ntered disabled state [ 85.514998][ T145] device veth1_macvtap left promiscuous mode [ 85.524110][ T145] device veth0_macvtap left promiscuous mode [ 85.531085][ T145] device veth1_vlan left promiscuous mode [ 85.539155][ T145] device veth0_vlan left promiscuous mode [ 85.690067][ T145] team0 (unregistering): Port device team_slave_1 removed [ 85.705529][ T145] team0 (unregistering): Port device team_slave_0 removed [ 85.723506][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.739136][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.785978][ T145] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2026/09/06 00:24:32 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 95.387054][ T4499] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 98.266711][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.283911][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295080][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.338595][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.347709][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.366846][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.819743][ T145] ODEBUG: Out of memory. ODEBUG disabled [ 99.036624][ T4608] chnl_net:caif_netlink_parms(): no params data found [ 99.154743][ T4608] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.162085][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.172954][ T4608] device bridge_slave_0 entered promiscuous mode [ 99.195498][ T4608] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.202681][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.211603][ T4608] device bridge_slave_1 entered promiscuous mode [ 99.250644][ T4608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.278496][ T4608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.318732][ T4608] team0: Port device team_slave_0 added [ 99.333032][ T4608] team0: Port device team_slave_1 added [ 99.359194][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.366579][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.394492][ T4608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.407091][ T4608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.415634][ T4608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.443213][ T4608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.479476][ T4608] device hsr_slave_0 entered promiscuous mode [ 99.486501][ T4608] device hsr_slave_1 entered promiscuous mode [ 100.021960][ T4608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.033015][ T4608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.045240][ T4608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.083434][ T4608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.183484][ T4608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.198809][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.210534][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.222093][ T4608] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.235260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.254661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.263519][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.270688][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.280632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.336044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.345067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.354506][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.361694][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.370972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.379912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.389309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.398616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.407850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.418686][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.427785][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.441007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.450959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.494988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.503639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.514353][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.644313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.652008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.668902][ T4608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.707167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.717369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.757252][ T4608] device veth0_vlan entered promiscuous mode [ 100.766982][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.776652][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.801655][ T4608] device veth1_vlan entered promiscuous mode [ 100.810204][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.820212][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.828717][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.896973][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.906973][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.916208][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.929620][ T4608] device veth0_macvtap entered promiscuous mode [ 100.941086][ T4608] device veth1_macvtap entered promiscuous mode [ 100.978902][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.993998][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.002802][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.025141][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.044197][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.068124][ T4608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.076156][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.095879][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.108354][ T4608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.123942][ T4608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.132694][ T4608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.163751][ T4608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/06 00:24:42 executed programs: 0 [ 102.826766][ T4797] chnl_net:caif_netlink_parms(): no params data found [ 102.951654][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.959903][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.968573][ T4797] device bridge_slave_0 entered promiscuous mode [ 102.992770][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.003038][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.012284][ T4797] device bridge_slave_1 entered promiscuous mode [ 103.059646][ T4797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.073192][ T4797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.102004][ T4797] team0: Port device team_slave_0 added [ 103.111484][ T4797] team0: Port device team_slave_1 added [ 103.132500][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.140223][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.169357][ T4797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.198041][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.205685][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.232467][ T4797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.278455][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.308800][ T4797] device hsr_slave_0 entered promiscuous mode [ 103.316545][ T4797] device hsr_slave_1 entered promiscuous mode [ 103.323445][ T4797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.333796][ T4797] Cannot create hsr debugfs directory [ 104.683884][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 106.370882][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.427885][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.498591][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.763836][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 107.322912][ T4797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.343915][ T4797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.352914][ T4797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.363211][ T4797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.377838][ T145] device hsr_slave_0 left promiscuous mode [ 107.384469][ T145] device hsr_slave_1 left promiscuous mode [ 107.391228][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.399106][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.408286][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.416569][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.424452][ T145] device bridge_slave_1 left promiscuous mode [ 107.431011][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.440322][ T145] device bridge_slave_0 left promiscuous mode [ 107.446869][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.458286][ T145] device veth1_macvtap left promiscuous mode [ 107.464697][ T145] device veth0_macvtap left promiscuous mode [ 107.470993][ T145] device veth1_vlan left promiscuous mode [ 107.477525][ T145] device veth0_vlan left promiscuous mode [ 107.586950][ T145] team0 (unregistering): Port device team_slave_1 removed [ 107.600663][ T145] team0 (unregistering): Port device team_slave_0 removed [ 107.612761][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.626919][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.672604][ T145] bond0 (unregistering): Released all slaves [ 107.780717][ T4797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.793618][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.801827][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.813606][ T4797] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.831364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.848664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.857829][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.865480][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.873733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.882926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.893254][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.900394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.908365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.919059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.930797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.957652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.967628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.976845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.986943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.996800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.005514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.019177][ T4797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.030640][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.047928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.056537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.065535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.141502][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.149450][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.170704][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.190401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.199532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.222365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.232931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.243537][ T4797] device veth0_vlan entered promiscuous mode [ 108.252921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.262035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.276712][ T4797] device veth1_vlan entered promiscuous mode [ 108.301660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.310852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.319758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.329046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.340920][ T4797] device veth0_macvtap entered promiscuous mode [ 108.353625][ T4797] device veth1_macvtap entered promiscuous mode [ 108.375432][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.382970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.392352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.401125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.411568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.425058][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.434737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.453264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.464981][ T4797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.474482][ T4797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.483186][ T4797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.492491][ T4797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.559140][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.576285][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.594955][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/09/06 00:24:48 executed programs: 2 [ 108.607888][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.617258][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.626598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.684242][ T5015] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17'. [ 108.723355][ T5015] syz.0.17 (5015) used greatest stack depth: 19152 bytes left [ 108.735603][ T5017] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18'. [ 108.749884][ T5017] ================================================================== [ 108.758631][ T5017] BUG: KASAN: slab-out-of-bounds in __xfrm_decode_session+0x18a4/0x2170 [ 108.767001][ T5017] Read of size 1 at addr ffff88805f455f9f by task syz.0.18/5017 [ 108.775021][ T5017] [ 108.777373][ T5017] CPU: 0 PID: 5017 Comm: syz.0.18 Not tainted syzkaller #0 [ 108.784579][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.794831][ T5017] Call Trace: [ 108.798118][ T5017] [ 108.801048][ T5017] dump_stack_lvl+0x188/0x250 [ 108.805746][ T5017] ? show_regs_print_info+0x20/0x20 [ 108.810966][ T5017] ? _printk+0xda/0x130 [ 108.815217][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 108.820866][ T5017] ? load_image+0x410/0x410 [ 108.825547][ T5017] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 108.831138][ T5017] print_address_description+0x60/0x2d0 [ 108.836790][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 108.842455][ T5017] kasan_report+0xdf/0x130 [ 108.846911][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 108.852779][ T5017] __xfrm_decode_session+0x18a4/0x2170 [ 108.858607][ T5017] ? __xfrm_sk_clone_policy+0x840/0x840 [ 108.864203][ T5017] ? rcu_lock_release+0x9/0x20 [ 108.869267][ T5017] icmpv6_route_lookup+0x3e8/0x5a0 [ 108.874416][ T5017] ? icmpv6_xrlim_allow+0x4b0/0x4b0 [ 108.879620][ T5017] ? dst_release+0x51/0x180 [ 108.884143][ T5017] ? icmpv6_xrlim_allow+0x3b9/0x4b0 [ 108.889402][ T5017] icmp6_send+0xff0/0x19a0 [ 108.893870][ T5017] ? icmpv6_push_pending_frames+0x440/0x440 [ 108.899881][ T5017] ? __local_bh_enable_ip+0xd7/0x1c0 [ 108.905271][ T5017] ? __local_bh_enable_ip+0x136/0x1c0 [ 108.910770][ T5017] ? ip6_neigh_lookup+0x377/0x440 [ 108.915952][ T5017] ? __ipv6_addr_type+0xff/0x2e0 [ 108.921096][ T5017] ip6_link_failure+0x35/0x490 [ 108.925872][ T5017] ? ip6_negative_advice+0x2f0/0x2f0 [ 108.931215][ T5017] ip6_tnl_xmit+0x67a/0x23e0 [ 108.935839][ T5017] ? ip6_tnl_xmit_ctl+0x620/0x620 [ 108.941017][ T5017] ? iptunnel_handle_offloads+0x2b9/0x550 [ 108.946785][ T5017] ip6_tnl_start_xmit+0xd43/0x12d0 [ 108.951909][ T5017] ? skb_crc32c_csum_help+0x510/0x510 [ 108.957314][ T5017] ? ip6_tnl_dev_uninit+0x150/0x150 [ 108.962548][ T5017] ? validate_xmit_skb+0x7ad/0xe40 [ 108.967674][ T5017] dev_hard_start_xmit+0x297/0x7d0 [ 108.972816][ T5017] sch_direct_xmit+0x24d/0x4a0 [ 108.977594][ T5017] ? increment_one_qlen+0x37e/0x580 [ 108.982805][ T5017] ? mrp_pdu_append_vecattr_event+0x1650/0x1650 [ 108.989073][ T5017] __qdisc_run+0xa6a/0x14b0 [ 108.993613][ T5017] __dev_queue_xmit+0xdce/0x2e50 [ 108.998581][ T5017] ? dev_queue_xmit+0x20/0x20 [ 109.003263][ T5017] ? rcu_read_lock_bh_held+0x76/0xf0 [ 109.008577][ T5017] ? rcu_read_lock_held+0x40/0x40 [ 109.013659][ T5017] ? neigh_connected_output+0x392/0x3e0 [ 109.019328][ T5017] ip6_finish_output2+0x1174/0x1640 [ 109.024552][ T5017] ? nf_hook+0x360/0x360 [ 109.028800][ T5017] ? ip6_frag_next+0x59d/0xb80 [ 109.033587][ T5017] ip6_fragment+0x15d0/0x1f40 [ 109.038308][ T5017] ? nf_hook+0x360/0x360 [ 109.042573][ T5017] ? ip6_frag_next+0xb80/0xb80 [ 109.047521][ T5017] ? ip6_finish_output+0x500/0x790 [ 109.052924][ T5017] ip6_xmit+0x1089/0x16e0 [ 109.057374][ T5017] ? ip6_autoflowlabel+0xd0/0xd0 [ 109.062336][ T5017] ? read_lock_is_recursive+0x10/0x10 [ 109.067746][ T5017] sctp_v6_xmit+0x94a/0x1150 [ 109.072364][ T5017] ? kasan_quarantine_put+0xd4/0x210 [ 109.077779][ T5017] ? rcu_lock_release+0x20/0x20 [ 109.082826][ T5017] ? sctp_compute_cksum+0xe0/0xe0 [ 109.087968][ T5017] ? __skb_checksum+0x6fc/0x7a0 [ 109.092848][ T5017] ? rcu_is_watching+0x11/0xa0 [ 109.097625][ T5017] ? kmem_cache_free+0x14c/0x210 [ 109.102705][ T5017] sctp_packet_transmit+0x234b/0x28c0 [ 109.108306][ T5017] sctp_packet_singleton+0x22c/0x330 [ 109.113727][ T5017] ? sctp_outq_select_transport+0x590/0x590 [ 109.119665][ T5017] ? sctp_outq_select_transport+0x480/0x590 [ 109.125585][ T5017] ? sctp_transport_burst_limited+0x193/0x280 [ 109.131765][ T5017] sctp_outq_flush+0x4b3/0x32b0 [ 109.136640][ T5017] ? lockdep_hardirqs_on+0x94/0x140 [ 109.142036][ T5017] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.147945][ T5017] ? rcu_is_watching+0x11/0xa0 [ 109.152895][ T5017] ? enqueue_timer+0x225/0x520 [ 109.157763][ T5017] ? sctp_outq_tail+0x8a0/0x8a0 [ 109.162728][ T5017] ? sctp_outq_uncork+0x49/0xa0 [ 109.167595][ T5017] sctp_do_sm+0x4f05/0x5610 [ 109.172204][ T5017] ? verify_lock_unused+0x140/0x140 [ 109.177401][ T5017] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 109.183295][ T5017] ? sctp_stream_init_ext+0x53/0x160 [ 109.188717][ T5017] ? ____sys_sendmsg+0x5be/0x8f0 [ 109.193714][ T5017] ? ___sys_sendmsg+0x236/0x2e0 [ 109.198764][ T5017] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 109.204951][ T5017] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 109.210715][ T5017] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 109.216110][ T5017] ? memcpy+0x3c/0x60 [ 109.220208][ T5017] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 109.226035][ T5017] ? __sctp_connect+0xd80/0xd80 [ 109.231013][ T5017] ? __local_bh_enable_ip+0x136/0x1c0 [ 109.236416][ T5017] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 109.242093][ T5017] ? security_sctp_bind_connect+0x85/0xb0 [ 109.247858][ T5017] sctp_sendmsg+0x1b87/0x2940 [ 109.252786][ T5017] ? sctp_getsockopt+0x8a0/0x8a0 [ 109.257748][ T5017] ? aa_af_perm+0x340/0x340 [ 109.262342][ T5017] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 109.268840][ T5017] ? aa_sock_msg_perm+0x94/0x150 [ 109.273766][ T5017] ? sock_rps_record_flow+0x17/0x3b0 [ 109.279060][ T5017] ? inet_sendmsg+0xca/0x2a0 [ 109.283637][ T5017] ? inet_send_prepare+0x250/0x250 [ 109.288745][ T5017] ____sys_sendmsg+0x5be/0x8f0 [ 109.293525][ T5017] ? __sys_sendmsg_sock+0x30/0x30 [ 109.298546][ T5017] ? import_iovec+0x6f/0xa0 [ 109.303128][ T5017] ___sys_sendmsg+0x236/0x2e0 [ 109.307798][ T5017] ? __sys_sendmsg+0x290/0x290 [ 109.312670][ T5017] __sys_sendmmsg+0x2ba/0x500 [ 109.317345][ T5017] ? __ia32_sys_sendmsg+0x80/0x80 [ 109.322380][ T5017] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 109.328353][ T5017] ? lock_chain_count+0x20/0x20 [ 109.333218][ T5017] __x64_sys_sendmmsg+0x9c/0xb0 [ 109.338091][ T5017] do_syscall_64+0x4c/0xa0 [ 109.342675][ T5017] ? clear_bhb_loop+0x30/0x80 [ 109.347351][ T5017] ? clear_bhb_loop+0x30/0x80 [ 109.352232][ T5017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.358304][ T5017] RIP: 0033:0x7f69f0ff3819 [ 109.362810][ T5017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.382632][ T5017] RSP: 002b:00007f69f0655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.391236][ T5017] RAX: ffffffffffffffda RBX: 00007f69f126cfa0 RCX: 00007f69f0ff3819 [ 109.399234][ T5017] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000004 [ 109.407206][ T5017] RBP: 00007f69f1089c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.415169][ T5017] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 109.423131][ T5017] R13: 00007f69f126d038 R14: 00007f69f126cfa0 R15: 00007fff8945cb88 [ 109.431340][ T5017] [ 109.434362][ T5017] [ 109.436677][ T5017] Allocated by task 5017: [ 109.440986][ T5017] __kasan_kmalloc+0xaf/0xe0 [ 109.445649][ T5017] sk_prot_alloc+0xe7/0x210 [ 109.450141][ T5017] sk_alloc+0x2f/0x310 [ 109.454195][ T5017] __netlink_create+0x6c/0x290 [ 109.459123][ T5017] netlink_create+0x3a7/0x510 [ 109.463792][ T5017] __sock_create+0x473/0x910 [ 109.468379][ T5017] __sys_socket+0xe2/0x170 [ 109.472802][ T5017] __x64_sys_socket+0x76/0x80 [ 109.477584][ T5017] do_syscall_64+0x4c/0xa0 [ 109.481998][ T5017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.487967][ T5017] [ 109.490276][ T5017] Last potentially related work creation: [ 109.495969][ T5017] kasan_save_stack+0x35/0x60 [ 109.500901][ T5017] kasan_record_aux_stack+0xb8/0x100 [ 109.506179][ T5017] call_rcu+0x189/0x900 [ 109.510320][ T5017] ip6_dst_ifdown+0x10f/0x210 [ 109.514999][ T5017] dst_dev_put+0xa7/0x230 [ 109.519326][ T5017] fib6_nh_release+0x336/0x490 [ 109.524078][ T5017] fib6_info_destroy_rcu+0xba/0x1b0 [ 109.529263][ T5017] rcu_core+0x96e/0x1650 [ 109.533513][ T5017] handle_softirqs+0x336/0x830 [ 109.538275][ T5017] run_ksoftirqd+0xa4/0x100 [ 109.542763][ T5017] smpboot_thread_fn+0x520/0x990 [ 109.547696][ T5017] kthread+0x42e/0x520 [ 109.551745][ T5017] ret_from_fork+0x1f/0x30 [ 109.556154][ T5017] [ 109.558467][ T5017] Second to last potentially related work creation: [ 109.565039][ T5017] kasan_save_stack+0x35/0x60 [ 109.569707][ T5017] kasan_record_aux_stack+0xb8/0x100 [ 109.574980][ T5017] insert_work+0x54/0x3d0 [ 109.579296][ T5017] __queue_work+0x90b/0xc80 [ 109.583784][ T5017] call_timer_fn+0x17b/0x540 [ 109.588392][ T5017] __run_timers+0x598/0x810 [ 109.592880][ T5017] run_timer_softirq+0x63/0xf0 [ 109.597637][ T5017] handle_softirqs+0x336/0x830 [ 109.602641][ T5017] __irq_exit_rcu+0x13b/0x230 [ 109.607336][ T5017] irq_exit_rcu+0x5/0x20 [ 109.611587][ T5017] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 109.617223][ T5017] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.623283][ T5017] [ 109.625637][ T5017] The buggy address belongs to the object at ffff88805f455000 [ 109.625637][ T5017] which belongs to the cache kmalloc-2k of size 2048 [ 109.640297][ T5017] The buggy address is located 1951 bytes to the right of [ 109.640297][ T5017] 2048-byte region [ffff88805f455000, ffff88805f455800) [ 109.654700][ T5017] The buggy address belongs to the page: [ 109.660796][ T5017] page:ffffea00017d1400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f450 [ 109.671048][ T5017] head:ffffea00017d1400 order:3 compound_mapcount:0 compound_pincount:0 [ 109.679633][ T5017] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 109.687633][ T5017] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42000 [ 109.696308][ T5017] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 109.704963][ T5017] page dumped because: kasan: bad access detected [ 109.711551][ T5017] page_owner tracks the page as allocated [ 109.717434][ T5017] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 145, ts 84685513588, free_ts 70566505107 [ 109.738012][ T5017] get_page_from_freelist+0x24f6/0x2670 [ 109.743612][ T5017] __alloc_pages+0x1ee/0x480 [ 109.748294][ T5017] new_slab+0xc0/0x4b0 [ 109.752461][ T5017] ___slab_alloc+0x807/0xdd0 [ 109.757128][ T5017] __kmalloc_track_caller+0x11b/0x330 [ 109.762581][ T5017] kmemdup+0x22/0x50 [ 109.766506][ T5017] neigh_sysctl_register+0xab/0xa90 [ 109.771696][ T5017] addrconf_sysctl_register+0xac/0x1b0 [ 109.777319][ T5017] ipv6_add_dev+0xbfb/0x11a0 [ 109.781982][ T5017] addrconf_notify+0x66f/0xf20 [ 109.786748][ T5017] raw_notifier_call_chain+0xcb/0x160 [ 109.792205][ T5017] register_netdevice+0x12a8/0x1720 [ 109.797424][ T5017] nsim_create+0x32d/0x3e0 [ 109.801852][ T5017] __nsim_dev_port_add+0x66e/0xa80 [ 109.806962][ T5017] nsim_dev_port_add_all+0x37/0x100 [ 109.812153][ T5017] nsim_dev_reload_up+0x4a1/0x810 [ 109.817321][ T5017] page last free stack trace: [ 109.821985][ T5017] free_unref_page_prepare+0x637/0x6c0 [ 109.827461][ T5017] free_unref_page+0x8f/0x2a0 [ 109.832256][ T5017] __vunmap+0x8e0/0xa80 [ 109.836435][ T5017] kcov_close+0x27/0x50 [ 109.840603][ T5017] __fput+0x212/0x8c0 [ 109.844831][ T5017] task_work_run+0x125/0x1a0 [ 109.849529][ T5017] do_exit+0x635/0x2110 [ 109.853674][ T5017] do_group_exit+0x12c/0x2f0 [ 109.858764][ T5017] get_signal+0x7eb/0x12e0 [ 109.863190][ T5017] arch_do_signal_or_restart+0xe6/0x12a0 [ 109.869170][ T5017] exit_to_user_mode_loop+0x9e/0x130 [ 109.874544][ T5017] exit_to_user_mode_prepare+0xee/0x180 [ 109.880073][ T5017] syscall_exit_to_user_mode+0x16/0x40 [ 109.885524][ T5017] do_syscall_64+0x58/0xa0 [ 109.890192][ T5017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.896263][ T5017] [ 109.898584][ T5017] Memory state around the buggy address: [ 109.904207][ T5017] ffff88805f455e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.912266][ T5017] ffff88805f455f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.920571][ T5017] >ffff88805f455f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.928643][ T5017] ^ [ 109.933497][ T5017] ffff88805f456000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.941540][ T5017] ffff88805f456080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.949670][ T5017] ================================================================== [ 109.957712][ T5017] Disabling lock debugging due to kernel taint [ 109.964043][ T5017] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.971314][ T5017] CPU: 0 PID: 5017 Comm: syz.0.18 Tainted: G B syzkaller #0 [ 109.979915][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.989968][ T5017] Call Trace: [ 109.993348][ T5017] [ 109.996290][ T5017] dump_stack_lvl+0x188/0x250 [ 110.000985][ T5017] ? show_regs_print_info+0x20/0x20 [ 110.006277][ T5017] ? load_image+0x410/0x410 [ 110.010790][ T5017] panic+0x2f8/0x850 [ 110.014688][ T5017] ? asm_common_interrupt+0x22/0x40 [ 110.019976][ T5017] ? bpf_jit_dump+0xd0/0xd0 [ 110.024555][ T5017] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 110.030548][ T5017] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.036686][ T5017] ? _raw_spin_unlock+0x40/0x40 [ 110.041612][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 110.047234][ T5017] check_panic_on_warn+0x80/0xa0 [ 110.052162][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 110.057779][ T5017] end_report+0x6d/0xf0 [ 110.061926][ T5017] kasan_report+0x102/0x130 [ 110.066665][ T5017] ? __xfrm_decode_session+0x18a4/0x2170 [ 110.072304][ T5017] __xfrm_decode_session+0x18a4/0x2170 [ 110.077951][ T5017] ? __xfrm_sk_clone_policy+0x840/0x840 [ 110.083580][ T5017] ? rcu_lock_release+0x9/0x20 [ 110.088459][ T5017] icmpv6_route_lookup+0x3e8/0x5a0 [ 110.093579][ T5017] ? icmpv6_xrlim_allow+0x4b0/0x4b0 [ 110.098859][ T5017] ? dst_release+0x51/0x180 [ 110.103470][ T5017] ? icmpv6_xrlim_allow+0x3b9/0x4b0 [ 110.108699][ T5017] icmp6_send+0xff0/0x19a0 [ 110.113222][ T5017] ? icmpv6_push_pending_frames+0x440/0x440 [ 110.119124][ T5017] ? __local_bh_enable_ip+0xd7/0x1c0 [ 110.124417][ T5017] ? __local_bh_enable_ip+0x136/0x1c0 [ 110.129925][ T5017] ? ip6_neigh_lookup+0x377/0x440 [ 110.134942][ T5017] ? __ipv6_addr_type+0xff/0x2e0 [ 110.139963][ T5017] ip6_link_failure+0x35/0x490 [ 110.144820][ T5017] ? ip6_negative_advice+0x2f0/0x2f0 [ 110.150119][ T5017] ip6_tnl_xmit+0x67a/0x23e0 [ 110.154721][ T5017] ? ip6_tnl_xmit_ctl+0x620/0x620 [ 110.159833][ T5017] ? iptunnel_handle_offloads+0x2b9/0x550 [ 110.165685][ T5017] ip6_tnl_start_xmit+0xd43/0x12d0 [ 110.170823][ T5017] ? skb_crc32c_csum_help+0x510/0x510 [ 110.176282][ T5017] ? ip6_tnl_dev_uninit+0x150/0x150 [ 110.181764][ T5017] ? validate_xmit_skb+0x7ad/0xe40 [ 110.187058][ T5017] dev_hard_start_xmit+0x297/0x7d0 [ 110.192173][ T5017] sch_direct_xmit+0x24d/0x4a0 [ 110.197045][ T5017] ? increment_one_qlen+0x37e/0x580 [ 110.202243][ T5017] ? mrp_pdu_append_vecattr_event+0x1650/0x1650 [ 110.209003][ T5017] __qdisc_run+0xa6a/0x14b0 [ 110.213527][ T5017] __dev_queue_xmit+0xdce/0x2e50 [ 110.218786][ T5017] ? dev_queue_xmit+0x20/0x20 [ 110.223642][ T5017] ? rcu_read_lock_bh_held+0x76/0xf0 [ 110.229325][ T5017] ? rcu_read_lock_held+0x40/0x40 [ 110.234351][ T5017] ? neigh_connected_output+0x392/0x3e0 [ 110.240022][ T5017] ip6_finish_output2+0x1174/0x1640 [ 110.245315][ T5017] ? nf_hook+0x360/0x360 [ 110.249584][ T5017] ? ip6_frag_next+0x59d/0xb80 [ 110.254461][ T5017] ip6_fragment+0x15d0/0x1f40 [ 110.259221][ T5017] ? nf_hook+0x360/0x360 [ 110.264163][ T5017] ? ip6_frag_next+0xb80/0xb80 [ 110.269012][ T5017] ? ip6_finish_output+0x500/0x790 [ 110.274136][ T5017] ip6_xmit+0x1089/0x16e0 [ 110.278654][ T5017] ? ip6_autoflowlabel+0xd0/0xd0 [ 110.283605][ T5017] ? read_lock_is_recursive+0x10/0x10 [ 110.289217][ T5017] sctp_v6_xmit+0x94a/0x1150 [ 110.293914][ T5017] ? kasan_quarantine_put+0xd4/0x210 [ 110.299196][ T5017] ? rcu_lock_release+0x20/0x20 [ 110.304033][ T5017] ? sctp_compute_cksum+0xe0/0xe0 [ 110.309137][ T5017] ? __skb_checksum+0x6fc/0x7a0 [ 110.314108][ T5017] ? rcu_is_watching+0x11/0xa0 [ 110.318884][ T5017] ? kmem_cache_free+0x14c/0x210 [ 110.323819][ T5017] sctp_packet_transmit+0x234b/0x28c0 [ 110.329311][ T5017] sctp_packet_singleton+0x22c/0x330 [ 110.335003][ T5017] ? sctp_outq_select_transport+0x590/0x590 [ 110.340910][ T5017] ? sctp_outq_select_transport+0x480/0x590 [ 110.346965][ T5017] ? sctp_transport_burst_limited+0x193/0x280 [ 110.353129][ T5017] sctp_outq_flush+0x4b3/0x32b0 [ 110.358168][ T5017] ? lockdep_hardirqs_on+0x94/0x140 [ 110.363408][ T5017] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.369304][ T5017] ? rcu_is_watching+0x11/0xa0 [ 110.374071][ T5017] ? enqueue_timer+0x225/0x520 [ 110.378831][ T5017] ? sctp_outq_tail+0x8a0/0x8a0 [ 110.383769][ T5017] ? sctp_outq_uncork+0x49/0xa0 [ 110.388619][ T5017] sctp_do_sm+0x4f05/0x5610 [ 110.393108][ T5017] ? verify_lock_unused+0x140/0x140 [ 110.398316][ T5017] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 110.404320][ T5017] ? sctp_stream_init_ext+0x53/0x160 [ 110.409791][ T5017] ? ____sys_sendmsg+0x5be/0x8f0 [ 110.414715][ T5017] ? ___sys_sendmsg+0x236/0x2e0 [ 110.419661][ T5017] ? __sk_mem_raise_allocated+0x6e2/0x11b0 [ 110.425538][ T5017] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 110.430910][ T5017] sctp_sendmsg_to_asoc+0x14f4/0x1e10 [ 110.436270][ T5017] ? memcpy+0x3c/0x60 [ 110.440256][ T5017] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 110.446230][ T5017] ? __sctp_connect+0xd80/0xd80 [ 110.451095][ T5017] ? __local_bh_enable_ip+0x136/0x1c0 [ 110.456489][ T5017] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 110.462393][ T5017] ? security_sctp_bind_connect+0x85/0xb0 [ 110.468121][ T5017] sctp_sendmsg+0x1b87/0x2940 [ 110.472913][ T5017] ? sctp_getsockopt+0x8a0/0x8a0 [ 110.477946][ T5017] ? aa_af_perm+0x340/0x340 [ 110.482466][ T5017] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 110.488870][ T5017] ? aa_sock_msg_perm+0x94/0x150 [ 110.494258][ T5017] ? sock_rps_record_flow+0x17/0x3b0 [ 110.499662][ T5017] ? inet_sendmsg+0xca/0x2a0 [ 110.504365][ T5017] ? inet_send_prepare+0x250/0x250 [ 110.509718][ T5017] ____sys_sendmsg+0x5be/0x8f0 [ 110.514494][ T5017] ? __sys_sendmsg_sock+0x30/0x30 [ 110.519519][ T5017] ? import_iovec+0x6f/0xa0 [ 110.524028][ T5017] ___sys_sendmsg+0x236/0x2e0 [ 110.528711][ T5017] ? __sys_sendmsg+0x290/0x290 [ 110.533553][ T5017] __sys_sendmmsg+0x2ba/0x500 [ 110.538215][ T5017] ? __ia32_sys_sendmsg+0x80/0x80 [ 110.543230][ T5017] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.549289][ T5017] ? lock_chain_count+0x20/0x20 [ 110.554221][ T5017] __x64_sys_sendmmsg+0x9c/0xb0 [ 110.559152][ T5017] do_syscall_64+0x4c/0xa0 [ 110.563759][ T5017] ? clear_bhb_loop+0x30/0x80 [ 110.568615][ T5017] ? clear_bhb_loop+0x30/0x80 [ 110.573282][ T5017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.579258][ T5017] RIP: 0033:0x7f69f0ff3819 [ 110.583673][ T5017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.603751][ T5017] RSP: 002b:00007f69f0655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.612690][ T5017] RAX: ffffffffffffffda RBX: 00007f69f126cfa0 RCX: 00007f69f0ff3819 [ 110.620766][ T5017] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000004 [ 110.628828][ T5017] RBP: 00007f69f1089c91 R08: 0000000000000000 R09: 0000000000000000 [ 110.637924][ T5017] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 110.645984][ T5017] R13: 00007f69f126d038 R14: 00007f69f126cfa0 R15: 00007fff8945cb88 [ 110.654565][ T5017] [ 110.658254][ T5017] Kernel Offset: disabled [ 110.662887][ T5017] Rebooting in 86400 seconds..