Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. 2026/07/14 22:37:57 parsed 1 programs 2026/07/14 22:37:57 serving rpc on tcp://41643 [ 62.698433][ T4199] cgroup: Unknown subsys name 'net' [ 62.834560][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.064661][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.264804][ T4207] chnl_net:caif_netlink_parms(): no params data found [ 65.300993][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.308457][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.316632][ T4207] device bridge_slave_0 entered promiscuous mode [ 65.325162][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.332328][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.340328][ T4207] device bridge_slave_1 entered promiscuous mode [ 65.357357][ T4207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.368313][ T4207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.388273][ T4207] team0: Port device team_slave_0 added [ 65.395468][ T4207] team0: Port device team_slave_1 added [ 65.409515][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.416520][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.442489][ T4207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.454863][ T4207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.461883][ T4207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.487905][ T4207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.517257][ T4207] device hsr_slave_0 entered promiscuous mode [ 65.524107][ T4207] device hsr_slave_1 entered promiscuous mode [ 65.601058][ T4207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.611738][ T4207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.620958][ T4207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.629690][ T4207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.650494][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.657649][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.665599][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.672674][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.708436][ T4207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.722342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.732934][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.742192][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.750263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.763224][ T4207] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.774153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.783449][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.790594][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.802473][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.811460][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.818494][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.836391][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.845589][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.857000][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.868935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.881797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.891908][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.960639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.968118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.979850][ T4207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.995265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.015114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.023481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.031827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.041624][ T4207] device veth0_vlan entered promiscuous mode [ 66.052947][ T4207] device veth1_vlan entered promiscuous mode [ 66.069490][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.077530][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.086161][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.096252][ T4207] device veth0_macvtap entered promiscuous mode [ 66.106224][ T4207] device veth1_macvtap entered promiscuous mode [ 66.120557][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.128061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.137413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.149110][ T4207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.156823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.167895][ T4207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176896][ T4207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.185946][ T4207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195162][ T4207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.318356][ T4207] syz-executor (4207) used greatest stack depth: 20464 bytes left [ 66.335277][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.525140][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.533806][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.544413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.561384][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.569208][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.578042][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.105685][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.251708][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258183][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.584241][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.646030][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/14 22:38:08 executed programs: 0 [ 72.388883][ T9] device hsr_slave_0 left promiscuous mode [ 72.397642][ T9] device hsr_slave_1 left promiscuous mode [ 72.408647][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.417400][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.428577][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.436214][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.445343][ T9] device bridge_slave_1 left promiscuous mode [ 72.453469][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.471964][ T9] device bridge_slave_0 left promiscuous mode [ 72.478450][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.500114][ T9] device veth1_macvtap left promiscuous mode [ 72.506475][ T9] device veth0_macvtap left promiscuous mode [ 72.512788][ T9] device veth1_vlan left promiscuous mode [ 72.518686][ T9] device veth0_vlan left promiscuous mode [ 72.648954][ T9] team0 (unregistering): Port device team_slave_1 removed [ 72.662490][ T9] team0 (unregistering): Port device team_slave_0 removed [ 72.674267][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.686910][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.736255][ T9] bond0 (unregistering): Released all slaves [ 72.882262][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 72.933876][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.941180][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.956468][ T4317] device bridge_slave_0 entered promiscuous mode [ 72.967757][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.975521][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.985962][ T4317] device bridge_slave_1 entered promiscuous mode [ 73.011257][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.044388][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.074487][ T4317] team0: Port device team_slave_0 added [ 73.093270][ T4317] team0: Port device team_slave_1 added [ 73.114210][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.122808][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.148955][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.165692][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.174112][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.200221][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.234691][ T4317] device hsr_slave_0 entered promiscuous mode [ 73.241700][ T4317] device hsr_slave_1 entered promiscuous mode [ 73.797981][ T4317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.815017][ T4317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.832607][ T4317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.852795][ T4317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.961639][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.988053][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.000739][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.011957][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.027199][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.037136][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.047077][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.054190][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.072375][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.082348][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.092885][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.103471][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.110572][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.119101][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.150939][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.173831][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.188510][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.200981][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.210230][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.220717][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.231475][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.240493][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.255369][ T4317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.270111][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.278264][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.291095][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.450380][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 74.468127][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.476163][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.493972][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.534408][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.550172][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.571304][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.580555][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.590721][ T4317] device veth0_vlan entered promiscuous mode [ 74.599442][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.610654][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.622112][ T4317] device veth1_vlan entered promiscuous mode [ 74.645321][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.655004][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.665230][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.675305][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.686406][ T4317] device veth0_macvtap entered promiscuous mode [ 74.698243][ T4317] device veth1_macvtap entered promiscuous mode [ 74.720807][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.728167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.739056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.749068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.760081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.773909][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.795513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.811695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.880659][ T4317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.889393][ T4317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.906340][ T4317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915329][ T4317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.121678][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.140703][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.158107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.187324][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.195681][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.208774][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.264393][ T4432] [ 75.266790][ T4432] ============================= [ 75.272443][ T4432] WARNING: suspicious RCU usage [ 75.277573][ T4432] syzkaller #0 Not tainted [ 75.282365][ T4432] ----------------------------- [ 75.287229][ T4432] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 75.296232][ T4432] [ 75.296232][ T4432] other info that might help us debug this: [ 75.296232][ T4432] [ 75.306907][ T4432] [ 75.306907][ T4432] rcu_scheduler_active = 2, debug_locks = 1 [ 75.316995][ T4432] 1 lock held by syz.0.17/4432: [ 75.322117][ T4432] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 75.332337][ T4432] [ 75.332337][ T4432] stack backtrace: [ 75.338268][ T4432] CPU: 0 PID: 4432 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.345518][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 75.355607][ T4432] Call Trace: [ 75.358895][ T4432] [ 75.361831][ T4432] dump_stack_lvl+0x188/0x250 [ 75.366514][ T4432] ? load_image+0x410/0x410 [ 75.371001][ T4432] ? show_regs_print_info+0x20/0x20 [ 75.376193][ T4432] ? lockdep_rcu_suspicious+0x110/0x180 [ 75.381748][ T4432] ? local_bh_enable+0x20/0x20 [ 75.386524][ T4432] rhltable_lookup+0x787/0x7a0 [ 75.391302][ T4432] ? mark_lock+0x94/0x320 [ 75.395635][ T4432] ? mr_mfc_find_parent+0x190/0x190 [ 75.400837][ T4432] ? local_bh_enable+0x20/0x20 [ 75.405629][ T4432] ? lock_chain_count+0x20/0x20 [ 75.410496][ T4432] mr_mfc_find_any_parent+0xb7/0x1d0 [ 75.415791][ T4432] ? local_bh_enable+0x20/0x20 [ 75.420562][ T4432] ip_mr_forward+0x247/0xf60 [ 75.425173][ T4432] ipmr_mfc_add+0x2273/0x2bd0 [ 75.429872][ T4432] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 75.434820][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 75.439871][ T4432] ip_mroute_setsockopt+0xecd/0x1230 [ 75.445171][ T4432] ? ipmr_rule_default+0x70/0x70 [ 75.450123][ T4432] ? do_futex+0xd83/0x12b0 [ 75.454550][ T4432] ? __might_sleep+0xf0/0xf0 [ 75.459256][ T4432] ? vfs_write+0xaa6/0xd70 [ 75.463680][ T4432] ip_setsockopt+0x568/0x31e0 [ 75.468373][ T4432] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 75.473763][ T4432] ? aa_sk_perm+0x7dc/0x910 [ 75.478280][ T4432] ? aa_af_perm+0x340/0x340 [ 75.482799][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 75.487843][ T4432] ? aa_sock_opt_perm+0x74/0x100 [ 75.492798][ T4432] ? sock_common_setsockopt+0x32/0xb0 [ 75.498178][ T4432] ? raw_setsockopt+0xc2/0x170 [ 75.502950][ T4432] ? sock_common_recvmsg+0x1c0/0x1c0 [ 75.508242][ T4432] __sys_setsockopt+0x2bf/0x3d0 [ 75.513113][ T4432] __x64_sys_setsockopt+0xb1/0xc0 [ 75.518150][ T4432] do_syscall_64+0x4c/0xa0 [ 75.522575][ T4432] ? clear_bhb_loop+0x30/0x80 [ 75.527263][ T4432] ? clear_bhb_loop+0x30/0x80 [ 75.531953][ T4432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.537871][ T4432] RIP: 0033:0x7fb84e88be59 [ 75.542307][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.561922][ T4432] RSP: 002b:00007ffd620c2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.570354][ T4432] RAX: ffffffffffffffda RBX: 00007fb84eb13fa0 RCX: 00007fb84e88be59 [ 75.578344][ T4432] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 75.586335][ T4432] RBP: 00007fb84e921e6f R08: 000000000000003c R09: 0000000000000000 [ 75.594316][ T4432] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 75.602302][ T4432] R13: 00007fb84eb13fac R14: 00007fb84eb13fa0 R15: 00007fb84eb13fa0 [ 75.610295][ T4432] [ 75.621218][ T4432] [ 75.623574][ T4432] ============================= [ 75.628423][ T4432] WARNING: suspicious RCU usage [ 75.634097][ T4432] syzkaller #0 Not tainted [ 75.638529][ T4432] ----------------------------- [ 75.643808][ T4432] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 75.653101][ T4432] [ 75.653101][ T4432] other info that might help us debug this: [ 75.653101][ T4432] [ 75.663792][ T4432] [ 75.663792][ T4432] rcu_scheduler_active = 2, debug_locks = 1 [ 75.672343][ T4432] 1 lock held by syz.0.17/4432: [ 75.677220][ T4432] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 75.687550][ T4432] [ 75.687550][ T4432] stack backtrace: [ 75.693802][ T4432] CPU: 1 PID: 4432 Comm: syz.0.17 Not tainted syzkaller #0 [ 75.701116][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 75.711157][ T4432] Call Trace: [ 75.714423][ T4432] [ 75.717337][ T4432] dump_stack_lvl+0x188/0x250 [ 75.722005][ T4432] ? load_image+0x410/0x410 [ 75.726501][ T4432] ? show_regs_print_info+0x20/0x20 [ 75.731690][ T4432] ? lockdep_rcu_suspicious+0x110/0x180 [ 75.737240][ T4432] ? local_bh_enable+0x20/0x20 [ 75.741983][ T4432] rhltable_lookup+0x512/0x7a0 [ 75.746735][ T4432] ? local_bh_enable+0x20/0x20 [ 75.751498][ T4432] ? mr_mfc_find_parent+0x190/0x190 [ 75.756705][ T4432] ? local_bh_enable+0x20/0x20 [ 75.761477][ T4432] ? lock_chain_count+0x20/0x20 [ 75.766312][ T4432] mr_mfc_find_any_parent+0xb7/0x1d0 [ 75.771602][ T4432] ? local_bh_enable+0x20/0x20 [ 75.776347][ T4432] ip_mr_forward+0x247/0xf60 [ 75.780921][ T4432] ipmr_mfc_add+0x2273/0x2bd0 [ 75.785581][ T4432] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 75.790497][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 75.795518][ T4432] ip_mroute_setsockopt+0xecd/0x1230 [ 75.800911][ T4432] ? ipmr_rule_default+0x70/0x70 [ 75.805842][ T4432] ? do_futex+0xd83/0x12b0 [ 75.810353][ T4432] ? __might_sleep+0xf0/0xf0 [ 75.814937][ T4432] ? vfs_write+0xaa6/0xd70 [ 75.819361][ T4432] ip_setsockopt+0x568/0x31e0 [ 75.824032][ T4432] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 75.829413][ T4432] ? aa_sk_perm+0x7dc/0x910 [ 75.833931][ T4432] ? aa_af_perm+0x340/0x340 [ 75.838424][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 75.843444][ T4432] ? aa_sock_opt_perm+0x74/0x100 [ 75.848360][ T4432] ? sock_common_setsockopt+0x32/0xb0 [ 75.853713][ T4432] ? raw_setsockopt+0xc2/0x170 [ 75.858459][ T4432] ? sock_common_recvmsg+0x1c0/0x1c0 [ 75.863721][ T4432] __sys_setsockopt+0x2bf/0x3d0 [ 75.868551][ T4432] __x64_sys_setsockopt+0xb1/0xc0 [ 75.873557][ T4432] do_syscall_64+0x4c/0xa0 [ 75.877967][ T4432] ? clear_bhb_loop+0x30/0x80 [ 75.882623][ T4432] ? clear_bhb_loop+0x30/0x80 [ 75.887301][ T4432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.893175][ T4432] RIP: 0033:0x7fb84e88be59 [ 75.897573][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.917163][ T4432] RSP: 002b:00007ffd620c2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.925591][ T4432] RAX: ffffffffffffffda RBX: 00007fb84eb13fa0 RCX: 00007fb84e88be59 [ 75.933545][ T4432] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 75.941500][ T4432] RBP: 00007fb84e921e6f R08: 000000000000003c R09: 0000000000000000 [ 75.949461][ T4432] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 75.957412][ T4432] R13: 00007fb84eb13fac R14: 00007fb84eb13fa0 R15: 00007fb84eb13fa0 [ 75.965390][ T4432] [ 75.970469][ T4432] [ 75.972812][ T4432] ============================= [ 75.977647][ T4432] WARNING: suspicious RCU usage [ 75.982655][ T4432] syzkaller #0 Not tainted [ 75.987081][ T4432] ----------------------------- [ 75.991958][ T4432] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 76.000557][ T4432] [ 76.000557][ T4432] other info that might help us debug this: [ 76.000557][ T4432] [ 76.010809][ T4432] [ 76.010809][ T4432] rcu_scheduler_active = 2, debug_locks = 1 [ 76.018884][ T4432] 1 lock held by syz.0.17/4432: [ 76.023779][ T4432] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 76.033729][ T4432] [ 76.033729][ T4432] stack backtrace: [ 76.039659][ T4432] CPU: 1 PID: 4432 Comm: syz.0.17 Not tainted syzkaller #0 [ 76.046854][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 76.056913][ T4432] Call Trace: [ 76.060180][ T4432] [ 76.063095][ T4432] dump_stack_lvl+0x188/0x250 [ 76.067770][ T4432] ? load_image+0x410/0x410 [ 76.072253][ T4432] ? show_regs_print_info+0x20/0x20 [ 76.077530][ T4432] ? lockdep_rcu_suspicious+0x110/0x180 [ 76.083058][ T4432] ? local_bh_enable+0x20/0x20 [ 76.087803][ T4432] rhltable_lookup+0x5fc/0x7a0 [ 76.092662][ T4432] ? local_bh_enable+0x20/0x20 [ 76.097409][ T4432] ? mr_mfc_find_parent+0x190/0x190 [ 76.102586][ T4432] ? local_bh_enable+0x20/0x20 [ 76.107334][ T4432] ? lock_chain_count+0x20/0x20 [ 76.112167][ T4432] mr_mfc_find_any_parent+0xb7/0x1d0 [ 76.117437][ T4432] ? local_bh_enable+0x20/0x20 [ 76.122192][ T4432] ip_mr_forward+0x247/0xf60 [ 76.126782][ T4432] ipmr_mfc_add+0x2273/0x2bd0 [ 76.131471][ T4432] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 76.136395][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 76.141426][ T4432] ip_mroute_setsockopt+0xecd/0x1230 [ 76.146728][ T4432] ? ipmr_rule_default+0x70/0x70 [ 76.151659][ T4432] ? do_futex+0xd83/0x12b0 [ 76.156078][ T4432] ? __might_sleep+0xf0/0xf0 [ 76.160651][ T4432] ? vfs_write+0xaa6/0xd70 [ 76.165067][ T4432] ip_setsockopt+0x568/0x31e0 [ 76.169744][ T4432] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 76.175108][ T4432] ? aa_sk_perm+0x7dc/0x910 [ 76.179603][ T4432] ? aa_af_perm+0x340/0x340 [ 76.184096][ T4432] ? __lock_acquire+0x7b50/0x7b50 [ 76.189120][ T4432] ? aa_sock_opt_perm+0x74/0x100 [ 76.194038][ T4432] ? sock_common_setsockopt+0x32/0xb0 [ 76.199404][ T4432] ? raw_setsockopt+0xc2/0x170 [ 76.204160][ T4432] ? sock_common_recvmsg+0x1c0/0x1c0 [ 76.209426][ T4432] __sys_setsockopt+0x2bf/0x3d0 [ 76.214263][ T4432] __x64_sys_setsockopt+0xb1/0xc0 [ 76.219273][ T4432] do_syscall_64+0x4c/0xa0 [ 76.223676][ T4432] ? clear_bhb_loop+0x30/0x80 [ 76.228339][ T4432] ? clear_bhb_loop+0x30/0x80 [ 76.233004][ T4432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.238895][ T4432] RIP: 0033:0x7fb84e88be59 [ 76.243297][ T4432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.262907][ T4432] RSP: 002b:00007ffd620c2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.271315][ T4432] RAX: ffffffffffffffda RBX: 00007fb84eb13fa0 RCX: 00007fb84e88be59 [ 76.279276][ T4432] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 76.287231][ T4432] RBP: 00007fb84e921e6f R08: 000000000000003c R09: 0000000000000000 [ 76.295216][ T4432] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 76.303175][ T4432] R13: 00007fb84eb13fac R14: 00007fb84eb13fa0 R15: 00007fb84eb13fa0 [ 76.311141][ T4432]