Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. 2025/12/26 09:25:08 parsed 1 programs [ 62.758662][ T4188] cgroup: Unknown subsys name 'net' [ 62.897920][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.303632][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.629917][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.674722][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.682181][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.690440][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.699068][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.706533][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.714452][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.735478][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.746290][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.769788][ T4195] team0: Port device team_slave_0 added [ 65.776948][ T4195] team0: Port device team_slave_1 added [ 65.795654][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.802685][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.828642][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.840825][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.847967][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.874813][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.906888][ T4195] device hsr_slave_0 entered promiscuous mode [ 65.913566][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.001073][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.011050][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.020971][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.029869][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.055033][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.062187][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.069924][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.077004][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.116175][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.130376][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.140382][ T1287] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.148810][ T1287] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.157928][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.171509][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.182568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.191116][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.198243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.208475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.217550][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.224671][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.243719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.253534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.265906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.277496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.288645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.300266][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.383926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.391721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.406354][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.424511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.442222][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.451356][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.459211][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.469197][ T4195] device veth0_vlan entered promiscuous mode [ 66.480698][ T4195] device veth1_vlan entered promiscuous mode [ 66.498882][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.507509][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.516100][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.528264][ T4195] device veth0_macvtap entered promiscuous mode [ 66.537567][ T4195] device veth1_macvtap entered promiscuous mode [ 66.553745][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.562800][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.571889][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.583028][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.591909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.602400][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.611503][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620257][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.628953][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.763551][ T4195] syz-executor (4195) used greatest stack depth: 20256 bytes left [ 66.780620][ T1287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.675128][ T1287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.232096][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238672][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.774251][ T1287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.825679][ T1287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.516302][ T1287] device hsr_slave_0 left promiscuous mode [ 72.538698][ T1287] device hsr_slave_1 left promiscuous mode [ 72.546458][ T1287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.554853][ T1287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.564434][ T1287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.577222][ T1287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.587956][ T1287] device bridge_slave_1 left promiscuous mode [ 72.595379][ T1287] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.613133][ T1287] device bridge_slave_0 left promiscuous mode [ 72.619471][ T1287] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.652089][ T1287] device veth1_macvtap left promiscuous mode [ 72.658521][ T1287] device veth0_macvtap left promiscuous mode [ 72.664862][ T1287] device veth1_vlan left promiscuous mode [ 72.672228][ T1287] device veth0_vlan left promiscuous mode [ 72.872189][ T1287] team0 (unregistering): Port device team_slave_1 removed [ 72.886552][ T1287] team0 (unregistering): Port device team_slave_0 removed [ 72.902112][ T1287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.916594][ T1287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.967441][ T1287] bond0 (unregistering): Released all slaves [ 74.693856][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.713380][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.730065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.754107][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.767258][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.776326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/26 09:25:23 executed programs: 0 [ 75.564891][ T4367] chnl_net:caif_netlink_parms(): no params data found [ 75.784815][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.792739][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.802158][ T4367] device bridge_slave_0 entered promiscuous mode [ 75.810799][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.817902][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.827242][ T4367] device bridge_slave_1 entered promiscuous mode [ 75.853998][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.865606][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.903147][ T4367] team0: Port device team_slave_0 added [ 75.912712][ T4367] team0: Port device team_slave_1 added [ 75.934366][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.941558][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.971117][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.983671][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.990905][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.017262][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.058580][ T4367] device hsr_slave_0 entered promiscuous mode [ 76.066307][ T4367] device hsr_slave_1 entered promiscuous mode [ 76.606325][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.617257][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.627524][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.636814][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.697591][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.704705][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.712181][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.719295][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.741196][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.748866][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.818461][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.833133][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.844712][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.855646][ T4367] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.914668][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.924301][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.934220][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.941342][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.953044][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.963650][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.973870][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.980985][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.996480][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.059837][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.076360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.086476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.105732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.114565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.124775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.133669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.143857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.153303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.163081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.174843][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.379819][ T4402] Bluetooth: hci0: command 0x0409 tx timeout [ 77.388519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.397587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.417905][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.471510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.481393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.502040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.510560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.523523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.531399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.541162][ T4367] device veth0_vlan entered promiscuous mode [ 77.611146][ T4367] device veth1_vlan entered promiscuous mode [ 77.640823][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.651906][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.660106][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.668631][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.685356][ T4367] device veth0_macvtap entered promiscuous mode [ 77.713801][ T4367] device veth1_macvtap entered promiscuous mode [ 77.742508][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.770851][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.779897][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.800948][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.819892][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.834750][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.851120][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.871027][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.889975][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.898703][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.929349][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.938078][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003596][ T409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.016438][ T409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.036229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.052920][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070264][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.090627][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.148622][ T4490] [ 78.152634][ T4490] ============================= [ 78.157592][ T4490] WARNING: suspicious RCU usage [ 78.162906][ T4490] syzkaller #0 Not tainted [ 78.167353][ T4490] ----------------------------- [ 78.190565][ T4490] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 78.208058][ T4490] [ 78.208058][ T4490] other info that might help us debug this: [ 78.208058][ T4490] [ 78.223641][ T4490] [ 78.223641][ T4490] rcu_scheduler_active = 2, debug_locks = 1 [ 78.235919][ T4490] 1 lock held by syz.0.17/4490: [ 78.242074][ T4490] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 78.252197][ T4490] [ 78.252197][ T4490] stack backtrace: [ 78.258111][ T4490] CPU: 1 PID: 4490 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.265330][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.275420][ T4490] Call Trace: [ 78.278719][ T4490] [ 78.281658][ T4490] dump_stack_lvl+0x168/0x230 [ 78.286370][ T4490] ? load_image+0x3b0/0x3b0 [ 78.290921][ T4490] ? show_regs_print_info+0x20/0x20 [ 78.296147][ T4490] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.301704][ T4490] ? local_bh_enable+0x20/0x20 [ 78.306506][ T4490] rhltable_lookup+0x77b/0x790 [ 78.311313][ T4490] ? mr_mfc_find_parent+0x190/0x190 [ 78.316530][ T4490] ? mark_lock+0x94/0x320 [ 78.320885][ T4490] ? local_bh_enable+0x20/0x20 [ 78.325685][ T4490] ? mark_lock+0x94/0x320 [ 78.330042][ T4490] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.336058][ T4490] ? lock_chain_count+0x20/0x20 [ 78.340942][ T4490] mr_mfc_find_any_parent+0xb6/0x1e0 [ 78.346249][ T4490] ? local_bh_enable+0x20/0x20 [ 78.351040][ T4490] ip_mr_forward+0x24c/0xf90 [ 78.355685][ T4490] ipmr_mfc_add+0x2466/0x2eb0 [ 78.360407][ T4490] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 78.365373][ T4490] ? __lock_acquire+0x7c60/0x7c60 [ 78.370451][ T4490] ? mark_lock+0x94/0x320 [ 78.374827][ T4490] ip_mroute_setsockopt+0xe33/0x11a0 [ 78.380147][ T4490] ? ipmr_rule_default+0x70/0x70 [ 78.385113][ T4490] ? do_futex+0xcde/0x1240 [ 78.389549][ T4490] ? __might_sleep+0xf0/0xf0 [ 78.394191][ T4490] ip_setsockopt+0x4ad/0x3070 [ 78.398903][ T4490] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 78.404315][ T4490] ? aa_sk_perm+0x7b4/0x8f0 [ 78.408851][ T4490] ? aa_af_perm+0x2b0/0x2b0 [ 78.413399][ T4490] ? aa_sock_opt_perm+0x74/0x100 [ 78.418371][ T4490] ? sock_common_setsockopt+0x32/0xb0 [ 78.423797][ T4490] ? raw_setsockopt+0xc5/0x180 [ 78.428599][ T4490] ? sock_common_recvmsg+0x1b0/0x1b0 [ 78.433933][ T4490] __sys_setsockopt+0x2bf/0x3d0 [ 78.438856][ T4490] __x64_sys_setsockopt+0xb1/0xc0 [ 78.443911][ T4490] do_syscall_64+0x4c/0xa0 [ 78.448350][ T4490] ? clear_bhb_loop+0x30/0x80 [ 78.453047][ T4490] ? clear_bhb_loop+0x30/0x80 [ 78.457742][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.463664][ T4490] RIP: 0033:0x7fce77563749 [ 78.468114][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.487739][ T4490] RSP: 002b:00007ffc51404568 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.496191][ T4490] RAX: ffffffffffffffda RBX: 00007fce777b9fa0 RCX: 00007fce77563749 [ 78.504186][ T4490] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 78.512179][ T4490] RBP: 00007fce775e7f91 R08: 000000000000003c R09: 0000000000000000 [ 78.520174][ T4490] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 78.528252][ T4490] R13: 00007fce777b9fa0 R14: 00007fce777b9fa0 R15: 0000000000000005 [ 78.536260][ T4490] [ 78.547197][ T4490] [ 78.549621][ T4490] ============================= [ 78.554482][ T4490] WARNING: suspicious RCU usage [ 78.559735][ T4490] syzkaller #0 Not tainted [ 78.564294][ T4490] ----------------------------- [ 78.569157][ T4490] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 78.578603][ T4490] [ 78.578603][ T4490] other info that might help us debug this: [ 78.578603][ T4490] [ 78.589683][ T4490] [ 78.589683][ T4490] rcu_scheduler_active = 2, debug_locks = 1 [ 78.597946][ T4490] 1 lock held by syz.0.17/4490: [ 78.609353][ T4490] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 78.619174][ T4490] [ 78.619174][ T4490] stack backtrace: [ 78.639371][ T4490] CPU: 1 PID: 4490 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.646626][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.656706][ T4490] Call Trace: [ 78.660014][ T4490] [ 78.662986][ T4490] dump_stack_lvl+0x168/0x230 [ 78.667691][ T4490] ? load_image+0x3b0/0x3b0 [ 78.672229][ T4490] ? show_regs_print_info+0x20/0x20 [ 78.677471][ T4490] ? lockdep_rcu_suspicious+0x110/0x180 [ 78.683046][ T4490] ? local_bh_enable+0x20/0x20 [ 78.687836][ T4490] rhltable_lookup+0x504/0x790 [ 78.692641][ T4490] ? local_bh_enable+0x20/0x20 [ 78.697464][ T4490] ? mr_mfc_find_parent+0x190/0x190 [ 78.702700][ T4490] ? mark_lock+0x94/0x320 [ 78.707073][ T4490] ? local_bh_enable+0x20/0x20 [ 78.711866][ T4490] ? mark_lock+0x94/0x320 [ 78.716231][ T4490] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 78.722248][ T4490] ? lock_chain_count+0x20/0x20 [ 78.727135][ T4490] mr_mfc_find_any_parent+0xb6/0x1e0 [ 78.732456][ T4490] ? local_bh_enable+0x20/0x20 [ 78.737251][ T4490] ip_mr_forward+0x24c/0xf90 [ 78.741889][ T4490] ipmr_mfc_add+0x2466/0x2eb0 [ 78.746615][ T4490] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 78.751586][ T4490] ? __lock_acquire+0x7c60/0x7c60 [ 78.756645][ T4490] ? mark_lock+0x94/0x320 [ 78.761029][ T4490] ip_mroute_setsockopt+0xe33/0x11a0 [ 78.766361][ T4490] ? ipmr_rule_default+0x70/0x70 [ 78.771350][ T4490] ? do_futex+0xcde/0x1240 [ 78.775803][ T4490] ? __might_sleep+0xf0/0xf0 [ 78.780431][ T4490] ip_setsockopt+0x4ad/0x3070 [ 78.785169][ T4490] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 78.790582][ T4490] ? aa_sk_perm+0x7b4/0x8f0 [ 78.795122][ T4490] ? aa_af_perm+0x2b0/0x2b0 [ 78.799675][ T4490] ? aa_sock_opt_perm+0x74/0x100 [ 78.804667][ T4490] ? sock_common_setsockopt+0x32/0xb0 [ 78.810092][ T4490] ? raw_setsockopt+0xc5/0x180 [ 78.814892][ T4490] ? sock_common_recvmsg+0x1b0/0x1b0 [ 78.820215][ T4490] __sys_setsockopt+0x2bf/0x3d0 [ 78.825108][ T4490] __x64_sys_setsockopt+0xb1/0xc0 [ 78.830165][ T4490] do_syscall_64+0x4c/0xa0 [ 78.834810][ T4490] ? clear_bhb_loop+0x30/0x80 [ 78.839578][ T4490] ? clear_bhb_loop+0x30/0x80 [ 78.844289][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.850221][ T4490] RIP: 0033:0x7fce77563749 [ 78.854799][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.874534][ T4490] RSP: 002b:00007ffc51404568 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.882981][ T4490] RAX: ffffffffffffffda RBX: 00007fce777b9fa0 RCX: 00007fce77563749 [ 78.890986][ T4490] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 78.898985][ T4490] RBP: 00007fce775e7f91 R08: 000000000000003c R09: 0000000000000000 [ 78.907124][ T4490] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 78.915124][ T4490] R13: 00007fce777b9fa0 R14: 00007fce777b9fa0 R15: 0000000000000005 [ 78.923143][ T4490] [ 78.979069][ T4490] [ 78.981724][ T4490] ============================= [ 78.986997][ T4490] WARNING: suspicious RCU usage [ 79.009664][ T4490] syzkaller #0 Not tainted [ 79.014114][ T4490] ----------------------------- [ 79.018970][ T4490] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 79.036396][ T4490] [ 79.036396][ T4490] other info that might help us debug this: [ 79.036396][ T4490] [ 79.047386][ T4490] [ 79.047386][ T4490] rcu_scheduler_active = 2, debug_locks = 1 [ 79.056894][ T4490] 1 lock held by syz.0.17/4490: [ 79.080517][ T4490] #0: ffffffff8d232788 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 79.096046][ T4490] [ 79.096046][ T4490] stack backtrace: [ 79.119425][ T4490] CPU: 0 PID: 4490 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.126678][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.136760][ T4490] Call Trace: [ 79.140154][ T4490] [ 79.143161][ T4490] dump_stack_lvl+0x168/0x230 [ 79.147870][ T4490] ? load_image+0x3b0/0x3b0 [ 79.152403][ T4490] ? show_regs_print_info+0x20/0x20 [ 79.157638][ T4490] ? lockdep_rcu_suspicious+0x110/0x180 [ 79.163206][ T4490] ? local_bh_enable+0x20/0x20 [ 79.167991][ T4490] rhltable_lookup+0x5f8/0x790 [ 79.172788][ T4490] ? local_bh_enable+0x20/0x20 [ 79.177591][ T4490] ? mr_mfc_find_parent+0x190/0x190 [ 79.182818][ T4490] ? mark_lock+0x94/0x320 [ 79.187185][ T4490] ? local_bh_enable+0x20/0x20 [ 79.191983][ T4490] ? mark_lock+0x94/0x320 [ 79.196345][ T4490] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 79.202357][ T4490] ? lock_chain_count+0x20/0x20 [ 79.207242][ T4490] mr_mfc_find_any_parent+0xb6/0x1e0 [ 79.212688][ T4490] ? local_bh_enable+0x20/0x20 [ 79.217491][ T4490] ip_mr_forward+0x24c/0xf90 [ 79.222119][ T4490] ipmr_mfc_add+0x2466/0x2eb0 [ 79.226833][ T4490] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 79.231800][ T4490] ? __lock_acquire+0x7c60/0x7c60 [ 79.236858][ T4490] ? mark_lock+0x94/0x320 [ 79.241234][ T4490] ip_mroute_setsockopt+0xe33/0x11a0 [ 79.246559][ T4490] ? ipmr_rule_default+0x70/0x70 [ 79.251534][ T4490] ? do_futex+0xcde/0x1240 [ 79.255979][ T4490] ? __might_sleep+0xf0/0xf0 [ 79.260610][ T4490] ip_setsockopt+0x4ad/0x3070 [ 79.265318][ T4490] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 79.270710][ T4490] ? aa_sk_perm+0x7b4/0x8f0 [ 79.275244][ T4490] ? aa_af_perm+0x2b0/0x2b0 [ 79.279775][ T4490] ? aa_sock_opt_perm+0x74/0x100 [ 79.284740][ T4490] ? sock_common_setsockopt+0x32/0xb0 [ 79.290149][ T4490] ? raw_setsockopt+0xc5/0x180 [ 79.294937][ T4490] ? sock_common_recvmsg+0x1b0/0x1b0 [ 79.300255][ T4490] __sys_setsockopt+0x2bf/0x3d0 [ 79.305134][ T4490] __x64_sys_setsockopt+0xb1/0xc0 [ 79.310183][ T4490] do_syscall_64+0x4c/0xa0 [ 79.314623][ T4490] ? clear_bhb_loop+0x30/0x80 [ 79.319345][ T4490] ? clear_bhb_loop+0x30/0x80 [ 79.324063][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.329979][ T4490] RIP: 0033:0x7fce77563749 [ 79.334431][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.354066][ T4490] RSP: 002b:00007ffc51404568 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.362513][ T4490] RAX: ffffffffffffffda RBX: 00007fce777b9fa0 RCX: 00007fce77563749 [ 79.370510][ T4490] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 79.378516][ T4490] RBP: 00007fce775e7f91 R08: 000000000000003c R09: 0000000000000000 [ 79.386514][ T4490] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 79.394502][ T4490] R13: 00007fce777b9fa0 R14: 00007fce777b9fa0 R15: 0000000000000005 [ 79.402514][ T4490] [ 79.460100][ T4394] Bluetooth: hci0: command 0x041b tx timeout