928][ T4317] ? bpf_prog_d43750871481577d+0x3d/0xa0 [ 78.671595][ T4317] bpf_get_stack_raw_tp+0x189/0x1c0 [ 78.676859][ T4317] bpf_prog_d43750871481577d+0x3d/0xa0 [ 78.682364][ T4317] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 78.687786][ T4317] bpf_prog_test_run_syscall+0x354/0x4e0 [ 78.693502][ T4317] ? sock_gen_cookie+0x60/0x60 [ 78.698309][ T4317] ? __fdget+0x150/0x210 [ 78.702584][ T4317] ? sock_gen_cookie+0x60/0x60 [ 78.707377][ T4317] bpf_prog_test_run+0x31e/0x390 [ 78.712366][ T4317] __sys_bpf+0x535/0x670 [ 78.716665][ T4317] ? bpf_link_show_fdinfo+0x340/0x340 [ 78.722098][ T4317] ? vtime_user_exit+0x2dc/0x400 [ 78.727169][ T4317] __x64_sys_bpf+0x78/0x90 [ 78.731627][ T4317] do_syscall_64+0x4c/0xa0 [ 78.736094][ T4317] ? clear_bhb_loop+0x30/0x80 [ 78.740804][ T4317] ? clear_bhb_loop+0x30/0x80 [ 78.745515][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.751442][ T4317] RIP: 0033:0x7fba72d26749 [ 78.755885][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.775696][ T4317] RSP: 002b:00007ffc5afcdbe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.784234][ T4317] RAX: ffffffffffffffda RBX: 00007fba72f7cfa0 RCX: 00007fba72d26749 [ 78.792417][ T4317] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 78.800439][ T4317] RBP: 00007fba72daaf91 R08: 0000000000000000 R09: 0000000000000000 [ 78.808491][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.816595][ T4317] R13: 00007fba72f7cfa0 R14: 00007fba72f7cfa0 R15: 0000000000000003 [ 78.824616][ T4317] [ 78.829652][ T4253] Bluetooth: hci0: command 0x040f tx timeout