Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. 2026/02/03 20:33:01 parsed 1 programs [ 93.154057][ T4609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 95.050026][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.058013][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.075483][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.084625][ T459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.092705][ T459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.101523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.837073][ T4670] chnl_net:caif_netlink_parms(): no params data found [ 96.895915][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.903142][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.911246][ T4670] device bridge_slave_0 entered promiscuous mode [ 96.919382][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.926514][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.934374][ T4670] device bridge_slave_1 entered promiscuous mode [ 96.954199][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.964928][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.986580][ T4670] team0: Port device team_slave_0 added [ 96.995277][ T4670] team0: Port device team_slave_1 added [ 97.023354][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.030651][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.056681][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.069112][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.076431][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.102480][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.236168][ T4670] device hsr_slave_0 entered promiscuous mode [ 97.243661][ T4670] device hsr_slave_1 entered promiscuous mode [ 97.799163][ T4670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.812152][ T4670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.855918][ T4670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.867204][ T4670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.978695][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.028061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.040038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.051224][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.110437][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.119701][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.128220][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.135485][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.148550][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.157831][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.167246][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.174412][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.182518][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.191451][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.201137][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.210457][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.226465][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.235855][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.244535][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.255019][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.265507][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.274192][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.287122][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.300766][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.309164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.319938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.522171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.530720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.545772][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.580656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.589449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.612385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.621735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.632876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.641189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.666082][ T4670] device veth0_vlan entered promiscuous mode [ 98.693625][ T4670] device veth1_vlan entered promiscuous mode [ 98.765848][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.777307][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.789981][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.798778][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.814051][ T4670] device veth0_macvtap entered promiscuous mode [ 98.841983][ T4670] device veth1_macvtap entered promiscuous mode [ 98.882699][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.899760][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.908090][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.930244][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.938994][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.964019][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.979443][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.988711][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.023764][ T4670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.038042][ T4670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.050325][ T4670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.059049][ T4670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/03 20:33:11 executed programs: 0 [ 100.239851][ T4802] chnl_net:caif_netlink_parms(): no params data found [ 100.372397][ T4802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.384117][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.393934][ T4802] device bridge_slave_0 entered promiscuous mode [ 100.404624][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.413541][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.423621][ T4802] device bridge_slave_1 entered promiscuous mode [ 100.484576][ T4802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.498624][ T4802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.557762][ T4802] team0: Port device team_slave_0 added [ 100.566315][ T4802] team0: Port device team_slave_1 added [ 100.609904][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.616887][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.650885][ T4802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.670579][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.677567][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.722894][ T4802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.814225][ T4802] device hsr_slave_0 entered promiscuous mode [ 100.822105][ T4802] device hsr_slave_1 entered promiscuous mode [ 100.839675][ T4802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.847277][ T4802] Cannot create hsr debugfs directory [ 101.053816][ T4802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.069577][ T4685] Bluetooth: hci0: command 0x0409 tx timeout [ 103.389599][ T4802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.437093][ T4802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.507246][ T4802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.707112][ T4802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.719709][ T4802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.730566][ T4802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.754001][ T4802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.855650][ T4802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.874374][ T9] device hsr_slave_0 left promiscuous mode [ 103.880891][ T9] device hsr_slave_1 left promiscuous mode [ 103.887325][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.895297][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.903907][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.911806][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.919849][ T9] device bridge_slave_1 left promiscuous mode [ 103.926276][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.935580][ T9] device bridge_slave_0 left promiscuous mode [ 103.943044][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.958428][ T9] device veth1_macvtap left promiscuous mode [ 103.966415][ T9] device veth0_macvtap left promiscuous mode [ 103.973093][ T9] device veth1_vlan left promiscuous mode [ 103.978910][ T9] device veth0_vlan left promiscuous mode [ 104.149539][ T4686] Bluetooth: hci0: command 0x041b tx timeout [ 104.215955][ T9] team0 (unregistering): Port device team_slave_1 removed [ 104.233068][ T9] team0 (unregistering): Port device team_slave_0 removed [ 104.253041][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.271943][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.364625][ T9] bond0 (unregistering): Released all slaves [ 104.417461][ T4802] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.424657][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.432646][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.443444][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.452384][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.460911][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.467949][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.476912][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.494105][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.503112][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.514103][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.521238][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.531639][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.540336][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.551805][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.560581][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.570419][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.581266][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.590802][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.601528][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.611648][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.624536][ T4802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.641406][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.649975][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.658329][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.750147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.757588][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.769991][ T4802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.789831][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.798490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.816443][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.824842][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.833530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.841842][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.852102][ T4802] device veth0_vlan entered promiscuous mode [ 104.870779][ T4802] device veth1_vlan entered promiscuous mode [ 104.892466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.901060][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.909160][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.919466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.931729][ T4802] device veth0_macvtap entered promiscuous mode [ 104.942269][ T4802] device veth1_macvtap entered promiscuous mode [ 104.960520][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.968285][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.978330][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.987216][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.996629][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.008585][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.017074][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.026541][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.037508][ T4802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.047622][ T4802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.056980][ T4802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.067432][ T4802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.134424][ T459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.146049][ T459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.163846][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.171148][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/02/03 20:33:16 executed programs: 2 [ 105.172633][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.191488][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.679285][ C1] ------------[ cut here ]------------ [ 105.679285][ C0] ------------[ cut here ]------------ [ 105.679926][ C0] WARNING: CPU: 0 PID: 4612 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 105.679961][ C0] Modules linked in: [ 105.679974][ C0] CPU: 0 PID: 4612 Comm: udevd Not tainted syzkaller #0 [ 105.679991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.680000][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 105.680020][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 105.680034][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010006 [ 105.680050][ C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff88805d59bb80 [ 105.680063][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.680073][ C0] RBP: 0000000000000000 R08: ffff88805d59bb87 R09: 1ffff1100bab3770 [ 105.686132][ C1] WARNING: CPU: 1 PID: 5092 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 105.691599][ C0] R10: dffffc0000000000 R11: ffffed100bab3771 R12: ffff88805d59d308 [ 105.700867][ C1] Modules linked in: [ 105.704749][ C0] R13: 00007ffffffff000 R14: ffffc90000007c28 R15: 0000000000000000 [ 105.711668][ C1] CPU: 1 PID: 5092 Comm: syz.0.32 Not tainted syzkaller #0 [ 105.721715][ C0] FS: 00007f4bf9305880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 105.727854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.747449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.753503][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 105.761461][ C0] CR2: 0000001b2fc5ffff CR3: 0000000069641000 CR4: 00000000003506f0 [ 105.769421][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 105.777386][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.786646][ C1] RSP: 0018:ffffc90000dd0bb8 EFLAGS: 00010006 [ 105.794611][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.798497][ C1] [ 105.798503][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff88802b408000 [ 105.806459][ C0] Call Trace: [ 105.806468][ C0] [ 105.813637][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.822559][ C0] bpf_probe_read_compat+0xdd/0x170 [ 105.832597][ C1] RBP: 0000000000000000 R08: ffff88802b408007 R09: 1ffff11005681000 [ 105.839187][ C0] bpf_prog_1aa22eef385d9a93+0x42/0x798 [ 105.845408][ C1] R10: dffffc0000000000 R11: ffffed1005681001 R12: ffff88802b409788 [ 105.853375][ C0] bpf_trace_run2+0x163/0x2e0 [ 105.872969][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0c28 R15: 0000000000000000 [ 105.880938][ C0] ? posix_cpu_timers_work+0x1170/0x1170 [ 105.886992][ C1] FS: 00007fa78f9786c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 105.894958][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 105.897286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.905259][ C0] enqueue_hrtimer+0x314/0x370 [ 105.908610][ C1] CR2: 0000000000000000 CR3: 0000000018399000 CR4: 00000000003506e0 [ 105.911465][ C0] __hrtimer_run_queues+0x5f3/0xb70 [ 105.919429][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.924626][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 105.932579][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.938114][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 105.946080][ C1] Call Trace: [ 105.946088][ C1] [ 105.950753][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 105.958713][ C1] bpf_probe_read_compat+0xdd/0x170 [ 105.964352][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 105.973253][ C1] bpf_prog_1aa22eef385d9a93+0x42/0x798 [ 105.978091][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 105.984681][ C1] bpf_trace_run2+0x163/0x2e0 [ 105.989431][ C0] [ 105.997412][ C1] ? posix_cpu_timers_work+0x1170/0x1170 [ 106.002610][ C0] [ 106.002621][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.010580][ C1] ? bpf_trace_run1+0x2e0/0x2e0 [ 106.015682][ C0] RIP: 0010:kasan_check_range+0x84/0x290 [ 106.023666][ C1] enqueue_hrtimer+0x314/0x370 [ 106.029711][ C0] Code: 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd [ 106.032993][ C1] __hrtimer_run_queues+0x5f3/0xb70 [ 106.035985][ C0] RSP: 0018:ffffc90002eaf158 EFLAGS: 00000246 [ 106.040944][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 106.046111][ C0] [ 106.052225][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 106.057777][ C0] RAX: ffff88805d59bb01 RBX: fffffffffffffff5 RCX: ffffffff81352b62 [ 106.063421][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 106.068081][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90002eaf208 [ 106.071124][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 106.076719][ C0] RBP: 0000000000000000 R08: ffffc90002eaf267 R09: 1ffff920005d5e4c [ 106.079651][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 106.085624][ C0] R10: dffffc0000000000 R11: fffff520005d5e42 R12: dffffc0000000001 [ 106.090485][ C1] [ 106.096098][ C0] R13: ffff88805d59bb80 R14: 1ffff920005d5e41 R15: 000000000000000c [ 106.100848][ C1] [ 106.100857][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 106.120545][ C0] ? __unwind_start+0x32/0x740 [ 106.125733][ C1] RIP: 0010:x2apic_send_IPI+0x70/0xd0 [ 106.131798][ C0] memset+0x1e/0x40 [ 106.136903][ C1] Code: f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 3b 41 0f b7 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 89 fe 89 fd 48 c7 c7 60 e6 18 8c [ 106.139229][ C0] __unwind_start+0x32/0x740 [ 106.145276][ C1] RSP: 0018:ffffc90002e0f870 EFLAGS: 00000206 [ 106.153256][ C0] ? stack_trace_save+0xf0/0xf0 [ 106.158172][ C1] [ 106.158179][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 106.166140][ C0] arch_stack_walk+0xda/0x140 [ 106.172284][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 106.180257][ C0] stack_trace_save+0xa6/0xf0 [ 106.185858][ C1] RBP: ffffc90002e0f9e0 R08: ffff8880b913b3d7 R09: 1ffff1101722767a [ 106.193820][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 106.196743][ C1] R10: dffffc0000000000 R11: ffffed101722767b R12: dffffc0000000000 [ 106.204723][ C0] __kasan_kmalloc+0xb5/0xf0 [ 106.207657][ C1] R13: ffff8880b913b3c0 R14: ffff8880b9021568 R15: ffffffff8be30820 [ 106.213675][ C0] tomoyo_encode+0x27e/0x540 [ 106.218405][ C1] smp_call_function_many_cond+0x7d4/0xd90 [ 106.223759][ C0] tomoyo_realpath_from_path+0x5cd/0x610 [ 106.227555][ C1] ? text_poke_sync+0x20/0x20 [ 106.247166][ C0] tomoyo_check_open_permission+0x1eb/0x410 [ 106.251756][ C1] ? smp_call_function_many+0x30/0x30 [ 106.257814][ C0] ? tomoyo_check_path_number_acl+0x280/0x280 [ 106.262655][ C1] ? enqueue_hrtimer+0x30/0x370 [ 106.264988][ C0] ? step_into+0x37b/0xd10 [ 106.272948][ C1] ? text_poke+0x90/0x90 [ 106.277726][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 106.285678][ C1] ? text_poke_sync+0x20/0x20 [ 106.290331][ C0] ? __rwlock_init+0x140/0x140 [ 106.298294][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 106.303394][ C0] ? hook_file_open+0xf1/0x230 [ 106.311357][ C1] text_poke_bp_batch+0x77e/0x830 [ 106.315943][ C0] ? tomoyo_file_open+0xe9/0x170 [ 106.323952][ C1] ? text_poke_loc_init+0x5b0/0x5b0 [ 106.328522][ C0] security_file_open+0x5e/0xa0 [ 106.334325][ C1] text_poke_finish+0x16/0x30 [ 106.339937][ C0] do_dentry_open+0x322/0xf80 [ 106.344598][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 106.350490][ C0] path_openat+0x26f5/0x2fa0 [ 106.355836][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 106.361913][ C0] ? verify_lock_unused+0x140/0x140 [ 106.366729][ C1] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 106.371137][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 106.375361][ C1] static_key_enable+0x16/0x20 [ 106.380375][ C0] ? do_filp_open+0x410/0x410 [ 106.385034][ C1] tracepoint_add_func+0x907/0x990 [ 106.389801][ C0] do_filp_open+0x1e2/0x410 [ 106.394890][ C1] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 106.399642][ C0] ? vfs_tmpfile+0x300/0x300 [ 106.404647][ C1] tracepoint_probe_register_prio_may_exist+0x5c/0x90 [ 106.409595][ C0] ? _raw_spin_unlock+0x24/0x40 [ 106.414760][ C1] ? __bpf_trace_hrtimer_init+0x30/0x30 [ 106.419597][ C0] ? alloc_fd+0x598/0x630 [ 106.424260][ C1] bpf_raw_tracepoint_open+0x6ee/0x840 [ 106.428937][ C0] do_sys_openat2+0x150/0x4b0 [ 106.434896][ C1] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 106.439554][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 106.445446][ C1] ? __might_fault+0xb3/0x110 [ 106.450618][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 106.456160][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 106.461427][ C0] ? do_sys_open+0xe0/0xe0 [ 106.466173][ C1] ? security_bpf+0x7a/0xa0 [ 106.470841][ C0] ? __x64_sys_openat+0x10a/0x160 [ 106.475939][ C1] __sys_bpf+0x4fb/0x6f0 [ 106.480431][ C0] __x64_sys_openat+0x135/0x160 [ 106.485957][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 106.490533][ C0] do_syscall_64+0x4c/0xa0 [ 106.497286][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 106.502112][ C0] ? clear_bhb_loop+0x30/0x80 [ 106.507656][ C1] __x64_sys_bpf+0x78/0x90 [ 106.511959][ C0] ? clear_bhb_loop+0x30/0x80 [ 106.517494][ C1] do_syscall_64+0x4c/0xa0 [ 106.522159][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.527869][ C1] ? clear_bhb_loop+0x30/0x80 [ 106.534007][ C0] RIP: 0033:0x7f4bf93f3407 [ 106.538672][ C1] ? clear_bhb_loop+0x30/0x80 [ 106.543861][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 106.548184][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.552584][ C0] RSP: 002b:00007ffda680ea40 EFLAGS: 00000202 [ 106.557076][ C1] RIP: 0033:0x7fa7907128f9 [ 106.562088][ C0] ORIG_RAX: 0000000000000101 [ 106.566318][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.571156][ C0] RAX: ffffffffffffffda RBX: 00007f4bf9305880 RCX: 00007f4bf93f3407 [ 106.576518][ C1] RSP: 002b:00007fa78f978028 EFLAGS: 00000246 [ 106.580929][ C0] RDX: 0000000000080000 RSI: 00007ffda680ebb0 RDI: ffffffffffffff9c [ 106.585854][ C1] ORIG_RAX: 0000000000000141 [ 106.590517][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 106.594921][ C1] RAX: ffffffffffffffda RBX: 00007fa79093ffa0 RCX: 00007fa7907128f9 [ 106.594935][ C1] RDX: 0000000000000010 RSI: 0000200000000bc0 RDI: 0000000000000011 [ 106.599592][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555a498807f5 [ 106.603997][ C1] RBP: 00007fa7907a48ac R08: 0000000000000000 R09: 0000000000000000 [ 106.609875][ C0] R13: 0000555a498807f5 R14: 0000000000000001 R15: 0000555a4989b140 [ 106.614538][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.618965][ C0] [ 106.623610][ C1] R13: 0000000000000000 R14: 00007fa79093ffa0 R15: 00007fff30e8ed18 [ 106.643210][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.649102][ C1] [ 106.655147][ C0] CPU: 0 PID: 4612 Comm: udevd Not tainted syzkaller #0 [ 106.659553][ C1] irq event stamp: 368 [ 106.664216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.683895][ C1] hardirqs last enabled at (367): [] __text_poke+0x62e/0x7d0 [ 106.691863][ C0] Call Trace: [ 106.691872][ C0] [ 106.697921][ C1] hardirqs last disabled at (368): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 106.705905][ C0] dump_stack_lvl+0x188/0x250 [ 106.710572][ C1] softirqs last enabled at (330): [] bpf_link_prime+0x75/0x270 [ 106.718633][ C0] ? show_regs_print_info+0x20/0x20 [ 106.726677][ C1] softirqs last disabled at (328): [] bpf_link_prime+0x48/0x270 [ 106.734643][ C0] ? load_image+0x400/0x400 [ 106.742615][ C1] ---[ end trace ef405150aee14868 ]--- [ 106.750592][ C0] panic+0x2e5/0x810 [ 106.876079][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 106.880600][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 106.886149][ C0] __warn+0x248/0x2b0 [ 106.890128][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 106.895673][ C0] report_bug+0x1b7/0x2e0 [ 106.900060][ C0] handle_bug+0x3a/0x70 [ 106.904216][ C0] exc_invalid_op+0x16/0x40 [ 106.908717][ C0] asm_exc_invalid_op+0x16/0x20 [ 106.913567][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 106.919727][ C0] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 106.939332][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010006 [ 106.945400][ C0] RAX: ffffffff81a08ea0 RBX: 0000000000000008 RCX: ffff88805d59bb80 [ 106.953368][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.961333][ C0] RBP: 0000000000000000 R08: ffff88805d59bb87 R09: 1ffff1100bab3770 [ 106.969306][ C0] R10: dffffc0000000000 R11: ffffed100bab3771 R12: ffff88805d59d308 [ 106.977276][ C0] R13: 00007ffffffff000 R14: ffffc90000007c28 R15: 0000000000000000 [ 106.985248][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 106.990801][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 106.996347][ C0] bpf_probe_read_compat+0xdd/0x170 [ 107.001549][ C0] bpf_prog_1aa22eef385d9a93+0x42/0x798 [ 107.007104][ C0] bpf_trace_run2+0x163/0x2e0 [ 107.011794][ C0] ? posix_cpu_timers_work+0x1170/0x1170 [ 107.017437][ C0] ? bpf_trace_run1+0x2e0/0x2e0 [ 107.022307][ C0] enqueue_hrtimer+0x314/0x370 [ 107.027077][ C0] __hrtimer_run_queues+0x5f3/0xb70 [ 107.032299][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 107.037411][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 107.043483][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 107.048445][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 107.054459][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 107.060105][ C0] [ 107.063039][ C0] [ 107.065969][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.071952][ C0] RIP: 0010:kasan_check_range+0x84/0x290 [ 107.077593][ C0] Code: 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd [ 107.097209][ C0] RSP: 0018:ffffc90002eaf158 EFLAGS: 00000246 [ 107.103289][ C0] RAX: ffff88805d59bb01 RBX: fffffffffffffff5 RCX: ffffffff81352b62 [ 107.111269][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90002eaf208 [ 107.119252][ C0] RBP: 0000000000000000 R08: ffffc90002eaf267 R09: 1ffff920005d5e4c [ 107.127228][ C0] R10: dffffc0000000000 R11: fffff520005d5e42 R12: dffffc0000000001 [ 107.135200][ C0] R13: ffff88805d59bb80 R14: 1ffff920005d5e41 R15: 000000000000000c [ 107.143190][ C0] ? __unwind_start+0x32/0x740 [ 107.147967][ C0] memset+0x1e/0x40 [ 107.151777][ C0] __unwind_start+0x32/0x740 [ 107.156369][ C0] ? stack_trace_save+0xf0/0xf0 [ 107.161221][ C0] arch_stack_walk+0xda/0x140 [ 107.165905][ C0] stack_trace_save+0xa6/0xf0 [ 107.170577][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 107.175695][ C0] __kasan_kmalloc+0xb5/0xf0 [ 107.180319][ C0] tomoyo_encode+0x27e/0x540 [ 107.184914][ C0] tomoyo_realpath_from_path+0x5cd/0x610 [ 107.190563][ C0] tomoyo_check_open_permission+0x1eb/0x410 [ 107.196478][ C0] ? tomoyo_check_path_number_acl+0x280/0x280 [ 107.202549][ C0] ? step_into+0x37b/0xd10 [ 107.207134][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 107.212179][ C0] ? __rwlock_init+0x140/0x140 [ 107.216952][ C0] ? hook_file_open+0xf1/0x230 [ 107.221718][ C0] ? tomoyo_file_open+0xe9/0x170 [ 107.226663][ C0] security_file_open+0x5e/0xa0 [ 107.231521][ C0] do_dentry_open+0x322/0xf80 [ 107.236209][ C0] path_openat+0x26f5/0x2fa0 [ 107.240816][ C0] ? verify_lock_unused+0x140/0x140 [ 107.246016][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 107.251307][ C0] ? do_filp_open+0x410/0x410 [ 107.255993][ C0] do_filp_open+0x1e2/0x410 [ 107.260496][ C0] ? vfs_tmpfile+0x300/0x300 [ 107.265105][ C0] ? _raw_spin_unlock+0x24/0x40 [ 107.269963][ C0] ? alloc_fd+0x598/0x630 [ 107.274306][ C0] do_sys_openat2+0x150/0x4b0 [ 107.278999][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 107.285166][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 107.290375][ C0] ? do_sys_open+0xe0/0xe0 [ 107.294808][ C0] ? __x64_sys_openat+0x10a/0x160 [ 107.299836][ C0] __x64_sys_openat+0x135/0x160 [ 107.304691][ C0] do_syscall_64+0x4c/0xa0 [ 107.309105][ C0] ? clear_bhb_loop+0x30/0x80 [ 107.313785][ C0] ? clear_bhb_loop+0x30/0x80 [ 107.318461][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.324357][ C0] RIP: 0033:0x7f4bf93f3407 [ 107.328775][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 107.348376][ C0] RSP: 002b:00007ffda680ea40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 107.356790][ C0] RAX: ffffffffffffffda RBX: 00007f4bf9305880 RCX: 00007f4bf93f3407 [ 107.364760][ C0] RDX: 0000000000080000 RSI: 00007ffda680ebb0 RDI: ffffffffffffff9c [ 107.372727][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 107.380695][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555a498807f5 [ 107.388759][ C0] R13: 0000555a498807f5 R14: 0000000000000001 R15: 0000555a4989b140 [ 107.396740][ C0] [ 107.400102][ C0] Kernel Offset: disabled [ 107.405268][ C0] Rebooting in 86400 seconds..