Warning: Permanently added '[localhost]:26696' (ED25519) to the list of known hosts.
2026/04/08 18:48:03 parsed 1 programs
syzkaller login: [ 63.211205][ T5813] cgroup: Unknown subsys name 'net'
[ 63.303962][ T5813] cgroup: Unknown subsys name 'cpuset'
[ 63.307507][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 65.077214][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 67.394895][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 68.204376][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.206925][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.238204][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.241367][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.865948][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.870270][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.872893][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.881454][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.884546][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.925484][ T5867] chnl_net:caif_netlink_parms(): no params data found
[ 69.106115][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.113021][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.115185][ T5867] bridge_slave_0: entered allmulticast mode
[ 69.117810][ T5867] bridge_slave_0: entered promiscuous mode
[ 69.141235][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.143307][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.145395][ T5867] bridge_slave_1: entered allmulticast mode
[ 69.147859][ T5867] bridge_slave_1: entered promiscuous mode
[ 69.182514][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.186726][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.218546][ T5867] team0: Port device team_slave_0 added
[ 69.230267][ T5867] team0: Port device team_slave_1 added
[ 69.260484][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.262479][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 69.270509][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.302755][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.304831][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 69.313435][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.352489][ T5867] hsr_slave_0: entered promiscuous mode
[ 69.354635][ T5867] hsr_slave_1: entered promiscuous mode
[ 69.847330][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 69.855263][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 69.860105][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 69.866396][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 69.938966][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.954958][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.961755][ T54] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.963939][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.970751][ T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.972836][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.068175][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.096767][ T5867] veth0_vlan: entered promiscuous mode
[ 70.102956][ T5867] veth1_vlan: entered promiscuous mode
[ 70.120095][ T5867] veth0_macvtap: entered promiscuous mode
[ 70.124097][ T5867] veth1_macvtap: entered promiscuous mode
[ 70.139807][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.151089][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.161820][ T5913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.165465][ T5913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.170115][ T5913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.176414][ T5913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/04/08 18:48:12 executed programs: 0
[ 70.270046][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.280926][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.285446][ T5883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.288138][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.291965][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.317336][ T5883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 70.338124][ T5930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 70.340710][ T5930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 70.344027][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 70.344134][ T5196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 70.350857][ T5196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 70.354154][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 70.357750][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 70.357773][ T5196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 70.364302][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 70.564419][ T5921] chnl_net:caif_netlink_parms(): no params data found
[ 70.598038][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.629512][ T5926] chnl_net:caif_netlink_parms(): no params data found
[ 70.671186][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 70.723703][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.725889][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.728049][ T5921] bridge_slave_0: entered allmulticast mode
[ 70.731298][ T5921] bridge_slave_0: entered promiscuous mode
[ 70.734417][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.736484][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.739085][ T5921] bridge_slave_1: entered allmulticast mode
[ 70.741706][ T5921] bridge_slave_1: entered promiscuous mode
[ 70.790602][ T5925] chnl_net:caif_netlink_parms(): no params data found
[ 70.795823][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.798196][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.800606][ T5926] bridge_slave_0: entered allmulticast mode
[ 70.803690][ T5926] bridge_slave_0: entered promiscuous mode
[ 70.807119][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.809889][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.812653][ T5926] bridge_slave_1: entered allmulticast mode
[ 70.815788][ T5926] bridge_slave_1: entered promiscuous mode
[ 70.820698][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.838680][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.886714][ T5921] team0: Port device team_slave_0 added
[ 70.890100][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.894817][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.909032][ T5921] team0: Port device team_slave_1 added
[ 70.927358][ T5926] team0: Port device team_slave_0 added
[ 70.953798][ T5926] team0: Port device team_slave_1 added
[ 70.963559][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.966046][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.975300][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.979787][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.982148][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.992662][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.050588][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.053014][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.055103][ T5925] bridge_slave_0: entered allmulticast mode
[ 71.057682][ T5925] bridge_slave_0: entered promiscuous mode
[ 71.064948][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.067457][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.077233][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.090652][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.092744][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.094922][ T5925] bridge_slave_1: entered allmulticast mode
[ 71.097751][ T5925] bridge_slave_1: entered promiscuous mode
[ 71.101837][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.104515][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.116118][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.151077][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.155474][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.161824][ T5921] hsr_slave_0: entered promiscuous mode
[ 71.164103][ T5921] hsr_slave_1: entered promiscuous mode
[ 71.166577][ T5921] debugfs: 'hsr0' already exists in 'hsr'
[ 71.168818][ T5921] Cannot create hsr debugfs directory
[ 71.228757][ T5925] team0: Port device team_slave_0 added
[ 71.238688][ T5925] team0: Port device team_slave_1 added
[ 71.266752][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.269214][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.277200][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.284223][ T5926] hsr_slave_0: entered promiscuous mode
[ 71.286480][ T5926] hsr_slave_1: entered promiscuous mode
[ 71.288899][ T5926] debugfs: 'hsr0' already exists in 'hsr'
[ 71.290597][ T5926] Cannot create hsr debugfs directory
[ 71.298612][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.300736][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 71.309217][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.367009][ T5925] hsr_slave_0: entered promiscuous mode
[ 71.369400][ T5925] hsr_slave_1: entered promiscuous mode
[ 71.372068][ T5925] debugfs: 'hsr0' already exists in 'hsr'
[ 71.373770][ T5925] Cannot create hsr debugfs directory
[ 71.559635][ T5921] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.565747][ T5921] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.570241][ T5921] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.574726][ T5921] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.625237][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.636430][ T5921] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.643314][ T40] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.645506][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.652844][ T40] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.655052][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.750716][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.773743][ T5921] veth0_vlan: entered promiscuous mode
[ 71.779643][ T5921] veth1_vlan: entered promiscuous mode
[ 71.794503][ T5921] veth0_macvtap: entered promiscuous mode
[ 71.799111][ T5921] veth1_macvtap: entered promiscuous mode
[ 71.810917][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.817720][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.827384][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.831095][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.834120][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.837016][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.876342][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.882343][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.896559][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.900183][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.927707][ T5963]
[ 71.928692][ T5963] =============================
[ 71.930137][ T5963] WARNING: suspicious RCU usage
[ 71.931538][ T5963] syzkaller #0 Not tainted
[ 71.932845][ T5963] -----------------------------
[ 71.934262][ T5963] net/sched/sch_api.c:943 suspicious rcu_dereference_check() usage!
[ 71.936645][ T5963]
[ 71.936645][ T5963] other info that might help us debug this:
[ 71.936645][ T5963]
[ 71.939933][ T5963]
[ 71.939933][ T5963] rcu_scheduler_active = 2, debug_locks = 1
[ 71.942256][ T5963] 1 lock held by syz.0.17/5963:
[ 71.943666][ T5963] #0: ffffffff8fbca4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 71.946378][ T5963]
[ 71.946378][ T5963] stack backtrace:
[ 71.948088][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 71.948098][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 71.948103][ T5963] Call Trace:
[ 71.948108][ T5963]
[ 71.948121][ T5963] dump_stack_lvl+0xe8/0x150
[ 71.948135][ T5963] lockdep_rcu_suspicious+0x13f/0x1d0
[ 71.948149][ T5963] tc_fill_qdisc+0xd90/0x11c0
[ 71.948167][ T5963] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 71.948179][ T5963] ? rcu_is_watching+0x15/0xb0
[ 71.948196][ T5963] ? __alloc_skb+0x4e5/0x7d0
[ 71.948221][ T5963] qdisc_notify+0x1cf/0x440
[ 71.948238][ T5963] qdisc_graft+0x114a/0x15b0
[ 71.948255][ T5963] ? __pfx_qdisc_graft+0x10/0x10
[ 71.948267][ T5963] ? qdisc_create+0xa7b/0xf20
[ 71.948278][ T5963] ? lockdep_rtnl_is_held+0x26/0x40
[ 71.948291][ T5963] tc_modify_qdisc+0x18a4/0x2290
[ 71.948302][ T5963] ? rcu_is_watching+0x15/0xb0
[ 71.948317][ T5963] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 71.948328][ T5963] ? __dev_queue_xmit+0x2b6/0x3920
[ 71.948350][ T5963] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 71.948360][ T5963] rtnetlink_rcv_msg+0x77e/0xbe0
[ 71.948371][ T5963] ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 71.948378][ T5963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 71.948386][ T5963] ? ref_tracker_free+0x693/0x840
[ 71.948394][ T5963] ? __copy_skb_header+0xa3/0x4a0
[ 71.948405][ T5963] ? __pfx_ref_tracker_free+0x10/0x10
[ 71.948412][ T5963] ? __skb_clone+0x63/0x7a0
[ 71.948425][ T5963] netlink_rcv_skb+0x232/0x4b0
[ 71.948434][ T5963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 71.948443][ T5963] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 71.948455][ T5963] ? netlink_deliver_tap+0x2e/0x1b0
[ 71.948466][ T5963] netlink_unicast+0x80f/0x9b0
[ 71.948477][ T5963] ? __pfx_netlink_unicast+0x10/0x10
[ 71.948498][ T5963] ? netlink_sendmsg+0x650/0xb40
[ 71.948507][ T5963] ? skb_put+0x11b/0x210
[ 71.948517][ T5963] netlink_sendmsg+0x813/0xb40
[ 71.948529][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10
[ 71.948538][ T5963] ? aa_sock_msg_perm+0xf1/0x1b0
[ 71.948552][ T5963] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 71.948563][ T5963] ____sys_sendmsg+0x972/0x9f0
[ 71.948574][ T5963] ? futex_unqueue+0x211/0x240
[ 71.948586][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10
[ 71.948599][ T5963] ? import_iovec+0x73/0xa0
[ 71.948610][ T5963] ___sys_sendmsg+0x2a5/0x360
[ 71.948622][ T5963] ? __pfx____sys_sendmsg+0x10/0x10
[ 71.948634][ T5963] ? futex_wait+0x29a/0x380
[ 71.948655][ T5963] ? __fget_files+0x2a/0x420
[ 71.948662][ T5963] ? __fget_files+0x3a0/0x420
[ 71.948672][ T5963] __x64_sys_sendmsg+0x1bd/0x2a0
[ 71.948684][ T5963] ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 71.948703][ T5963] do_syscall_64+0x14d/0xf80
[ 71.948713][ T5963] ? trace_irq_disable+0x3b/0x150
[ 71.948720][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.948730][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.948737][ T5963] RIP: 0033:0x7f9e5e39c819
[ 71.948747][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 71.948754][ T5963] RSP: 002b:00007f9e5f2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 71.948763][ T5963] RAX: ffffffffffffffda RBX: 00007f9e5e615fa0 RCX: 00007f9e5e39c819
[ 71.948768][ T5963] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[ 71.948773][ T5963] RBP: 00007f9e5e432c91 R08: 0000000000000000 R09: 0000000000000000
[ 71.948778][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 71.948782][ T5963] R13: 00007f9e5e616038 R14: 00007f9e5e615fa0 R15: 00007ffc6a25e4e8
[ 71.948812][ T5963]
[ 72.072488][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.309623][ T5196] Bluetooth: hci0: command tx timeout
[ 72.391814][ T5196] Bluetooth: hci1: command tx timeout
[ 72.391894][ T5883] Bluetooth: hci2: command tx timeout
[ 72.504241][ T6023]
[ 72.505095][ T6023] =============================
[ 72.506529][ T6023] WARNING: suspicious RCU usage
[ 72.507947][ T6023] syzkaller #0 Not tainted
[ 72.509538][ T6023] -----------------------------
[ 72.511002][ T6023] net/sched/sch_mq.c:158 suspicious rcu_dereference_check() usage!
[ 72.513265][ T6023]
[ 72.513265][ T6023] other info that might help us debug this:
[ 72.513265][ T6023]
[ 72.516210][ T6023]
[ 72.516210][ T6023] rcu_scheduler_active = 2, debug_locks = 1
[ 72.518623][ T6023] 1 lock held by syz.0.49/6023:
[ 72.520136][ T6023] #0: ffffffff8fbca4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[ 72.522992][ T6023]
[ 72.522992][ T6023] stack backtrace:
[ 72.524793][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full)
[ 72.524804][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 72.524809][ T6023] Call Trace:
[ 72.524813][ T6023]
[ 72.524817][ T6023] dump_stack_lvl+0xe8/0x150
[ 72.524837][ T6023] lockdep_rcu_suspicious+0x13f/0x1d0
[ 72.524851][ T6023] mq_dump_common+0x2fa/0x5e0
[ 72.524865][ T6023] ? __pfx_mq_dump_common+0x10/0x10
[ 72.524876][ T6023] ? kasan_save_track+0x4f/0x80
[ 72.524884][ T6023] ? kasan_save_track+0x3e/0x80
[ 72.524891][ T6023] ? __kasan_kmalloc+0x93/0xb0
[ 72.524900][ T6023] ? qdisc_notify+0x110/0x440
[ 72.524911][ T6023] ? qdisc_graft+0x114a/0x15b0
[ 72.524921][ T6023] ? rtnetlink_rcv_msg+0x77e/0xbe0
[ 72.524930][ T6023] ? netlink_rcv_skb+0x232/0x4b0
[ 72.524937][ T6023] ? netlink_unicast+0x80f/0x9b0
[ 72.524943][ T6023] ? netlink_sendmsg+0x813/0xb40
[ 72.524953][ T6023] mq_dump+0x7e/0x150
[ 72.524962][ T6023] ? __pfx_mq_dump+0x10/0x10
[ 72.524971][ T6023] ? nla_put+0xd0/0x150
[ 72.524981][ T6023] ? __asan_memcpy+0x40/0x70
[ 72.524989][ T6023] ? nla_put+0xd0/0x150
[ 72.524998][ T6023] tc_fill_qdisc+0x663/0x11c0
[ 72.525014][ T6023] ? __pfx_tc_fill_qdisc+0x10/0x10
[ 72.525025][ T6023] ? rcu_is_watching+0x15/0xb0
[ 72.525045][ T6023] ? __alloc_skb+0x4e5/0x7d0
[ 72.525056][ T6023] qdisc_notify+0x1cf/0x440
[ 72.525070][ T6023] qdisc_graft+0x114a/0x15b0
[ 72.525089][ T6023] ? __pfx_qdisc_graft+0x10/0x10
[ 72.525101][ T6023] ? qdisc_create+0xa7b/0xf20
[ 72.525113][ T6023] ? lockdep_rtnl_is_held+0x26/0x40
[ 72.525125][ T6023] tc_modify_qdisc+0x18a4/0x2290
[ 72.525136][ T6023] ? rcu_is_watching+0x15/0xb0
[ 72.525151][ T6023] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 72.525162][ T6023] ? __dev_queue_xmit+0x2b6/0x3920
[ 72.525183][ T6023] ? __pfx_tc_modify_qdisc+0x10/0x10
[ 72.525194][ T6023] rtnetlink_rcv_msg+0x77e/0xbe0
[ 72.525204][ T6023] ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 72.525212][ T6023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 72.525220][ T6023] ? ref_tracker_free+0x693/0x840
[ 72.525227][ T6023] ? __copy_skb_header+0xa3/0x4a0
[ 72.525237][ T6023] ? __pfx_ref_tracker_free+0x10/0x10
[ 72.525244][ T6023] ? __skb_clone+0x63/0x7a0
[ 72.525257][ T6023] netlink_rcv_skb+0x232/0x4b0
[ 72.525266][ T6023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 72.525274][ T6023] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 72.525287][ T6023] ? netlink_deliver_tap+0x2e/0x1b0
[ 72.525297][ T6023] netlink_unicast+0x80f/0x9b0
[ 72.525308][ T6023] ? __pfx_netlink_unicast+0x10/0x10
[ 72.525316][ T6023] ? netlink_sendmsg+0x650/0xb40
[ 72.525323][ T6023] ? skb_put+0x11b/0x210
[ 72.525333][ T6023] netlink_sendmsg+0x813/0xb40
[ 72.525345][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10
[ 72.525354][ T6023] ? aa_sock_msg_perm+0xf1/0x1b0
[ 72.525366][ T6023] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 72.525377][ T6023] ____sys_sendmsg+0x972/0x9f0
[ 72.525387][ T6023] ? futex_unqueue+0x211/0x240
[ 72.525399][ T6023] ? __pfx_____sys_sendmsg+0x10/0x10
[ 72.525413][ T6023] ? import_iovec+0x73/0xa0
[ 72.525423][ T6023] ___sys_sendmsg+0x2a5/0x360
[ 72.525435][ T6023] ? __pfx____sys_sendmsg+0x10/0x10
[ 72.525447][ T6023] ? futex_wait+0x29a/0x380
[ 72.525467][ T6023] ? __fget_files+0x2a/0x420
[ 72.525474][ T6023] ? __fget_files+0x3a0/0x420
[ 72.525484][ T6023] __x64_sys_sendmsg+0x1bd/0x2a0
[ 72.525496][ T6023] ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 72.525515][ T6023] do_syscall_64+0x14d/0xf80
[ 72.525524][ T6023] ? trace_irq_disable+0x3b/0x150
[ 72.525531][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.525540][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.525548][ T6023] RIP: 0033:0x7f9e5e39c819
[ 72.525557][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 72.525563][ T6023] RSP: 002b:00007f9e5f2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 72.525572][ T6023] RAX: ffffffffffffffda RBX: 00007f9e5e615fa0 RCX: 00007f9e5e39c819
[ 72.525578][ T6023] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003
[ 72.525582][ T6023] RBP: 00007f9e5e432c91 R08: 0000000000000000 R09: 0000000000000000
[ 72.525587][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 72.525591][ T6023] R13: 00007f9e5e616038 R14: 00007f9e5e615fa0 R15: 00007ffc6a25e4e8
[ 72.525603][ T6023]
[ 73.581892][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 73.773558][ T13] bridge_slave_1: left allmulticast mode
[ 73.775528][ T13] bridge_slave_1: left promiscuous mode
[ 73.778502][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.785586][ T13] bridge_slave_0: left allmulticast mode
[ 73.787867][ T13] bridge_slave_0: left promiscuous mode
[ 73.792089][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.942135][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 73.946898][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 73.951179][ T13] bond0 (unregistering): Released all slaves
[ 74.066984][ T13] hsr_slave_0: left promiscuous mode
[ 74.069774][ T13] hsr_slave_1: left promiscuous mode
[ 74.074319][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.076507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.084430][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.086662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.094256][ T13] veth1_macvtap: left promiscuous mode
[ 74.096002][ T13] veth0_macvtap: left promiscuous mode
[ 74.097703][ T13] veth1_vlan: left promiscuous mode
[ 74.100660][ T13] veth0_vlan: left promiscuous mode
[ 74.244103][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 74.251142][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 74.388541][ T5883] Bluetooth: hci0: command tx timeout
[ 74.469318][ T5883] Bluetooth: hci2: command tx timeout
[ 74.469923][ T5196] Bluetooth: hci1: command tx timeout
[ 74.500190][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 74.515922][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 74.547516][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 74.567003][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 74.601060][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 74.605425][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 74.613038][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 74.619348][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 74.689951][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 74.708097][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[ 74.721288][ T245] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.723491][ T245] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.734649][ T245] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.737058][ T245] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.760892][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[ 74.790789][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[ 74.796493][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.798703][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.807688][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.809881][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.884345][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.922828][ T5926] veth0_vlan: entered promiscuous mode
[ 74.930947][ T5926] veth1_vlan: entered promiscuous mode
[ 74.962860][ T5926] veth0_macvtap: entered promiscuous mode
[ 74.967749][ T5926] veth1_macvtap: entered promiscuous mode
[ 74.990908][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.005597][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.015121][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.017701][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.024211][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.029607][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.051463][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.081682][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.086782][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.125661][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.127088][ T5925] veth0_vlan: entered promiscuous mode
[ 75.130693][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.140130][ T5925] veth1_vlan: entered promiscuous mode
[ 75.176312][ T5925] veth0_macvtap: entered promiscuous mode
[ 75.187509][ T5925] veth1_macvtap: entered promiscuous mode
[ 75.220916][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.236235][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.247547][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.254957][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.257528][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.267510][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/04/08 18:48:17 executed programs: 163
[ 75.354662][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.361147][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.393050][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.395370][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.480921][ T5196] Bluetooth: hci0: command tx timeout
[ 76.548917][ T5196] Bluetooth: hci1: command tx timeout
[ 76.558436][ T5196] Bluetooth: hci2: command tx timeout
[ 76.713454][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.715438][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[ 78.548590][ T5196] Bluetooth: hci0: command tx timeout
[ 78.629226][ T5196] Bluetooth: hci2: command tx timeout
[ 78.630836][ T5196] Bluetooth: hci1: command tx timeout
2026/04/08 18:48:22 executed programs: 747