Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. 2026/05/24 10:33:27 parsed 1 programs [ 70.140282][ T4199] cgroup: Unknown subsys name 'net' [ 70.280697][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.237476][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.243994][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.830476][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.039528][ T4235] syz-executor (4235) used greatest stack depth: 21080 bytes left [ 74.127136][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 74.193329][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.202239][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.210933][ T4239] device bridge_slave_0 entered promiscuous mode [ 74.222072][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.229553][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.239113][ T4239] device bridge_slave_1 entered promiscuous mode [ 74.267066][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.279978][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.314095][ T4239] team0: Port device team_slave_0 added [ 74.323138][ T4239] team0: Port device team_slave_1 added [ 74.347077][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.354068][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.381494][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.394930][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.401901][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.429329][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.469768][ T4239] device hsr_slave_0 entered promiscuous mode [ 74.478037][ T4239] device hsr_slave_1 entered promiscuous mode [ 74.619197][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.630798][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.642674][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.654728][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.684624][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.691897][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.699979][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.707144][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.773933][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.791718][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.807586][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.817611][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.834104][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.848922][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.858385][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.865525][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.889050][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.897887][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.905059][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.925769][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.935411][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.953521][ T4239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.965425][ T4239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.979051][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.989123][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.998931][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.013303][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.130858][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.139076][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.153871][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.176436][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.187162][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.209921][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.219215][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.232798][ T4239] device veth0_vlan entered promiscuous mode [ 75.251237][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.259457][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.273569][ T4239] device veth1_vlan entered promiscuous mode [ 75.298436][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.307079][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.315731][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.325572][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.337662][ T4239] device veth0_macvtap entered promiscuous mode [ 75.349253][ T4239] device veth1_macvtap entered promiscuous mode [ 75.366944][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.377257][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.385677][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.393738][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.405221][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.417241][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.426179][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.435925][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.449778][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.459186][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.470135][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.479202][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.606765][ T4239] syz-executor (4239) used greatest stack depth: 21072 bytes left [ 76.385617][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.393626][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.407943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.438470][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.447097][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.455298][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/05/24 10:33:37 executed programs: 0 [ 77.908913][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 77.948767][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.985702][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.992810][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.000995][ T4292] device bridge_slave_0 entered promiscuous mode [ 78.009543][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.016931][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.026087][ T4292] device bridge_slave_1 entered promiscuous mode [ 78.046641][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.058262][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.081046][ T4292] team0: Port device team_slave_0 added [ 78.089653][ T4292] team0: Port device team_slave_1 added [ 78.107269][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.114793][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.140775][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.153132][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.160225][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.186431][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.216891][ T4292] device hsr_slave_0 entered promiscuous mode [ 78.223563][ T4292] device hsr_slave_1 entered promiscuous mode [ 78.230303][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.238322][ T4292] Cannot create hsr debugfs directory [ 79.884931][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 80.861843][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.908666][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.971256][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.780108][ T4292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.790019][ T4292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.803314][ T4292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.813450][ T4292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.954295][ T4221] Bluetooth: hci0: command 0x041b tx timeout [ 81.985026][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.001525][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.012632][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.023848][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.071939][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.081070][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.089969][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.097112][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.136193][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.144604][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.153598][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.162048][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.169134][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.199123][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.207906][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.217290][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.227326][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.236622][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.245826][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.254567][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.262809][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.271197][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.279951][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.288413][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.299724][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.423125][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.431117][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.443407][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.489120][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.498110][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.519744][ T4292] device veth0_vlan entered promiscuous mode [ 82.526646][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.535050][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.548196][ T4292] device veth1_vlan entered promiscuous mode [ 82.557836][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.566696][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.575482][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.615689][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.623783][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.634021][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.646294][ T4292] device veth0_macvtap entered promiscuous mode [ 82.678608][ T4292] device veth1_macvtap entered promiscuous mode [ 82.692634][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.703698][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.715394][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.723063][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.731785][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.740676][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.750084][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.761319][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.772428][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784522][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.793897][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.802778][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.813234][ T4292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822391][ T4292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831489][ T4292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.840619][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.908377][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.920111][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.928311][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.965516][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.973829][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.992337][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.038361][ T4350] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 83.048083][ T4350] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4350, name: syz.0.17 [ 83.056976][ T4350] 1 lock held by syz.0.17/4350: [ 83.061858][ T4350] #0: ffffffff8c344c78 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 83.071760][ T4350] irq event stamp: 1456 [ 83.075938][ T4350] hardirqs last enabled at (1455): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 83.086395][ T4350] hardirqs last disabled at (1456): [] _raw_spin_lock_irq+0x86/0xf0 [ 83.095984][ T4350] softirqs last enabled at (1424): [] ipv6_setsockopt+0x2006/0x3cc0 [ 83.105660][ T4350] softirqs last disabled at (1422): [] release_sock+0x2b/0x1b0 [ 83.114801][ T4350] Preemption disabled at: [ 83.114811][ T4350] [<0000000000000000>] 0x0 [ 83.123615][ T4350] CPU: 0 PID: 4350 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.130850][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.140941][ T4350] Call Trace: [ 83.144245][ T4350] [ 83.147205][ T4350] dump_stack_lvl+0x188/0x250 [ 83.151915][ T4350] ? ipv6_setsockopt+0x2006/0x3cc0 [ 83.157049][ T4350] ? show_regs_print_info+0x20/0x20 [ 83.162272][ T4350] ? load_image+0x400/0x400 [ 83.166806][ T4350] ___might_sleep+0x493/0x610 [ 83.171535][ T4350] ? __might_sleep+0xf0/0xf0 [ 83.176154][ T4350] down_read+0x20/0x2e0 [ 83.180345][ T4350] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 83.185648][ T4350] ? kernfs_find_ns+0x510/0x510 [ 83.190550][ T4350] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 83.196717][ T4350] cgroup_get_from_path+0x5f/0x2f0 [ 83.201852][ T4350] cgroup_mt_check_v1+0x1d7/0x2e0 [ 83.206888][ T4350] xt_check_match+0x4e6/0xc50 [ 83.211692][ T4350] ? xt_check_proc_name+0x240/0x240 [ 83.216900][ T4350] ? pcpu_alloc+0x1121/0x1770 [ 83.221606][ T4350] ? xt_find_match+0x1e1/0x210 [ 83.226387][ T4350] translate_table+0x1531/0x2090 [ 83.231379][ T4350] ? ip6t_register_table+0x810/0x810 [ 83.236679][ T4350] ? __might_fault+0xb7/0x110 [ 83.241388][ T4350] ? __lock_acquire+0x7d10/0x7d10 [ 83.246439][ T4350] ? _copy_from_user+0x111/0x170 [ 83.251413][ T4350] do_ip6t_set_ctl+0x96d/0xd90 [ 83.256188][ T4350] ? nf_setsockopt+0x218/0x280 [ 83.260975][ T4350] ? ip6t_unregister_table_exit+0x230/0x230 [ 83.266882][ T4350] ? __lock_acquire+0x7d10/0x7d10 [ 83.271963][ T4350] ? __mutex_lock_common+0x465/0x2400 [ 83.277374][ T4350] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 83.283034][ T4350] ? mutex_unlock+0x10/0x10 [ 83.287566][ T4350] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.292938][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 83.298163][ T4350] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.303538][ T4350] nf_setsockopt+0x25f/0x280 [ 83.308137][ T4350] ipv6_setsockopt+0x2086/0x3cc0 [ 83.313193][ T4350] ? ipv6_update_options+0x400/0x400 [ 83.318476][ T4350] ? free_unref_page_list+0x391/0x820 [ 83.323865][ T4350] ? free_unref_page_list+0x757/0x820 [ 83.329247][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 83.334470][ T4350] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.340047][ T4350] ? memset+0x1e/0x40 [ 83.344040][ T4350] ? mark_lock+0x94/0x320 [ 83.348371][ T4350] ? __lock_acquire+0x13bc/0x7d10 [ 83.353393][ T4350] ? futex_wait_restart+0x220/0x220 [ 83.358591][ T4350] ? aa_label_sk_perm+0x3d0/0x530 [ 83.363616][ T4350] ? aa_sk_perm+0x910/0x910 [ 83.368123][ T4350] ? do_futex+0xd73/0x12b0 [ 83.372612][ T4350] ? __might_sleep+0xf0/0xf0 [ 83.377242][ T4350] ? aa_sk_perm+0x7dc/0x910 [ 83.381772][ T4350] rawv6_setsockopt+0x29e/0x660 [ 83.386642][ T4350] ? raw6_destroy+0x30/0x30 [ 83.391164][ T4350] ? aa_sock_opt_perm+0x74/0x100 [ 83.396115][ T4350] ? sock_common_setsockopt+0x32/0xb0 [ 83.401523][ T4350] ? sock_common_recvmsg+0x1c0/0x1c0 [ 83.406839][ T4350] __sys_setsockopt+0x2bf/0x3d0 [ 83.411724][ T4350] __x64_sys_setsockopt+0xb1/0xc0 [ 83.416797][ T4350] do_syscall_64+0x4c/0xa0 [ 83.421260][ T4350] ? clear_bhb_loop+0x30/0x80 [ 83.425943][ T4350] ? clear_bhb_loop+0x30/0x80 [ 83.430674][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.436585][ T4350] RIP: 0033:0x7f4e78109e59 [ 83.441025][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.460638][ T4350] RSP: 002b:00007ffd3c605b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.469066][ T4350] RAX: ffffffffffffffda RBX: 00007f4e78382fa0 RCX: 00007f4e78109e59 [ 83.477046][ T4350] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 83.485044][ T4350] RBP: 00007f4e7819fd6f R08: 0000000000001318 R09: 0000000000000000 [ 83.493051][ T4350] R10: 0000200000002b80 R11: 0000000000000246 R12: 0000000000000000 [ 83.501022][ T4350] R13: 00007f4e78382fac R14: 00007f4e78382fa0 R15: 00007f4e78382fa0 [ 83.509014][ T4350] [ 83.512037][ T4350] [ 83.514366][ T4350] ============================= [ 83.519214][ T4350] [ BUG: Invalid wait context ] [ 83.524054][ T4350] syzkaller #0 Tainted: G W [ 83.529853][ T4350] ----------------------------- [ 83.534721][ T4350] syz.0.17/4350 is trying to lock: [ 83.539840][ T4350] ffffffff8c4502d0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0 [ 83.549318][ T4350] other info that might help us debug this: [ 83.555208][ T4350] context-{4:4} [ 83.558701][ T4350] 1 lock held by syz.0.17/4350: [ 83.563564][ T4350] #0: ffffffff8c344c78 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0 [ 83.573343][ T4350] stack backtrace: [ 83.577142][ T4350] CPU: 0 PID: 4350 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 83.585728][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.595873][ T4350] Call Trace: [ 83.599164][ T4350] [ 83.602097][ T4350] dump_stack_lvl+0x188/0x250 [ 83.606775][ T4350] ? show_regs_print_info+0x20/0x20 [ 83.611971][ T4350] ? load_image+0x400/0x400 [ 83.616484][ T4350] __lock_acquire+0x1bf8/0x7d10 [ 83.621522][ T4350] ? verify_lock_unused+0x140/0x140 [ 83.626720][ T4350] ? __printk_cpu_unlock+0x5f/0x70 [ 83.631827][ T4350] ? dump_stack_lvl+0x1fd/0x250 [ 83.636692][ T4350] ? ipv6_setsockopt+0x2006/0x3cc0 [ 83.641812][ T4350] ? show_regs_print_info+0x20/0x20 [ 83.647035][ T4350] ? load_image+0x400/0x400 [ 83.651636][ T4350] lock_acquire+0x19e/0x400 [ 83.656145][ T4350] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 83.661617][ T4350] ? __might_sleep+0xf0/0xf0 [ 83.666229][ T4350] ? read_lock_is_recursive+0x10/0x10 [ 83.671634][ T4350] down_read+0x44/0x2e0 [ 83.675791][ T4350] ? kernfs_walk_and_get_ns+0x7e/0x2c0 [ 83.681263][ T4350] kernfs_walk_and_get_ns+0x7e/0x2c0 [ 83.686719][ T4350] ? kernfs_find_ns+0x510/0x510 [ 83.691597][ T4350] ? current_cgns_cgroup_from_root+0x2a9/0x2f0 [ 83.697810][ T4350] cgroup_get_from_path+0x5f/0x2f0 [ 83.702946][ T4350] cgroup_mt_check_v1+0x1d7/0x2e0 [ 83.708108][ T4350] xt_check_match+0x4e6/0xc50 [ 83.712791][ T4350] ? xt_check_proc_name+0x240/0x240 [ 83.718072][ T4350] ? pcpu_alloc+0x1121/0x1770 [ 83.722860][ T4350] ? xt_find_match+0x1e1/0x210 [ 83.727655][ T4350] translate_table+0x1531/0x2090 [ 83.732599][ T4350] ? ip6t_register_table+0x810/0x810 [ 83.737900][ T4350] ? __might_fault+0xb7/0x110 [ 83.742597][ T4350] ? __lock_acquire+0x7d10/0x7d10 [ 83.747639][ T4350] ? _copy_from_user+0x111/0x170 [ 83.752576][ T4350] do_ip6t_set_ctl+0x96d/0xd90 [ 83.757338][ T4350] ? nf_setsockopt+0x218/0x280 [ 83.762097][ T4350] ? ip6t_unregister_table_exit+0x230/0x230 [ 83.767998][ T4350] ? __lock_acquire+0x7d10/0x7d10 [ 83.773042][ T4350] ? __mutex_lock_common+0x465/0x2400 [ 83.778511][ T4350] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 83.784169][ T4350] ? mutex_unlock+0x10/0x10 [ 83.788698][ T4350] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.794072][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 83.799272][ T4350] ? __local_bh_enable_ip+0x136/0x1c0 [ 83.804651][ T4350] nf_setsockopt+0x25f/0x280 [ 83.809262][ T4350] ipv6_setsockopt+0x2086/0x3cc0 [ 83.814223][ T4350] ? ipv6_update_options+0x400/0x400 [ 83.819520][ T4350] ? free_unref_page_list+0x391/0x820 [ 83.824895][ T4350] ? free_unref_page_list+0x757/0x820 [ 83.830302][ T4350] ? lockdep_hardirqs_on+0x94/0x140 [ 83.835513][ T4350] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.841084][ T4350] ? memset+0x1e/0x40 [ 83.845090][ T4350] ? mark_lock+0x94/0x320 [ 83.849436][ T4350] ? __lock_acquire+0x13bc/0x7d10 [ 83.854468][ T4350] ? futex_wait_restart+0x220/0x220 [ 83.859693][ T4350] ? aa_label_sk_perm+0x3d0/0x530 [ 83.864731][ T4350] ? aa_sk_perm+0x910/0x910 [ 83.869255][ T4350] ? do_futex+0xd73/0x12b0 [ 83.873673][ T4350] ? __might_sleep+0xf0/0xf0 [ 83.878269][ T4350] ? aa_sk_perm+0x7dc/0x910 [ 83.882784][ T4350] rawv6_setsockopt+0x29e/0x660 [ 83.887645][ T4350] ? raw6_destroy+0x30/0x30 [ 83.892195][ T4350] ? aa_sock_opt_perm+0x74/0x100 [ 83.897150][ T4350] ? sock_common_setsockopt+0x32/0xb0 [ 83.902547][ T4350] ? sock_common_recvmsg+0x1c0/0x1c0 [ 83.907836][ T4350] __sys_setsockopt+0x2bf/0x3d0 [ 83.912699][ T4350] __x64_sys_setsockopt+0xb1/0xc0 [ 83.917741][ T4350] do_syscall_64+0x4c/0xa0 [ 83.922163][ T4350] ? clear_bhb_loop+0x30/0x80 [ 83.926842][ T4350] ? clear_bhb_loop+0x30/0x80 [ 83.931527][ T4350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.937422][ T4350] RIP: 0033:0x7f4e78109e59 [ 83.941843][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.961454][ T4350] RSP: 002b:00007ffd3c605b68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.969887][ T4350] RAX: ffffffffffffffda RBX: 00007f4e78382fa0 RCX: 00007f4e78109e59 [ 83.977859][ T4350] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 83.985846][ T4350] RBP: 00007f4e7819fd6f R08: 0000000000001318 R09: 0000000000000000 [ 83.993994][ T4350] R10: 0000200000002b80 R11: 0000000000000246 R12: 0000000000000000 [ 84.001964][ T4350] R13: 00007f4e78382fac R14: 00007f4e78382fa0 R15: 00007f4e78382fa0 [ 84.010216][ T4350] [ 84.015119][ T4350] xt_cgroup: invalid path, errno=-2 [ 84.023850][ T154] device hsr_slave_0 left promiscuous mode [ 84.031338][ T154] device hsr_slave_1 left promiscuous mode [ 84.037346][ T4222] Bluetooth: hci0: command 0x040f tx timeout [ 84.044920][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.052401][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.060433][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.067960][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.075596][ T154] device bridge_slave_1 left promiscuous mode [ 84.081751][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.090251][ T154] device bridge_slave_0 left promiscuous mode [ 84.096520][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.107223][ T154] device veth1_macvtap left promiscuous mode [ 84.113344][ T154] device veth0_macvtap left promiscuous mode [ 84.119483][ T154] device veth1_vlan left promiscuous mode [ 84.125305][ T154] device veth0_vlan left promiscuous mode [ 84.241108][ T154] team0 (unregistering): Port device team_slave_1 removed [ 84.251906][ T154] team0 (unregistering): Port device team_slave_0 removed [ 84.265739][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.279512][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.322428][ T154] bond0 (unregistering): Released all slaves