Warning: Permanently added '[localhost]:22493' (ED25519) to the list of known hosts. 2026/04/08 18:44:10 parsed 1 programs syzkaller login: [ 54.333643][ T5805] cgroup: Unknown subsys name 'net' [ 54.439630][ T5805] cgroup: Unknown subsys name 'cpuset' [ 54.443589][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.154252][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.510210][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.513346][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.526589][ T5199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.532825][ T5199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.537142][ T5199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.674091][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.836721][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.839193][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.885588][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.893826][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.905061][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 60.024443][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.026443][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.046608][ T5864] bridge_slave_0: entered allmulticast mode [ 60.049235][ T5864] bridge_slave_0: entered promiscuous mode [ 60.058398][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.060606][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.083016][ T5864] bridge_slave_1: entered allmulticast mode [ 60.093892][ T5864] bridge_slave_1: entered promiscuous mode [ 60.144856][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.162900][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.203510][ T5864] team0: Port device team_slave_0 added [ 60.220612][ T5864] team0: Port device team_slave_1 added [ 60.399482][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.406044][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.415737][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.431202][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.435223][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.444612][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.663541][ T5864] hsr_slave_0: entered promiscuous mode [ 60.667256][ T5864] hsr_slave_1: entered promiscuous mode [ 61.029397][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.043938][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.052549][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.057678][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.143484][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.155146][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.163636][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.165776][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.314985][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.317480][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.554510][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.582300][ T5864] veth0_vlan: entered promiscuous mode [ 61.594467][ T5864] veth1_vlan: entered promiscuous mode [ 61.620047][ T5864] veth0_macvtap: entered promiscuous mode [ 61.624115][ T5864] veth1_macvtap: entered promiscuous mode [ 61.633117][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.642116][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.650357][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.653659][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.656186][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.659859][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/08 18:44:19 executed programs: 0 [ 61.802536][ T5199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.811861][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.814700][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.819112][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.821543][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.824131][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.833203][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.833897][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.836755][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.840316][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.840884][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.842937][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.848356][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.851186][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.857079][ T5927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.881404][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.941621][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.015773][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.074286][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.122519][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 62.222416][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 62.253654][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 62.264963][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.267788][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.269962][ T5923] bridge_slave_0: entered allmulticast mode [ 62.272930][ T5923] bridge_slave_0: entered promiscuous mode [ 62.281295][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.283452][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.285502][ T5923] bridge_slave_1: entered allmulticast mode [ 62.288766][ T5923] bridge_slave_1: entered promiscuous mode [ 62.334016][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.352028][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.395891][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.398473][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.401761][ T5925] bridge_slave_0: entered allmulticast mode [ 62.404356][ T5925] bridge_slave_0: entered promiscuous mode [ 62.408594][ T5923] team0: Port device team_slave_0 added [ 62.410284][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.412391][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.414636][ T5925] bridge_slave_1: entered allmulticast mode [ 62.418153][ T5925] bridge_slave_1: entered promiscuous mode [ 62.430650][ T5923] team0: Port device team_slave_1 added [ 62.462868][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.465042][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.467288][ T5924] bridge_slave_0: entered allmulticast mode [ 62.470414][ T5924] bridge_slave_0: entered promiscuous mode [ 62.473996][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.476075][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.480997][ T5924] bridge_slave_1: entered allmulticast mode [ 62.483634][ T5924] bridge_slave_1: entered promiscuous mode [ 62.494326][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.496342][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.504797][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.513123][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.517860][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.534781][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.538252][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.546640][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.563057][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.575052][ T5925] team0: Port device team_slave_0 added [ 62.578689][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.583741][ T5925] team0: Port device team_slave_1 added [ 62.612231][ T5924] team0: Port device team_slave_0 added [ 62.631773][ T5923] hsr_slave_0: entered promiscuous mode [ 62.634288][ T5923] hsr_slave_1: entered promiscuous mode [ 62.637531][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 62.639775][ T5923] Cannot create hsr debugfs directory [ 62.642631][ T5924] team0: Port device team_slave_1 added [ 62.644768][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.647321][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.654527][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.674725][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.677286][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.684578][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.703412][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.705943][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.714291][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.738651][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.741229][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.751469][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.797688][ T5925] hsr_slave_0: entered promiscuous mode [ 62.799858][ T5925] hsr_slave_1: entered promiscuous mode [ 62.801798][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 62.803505][ T5925] Cannot create hsr debugfs directory [ 62.849649][ T5924] hsr_slave_0: entered promiscuous mode [ 62.852527][ T5924] hsr_slave_1: entered promiscuous mode [ 62.854831][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 62.856898][ T5924] Cannot create hsr debugfs directory [ 63.917455][ T5199] Bluetooth: hci2: command tx timeout [ 63.917466][ T5927] Bluetooth: hci0: command tx timeout [ 63.922178][ T5932] Bluetooth: hci1: command tx timeout [ 65.018401][ T12] bridge_slave_1: left allmulticast mode [ 65.020396][ T12] bridge_slave_1: left promiscuous mode [ 65.022537][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.038830][ T12] bridge_slave_0: left allmulticast mode [ 65.041128][ T12] bridge_slave_0: left promiscuous mode [ 65.043425][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.194937][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.203720][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.207726][ T12] bond0 (unregistering): Released all slaves [ 65.335518][ T12] hsr_slave_0: left promiscuous mode [ 65.339755][ T12] hsr_slave_1: left promiscuous mode [ 65.343441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.345703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.349269][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.351849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.360172][ T12] veth1_macvtap: left promiscuous mode [ 65.362154][ T12] veth0_macvtap: left promiscuous mode [ 65.364112][ T12] veth1_vlan: left promiscuous mode [ 65.365652][ T12] veth0_vlan: left promiscuous mode [ 65.545894][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.554916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.836123][ T5924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.862703][ T5924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.876358][ T5924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.892743][ T5924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.964115][ T5925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.980548][ T5925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.000446][ T5932] Bluetooth: hci1: command tx timeout [ 66.002069][ T5932] Bluetooth: hci0: command tx timeout [ 66.006598][ T5927] Bluetooth: hci2: command tx timeout [ 66.008804][ T5925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.013804][ T5925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.103982][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.111177][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.122537][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.129245][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.179313][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.207546][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.228254][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.230601][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.253615][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.255885][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.297977][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.315233][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.338174][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.343082][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.349719][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.351791][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.371214][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.373531][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.396384][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.398885][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.407704][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.410146][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.512957][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.539499][ T5924] veth0_vlan: entered promiscuous mode [ 66.544355][ T5924] veth1_vlan: entered promiscuous mode [ 66.564070][ T5924] veth0_macvtap: entered promiscuous mode [ 66.569700][ T5924] veth1_macvtap: entered promiscuous mode [ 66.579951][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.588233][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.595433][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.604212][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.617971][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.620529][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.641538][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.678321][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.680608][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.696079][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.714555][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.719120][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.732612][ T5923] veth0_vlan: entered promiscuous mode 2026/04/08 18:44:24 executed programs: 6 [ 66.779411][ T6007] [ 66.780411][ T6007] ============================= [ 66.782419][ T6007] WARNING: suspicious RCU usage [ 66.783920][ T6007] syzkaller #0 Not tainted [ 66.785605][ T6007] ----------------------------- [ 66.787728][ T6007] net/sched/sch_mq.c:158 suspicious rcu_dereference_check() usage! [ 66.791103][ T6007] [ 66.791103][ T6007] other info that might help us debug this: [ 66.791103][ T6007] [ 66.794826][ T6007] [ 66.794826][ T6007] rcu_scheduler_active = 2, debug_locks = 1 [ 66.797832][ T6007] 1 lock held by syz.1.18/6007: [ 66.799287][ T6007] #0: ffffffff8fbca4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 66.802170][ T6007] [ 66.802170][ T6007] stack backtrace: [ 66.804327][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.804339][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 66.804344][ T6007] Call Trace: [ 66.804348][ T6007] [ 66.804360][ T6007] dump_stack_lvl+0xe8/0x150 [ 66.804375][ T6007] lockdep_rcu_suspicious+0x13f/0x1d0 [ 66.804389][ T6007] mq_dump_common+0x2fa/0x5e0 [ 66.804400][ T6007] ? lockdep_hardirqs_on+0x7a/0x110 [ 66.804413][ T6007] ? __pfx_mq_dump_common+0x10/0x10 [ 66.804423][ T6007] ? kasan_save_track+0x4f/0x80 [ 66.804432][ T6007] ? kasan_save_track+0x3e/0x80 [ 66.804439][ T6007] ? __kasan_kmalloc+0x93/0xb0 [ 66.804448][ T6007] ? qdisc_notify+0x110/0x440 [ 66.804459][ T6007] ? qdisc_graft+0x114a/0x15b0 [ 66.804469][ T6007] ? rtnetlink_rcv_msg+0x77e/0xbe0 [ 66.804478][ T6007] ? netlink_rcv_skb+0x232/0x4b0 [ 66.804485][ T6007] ? netlink_unicast+0x80f/0x9b0 [ 66.804491][ T6007] ? netlink_sendmsg+0x813/0xb40 [ 66.804500][ T6007] mq_dump+0x7e/0x150 [ 66.804510][ T6007] ? __pfx_mq_dump+0x10/0x10 [ 66.804518][ T6007] ? nla_put+0xd0/0x150 [ 66.804528][ T6007] ? __asan_memcpy+0x40/0x70 [ 66.804536][ T6007] ? nla_put+0xd0/0x150 [ 66.804546][ T6007] tc_fill_qdisc+0x663/0x11c0 [ 66.804561][ T6007] ? __pfx_tc_fill_qdisc+0x10/0x10 [ 66.804572][ T6007] ? rcu_is_watching+0x15/0xb0 [ 66.804590][ T6007] ? __alloc_skb+0x4e5/0x7d0 [ 66.804600][ T6007] qdisc_notify+0x1cf/0x440 [ 66.804614][ T6007] qdisc_graft+0x114a/0x15b0 [ 66.804631][ T6007] ? __pfx_qdisc_graft+0x10/0x10 [ 66.804644][ T6007] ? qdisc_create+0xa7b/0xf20 [ 66.804655][ T6007] ? lockdep_rtnl_is_held+0x26/0x40 [ 66.804667][ T6007] tc_modify_qdisc+0x18a4/0x2290 [ 66.804678][ T6007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 66.804728][ T6007] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.804754][ T6007] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.804764][ T6007] rtnetlink_rcv_msg+0x77e/0xbe0 [ 66.804774][ T6007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 66.804782][ T6007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.804790][ T6007] ? ref_tracker_free+0x693/0x840 [ 66.804797][ T6007] ? __copy_skb_header+0xa3/0x4a0 [ 66.804813][ T6007] ? __pfx_ref_tracker_free+0x10/0x10 [ 66.804820][ T6007] ? __skb_clone+0x63/0x7a0 [ 66.804833][ T6007] netlink_rcv_skb+0x232/0x4b0 [ 66.804841][ T6007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.804850][ T6007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.804866][ T6007] ? netlink_deliver_tap+0x2e/0x1b0 [ 66.804882][ T6007] netlink_unicast+0x80f/0x9b0 [ 66.804899][ T6007] ? __pfx_netlink_unicast+0x10/0x10 [ 66.804911][ T6007] ? netlink_sendmsg+0x650/0xb40 [ 66.804918][ T6007] ? skb_put+0x11b/0x210 [ 66.804928][ T6007] netlink_sendmsg+0x813/0xb40 [ 66.804940][ T6007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.804950][ T6007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 66.804963][ T6007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 66.804974][ T6007] ____sys_sendmsg+0x972/0x9f0 [ 66.804985][ T6007] ? futex_unqueue+0x211/0x240 [ 66.804997][ T6007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.805011][ T6007] ? import_iovec+0x73/0xa0 [ 66.805025][ T6007] ___sys_sendmsg+0x2a5/0x360 [ 66.805042][ T6007] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.805064][ T6007] ? futex_wait+0x29a/0x380 [ 66.805087][ T6007] ? __fget_files+0x2a/0x420 [ 66.805094][ T6007] ? __fget_files+0x3a0/0x420 [ 66.805105][ T6007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 66.805116][ T6007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 66.805129][ T6007] ? rcu_is_watching+0x15/0xb0 [ 66.805145][ T6007] do_syscall_64+0x14d/0xf80 [ 66.805155][ T6007] ? trace_irq_disable+0x3b/0x150 [ 66.805161][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.805171][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.805178][ T6007] RIP: 0033:0x7f1d3839c819 [ 66.805189][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.805196][ T6007] RSP: 002b:00007f1d392c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.805205][ T6007] RAX: ffffffffffffffda RBX: 00007f1d38615fa0 RCX: 00007f1d3839c819 [ 66.805210][ T6007] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 66.805215][ T6007] RBP: 00007f1d38432c91 R08: 0000000000000000 R09: 0000000000000000 [ 66.805219][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.805224][ T6007] R13: 00007f1d38616038 R14: 00007f1d38615fa0 R15: 00007fff29960058 [ 66.805236][ T6007] [ 66.836840][ T6007] [ 66.939941][ T6007] ============================= [ 66.941333][ T6007] WARNING: suspicious RCU usage [ 66.942783][ T6007] syzkaller #0 Not tainted [ 66.944065][ T6007] ----------------------------- [ 66.945465][ T6007] net/sched/sch_api.c:943 suspicious rcu_dereference_check() usage! [ 66.947945][ T6007] [ 66.947945][ T6007] other info that might help us debug this: [ 66.947945][ T6007] [ 66.951205][ T6007] [ 66.951205][ T6007] rcu_scheduler_active = 2, debug_locks = 1 [ 66.953496][ T6007] 1 lock held by syz.1.18/6007: [ 66.954986][ T6007] #0: ffffffff8fbca4c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 66.958242][ T6007] [ 66.958242][ T6007] stack backtrace: [ 66.960265][ T6007] CPU: 0 UID: 0 PID: 6007 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.960275][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 66.960281][ T6007] Call Trace: [ 66.960285][ T6007] [ 66.960289][ T6007] dump_stack_lvl+0xe8/0x150 [ 66.960304][ T6007] lockdep_rcu_suspicious+0x13f/0x1d0 [ 66.960319][ T6007] tc_fill_qdisc+0xd90/0x11c0 [ 66.960337][ T6007] ? __pfx_tc_fill_qdisc+0x10/0x10 [ 66.960349][ T6007] ? rcu_is_watching+0x15/0xb0 [ 66.960367][ T6007] ? __alloc_skb+0x4e5/0x7d0 [ 66.960378][ T6007] qdisc_notify+0x1cf/0x440 [ 66.960392][ T6007] qdisc_graft+0x114a/0x15b0 [ 66.960410][ T6007] ? __pfx_qdisc_graft+0x10/0x10 [ 66.960422][ T6007] ? qdisc_create+0xa7b/0xf20 [ 66.960434][ T6007] ? lockdep_rtnl_is_held+0x26/0x40 [ 66.960446][ T6007] tc_modify_qdisc+0x18a4/0x2290 [ 66.960458][ T6007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 66.960473][ T6007] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.960495][ T6007] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 66.960505][ T6007] rtnetlink_rcv_msg+0x77e/0xbe0 [ 66.960515][ T6007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 66.960523][ T6007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.960531][ T6007] ? ref_tracker_free+0x693/0x840 [ 66.960539][ T6007] ? __copy_skb_header+0xa3/0x4a0 [ 66.960549][ T6007] ? __pfx_ref_tracker_free+0x10/0x10 [ 66.960556][ T6007] ? __skb_clone+0x63/0x7a0 [ 66.960569][ T6007] netlink_rcv_skb+0x232/0x4b0 [ 66.960579][ T6007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.960588][ T6007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.960600][ T6007] ? netlink_deliver_tap+0x2e/0x1b0 [ 66.960611][ T6007] netlink_unicast+0x80f/0x9b0 [ 66.960621][ T6007] ? __pfx_netlink_unicast+0x10/0x10 [ 66.960629][ T6007] ? netlink_sendmsg+0x650/0xb40 [ 66.960636][ T6007] ? skb_put+0x11b/0x210 [ 66.960647][ T6007] netlink_sendmsg+0x813/0xb40 [ 66.960658][ T6007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.960695][ T6007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 66.960711][ T6007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 66.960722][ T6007] ____sys_sendmsg+0x972/0x9f0 [ 66.960739][ T6007] ? futex_unqueue+0x211/0x240 [ 66.960752][ T6007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.960765][ T6007] ? import_iovec+0x73/0xa0 [ 66.960776][ T6007] ___sys_sendmsg+0x2a5/0x360 [ 66.960788][ T6007] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.960800][ T6007] ? futex_wait+0x29a/0x380 [ 66.960821][ T6007] ? __fget_files+0x2a/0x420 [ 66.960828][ T6007] ? __fget_files+0x3a0/0x420 [ 66.960838][ T6007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 66.960849][ T6007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 66.960863][ T6007] ? rcu_is_watching+0x15/0xb0 [ 66.960878][ T6007] do_syscall_64+0x14d/0xf80 [ 66.960888][ T6007] ? trace_irq_disable+0x3b/0x150 [ 66.960895][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.960905][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.960912][ T6007] RIP: 0033:0x7f1d3839c819 [ 66.960921][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.960928][ T6007] RSP: 002b:00007f1d392c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.960936][ T6007] RAX: ffffffffffffffda RBX: 00007f1d38615fa0 RCX: 00007f1d3839c819 [ 66.960942][ T6007] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 66.960947][ T6007] RBP: 00007f1d38432c91 R08: 0000000000000000 R09: 0000000000000000 [ 66.960951][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.960956][ T6007] R13: 00007f1d38616038 R14: 00007f1d38615fa0 R15: 00007fff29960058 [ 66.960968][ T6007] [ 66.963537][ T5923] veth1_vlan: entered promiscuous mode [ 67.123781][ T5925] veth0_vlan: entered promiscuous mode [ 67.147676][ T5925] veth1_vlan: entered promiscuous mode [ 67.180119][ T5923] veth0_macvtap: entered promiscuous mode [ 67.193194][ T5923] veth1_macvtap: entered promiscuous mode [ 67.198470][ T5925] veth0_macvtap: entered promiscuous mode [ 67.205013][ T5925] veth1_macvtap: entered promiscuous mode [ 67.226296][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.237485][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.258712][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.260878][ T5675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267156][ T5675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.271909][ T5675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275508][ T5675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.293964][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.314982][ T5675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344468][ T5675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.351932][ T5675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.367570][ T5675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.417768][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.420613][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.479243][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.481779][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.520691][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.523567][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.594110][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.600784][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.077013][ T5932] Bluetooth: hci0: command tx timeout [ 68.078594][ T5932] Bluetooth: hci1: command tx timeout [ 68.080187][ T5927] Bluetooth: hci2: command tx timeout [ 70.160486][ T5927] Bluetooth: hci2: command tx timeout [ 70.160623][ T5199] Bluetooth: hci1: command tx timeout [ 70.162109][ T5927] Bluetooth: hci0: command tx timeout 2026/04/08 18:44:29 executed programs: 393 [ 76.721303][ T1363] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.723714][ T1363] ieee802154 phy1 wpan1: encryption failed: -22