Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. 2025/12/02 15:36:21 ignoring optional flag "type"="gce" 2025/12/02 15:36:21 parsed 1 programs [ 86.649694][ T4781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.934375][ T4816] chnl_net:caif_netlink_parms(): no params data found [ 86.969400][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.976981][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.984603][ T4816] device bridge_slave_0 entered promiscuous mode [ 86.994977][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.002229][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.010187][ T4816] device bridge_slave_1 entered promiscuous mode [ 87.027987][ T4816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.040273][ T4816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.061187][ T4816] team0: Port device team_slave_0 added [ 87.068977][ T4816] team0: Port device team_slave_1 added [ 87.086936][ T4816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.093901][ T4816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.120478][ T4816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.136161][ T4816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.143129][ T4816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.169674][ T4816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.200949][ T4816] device hsr_slave_0 entered promiscuous mode [ 87.207903][ T4816] device hsr_slave_1 entered promiscuous mode [ 87.730010][ T4816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.741367][ T4816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.755099][ T4816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.766826][ T4816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.959555][ T4816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.975144][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.986439][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.997876][ T4816] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.010803][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.021176][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.046949][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.054198][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.076547][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.101127][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.116854][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.136340][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.143471][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.176332][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.196745][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.220361][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.231955][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.247221][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.267393][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.285672][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.298283][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.314893][ T4816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.329232][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.341000][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.351634][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.360782][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.505319][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.513789][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.545941][ T4816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.582232][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.598712][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.624638][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.635026][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.646505][ T4816] device veth0_vlan entered promiscuous mode [ 88.660448][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.669901][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.682055][ T4816] device veth1_vlan entered promiscuous mode [ 88.711868][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.721443][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.748813][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.758287][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.770750][ T4816] device veth0_macvtap entered promiscuous mode [ 88.784256][ T4816] device veth1_macvtap entered promiscuous mode [ 88.837356][ T4816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.852512][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.864241][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.874127][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.883876][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.898470][ T4816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.907665][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.918808][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.931196][ T4816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.940892][ T4816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.950263][ T4816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.959429][ T4816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.223599][ T1184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.584518][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.610310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.622422][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.634544][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.646265][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.659511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/02 15:36:28 executed programs: 0 [ 91.195514][ T4983] chnl_net:caif_netlink_parms(): no params data found [ 91.262227][ T4983] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.269723][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.278047][ T4983] device bridge_slave_0 entered promiscuous mode [ 91.287038][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.294230][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.302559][ T4983] device bridge_slave_1 entered promiscuous mode [ 91.330829][ T4983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.343025][ T4983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.375526][ T4983] team0: Port device team_slave_0 added [ 91.384933][ T4983] team0: Port device team_slave_1 added [ 91.411368][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.418577][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.444681][ T4983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.457860][ T4983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.464936][ T4983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.491253][ T4983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.532396][ T4983] device hsr_slave_0 entered promiscuous mode [ 91.539603][ T4983] device hsr_slave_1 entered promiscuous mode [ 91.547399][ T4983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.555614][ T4983] Cannot create hsr debugfs directory [ 91.683960][ T1184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.066209][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 94.171253][ T1184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.230206][ T1184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.980216][ T1184] device hsr_slave_0 left promiscuous mode [ 94.986891][ T1184] device hsr_slave_1 left promiscuous mode [ 94.993162][ T1184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.000711][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.008428][ T1184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.015806][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.023478][ T1184] device bridge_slave_1 left promiscuous mode [ 95.029773][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.038547][ T1184] device bridge_slave_0 left promiscuous mode [ 95.044764][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.057898][ T1184] device veth1_macvtap left promiscuous mode [ 95.064116][ T1184] device veth0_macvtap left promiscuous mode [ 95.070722][ T1184] device veth1_vlan left promiscuous mode [ 95.076739][ T1184] device veth0_vlan left promiscuous mode [ 95.146341][ T2362] Bluetooth: hci0: command 0x041b tx timeout [ 95.199089][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 95.211031][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 95.223184][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.235534][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.280817][ T1184] bond0 (unregistering): Released all slaves [ 95.354917][ T4983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.363647][ T4983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.372450][ T4983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.382966][ T4983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.444588][ T4983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.455594][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.465554][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.478343][ T4983] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.496277][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.505434][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.516663][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.523882][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.532839][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.542146][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.551197][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.558322][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.566579][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.586771][ T4983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.597488][ T4983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.609534][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.619650][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.628571][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.639036][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.647647][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.656279][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.665095][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.673924][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.682856][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.691230][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.699535][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.707601][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.799226][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.807028][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.819450][ T4983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.842619][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.852523][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.877537][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.886965][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.898661][ T4983] device veth0_vlan entered promiscuous mode [ 95.907523][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.916481][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.929397][ T4983] device veth1_vlan entered promiscuous mode [ 95.954824][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.964562][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.973610][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.984933][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.996521][ T4983] device veth0_macvtap entered promiscuous mode [ 96.007334][ T4983] device veth1_macvtap entered promiscuous mode [ 96.029775][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.038455][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.048261][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.057102][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.065825][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.080177][ T4983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.088188][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.098643][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.111706][ T4983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.121453][ T4983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131029][ T4983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141348][ T4983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.218685][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.241223][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.265599][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.280069][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.289936][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.302620][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/02 15:36:33 executed programs: 1 [ 97.226969][ T4430] Bluetooth: hci0: command 0x040f tx timeout [ 98.216128][ C0] ------------[ cut here ]------------ [ 98.216128][ C1] ------------[ cut here ]------------ [ 98.217085][ C1] WARNING: CPU: 1 PID: 4804 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 98.217122][ C1] Modules linked in: [ 98.217136][ C1] CPU: 1 PID: 4804 Comm: udevd Not tainted syzkaller #0 [ 98.217153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.217164][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 98.217184][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 98.217197][ C1] RSP: 0018:ffffc90000dd0ba8 EFLAGS: 00010006 [ 98.217213][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff888026941dc0 [ 98.223462][ C0] WARNING: CPU: 0 PID: 5384 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 98.228927][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.238282][ C0] Modules linked in: [ 98.242171][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 98.249096][ C0] CPU: 0 PID: 5384 Comm: syz-executor Not tainted syzkaller #0 [ 98.259144][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888026943548 [ 98.265306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.285257][ C1] R13: dffffc0000000000 R14: ffffc90000dd0c08 R15: 0000000000000000 [ 98.291410][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 98.299457][ C1] FS: 00007feb40c5d880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 98.308810][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 98.316773][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.320659][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010006 [ 98.328630][ C1] CR2: 00007f0704883370 CR3: 000000001f394000 CR4: 00000000003506e0 [ 98.336164][ C0] [ 98.336172][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff888024e38000 [ 98.344137][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.354194][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.362236][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.368392][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 98.377408][ C1] Call Trace: [ 98.377420][ C1] [ 98.397029][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888024e39788 [ 98.403814][ C1] bpf_probe_read_user+0x26/0x70 [ 98.409947][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 98.418090][ C1] bpf_prog_5f6df167d0cc17e3+0x3d/0x6c4 [ 98.420402][ C0] FS: 000055557e354480(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 98.428367][ C1] bpf_trace_run2+0x15b/0x2d0 [ 98.436335][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.444300][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 98.452262][ C0] CR2: 0000000020002140 CR3: 0000000022241000 CR4: 00000000003506f0 [ 98.460342][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 98.463620][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.466459][ C1] ? debug_object_activate+0x2d2/0x480 [ 98.474421][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.479430][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 98.487398][ C0] Call Trace: [ 98.487408][ C0] [ 98.492934][ C1] enqueue_hrtimer+0x314/0x370 [ 98.501847][ C0] bpf_probe_read_user+0x26/0x70 [ 98.506518][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 98.513090][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x6c4 [ 98.518716][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 98.526677][ C0] bpf_trace_run2+0x15b/0x2d0 [ 98.531524][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 98.539477][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 98.544925][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 98.552886][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 98.558261][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 98.561533][ C0] ? debug_object_activate+0x2d2/0x480 [ 98.564395][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 98.569126][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 98.574225][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 98.579503][ C0] enqueue_hrtimer+0x314/0x370 [ 98.585047][ C1] [ 98.590604][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 98.595274][ C1] [ 98.595291][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.600410][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 98.606035][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 98.612105][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 98.616938][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 98.621861][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 98.627313][ C1] RSP: 0018:ffffc90002e7f7c0 EFLAGS: 00000206 [ 98.633287][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 98.638636][ C1] [ 98.644292][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 98.649043][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: b548b7a670f5a200 [ 98.651985][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 98.657178][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 98.660116][ C0] [ 98.666081][ C1] RBP: ffffc90002e7f8e0 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 98.671611][ C0] [ 98.671620][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.676883][ C1] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffffffff8c11c760 [ 98.681980][ C0] RIP: 0010:tracepoint_probe_unregister+0x5f8/0x930 [ 98.701584][ C1] R13: 1ffff920005cff04 R14: 0000000000000246 R15: dffffc0000000000 [ 98.707750][ C0] Code: 00 e8 0c 67 fe ff e9 eb 02 00 00 48 89 1c 24 49 8d 5c 24 38 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 <74> 08 48 89 df e8 fe ce 42 00 48 83 3b 00 0f 84 84 00 00 00 49 89 [ 98.713934][ C1] ? rcu_lock_release+0x5/0x20 [ 98.718861][ C0] RSP: 0018:ffffc90002d2fd10 EFLAGS: 00000246 [ 98.721187][ C1] ? mark_lock+0x94/0x320 [ 98.727148][ C0] [ 98.735109][ C1] ? read_lock_is_recursive+0x10/0x10 [ 98.740724][ C0] RAX: dffffc0000000000 RBX: ffffffff8d564030 RCX: ffff888024e38000 [ 98.748690][ C1] ? deref_stack_reg+0xd0/0x120 [ 98.751610][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 98.759691][ C1] ? preempt_count_add+0x8d/0x190 [ 98.762646][ C0] RBP: 1ffffffff1aac807 R08: dffffc0000000000 R09: fffff520005a5f5d [ 98.768649][ C1] rcu_lock_acquire+0x2a/0x30 [ 98.776616][ C0] R10: fffff520005a5f5d R11: 1ffff920005a5f5c R12: ffffffff8d563ff8 [ 98.783292][ C1] ? rcu_lock_acquire+0x5/0x30 [ 98.791253][ C0] R13: ffffffff81670bb0 R14: 1ffffffff1aac806 R15: ffff888064ff6910 [ 98.810983][ C1] is_bpf_text_address+0x1d/0x270 [ 98.815762][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 98.821825][ C1] __kernel_text_address+0x9a/0x100 [ 98.826190][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 98.828496][ C1] unwind_get_return_address+0x49/0x80 [ 98.833966][ C0] bpf_link_put+0x22a/0x2c0 [ 98.841932][ C1] ? stack_trace_save+0xe0/0xe0 [ 98.846795][ C0] ? local_lock_release+0x170/0x170 [ 98.854766][ C1] arch_stack_walk+0xf2/0x140 [ 98.859784][ C0] bpf_link_release+0x37/0x40 [ 98.867755][ C1] ? kmem_cache_free+0x8f/0x210 [ 98.872428][ C0] __fput+0x234/0x930 [ 98.880418][ C1] stack_trace_save+0x98/0xe0 [ 98.885229][ C0] task_work_run+0x125/0x1a0 [ 98.893270][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 98.898474][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 98.904187][ C1] ? verify_lock_unused+0x140/0x140 [ 98.909376][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 98.914649][ C1] kasan_set_track+0x4b/0x70 [ 98.920088][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 98.924585][ C1] ? kasan_set_track+0x4b/0x70 [ 98.929421][ C0] do_syscall_64+0x58/0xa0 [ 98.934601][ C1] ? kasan_set_free_info+0x1f/0x40 [ 98.939354][ C0] ? clear_bhb_loop+0x30/0x80 [ 98.944017][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 98.948893][ C0] ? clear_bhb_loop+0x30/0x80 [ 98.952865][ C1] ? slab_free_freelist_hook+0xea/0x170 [ 98.957531][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.962101][ C1] ? kmem_cache_free+0x8f/0x210 [ 98.967291][ C0] RIP: 0033:0x7f07048a5dda [ 98.972743][ C1] ? __fput+0x627/0x930 [ 98.977931][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 98.983468][ C1] ? task_work_run+0x125/0x1a0 [ 98.988050][ C0] RSP: 002b:00007ffe60c21a00 EFLAGS: 00000293 [ 98.993497][ C1] ? exit_to_user_mode_loop+0x10f/0x130 [ 98.998251][ C0] ORIG_RAX: 0000000000000003 [ 99.002655][ C1] ? exit_to_user_mode_prepare+0xee/0x180 [ 99.007878][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f07048a5dda [ 99.012540][ C1] ? syscall_exit_to_user_mode+0x16/0x40 [ 99.017721][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 99.022471][ C1] ? do_syscall_64+0x58/0xa0 [ 99.028001][ C0] RBP: 00007ffe60c21ad8 R08: 00007f070482a000 R09: 0000000000000001 [ 99.034141][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.038977][ C0] R10: 0000000000000001 R11: 0000000000000293 R12: 00000000000181a9 [ 99.043517][ C1] kasan_set_free_info+0x1f/0x40 [ 99.047627][ C0] R13: 00007f07049d5f8c R14: 00007f07049d5f80 R15: 0000000000000226 [ 99.067322][ C1] ____kasan_slab_free+0xd5/0x110 [ 99.072089][ C0] [ 99.078226][ C1] slab_free_freelist_hook+0xea/0x170 [ 99.083759][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.088435][ C1] ? __fput+0x627/0x930 [ 99.094141][ C0] CPU: 0 PID: 5384 Comm: syz-executor Not tainted syzkaller #0 [ 99.102231][ C1] kmem_cache_free+0x8f/0x210 [ 99.107876][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.115934][ C1] __fput+0x627/0x930 [ 99.120502][ C0] Call Trace: [ 99.128483][ C1] task_work_run+0x125/0x1a0 [ 99.134528][ C0] [ 99.142488][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 99.147404][ C0] dump_stack_lvl+0x168/0x230 [ 99.155382][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 99.160391][ C0] ? show_regs_print_info+0x20/0x20 [ 99.163402][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 99.169016][ C0] ? load_image+0x3b0/0x3b0 [ 99.176281][ C1] do_syscall_64+0x58/0xa0 [ 99.180620][ C0] panic+0x2c9/0x7f0 [ 99.188139][ C1] ? clear_bhb_loop+0x30/0x80 [ 99.192807][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 99.202840][ C1] ? clear_bhb_loop+0x30/0x80 [ 99.206823][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 99.210091][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.214669][ C0] __warn+0x248/0x2b0 [ 99.217507][ C1] RIP: 0033:0x7feb40db9a67 [ 99.222922][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 99.227591][ C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 99.233118][ C0] report_bug+0x1b7/0x2e0 [ 99.238298][ C1] RSP: 002b:00007ffd3f008fb8 EFLAGS: 00000297 [ 99.243747][ C0] handle_bug+0x3a/0x70 [ 99.248228][ C1] ORIG_RAX: 0000000000000003 [ 99.252629][ C0] exc_invalid_op+0x16/0x40 [ 99.256509][ C1] RAX: 0000000000000000 RBX: 000056394688f000 RCX: 00007feb40db9a67 [ 99.261195][ C0] asm_exc_invalid_op+0x16/0x20 [ 99.265685][ C1] RDX: 00007feb40e93ea0 RSI: 0000563946899a00 RDI: 0000000000000009 [ 99.270355][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 99.275885][ C1] RBP: 00007feb40e93ff0 R08: 0000000000000000 R09: 0000000000000000 [ 99.281875][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 99.285885][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 99.290293][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010006 [ 99.295836][ C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 99.315438][ C0] [ 99.315445][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff888024e38000 [ 99.319944][ C1] [ 99.325979][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.330218][ C1] irq event stamp: 185636 [ 99.335052][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 99.339720][ C1] hardirqs last enabled at (185635): [] _raw_spin_unlock_irqrestore+0x82/0x100 [ 99.347800][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff888024e39788 [ 99.352636][ C1] hardirqs last disabled at (185636): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 99.360598][ C0] R13: dffffc0000000000 R14: ffffc90000007c08 R15: 0000000000000000 [ 99.366735][ C1] softirqs last enabled at (176266): [] __irq_exit_rcu+0x12f/0x220 [ 99.374802][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 99.394475][ C1] softirqs last disabled at (176255): [] __irq_exit_rcu+0x12f/0x220 [ 99.402446][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 99.408491][ C1] ---[ end trace f334e4f6f009554a ]--- [ 99.416628][ C0] bpf_probe_read_user+0x26/0x70 [ 99.528785][ C0] bpf_prog_5f6df167d0cc17e3+0x3d/0x6c4 [ 99.534321][ C0] bpf_trace_run2+0x15b/0x2d0 [ 99.538990][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 99.544624][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 99.549454][ C0] ? debug_object_activate+0x2d2/0x480 [ 99.554892][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 99.560242][ C0] enqueue_hrtimer+0x314/0x370 [ 99.564988][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 99.570426][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 99.575954][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 99.581040][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 99.587319][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 99.592286][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 99.598263][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 99.603981][ C0] [ 99.606914][ C0] [ 99.609831][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.615811][ C0] RIP: 0010:tracepoint_probe_unregister+0x5f8/0x930 [ 99.622393][ C0] Code: 00 e8 0c 67 fe ff e9 eb 02 00 00 48 89 1c 24 49 8d 5c 24 38 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 <74> 08 48 89 df e8 fe ce 42 00 48 83 3b 00 0f 84 84 00 00 00 49 89 [ 99.642001][ C0] RSP: 0018:ffffc90002d2fd10 EFLAGS: 00000246 [ 99.648150][ C0] RAX: dffffc0000000000 RBX: ffffffff8d564030 RCX: ffff888024e38000 [ 99.656118][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 99.664113][ C0] RBP: 1ffffffff1aac807 R08: dffffc0000000000 R09: fffff520005a5f5d [ 99.672071][ C0] R10: fffff520005a5f5d R11: 1ffff920005a5f5c R12: ffffffff8d563ff8 [ 99.680034][ C0] R13: ffffffff81670bb0 R14: 1ffffffff1aac806 R15: ffff888064ff6910 [ 99.687988][ C0] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 99.693537][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 99.698803][ C0] bpf_link_put+0x22a/0x2c0 [ 99.703281][ C0] ? local_lock_release+0x170/0x170 [ 99.708472][ C0] bpf_link_release+0x37/0x40 [ 99.713141][ C0] __fput+0x234/0x930 [ 99.717107][ C0] task_work_run+0x125/0x1a0 [ 99.721688][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 99.727041][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 99.732573][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 99.738096][ C0] do_syscall_64+0x58/0xa0 [ 99.742495][ C0] ? clear_bhb_loop+0x30/0x80 [ 99.747236][ C0] ? clear_bhb_loop+0x30/0x80 [ 99.751892][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.757765][ C0] RIP: 0033:0x7f07048a5dda [ 99.762160][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 99.781761][ C0] RSP: 002b:00007ffe60c21a00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 99.790261][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f07048a5dda [ 99.798234][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 99.806190][ C0] RBP: 00007ffe60c21ad8 R08: 00007f070482a000 R09: 0000000000000001 [ 99.814154][ C0] R10: 0000000000000001 R11: 0000000000000293 R12: 00000000000181a9 [ 99.822102][ C0] R13: 00007f07049d5f8c R14: 00007f07049d5f80 R15: 0000000000000226 [ 99.830076][ C0] [ 99.833283][ C0] Kernel Offset: disabled [ 99.838639][ C0] Rebooting in 86400 seconds..