ate [ 85.683239][ T144] device veth1_macvtap left promiscuous mode [ 85.690585][ T144] device veth0_macvtap left promiscuous mode [ 85.697254][ T144] device veth1_vlan left promiscuous mode [ 85.703080][ T144] device veth0_vlan left promiscuous mode [ 85.833503][ T144] team0 (unregistering): Port device team_slave_1 removed [ 85.847478][ T144] team0 (unregistering): Port device team_slave_0 removed [ 85.864015][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.877994][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.921806][ T144] bond0 (unregistering): Released all slaves [ 87.058105][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. 2026/10/03 05:12:30 parsed 1 programs [ 95.322158][ T4490] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 96.566239][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.574290][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.589142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.603319][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.612561][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.623653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.982793][ T4516] chnl_net:caif_netlink_parms(): no params data found [ 97.033734][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.041175][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.049450][ T4516] device bridge_slave_0 entered promiscuous mode [ 97.058128][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.065544][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.073820][ T4516] device bridge_slave_1 entered promiscuous mode [ 97.097704][ T4516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.109528][ T4516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.151037][ T4516] team0: Port device team_slave_0 added [ 97.167868][ T4516] team0: Port device team_slave_1 added [ 97.207645][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.215332][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.247753][ T4516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.263476][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.274660][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.311419][ T4516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.359296][ T4516] device hsr_slave_0 entered promiscuous mode [ 97.387339][ T4516] device hsr_slave_1 entered promiscuous mode [ 98.026030][ T4516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.048219][ T4516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.068424][ T4516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.088160][ T4516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.184266][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.203552][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.217476][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.231671][ T4516] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.246361][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.255575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.264669][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.272185][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.296709][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.305162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.318062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.334053][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.341820][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.355473][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.365095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.375069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.385243][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.404539][ T4516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.417695][ T4516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.430860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.440424][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.449747][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.458571][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.467442][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.478302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.487021][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.500557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.632848][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.647514][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.662460][ T4516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.692646][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.706542][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.731486][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.741155][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.753287][ T4516] device veth0_vlan entered promiscuous mode [ 98.762017][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.771811][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.784874][ T4516] device veth1_vlan entered promiscuous mode [ 98.812405][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.823172][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.834764][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.844713][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.857995][ T4516] device veth0_macvtap entered promiscuous mode [ 98.903104][ T4516] device veth1_macvtap entered promiscuous mode [ 98.938022][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.947058][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.955781][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.965391][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.975609][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.988698][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.997686][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.007479][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.026552][ T4516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.035494][ T4516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.045129][ T4516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.054669][ T4516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.413788][ T144] ODEBUG: Out of memory. ODEBUG disabled [ 101.510994][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/03 05:12:39 executed programs: 0 [ 102.175747][ T4745] chnl_net:caif_netlink_parms(): no params data found [ 102.231876][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.240473][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.250042][ T4745] device bridge_slave_0 entered promiscuous mode [ 102.259624][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.268239][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.277712][ T4745] device bridge_slave_1 entered promiscuous mode [ 102.304793][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.318756][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.349512][ T4745] team0: Port device team_slave_0 added [ 102.358733][ T4745] team0: Port device team_slave_1 added [ 102.380818][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.388518][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.416613][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.429606][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.437078][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.464186][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.497151][ T4745] device hsr_slave_0 entered promiscuous mode [ 102.504064][ T4745] device hsr_slave_1 entered promiscuous mode [ 102.511346][ T4745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.519227][ T4745] Cannot create hsr debugfs directory [ 103.550067][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.610452][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.649562][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.096050][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 104.399433][ T4745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.408087][ T4745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.417632][ T4745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.427080][ T4745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.490039][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.522135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.530458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.540849][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.550076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.559123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.567934][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.575866][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.583741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.611957][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.621674][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.630528][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.637907][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.647996][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.660481][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.690615][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.700159][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.717122][ T4745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.729048][ T4745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.748765][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.757120][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.767556][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.776726][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.785539][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.794738][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.803856][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.812875][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.896152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.904602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.915158][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.949891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.959408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.994079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.002700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.011429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.019433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.029360][ T4745] device veth0_vlan entered promiscuous mode [ 105.060117][ T4745] device veth1_vlan entered promiscuous mode [ 105.078159][ T4745] device veth0_macvtap entered promiscuous mode [ 105.085228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.094572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.103374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.112411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.122883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.133391][ T4745] device veth1_macvtap entered promiscuous mode [ 105.160450][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.171714][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.183231][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.191565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.200788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.210595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.221569][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.232748][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.245184][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.255763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.264523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.276376][ T4745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.287041][ T4745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.296901][ T4745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.307160][ T4745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.328652][ T144] device hsr_slave_0 left promiscuous mode [ 105.335320][ T144] device hsr_slave_1 left promiscuous mode [ 105.343175][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.350931][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.359110][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.367514][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.375387][ T144] device bridge_slave_1 left promiscuous mode [ 105.381969][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.390958][ T144] device bridge_slave_0 left promiscuous mode [ 105.397587][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.408093][ T144] device veth1_macvtap left promiscuous mode [ 105.415499][ T144] device veth0_macvtap left promiscuous mode [ 105.422412][ T144] device veth1_vlan left promiscuous mode [ 105.428453][ T144] device veth0_vlan left promiscuous mode [ 105.544011][ T144] team0 (unregistering): Port device team_slave_1 removed [ 105.556283][ T144] team0 (unregistering): Port device team_slave_0 removed [ 105.568587][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.581445][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.625589][ T144] bond0 (unregistering): Released all slaves [ 105.709594][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.720094][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.734418][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.756337][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.764706][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.773073][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.055913][ C0] ------------[ cut here ]------------ [ 106.055913][ C1] ------------[ cut here ]------------ [ 106.056688][ C1] WARNING: CPU: 1 PID: 0 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 106.056729][ C1] Modules linked in: [ 106.056747][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 106.056761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.056776][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 106.056794][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ad 89 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 86 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 106.056806][ C1] RSP: 0018:ffffc90000dd0be0 EFLAGS: 00010006 [ 106.056820][ C1] RAX: ffffffff81a08e70 RBX: 0000000000000008 RCX: ffff888016e98000 [ 106.056831][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.056840][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 106.056851][ C1] R10: dffffc0000000000 R11: fffffbfff203e219 R12: ffff888016e997a8 [ 106.063461][ C0] WARNING: CPU: 0 PID: 144 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 106.069098][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c48 R15: 0000000000000000 [ 106.078523][ C0] Modules linked in: [ 106.082522][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 106.089630][ C0] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 106.099865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.106201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.126412][ C1] CR2: 0000000000000000 CR3: 000000007abae000 CR4: 00000000003506e0 [ 106.132560][ C0] Workqueue: netns cleanup_net [ 106.140957][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.149009][ C0] [ 106.149019][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 106.157112][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.166229][ C0] Code: 24 45 31 f6 31 ff 89 de e8 ad 89 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 86 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 106.175703][ C1] Call Trace: [ 106.175718][ C1] [ 106.184197][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010006 [ 106.188709][ C1] bpf_probe_read_user+0x26/0x70 [ 106.198510][ C0] [ 106.198520][ C0] RAX: ffffffff81a08e70 RBX: 0000000000000008 RCX: ffff8880189cd940 [ 106.206606][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x978 [ 106.213575][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.224620][ C1] bpf_trace_run2+0x163/0x2e0 [ 106.232704][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 106.237542][ C1] ? posix_cpu_timers_work+0x1130/0x1130 [ 106.245495][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: ffff8880189cf0e8 [ 106.247816][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 106.254321][ C0] R13: dffffc0000000000 R14: ffffc90000007c48 R15: 0000000000000000 [ 106.263288][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.284191][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.288260][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.291300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.297709][ C1] enqueue_hrtimer+0x314/0x370 [ 106.302920][ C0] CR2: 0000001b2d463fff CR3: 000000007987a000 CR4: 00000000003506f0 [ 106.305411][ C1] __hrtimer_run_queues+0x5ed/0xb60 [ 106.314171][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.320146][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 106.328120][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.333182][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 106.341596][ C0] Call Trace: [ 106.341611][ C0] [ 106.347702][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 106.355667][ C0] bpf_probe_read_user+0x26/0x70 [ 106.360501][ C1] hrtimer_interrupt+0x397/0x8b0 [ 106.368472][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x978 [ 106.373492][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 106.382607][ C0] bpf_trace_run2+0x163/0x2e0 [ 106.388134][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 106.394783][ C0] ? posix_cpu_timers_work+0x1130/0x1130 [ 106.399547][ C1] [ 106.407585][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 106.412880][ C1] [ 106.420856][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.426969][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.435012][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.441067][ C1] RIP: 0010:default_idle+0xb/0x10 [ 106.444518][ C0] enqueue_hrtimer+0x314/0x370 [ 106.447881][ C1] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 106.456299][ C0] __hrtimer_run_queues+0x5ed/0xb60 [ 106.461671][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 106.466870][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 106.473057][ C1] [ 106.473065][ C1] RAX: f2ca1abf72bc6d00 RBX: ffff888016e98000 RCX: f2ca1abf72bc6d00 [ 106.479152][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 106.483880][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 106.489495][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 106.495382][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 106.498316][ C0] hrtimer_interrupt+0x397/0x8b0 [ 106.503140][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 106.506107][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 106.511288][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 106.517380][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 106.523010][ C1] default_idle_call+0x81/0xc0 [ 106.528487][ C0] [ 106.533239][ C1] do_idle+0x3a1/0x650 [ 106.553764][ C0] [ 106.553780][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.560893][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 106.567153][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 106.573966][ C1] ? asm_common_interrupt+0x22/0x40 [ 106.576386][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 106.584464][ C1] ? schedule_idle+0x57/0x90 [ 106.590015][ C0] RSP: 0018:ffffc900016ff920 EFLAGS: 00000206 [ 106.598429][ C1] cpu_startup_entry+0x14/0x20 [ 106.604782][ C0] [ 106.604788][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: fc3f0d546438c100 [ 106.613409][ C1] start_secondary+0x32f/0x430 [ 106.618415][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a48c0 [ 106.626578][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 106.632846][ C0] RBP: ffffc900016ffa40 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 106.641194][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 106.646855][ C0] R10: dffffc0000000000 R11: fffffbfff203e219 R12: ffffffff8c31ef60 [ 106.651799][ C1] [ 106.654729][ C0] R13: 1ffff920002dff30 R14: 0000000000000246 R15: dffffc0000000000 [ 106.660881][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.664542][ C0] ? rcu_lock_release+0x5/0x20 [ 106.672023][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 106.677229][ C0] ? read_lock_is_recursive+0x10/0x10 [ 106.682492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.687676][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 106.708802][ C1] Call Trace: [ 106.708817][ C1] [ 106.713739][ C0] ? inet_twsk_purge+0x59e/0x820 [ 106.719864][ C1] dump_stack_lvl+0x188/0x250 [ 106.724699][ C0] rcu_lock_acquire+0x2a/0x30 [ 106.727013][ C1] ? show_regs_print_info+0x20/0x20 [ 106.735053][ C0] ? rcu_lock_acquire+0x5/0x30 [ 106.740255][ C1] ? load_image+0x410/0x410 [ 106.748651][ C0] inet_twsk_purge+0x10d/0x820 [ 106.754102][ C1] panic+0x2f8/0x850 [ 106.762354][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 106.770551][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 106.778981][ C0] ? iput+0x6ea/0x880 [ 106.782112][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 106.790096][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 106.797483][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 106.802342][ C0] cleanup_net+0x78e/0xba0 [ 106.809865][ C1] __warn+0x248/0x2b0 [ 106.815503][ C0] ? ops_free_list+0x330/0x330 [ 106.826876][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 106.832267][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 106.835804][ C1] report_bug+0x1b9/0x2e0 [ 106.838729][ C0] ? _raw_spin_unlock+0x40/0x40 [ 106.844094][ C1] handle_bug+0x3a/0x70 [ 106.849112][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 106.853883][ C1] exc_invalid_op+0x16/0x40 [ 106.859075][ C0] process_one_work+0x867/0xff0 [ 106.864128][ C1] asm_exc_invalid_op+0x16/0x20 [ 106.868832][ C0] ? worker_detach_from_pool+0x240/0x240 [ 106.874115][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 106.878102][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 106.883989][ C1] Code: 24 45 31 f6 31 ff 89 de e8 ad 89 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 86 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 106.888676][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 106.892839][ C1] RSP: 0018:ffffc90000dd0be0 EFLAGS: 00010006 [ 106.899445][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 106.904290][ C1] [ 106.904297][ C1] RAX: ffffffff81a08e70 RBX: 0000000000000008 RCX: ffff888016e98000 [ 106.910370][ C0] ? wq_worker_running+0x97/0x170 [ 106.914866][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.919092][ C0] worker_thread+0xad7/0x12a0 [ 106.924566][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff203e218 [ 106.930114][ C0] kthread+0x42e/0x520 [ 106.936046][ C1] R10: dffffc0000000000 R11: fffffbfff203e219 R12: ffff888016e997a8 [ 106.940522][ C0] ? rcu_lock_release+0x20/0x20 [ 106.945584][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c48 R15: 0000000000000000 [ 106.949897][ C0] ? kthread_blkcg+0xd0/0xd0 [ 106.955447][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 106.960028][ C0] ret_from_fork+0x1f/0x30 [ 106.965075][ C1] bpf_probe_read_user+0x26/0x70 [ 106.970527][ C0] [ 106.976416][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0x978 [ 106.982749][ C0] irq event stamp: 2164312 [ 106.988027][ C1] bpf_trace_run2+0x163/0x2e0 [ 107.008511][ C0] hardirqs last enabled at (2164311): [] asm_sysvec_call_function_single+0x16/0x20 [ 107.013921][ C1] ? posix_cpu_timers_work+0x1130/0x1130 [ 107.020449][ C0] hardirqs last disabled at (2164312): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 107.026285][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 107.029039][ C0] softirqs last enabled at (2164268): [] __irq_exit_rcu+0x13b/0x230 [ 107.037101][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.042124][ C0] softirqs last disabled at (2164189): [] __irq_exit_rcu+0x13b/0x230 [ 107.050366][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 107.055117][ C0] ---[ end trace 542fa12dcabef7a2 ]--- [ 107.063092][ C1] enqueue_hrtimer+0x314/0x370 [ 107.207334][ C1] __hrtimer_run_queues+0x5ed/0xb60 [ 107.212852][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 107.219476][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 107.225000][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 107.231184][ C1] hrtimer_interrupt+0x397/0x8b0 [ 107.236966][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 107.243734][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 107.250067][ C1] [ 107.253239][ C1] [ 107.256648][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.263047][ C1] RIP: 0010:default_idle+0xb/0x10 [ 107.268265][ C1] Code: b7 48 89 df e8 06 bf f3 f7 eb ad e8 1f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d c7 44 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 107.291460][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 107.299145][ C1] RAX: f2ca1abf72bc6d00 RBX: ffff888016e98000 RCX: f2ca1abf72bc6d00 [ 107.308641][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 107.318283][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 107.328962][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 107.339519][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 107.350833][ C1] default_idle_call+0x81/0xc0 [ 107.361038][ C1] do_idle+0x3a1/0x650 [ 107.366066][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 107.375362][ C1] ? asm_common_interrupt+0x22/0x40 [ 107.385242][ C1] ? schedule_idle+0x57/0x90 [ 107.391137][ C1] cpu_startup_entry+0x14/0x20 [ 107.400160][ C1] start_secondary+0x32f/0x430 [ 107.405589][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 107.411347][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 107.417864][ C1] [ 108.526536][ C1] Shutting down cpus with NMI [ 108.532155][ C1] Kernel Offset: disabled [ 108.539320][ C1] Rebooting in 86400 seconds..