syzkaller syzkaller login: [ 51.079410][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 51.079425][ T29] audit: type=1400 audit(1773714482.185:57): avc: denied { transition } for pid=5706 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.108326][ T29] audit: type=1400 audit(1773714482.185:58): avc: denied { noatsecure } for pid=5706 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.128468][ T29] audit: type=1400 audit(1773714482.195:59): avc: denied { write } for pid=5706 comm="sh" path="pipe:[4648]" dev="pipefs" ino=4648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.150718][ T29] audit: type=1400 audit(1773714482.195:60): avc: denied { rlimitinh } for pid=5706 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.169774][ T29] audit: type=1400 audit(1773714482.195:61): avc: denied { siginh } for pid=5706 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2026/03/17 02:28:14 parsed 1 programs [ 63.335880][ T29] audit: type=1400 audit(1773714494.435:62): avc: denied { node_bind } for pid=5799 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.401356][ T29] audit: type=1400 audit(1773714496.505:63): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.424750][ T29] audit: type=1400 audit(1773714496.525:64): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.427335][ T5806] cgroup: Unknown subsys name 'net' [ 65.453690][ T29] audit: type=1400 audit(1773714496.555:65): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.569179][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.577116][ T5806] cgroup: Unknown subsys name 'rlimit' [ 65.748709][ T29] audit: type=1400 audit(1773714496.855:66): avc: denied { setattr } for pid=5806 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.781635][ T29] audit: type=1400 audit(1773714496.855:67): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.803391][ T29] audit: type=1400 audit(1773714496.855:68): avc: denied { write } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.828627][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.834986][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.849337][ T29] audit: type=1400 audit(1773714496.855:69): avc: denied { read } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.876813][ T29] audit: type=1400 audit(1773714496.865:70): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.889755][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.901699][ T29] audit: type=1400 audit(1773714496.865:71): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.859324][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.554889][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 68.554904][ T29] audit: type=1400 audit(1773714499.645:76): avc: denied { execmem } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.618350][ T29] audit: type=1400 audit(1773714499.725:77): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.671688][ T29] audit: type=1400 audit(1773714499.725:78): avc: denied { sys_admin } for pid=5815 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 68.708114][ T29] audit: type=1400 audit(1773714499.745:79): avc: denied { read } for pid=5822 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.731553][ T29] audit: type=1400 audit(1773714499.745:80): avc: denied { open } for pid=5821 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.766901][ T29] audit: type=1400 audit(1773714499.745:81): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.913182][ T29] audit: type=1400 audit(1773714500.015:82): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.doHjo3/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.946927][ T29] audit: type=1400 audit(1773714500.015:83): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.971444][ T29] audit: type=1400 audit(1773714500.015:84): avc: denied { mounton } for pid=5822 comm="syz-executor" path="/root/syzkaller.doHjo3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.000501][ T29] audit: type=1400 audit(1773714500.015:85): avc: denied { mount } for pid=5822 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.041508][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.056637][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.064503][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.175268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.204422][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.597599][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.606872][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.614459][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.628099][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.635599][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.178878][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 71.300193][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.307390][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.314530][ T5879] bridge_slave_0: entered allmulticast mode [ 71.322574][ T5879] bridge_slave_0: entered promiscuous mode [ 71.334066][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.341381][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.348566][ T5879] bridge_slave_1: entered allmulticast mode [ 71.355184][ T5879] bridge_slave_1: entered promiscuous mode [ 71.378341][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.392231][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.422964][ T5879] team0: Port device team_slave_0 added [ 71.430904][ T5879] team0: Port device team_slave_1 added [ 71.453440][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.460430][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.486320][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.499577][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.506525][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.532450][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.562643][ T5879] hsr_slave_0: entered promiscuous mode [ 71.568761][ T5879] hsr_slave_1: entered promiscuous mode [ 71.663263][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.674226][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.683118][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.692574][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.714719][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.721862][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.729650][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.736737][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.773447][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.787103][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.794957][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.808156][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.819019][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.826091][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.838297][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.845402][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.955479][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.988131][ T5879] veth0_vlan: entered promiscuous mode [ 71.997801][ T5879] veth1_vlan: entered promiscuous mode [ 72.018045][ T5879] veth0_macvtap: entered promiscuous mode [ 72.026448][ T5879] veth1_macvtap: entered promiscuous mode [ 72.041362][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.052851][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.064720][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.077501][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.086300][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.095287][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/17 02:28:23 executed programs: 0 [ 72.224567][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.232575][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.240147][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.248128][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.255542][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.298916][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.312108][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.320341][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.329485][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.347814][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.376332][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.384516][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.397711][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.427838][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.437825][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.451189][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.458865][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.466124][ T5934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.476972][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.477046][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.491962][ T5934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.499332][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.499716][ T5934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.515069][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.522594][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.976347][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.029119][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 73.080208][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.100939][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 73.110602][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 73.159728][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 73.306257][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.314209][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.321453][ T5927] bridge_slave_0: entered allmulticast mode [ 73.328626][ T5927] bridge_slave_0: entered promiscuous mode [ 73.343184][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 73.360685][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.367981][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.375060][ T5921] bridge_slave_0: entered allmulticast mode [ 73.381983][ T5921] bridge_slave_0: entered promiscuous mode [ 73.395157][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.402399][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.409585][ T5927] bridge_slave_1: entered allmulticast mode [ 73.416236][ T5927] bridge_slave_1: entered promiscuous mode [ 73.422968][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.430334][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.437997][ T5928] bridge_slave_0: entered allmulticast mode [ 73.444596][ T5928] bridge_slave_0: entered promiscuous mode [ 73.473036][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.480485][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.487913][ T5921] bridge_slave_1: entered allmulticast mode [ 73.494515][ T5921] bridge_slave_1: entered promiscuous mode [ 73.501325][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.508746][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.515848][ T5924] bridge_slave_0: entered allmulticast mode [ 73.522686][ T5924] bridge_slave_0: entered promiscuous mode [ 73.535681][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.542930][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.550037][ T5928] bridge_slave_1: entered allmulticast mode [ 73.557096][ T5928] bridge_slave_1: entered promiscuous mode [ 73.578586][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.585992][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.593510][ T5924] bridge_slave_1: entered allmulticast mode [ 73.600544][ T5924] bridge_slave_1: entered promiscuous mode [ 73.645596][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.658229][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.669293][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.686542][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.705046][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.743679][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.754674][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.766495][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.777127][ T5927] team0: Port device team_slave_0 added [ 73.790326][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.797489][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.804657][ T5930] bridge_slave_0: entered allmulticast mode [ 73.811477][ T5930] bridge_slave_0: entered promiscuous mode [ 73.841072][ T5927] team0: Port device team_slave_1 added [ 73.847755][ T5928] team0: Port device team_slave_0 added [ 73.853504][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.860895][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.868334][ T5930] bridge_slave_1: entered allmulticast mode [ 73.875000][ T5930] bridge_slave_1: entered promiscuous mode [ 73.891170][ T5921] team0: Port device team_slave_0 added [ 73.911043][ T5928] team0: Port device team_slave_1 added [ 73.938168][ T5921] team0: Port device team_slave_1 added [ 73.945291][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.955766][ T5924] team0: Port device team_slave_0 added [ 73.973289][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.987484][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.994428][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.020765][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.034200][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.041437][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.067573][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.086012][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.096477][ T5924] team0: Port device team_slave_1 added [ 74.102700][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.109777][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.136027][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.152505][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.189094][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.196474][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.222940][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.249810][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.257002][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.283393][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.307605][ T51] Bluetooth: hci0: command tx timeout [ 74.332745][ T5927] hsr_slave_0: entered promiscuous mode [ 74.338966][ T5927] hsr_slave_1: entered promiscuous mode [ 74.344980][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 74.350939][ T5927] Cannot create hsr debugfs directory [ 74.357027][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.363960][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.390590][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.399973][ T51] Bluetooth: hci1: command tx timeout [ 74.408239][ T5930] team0: Port device team_slave_0 added [ 74.414381][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.421810][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.447707][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.459676][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.466722][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.492694][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.522732][ T5928] hsr_slave_0: entered promiscuous mode [ 74.529184][ T5928] hsr_slave_1: entered promiscuous mode [ 74.535014][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 74.540849][ T51] Bluetooth: hci2: command tx timeout [ 74.541456][ T5928] Cannot create hsr debugfs directory [ 74.553314][ T5930] team0: Port device team_slave_1 added [ 74.611256][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.618474][ T51] Bluetooth: hci4: command tx timeout [ 74.624930][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.627091][ T51] Bluetooth: hci3: command tx timeout [ 74.651204][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.685789][ T5921] hsr_slave_0: entered promiscuous mode [ 74.692060][ T5921] hsr_slave_1: entered promiscuous mode [ 74.698293][ T5921] debugfs: 'hsr0' already exists in 'hsr' [ 74.704017][ T5921] Cannot create hsr debugfs directory [ 74.739469][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.746419][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.772604][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.822118][ T5924] hsr_slave_0: entered promiscuous mode [ 74.828342][ T5924] hsr_slave_1: entered promiscuous mode [ 74.835273][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 74.841327][ T5924] Cannot create hsr debugfs directory [ 74.918414][ T13] bridge_slave_1: left allmulticast mode [ 74.924162][ T13] bridge_slave_1: left promiscuous mode [ 74.930806][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.941258][ T13] bridge_slave_0: left allmulticast mode [ 74.947263][ T13] bridge_slave_0: left promiscuous mode [ 74.952904][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.128892][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.138966][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.148385][ T13] bond0 (unregistering): Released all slaves [ 75.281705][ T5930] hsr_slave_0: entered promiscuous mode [ 75.288345][ T5930] hsr_slave_1: entered promiscuous mode [ 75.294186][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 75.300738][ T5930] Cannot create hsr debugfs directory [ 75.356369][ T13] hsr_slave_0: left promiscuous mode [ 75.362278][ T13] hsr_slave_1: left promiscuous mode [ 75.368154][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.375520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.383388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.390799][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.402136][ T13] veth1_macvtap: left promiscuous mode [ 75.407733][ T13] veth0_macvtap: left promiscuous mode [ 75.413221][ T13] veth1_vlan: left promiscuous mode [ 75.420436][ T13] veth0_vlan: left promiscuous mode [ 75.536018][ T13] team0 (unregistering): Port device team_slave_1 removed [ 75.552046][ T13] team0 (unregistering): Port device team_slave_0 removed [ 75.754719][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.769673][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.780778][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.809605][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.931115][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.951386][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.965124][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.972221][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.002765][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.009920][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.114394][ T5927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.230628][ T5928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.285303][ T5928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.342013][ T5928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.376772][ T51] Bluetooth: hci0: command tx timeout [ 76.393796][ T5928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.460844][ T51] Bluetooth: hci1: command tx timeout [ 76.472302][ T5921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.489063][ T5921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.507731][ T5921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.525651][ T5921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.543174][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.583693][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.616991][ T51] Bluetooth: hci2: command tx timeout [ 76.635497][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.652028][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.695390][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.706801][ T51] Bluetooth: hci3: command tx timeout [ 76.712212][ T51] Bluetooth: hci4: command tx timeout [ 76.793251][ T5927] veth0_vlan: entered promiscuous mode [ 76.809994][ T5930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.824760][ T5930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.847979][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.863828][ T5930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.887049][ T5930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.906064][ T5927] veth1_vlan: entered promiscuous mode [ 76.967801][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.994149][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.001250][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.010653][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.017825][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.031498][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.072053][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.118124][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.125217][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.139285][ T5927] veth0_macvtap: entered promiscuous mode [ 77.152789][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.164947][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.172085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.182737][ T5927] veth1_macvtap: entered promiscuous mode [ 77.245792][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.265134][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.277629][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.300861][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317786][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.324921][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.338668][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.348716][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.368044][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.379587][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.386706][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.399084][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.435160][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.458816][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.465891][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.531331][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.538477][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.569582][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.582963][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.603688][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.608086][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.715029][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.728141][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/03/17 02:28:28 executed programs: 10 [ 77.756250][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.842502][ T5928] veth0_vlan: entered promiscuous mode [ 77.864200][ T5921] veth0_vlan: entered promiscuous mode [ 77.890845][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 77.890861][ T29] audit: type=1400 audit(1773714508.995:105): avc: denied { create } for pid=6045 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.922845][ T5928] veth1_vlan: entered promiscuous mode [ 77.941817][ T29] audit: type=1400 audit(1773714509.035:106): avc: denied { ioctl } for pid=6045 comm="syz.3.20" path="socket:[9395]" dev="sockfs" ino=9395 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.944235][ T5921] veth1_vlan: entered promiscuous mode [ 78.039238][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.084967][ T5921] veth0_macvtap: entered promiscuous mode [ 78.093206][ T5928] veth0_macvtap: entered promiscuous mode [ 78.109862][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.120488][ T5921] veth1_macvtap: entered promiscuous mode [ 78.135886][ T5928] veth1_macvtap: entered promiscuous mode [ 78.189410][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.233323][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.259066][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.281813][ T5924] veth0_vlan: entered promiscuous mode [ 78.299344][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.320134][ T1136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334575][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.350124][ T1136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.374732][ T1136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.408299][ T5924] veth1_vlan: entered promiscuous mode [ 78.416343][ T1136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.458988][ T51] Bluetooth: hci0: command tx timeout [ 78.464482][ T1136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477875][ T1136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.489560][ T1136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.537266][ T51] Bluetooth: hci1: command tx timeout [ 78.606101][ T5924] veth0_macvtap: entered promiscuous mode [ 78.639162][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.658648][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.667225][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.671995][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.676113][ T5924] veth1_macvtap: entered promiscuous mode [ 78.699254][ T51] Bluetooth: hci2: command tx timeout [ 78.711248][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.720215][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.749212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.778133][ T5854] Bluetooth: hci3: command tx timeout [ 78.780801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.784087][ T51] Bluetooth: hci4: command tx timeout [ 78.803694][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.840043][ T5930] veth0_vlan: entered promiscuous mode [ 78.883597][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.912119][ T5930] veth1_vlan: entered promiscuous mode [ 78.951475][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960493][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987536][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.998098][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.099669][ T5930] veth0_macvtap: entered promiscuous mode [ 79.163572][ T5930] veth1_macvtap: entered promiscuous mode [ 79.191218][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.228089][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.302422][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.313159][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.334057][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.346227][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.414571][ T272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.426550][ T272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.481936][ T272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.492292][ T272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.692827][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.713203][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.781253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.799695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.542080][ T51] Bluetooth: hci0: command tx timeout [ 80.616700][ T51] Bluetooth: hci1: command tx timeout [ 80.776866][ T51] Bluetooth: hci2: command tx timeout [ 80.856912][ T51] Bluetooth: hci4: command tx timeout [ 80.862360][ T5854] Bluetooth: hci3: command tx timeout [ 81.191778][ T9] cfg80211: failed to load regulatory.db 2026/03/17 02:28:33 executed programs: 252 2026/03/17 02:28:38 executed programs: 590 [ 92.297768][ T6931] [ 92.300116][ T6931] ====================================================== [ 92.307115][ T6931] WARNING: possible circular locking dependency detected [ 92.314126][ T6931] syzkaller #0 Not tainted [ 92.318507][ T6931] ------------------------------------------------------ [ 92.325499][ T6931] syz.4.892/6931 is trying to acquire lock: [ 92.331358][ T6931] ffffffff9088c678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xd3/0x820 [ 92.340811][ T6931] [ 92.340811][ T6931] but task is already holding lock: [ 92.348142][ T6931] ffffffff9088c618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 92.357676][ T6931] [ 92.357676][ T6931] which lock already depends on the new lock. [ 92.357676][ T6931] [ 92.368052][ T6931] [ 92.368052][ T6931] the existing dependency chain (in reverse order) is: [ 92.377039][ T6931] [ 92.377039][ T6931] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 92.384913][ T6931] _raw_spin_lock_bh+0x33/0x40 [ 92.390169][ T6931] nr_rt_ioctl+0x6e2/0x29e0 [ 92.395162][ T6931] nr_ioctl+0x16e/0x2d0 [ 92.399821][ T6931] sock_do_ioctl+0x118/0x280 [ 92.404917][ T6931] sock_ioctl+0x599/0x6b0 [ 92.409736][ T6931] __x64_sys_ioctl+0x18e/0x210 [ 92.414996][ T6931] do_syscall_64+0x106/0xf80 [ 92.420077][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.426468][ T6931] [ 92.426468][ T6931] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 92.434424][ T6931] _raw_spin_lock_bh+0x33/0x40 [ 92.439678][ T6931] nr_rt_ioctl+0x29b/0x29e0 [ 92.444682][ T6931] nr_ioctl+0x16e/0x2d0 [ 92.449338][ T6931] sock_do_ioctl+0x118/0x280 [ 92.454436][ T6931] sock_ioctl+0x599/0x6b0 [ 92.459254][ T6931] __x64_sys_ioctl+0x18e/0x210 [ 92.464514][ T6931] do_syscall_64+0x106/0xf80 [ 92.469595][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.475976][ T6931] [ 92.475976][ T6931] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 92.483766][ T6931] __lock_acquire+0x14b8/0x2630 [ 92.489105][ T6931] lock_acquire+0x1cf/0x380 [ 92.494097][ T6931] _raw_spin_lock_bh+0x33/0x40 [ 92.499356][ T6931] nr_rt_device_down+0xd3/0x820 [ 92.504707][ T6931] nr_device_event+0x126/0x170 [ 92.509964][ T6931] notifier_call_chain+0x99/0x420 [ 92.515486][ T6931] call_netdevice_notifiers_info+0xbe/0x110 [ 92.521874][ T6931] __dev_notify_flags+0x1f7/0x2e0 [ 92.527389][ T6931] netif_change_flags+0x108/0x160 [ 92.532904][ T6931] dev_change_flags+0xba/0x250 [ 92.538172][ T6931] dev_ifsioc+0x1682/0x1f20 [ 92.543167][ T6931] dev_ioctl+0x342/0x10e0 [ 92.547986][ T6931] sock_do_ioctl+0x1a0/0x280 [ 92.553087][ T6931] sock_ioctl+0x599/0x6b0 [ 92.557918][ T6931] __x64_sys_ioctl+0x18e/0x210 [ 92.563175][ T6931] do_syscall_64+0x106/0xf80 [ 92.568267][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.574648][ T6931] [ 92.574648][ T6931] other info that might help us debug this: [ 92.574648][ T6931] [ 92.584851][ T6931] Chain exists of: [ 92.584851][ T6931] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 92.584851][ T6931] [ 92.598626][ T6931] Possible unsafe locking scenario: [ 92.598626][ T6931] [ 92.606043][ T6931] CPU0 CPU1 [ 92.611385][ T6931] ---- ---- [ 92.616720][ T6931] lock(nr_neigh_list_lock); [ 92.621367][ T6931] lock(&nr_node->node_lock); [ 92.628614][ T6931] lock(nr_neigh_list_lock); [ 92.635782][ T6931] lock(nr_node_list_lock); [ 92.640343][ T6931] [ 92.640343][ T6931] *** DEADLOCK *** [ 92.640343][ T6931] [ 92.648451][ T6931] 2 locks held by syz.4.892/6931: [ 92.653437][ T6931] #0: ffffffff906114a8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 92.662182][ T6931] #1: ffffffff9088c618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x2c/0x820 [ 92.672153][ T6931] [ 92.672153][ T6931] stack backtrace: [ 92.678009][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.4.892 Not tainted syzkaller #0 PREEMPT(full) [ 92.678022][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.678029][ T6931] Call Trace: [ 92.678033][ T6931] [ 92.678038][ T6931] dump_stack_lvl+0x100/0x190 [ 92.678056][ T6931] print_circular_bug.cold+0x178/0x1c7 [ 92.678073][ T6931] check_noncircular+0x146/0x160 [ 92.678088][ T6931] ? rt6_disable_ip+0x24e/0x980 [ 92.678101][ T6931] __lock_acquire+0x14b8/0x2630 [ 92.678112][ T6931] lock_acquire+0x1cf/0x380 [ 92.678121][ T6931] ? nr_rt_device_down+0xd3/0x820 [ 92.678131][ T6931] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.678144][ T6931] _raw_spin_lock_bh+0x33/0x40 [ 92.678155][ T6931] ? nr_rt_device_down+0xd3/0x820 [ 92.678165][ T6931] nr_rt_device_down+0xd3/0x820 [ 92.678176][ T6931] ? __local_bh_enable_ip+0x9e/0x120 [ 92.678190][ T6931] nr_device_event+0x126/0x170 [ 92.678205][ T6931] notifier_call_chain+0x99/0x420 [ 92.678216][ T6931] call_netdevice_notifiers_info+0xbe/0x110 [ 92.678233][ T6931] __dev_notify_flags+0x1f7/0x2e0 [ 92.678245][ T6931] ? __pfx___dev_notify_flags+0x10/0x10 [ 92.678257][ T6931] ? __pfx___dev_change_flags+0x10/0x10 [ 92.678271][ T6931] netif_change_flags+0x108/0x160 [ 92.678284][ T6931] dev_change_flags+0xba/0x250 [ 92.678299][ T6931] dev_ifsioc+0x1682/0x1f20 [ 92.678311][ T6931] ? __pfx_dev_ifsioc+0x10/0x10 [ 92.678321][ T6931] ? __pfx___mutex_lock+0x10/0x10 [ 92.678338][ T6931] ? dev_load+0x8e/0x240 [ 92.678353][ T6931] ? dev_load+0x8e/0x240 [ 92.678364][ T6931] dev_ioctl+0x342/0x10e0 [ 92.678375][ T6931] sock_do_ioctl+0x1a0/0x280 [ 92.678391][ T6931] ? __pfx_sock_do_ioctl+0x10/0x10 [ 92.678408][ T6931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 92.678424][ T6931] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 92.678441][ T6931] sock_ioctl+0x599/0x6b0 [ 92.678450][ T6931] ? __pfx_sock_ioctl+0x10/0x10 [ 92.678459][ T6931] ? hook_file_ioctl_common+0x146/0x410 [ 92.678477][ T6931] ? selinux_file_ioctl+0x139/0x290 [ 92.678491][ T6931] ? selinux_file_ioctl+0xb4/0x290 [ 92.678505][ T6931] ? __pfx_sock_ioctl+0x10/0x10 [ 92.678514][ T6931] __x64_sys_ioctl+0x18e/0x210 [ 92.678530][ T6931] do_syscall_64+0x106/0xf80 [ 92.678543][ T6931] ? clear_bhb_loop+0x40/0x90 [ 92.678555][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.678566][ T6931] RIP: 0033:0x7fb591d9c799 [ 92.678574][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.678584][ T6931] RSP: 002b:00007ffd6c7cede8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.678594][ T6931] RAX: ffffffffffffffda RBX: 00007fb592015fa0 RCX: 00007fb591d9c799 [ 92.678601][ T6931] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 92.678607][ T6931] RBP: 00007fb591e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 92.678613][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.678619][ T6931] R13: 00007fb592015fac R14: 00007fb592015fa0 R15: 00007fb592015fa0 [ 92.678627][ T6931]