Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts.
2025/09/17 08:04:14 parsed 1 programs
syzkaller login: [ 56.215184][ T4187] cgroup: Unknown subsys name 'net'
[ 56.306587][ T4187] cgroup: Unknown subsys name 'rlimit'
[ 57.603431][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 58.988769][ T4200] chnl_net:caif_netlink_parms(): no params data found
[ 59.036848][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.045566][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.053600][ T4200] device bridge_slave_0 entered promiscuous mode
[ 59.063133][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.071174][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.080662][ T4200] device bridge_slave_1 entered promiscuous mode
[ 59.107083][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 59.118714][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 59.146294][ T4200] team0: Port device team_slave_0 added
[ 59.154513][ T4200] team0: Port device team_slave_1 added
[ 59.171314][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 59.178521][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.205538][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 59.220494][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 59.228331][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.255423][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 59.285313][ T4200] device hsr_slave_0 entered promiscuous mode
[ 59.292502][ T4200] device hsr_slave_1 entered promiscuous mode
[ 59.381184][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 59.392109][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 59.401905][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 59.411059][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 59.438646][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.446183][ T4200] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.454962][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.462151][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.526610][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0
[ 59.542931][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 59.556532][ T151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.566609][ T151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.577728][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 59.593392][ T4200] 8021q: adding VLAN 0 to HW filter on device team0
[ 59.605936][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 59.616587][ T151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.623864][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.648578][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 59.658513][ T151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.666693][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.679229][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 59.691255][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 59.707292][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 59.725275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 59.738660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 59.750738][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 59.867187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 59.875519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 59.889231][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 59.911634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 59.934554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 59.944675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 59.952558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 59.964394][ T4200] device veth0_vlan entered promiscuous mode
[ 59.977921][ T4200] device veth1_vlan entered promiscuous mode
[ 60.008256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 60.019406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 60.033191][ T4200] device veth0_macvtap entered promiscuous mode
[ 60.057531][ T4200] device veth1_macvtap entered promiscuous mode
[ 60.078008][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 60.085933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 60.095291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 60.103623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 60.113356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 60.126096][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 60.134966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 60.145217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 60.158405][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.167681][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.176895][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.187479][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.307112][ T4200] syz-executor (4200) used greatest stack depth: 20704 bytes left
[ 60.692836][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 61.228428][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.242504][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.257245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 61.267046][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 61.275365][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 61.283848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/09/17 08:04:21 executed programs: 0
[ 62.420997][ T4281] chnl_net:caif_netlink_parms(): no params data found
[ 62.458460][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.466113][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.475090][ T4281] device bridge_slave_0 entered promiscuous mode
[ 62.483068][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.490448][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.498405][ T4281] device bridge_slave_1 entered promiscuous mode
[ 62.517321][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 62.528827][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 62.552187][ T4281] team0: Port device team_slave_0 added
[ 62.560492][ T4281] team0: Port device team_slave_1 added
[ 62.579093][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.586767][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.613110][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.625482][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.632524][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.659200][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.687385][ T4281] device hsr_slave_0 entered promiscuous mode
[ 62.694753][ T4281] device hsr_slave_1 entered promiscuous mode
[ 62.701686][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 62.709535][ T4281] Cannot create hsr debugfs directory
[ 62.949832][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.374665][ T23] Bluetooth: hci0: command 0x0409 tx timeout
[ 65.150068][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 65.210496][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.083298][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.092655][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.102018][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.111327][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.131138][ T155] device hsr_slave_0 left promiscuous mode
[ 66.138388][ T155] device hsr_slave_1 left promiscuous mode
[ 66.145330][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 66.152765][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 66.161243][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 66.169232][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 66.177033][ T155] device bridge_slave_1 left promiscuous mode
[ 66.183904][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.197518][ T155] device bridge_slave_0 left promiscuous mode
[ 66.203735][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.221061][ T155] device veth1_macvtap left promiscuous mode
[ 66.227898][ T155] device veth0_macvtap left promiscuous mode
[ 66.234188][ T155] device veth1_vlan left promiscuous mode
[ 66.240081][ T155] device veth0_vlan left promiscuous mode
[ 66.371020][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 66.382669][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 66.398917][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 66.411382][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 66.444750][ T1108] Bluetooth: hci0: command 0x041b tx timeout
[ 66.464677][ T155] bond0 (unregistering): Released all slaves
[ 66.550311][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.564811][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 66.572623][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 66.586185][ T4281] 8021q: adding VLAN 0 to HW filter on device team0
[ 66.599277][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 66.610797][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 66.619886][ T151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.627018][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.637003][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 66.648160][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 66.656952][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 66.666229][ T151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.673645][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.702828][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 66.715183][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 66.727256][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 66.736114][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 66.746870][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 66.759246][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 66.774520][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 66.797566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 66.807731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 66.820817][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 66.832673][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 66.841222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 66.850623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 66.933362][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 66.942127][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 66.955272][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 66.977179][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 66.987412][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 67.010377][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 67.020505][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 67.031765][ T4281] device veth0_vlan entered promiscuous mode
[ 67.040147][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 67.049116][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.061347][ T4281] device veth1_vlan entered promiscuous mode
[ 67.084684][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 67.093376][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.103185][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 67.114597][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.125578][ T4281] device veth0_macvtap entered promiscuous mode
[ 67.136708][ T4281] device veth1_macvtap entered promiscuous mode
[ 67.153928][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.162903][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.171839][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 67.181984][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 67.191160][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.203804][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.212917][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 67.222976][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.237336][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.246516][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.255845][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.264806][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.325897][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.339155][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.357311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 67.377161][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.386422][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.396051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 67.476457][ T4349]
[ 67.478833][ T4349] =============================
[ 67.483676][ T4349] WARNING: suspicious RCU usage
[ 67.491088][ T4349] syzkaller #0 Not tainted
[ 67.495981][ T4349] -----------------------------
[ 67.500829][ T4349] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage!
[ 67.509890][ T4349]
[ 67.509890][ T4349] other info that might help us debug this:
[ 67.509890][ T4349]
[ 67.520920][ T4349]
[ 67.520920][ T4349] rcu_scheduler_active = 2, debug_locks = 1
[ 67.529958][ T4349] 1 lock held by syz.0.17/4349:
[ 67.535247][ T4349] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0
[ 67.545858][ T4349]
[ 67.545858][ T4349] stack backtrace:
[ 67.551769][ T4349] CPU: 1 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0
[ 67.559171][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 67.569434][ T4349] Call Trace:
[ 67.572712][ T4349]
[ 67.575744][ T4349] dump_stack_lvl+0x168/0x230
[ 67.580450][ T4349] ? load_image+0x3b0/0x3b0
[ 67.584967][ T4349] ? show_regs_print_info+0x20/0x20
[ 67.590176][ T4349] ? lockdep_rcu_suspicious+0x110/0x180
[ 67.595719][ T4349] ? local_bh_enable+0x20/0x20
[ 67.600697][ T4349] rhltable_lookup+0x77b/0x790
[ 67.605571][ T4349] ? mr_mfc_find_parent+0x190/0x190
[ 67.610774][ T4349] ? mark_lock+0x94/0x320
[ 67.615101][ T4349] ? local_bh_enable+0x20/0x20
[ 67.619876][ T4349] ? mark_lock+0x94/0x320
[ 67.624478][ T4349] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 67.630465][ T4349] ? lock_chain_count+0x20/0x20
[ 67.635315][ T4349] mr_mfc_find_any_parent+0xb6/0x1e0
[ 67.640619][ T4349] ? local_bh_enable+0x20/0x20
[ 67.645387][ T4349] ip_mr_forward+0x24c/0xf90
[ 67.650001][ T4349] ipmr_mfc_add+0x2466/0x2eb0
[ 67.654689][ T4349] ? ipmr_mfc_delete+0x5c0/0x5c0
[ 67.659624][ T4349] ? __lock_acquire+0x7c60/0x7c60
[ 67.664820][ T4349] ? mark_lock+0x94/0x320
[ 67.669260][ T4349] ip_mroute_setsockopt+0xe33/0x11a0
[ 67.674561][ T4349] ? ipmr_rule_default+0x70/0x70
[ 67.679516][ T4349] ? do_futex+0xcde/0x1240
[ 67.683932][ T4349] ? __might_sleep+0xf0/0xf0
[ 67.688522][ T4349] ip_setsockopt+0x4ad/0x3070
[ 67.693213][ T4349] ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[ 67.698768][ T4349] ? aa_sk_perm+0x7b4/0x8f0
[ 67.703367][ T4349] ? aa_af_perm+0x2b0/0x2b0
[ 67.707873][ T4349] ? aa_sock_opt_perm+0x74/0x100
[ 67.712808][ T4349] ? sock_common_setsockopt+0x32/0xb0
[ 67.718175][ T4349] ? raw_setsockopt+0xc5/0x180
[ 67.723117][ T4349] ? sock_common_recvmsg+0x1b0/0x1b0
[ 67.728407][ T4349] __sys_setsockopt+0x2bf/0x3d0
[ 67.733361][ T4349] __x64_sys_setsockopt+0xb1/0xc0
[ 67.738563][ T4349] do_syscall_64+0x4c/0xa0
[ 67.743083][ T4349] ? clear_bhb_loop+0x30/0x80
[ 67.747756][ T4349] ? clear_bhb_loop+0x30/0x80
[ 67.752797][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 67.758786][ T4349] RIP: 0033:0x7fb9b92fbba9
[ 67.763200][ T4349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 67.783255][ T4349] RSP: 002b:00007ffef6b18448 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 67.791767][ T4349] RAX: ffffffffffffffda RBX: 00007fb9b9542fa0 RCX: 00007fb9b92fbba9
[ 67.799918][ T4349] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[ 67.807899][ T4349] RBP: 00007fb9b937ee19 R08: 000000000000003c R09: 0000000000000000
[ 67.816053][ T4349] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[ 67.824109][ T4349] R13: 00007fb9b9542fa0 R14: 00007fb9b9542fa0 R15: 0000000000000005
[ 67.832190][ T4349]
[ 67.841241][ T4349]
[ 67.843589][ T4349] =============================
[ 67.849298][ T4349] WARNING: suspicious RCU usage
[ 67.854455][ T4349] syzkaller #0 Not tainted
[ 67.858864][ T4349] -----------------------------
[ 67.863735][ T4349] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage!
[ 67.872682][ T4349]
[ 67.872682][ T4349] other info that might help us debug this:
[ 67.872682][ T4349]
[ 67.882999][ T4349]
[ 67.882999][ T4349] rcu_scheduler_active = 2, debug_locks = 1
[ 67.891236][ T4349] 1 lock held by syz.0.17/4349:
[ 67.896845][ T4349] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0
[ 67.906652][ T4349]
[ 67.906652][ T4349] stack backtrace:
[ 67.912540][ T4349] CPU: 1 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0
[ 67.919721][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 67.930026][ T4349] Call Trace:
[ 67.933305][ T4349]
[ 67.936234][ T4349] dump_stack_lvl+0x168/0x230
[ 67.940907][ T4349] ? load_image+0x3b0/0x3b0
[ 67.945486][ T4349] ? show_regs_print_info+0x20/0x20
[ 67.950824][ T4349] ? lockdep_rcu_suspicious+0x110/0x180
[ 67.956599][ T4349] ? local_bh_enable+0x20/0x20
[ 67.961388][ T4349] rhltable_lookup+0x504/0x790
[ 67.966155][ T4349] ? local_bh_enable+0x20/0x20
[ 67.970996][ T4349] ? mr_mfc_find_parent+0x190/0x190
[ 67.976181][ T4349] ? mark_lock+0x94/0x320
[ 67.980506][ T4349] ? local_bh_enable+0x20/0x20
[ 67.985376][ T4349] ? mark_lock+0x94/0x320
[ 67.990178][ T4349] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 67.996426][ T4349] ? lock_chain_count+0x20/0x20
[ 68.001282][ T4349] mr_mfc_find_any_parent+0xb6/0x1e0
[ 68.006599][ T4349] ? local_bh_enable+0x20/0x20
[ 68.011403][ T4349] ip_mr_forward+0x24c/0xf90
[ 68.015991][ T4349] ipmr_mfc_add+0x2466/0x2eb0
[ 68.020767][ T4349] ? ipmr_mfc_delete+0x5c0/0x5c0
[ 68.025691][ T4349] ? __lock_acquire+0x7c60/0x7c60
[ 68.030710][ T4349] ? mark_lock+0x94/0x320
[ 68.035053][ T4349] ip_mroute_setsockopt+0xe33/0x11a0
[ 68.040364][ T4349] ? ipmr_rule_default+0x70/0x70
[ 68.045452][ T4349] ? do_futex+0xcde/0x1240
[ 68.049902][ T4349] ? __might_sleep+0xf0/0xf0
[ 68.054482][ T4349] ip_setsockopt+0x4ad/0x3070
[ 68.059227][ T4349] ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[ 68.064614][ T4349] ? aa_sk_perm+0x7b4/0x8f0
[ 68.069164][ T4349] ? aa_af_perm+0x2b0/0x2b0
[ 68.073664][ T4349] ? aa_sock_opt_perm+0x74/0x100
[ 68.078846][ T4349] ? sock_common_setsockopt+0x32/0xb0
[ 68.084214][ T4349] ? raw_setsockopt+0xc5/0x180
[ 68.088982][ T4349] ? sock_common_recvmsg+0x1b0/0x1b0
[ 68.094258][ T4349] __sys_setsockopt+0x2bf/0x3d0
[ 68.099126][ T4349] __x64_sys_setsockopt+0xb1/0xc0
[ 68.104147][ T4349] do_syscall_64+0x4c/0xa0
[ 68.108568][ T4349] ? clear_bhb_loop+0x30/0x80
[ 68.113229][ T4349] ? clear_bhb_loop+0x30/0x80
[ 68.117948][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.123840][ T4349] RIP: 0033:0x7fb9b92fbba9
[ 68.128258][ T4349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.147877][ T4349] RSP: 002b:00007ffef6b18448 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 68.156280][ T4349] RAX: ffffffffffffffda RBX: 00007fb9b9542fa0 RCX: 00007fb9b92fbba9
[ 68.164389][ T4349] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[ 68.172374][ T4349] RBP: 00007fb9b937ee19 R08: 000000000000003c R09: 0000000000000000
[ 68.180347][ T4349] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[ 68.188481][ T4349] R13: 00007fb9b9542fa0 R14: 00007fb9b9542fa0 R15: 0000000000000005
[ 68.196523][ T4349]
[ 68.201431][ T4349]
[ 68.203803][ T4349] =============================
[ 68.209617][ T4349] WARNING: suspicious RCU usage
[ 68.214507][ T4349] syzkaller #0 Not tainted
[ 68.218924][ T4349] -----------------------------
[ 68.223753][ T4349] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage!
[ 68.233140][ T4349]
[ 68.233140][ T4349] other info that might help us debug this:
[ 68.233140][ T4349]
[ 68.243526][ T4349]
[ 68.243526][ T4349] rcu_scheduler_active = 2, debug_locks = 1
[ 68.251938][ T4349] 1 lock held by syz.0.17/4349:
[ 68.257140][ T4349] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0
[ 68.267322][ T4349]
[ 68.267322][ T4349] stack backtrace:
[ 68.273564][ T4349] CPU: 1 PID: 4349 Comm: syz.0.17 Not tainted syzkaller #0
[ 68.280832][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 68.290888][ T4349] Call Trace:
[ 68.294261][ T4349]
[ 68.297201][ T4349] dump_stack_lvl+0x168/0x230
[ 68.301876][ T4349] ? load_image+0x3b0/0x3b0
[ 68.306370][ T4349] ? show_regs_print_info+0x20/0x20
[ 68.311678][ T4349] ? lockdep_rcu_suspicious+0x110/0x180
[ 68.317230][ T4349] ? local_bh_enable+0x20/0x20
[ 68.322029][ T4349] rhltable_lookup+0x5f8/0x790
[ 68.326959][ T4349] ? local_bh_enable+0x20/0x20
[ 68.331727][ T4349] ? mr_mfc_find_parent+0x190/0x190
[ 68.336909][ T4349] ? mark_lock+0x94/0x320
[ 68.341227][ T4349] ? local_bh_enable+0x20/0x20
[ 68.346089][ T4349] ? mark_lock+0x94/0x320
[ 68.350642][ T4349] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 68.356907][ T4349] ? lock_chain_count+0x20/0x20
[ 68.361766][ T4349] mr_mfc_find_any_parent+0xb6/0x1e0
[ 68.367142][ T4349] ? local_bh_enable+0x20/0x20
[ 68.371933][ T4349] ip_mr_forward+0x24c/0xf90
[ 68.376543][ T4349] ipmr_mfc_add+0x2466/0x2eb0
[ 68.381221][ T4349] ? ipmr_mfc_delete+0x5c0/0x5c0
[ 68.386194][ T4349] ? __lock_acquire+0x7c60/0x7c60
[ 68.391211][ T4349] ? mark_lock+0x94/0x320
[ 68.395540][ T4349] ip_mroute_setsockopt+0xe33/0x11a0
[ 68.400819][ T4349] ? ipmr_rule_default+0x70/0x70
[ 68.405752][ T4349] ? do_futex+0xcde/0x1240
[ 68.410151][ T4349] ? __might_sleep+0xf0/0xf0
[ 68.414752][ T4349] ip_setsockopt+0x4ad/0x3070
[ 68.419452][ T4349] ? ipv4_pktinfo_prepare+0x6f0/0x6f0
[ 68.424988][ T4349] ? aa_sk_perm+0x7b4/0x8f0
[ 68.429512][ T4349] ? aa_af_perm+0x2b0/0x2b0
[ 68.434184][ T4349] ? aa_sock_opt_perm+0x74/0x100
[ 68.439401][ T4349] ? sock_common_setsockopt+0x32/0xb0
[ 68.444882][ T4349] ? raw_setsockopt+0xc5/0x180
[ 68.449688][ T4349] ? sock_common_recvmsg+0x1b0/0x1b0
[ 68.455313][ T4349] __sys_setsockopt+0x2bf/0x3d0
[ 68.460368][ T4349] __x64_sys_setsockopt+0xb1/0xc0
[ 68.465395][ T4349] do_syscall_64+0x4c/0xa0
[ 68.469831][ T4349] ? clear_bhb_loop+0x30/0x80
[ 68.474501][ T4349] ? clear_bhb_loop+0x30/0x80
[ 68.479166][ T4349] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.485049][ T4349] RIP: 0033:0x7fb9b92fbba9
[ 68.489471][ T4349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.509171][ T4349] RSP: 002b:00007ffef6b18448 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 68.517582][ T4349] RAX: ffffffffffffffda RBX: 00007fb9b9542fa0 RCX: 00007fb9b92fbba9
[ 68.524186][ T13] Bluetooth: hci0: command 0x040f tx timeout
[ 68.525540][ T4349] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005
[ 68.539628][ T4349] RBP: 00007fb9b937ee19 R08: 000000000000003c R09: 0000000000000000
[ 68.547677][ T4349] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000
[ 68.555748][ T4349] R13: 00007fb9b9542fa0 R14: 00007fb9b9542fa0 R15: 0000000000000005
[ 68.563713][ T4349]