Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts.
2026/05/21 10:29:43 parsed 1 programs
syzkaller login: [ 70.550033][ T4200] cgroup: Unknown subsys name 'net'
[ 70.692771][ T4200] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.358884][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.365435][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.219548][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 73.939728][ T4223] chnl_net:caif_netlink_parms(): no params data found
[ 73.993773][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.001533][ T4223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.009787][ T4223] device bridge_slave_0 entered promiscuous mode
[ 74.022812][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.030151][ T4223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.038477][ T4223] device bridge_slave_1 entered promiscuous mode
[ 74.063056][ T4223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.074253][ T4223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.098733][ T4223] team0: Port device team_slave_0 added
[ 74.106495][ T4223] team0: Port device team_slave_1 added
[ 74.127628][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.134609][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.160814][ T4223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.173615][ T4223] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.180675][ T4223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.207339][ T4223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.243636][ T4223] device hsr_slave_0 entered promiscuous mode
[ 74.250701][ T4223] device hsr_slave_1 entered promiscuous mode
[ 74.391572][ T4223] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.404995][ T4223] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.417732][ T4223] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.428145][ T4223] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.460786][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.468108][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.476591][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.483820][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.551052][ T4223] 8021q: adding VLAN 0 to HW filter on device bond0
[ 74.567849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 74.580392][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.596717][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.607440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 74.623481][ T4223] 8021q: adding VLAN 0 to HW filter on device team0
[ 74.636664][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 74.645330][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.652489][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.665508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 74.674262][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.681463][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.708185][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 74.718045][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 74.747202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 74.757739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 74.778327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 74.797880][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 74.932258][ T4223] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.940761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 74.948933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 74.975028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 74.986277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.009464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 75.020402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.032325][ T4223] device veth0_vlan entered promiscuous mode
[ 75.042399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.051517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.065100][ T4223] device veth1_vlan entered promiscuous mode
[ 75.092931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.105153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.114219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.124231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.136021][ T4223] device veth0_macvtap entered promiscuous mode
[ 75.149151][ T4223] device veth1_macvtap entered promiscuous mode
[ 75.170691][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.178697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.188754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.204399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.215464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.228673][ T4223] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.237916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.248357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.261388][ T4223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.272038][ T4223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.284309][ T4223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.293903][ T4223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.898939][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.250113][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.262110][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.273700][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.294063][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.301979][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.310426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.373444][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.401815][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.463316][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.464800][ T154] device hsr_slave_0 left promiscuous mode
[ 81.486627][ T154] device hsr_slave_1 left promiscuous mode
[ 81.506436][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.514112][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.539040][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 81.556955][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 81.572176][ T154] device bridge_slave_1 left promiscuous mode
[ 81.583908][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.629442][ T154] device bridge_slave_0 left promiscuous mode
[ 81.635837][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.671545][ T154] device veth1_macvtap left promiscuous mode
[ 81.679109][ T154] device veth0_macvtap left promiscuous mode
[ 81.685264][ T154] device veth1_vlan left promiscuous mode
[ 81.693052][ T154] device veth0_vlan left promiscuous mode
[ 81.948933][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 81.966011][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 81.987978][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.007344][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.095125][ T154] bond0 (unregistering): Released all slaves
2026/05/21 10:29:58 executed programs: 0
[ 83.328721][ T4346] chnl_net:caif_netlink_parms(): no params data found
[ 83.459093][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.466460][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.487212][ T4346] device bridge_slave_0 entered promiscuous mode
[ 83.507057][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.514253][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.538684][ T4346] device bridge_slave_1 entered promiscuous mode
[ 83.594856][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.609030][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.642457][ T4346] team0: Port device team_slave_0 added
[ 83.652320][ T4346] team0: Port device team_slave_1 added
[ 83.684801][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.693153][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.719348][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.742475][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.751410][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.778318][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.824689][ T4346] device hsr_slave_0 entered promiscuous mode
[ 83.832008][ T4346] device hsr_slave_1 entered promiscuous mode
[ 84.489492][ T4346] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.506434][ T4346] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.522815][ T4346] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.535767][ T4346] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.635849][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.661913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.678335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.693736][ T4346] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.709763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.719248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.727861][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.735057][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.752365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.769452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.779174][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.786394][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.802558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.814416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.834314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 84.846467][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 84.865232][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 84.874131][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 84.893860][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 84.904265][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 84.919210][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 84.940942][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 84.953764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 84.966624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 84.984314][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.153452][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.173261][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.204460][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.213276][ T4398] Bluetooth: hci0: command 0x0409 tx timeout
[ 85.243000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.253615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.278190][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.288329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.298974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 85.307803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 85.321177][ T4346] device veth0_vlan entered promiscuous mode
[ 85.335420][ T4346] device veth1_vlan entered promiscuous mode
[ 85.362170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 85.371785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.387663][ T4346] device veth0_macvtap entered promiscuous mode
[ 85.400036][ T4346] device veth1_macvtap entered promiscuous mode
[ 85.421900][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.430143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.439814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.449887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.459322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.472685][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.484121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.493263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 85.507410][ T4346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.525406][ T4346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.534823][ T4346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.543665][ T4346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.616688][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.624581][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.643948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 85.673170][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.682888][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.694043][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 85.748273][ T4426] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 85.886705][ T4426] ------------[ cut here ]------------
[ 85.892507][ T4426] WARNING: CPU: 0 PID: 4426 at arch/x86/kvm/vmx/vmx.c:1714 vmx_queue_exception+0x2b9/0x470
[ 85.904913][ T4426] Modules linked in:
[ 85.909196][ T4426] CPU: 0 PID: 4426 Comm: syz.0.17 Not tainted syzkaller #0
[ 85.918207][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 85.928800][ T4426] RIP: 0010:vmx_queue_exception+0x2b9/0x470
[ 85.934850][ T4426] Code: 01 00 00 e8 d9 92 58 00 eb 0c e8 d2 92 58 00 eb 05 e8 cb 92 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 92 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 3e
[ 85.956606][ T4426] RSP: 0018:ffffc9000339f590 EFLAGS: 00010293
[ 85.962891][ T4426] RAX: ffffffff8120a359 RBX: ffff88807e3ac000 RCX: ffff888022b95940
[ 85.971352][ T4426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 85.987308][ T4426] RBP: 0000000000000000 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05
[ 85.995375][ T4426] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: ffff88807e3ae6fc
[ 86.005885][ T4426] R13: dffffc0000000000 R14: 000000000000000f R15: 000000008000080f
[ 86.013937][ T4426] FS: 000055558b781500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 86.024633][ T4426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.032338][ T4426] CR2: 00007f5d07dc97e8 CR3: 000000002a9a5000 CR4: 00000000003526f0
[ 86.042097][ T4426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 86.050565][ T4426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 86.060938][ T4426] Call Trace:
[ 86.064320][ T4426]
[ 86.069120][ T4426] ? kvm_inject_exception+0x15f/0x320
[ 86.074790][ T4426] vcpu_enter_guest+0x849/0x7010
[ 86.087426][ T4426] ? __lock_acquire+0x7d10/0x7d10
[ 86.092554][ T4426] ? local_bh_enable+0x20/0x20
[ 86.098727][ T4426] ? is_bpf_text_address+0x254/0x270
[ 86.104103][ T4426] ? __kernel_text_address+0x9a/0x100
[ 86.111050][ T4426] ? mark_lock+0x94/0x320
[ 86.115447][ T4426] ? __lock_acquire+0x13bc/0x7d10
[ 86.121055][ T4426] ? kfree+0xef/0x2a0
[ 86.125242][ T4426] ? mark_lock+0x94/0x320
[ 86.131170][ T4426] ? __lock_acquire+0x12e8/0x7d10
[ 86.136605][ T4426] ? kasan_set_track+0x62/0x70
[ 86.141427][ T4426] ? kasan_set_track+0x4b/0x70
[ 86.147878][ T4426] ? security_file_ioctl+0x6c/0xa0
[ 86.153174][ T4426] ? verify_lock_unused+0x140/0x140
[ 86.159118][ T4426] ? mark_lock+0x94/0x320
[ 86.163522][ T4426] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 86.175824][ T4426] ? __vmx_interrupt_blocked+0x192/0x1e0
[ 86.184676][ T4426] ? vmx_check_nested_events+0xcfa/0x2390
[ 86.192108][ T4426] ? __local_bh_enable_ip+0x136/0x1c0
[ 86.197833][ T4426] ? read_lock_is_recursive+0x10/0x10
[ 86.203397][ T4426] ? handle_vmfunc+0xfb0/0xfb0
[ 86.213106][ T4426] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40
[ 86.219109][ T4426] kvm_vcpu_ioctl+0x8f7/0xc10
[ 86.223862][ T4426] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[ 86.231176][ T4426] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 86.239129][ T4426] ? lock_chain_count+0x20/0x20
[ 86.244170][ T4426] ? bpf_lsm_file_ioctl+0x5/0x10
[ 86.250640][ T4426] ? security_file_ioctl+0x7c/0xa0
[ 86.256159][ T4426] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[ 86.261936][ T4426] __se_sys_ioctl+0xfa/0x170
[ 86.268563][ T4426] do_syscall_64+0x4c/0xa0
[ 86.273039][ T4426] ? clear_bhb_loop+0x30/0x80
[ 86.278174][ T4426] ? clear_bhb_loop+0x30/0x80
[ 86.284090][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.291446][ T4426] RIP: 0033:0x7fd3a2c9be59
[ 86.296292][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.321622][ T4426] RSP: 002b:00007ffedd904448 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.330463][ T4426] RAX: ffffffffffffffda RBX: 00007fd3a2f14fa0 RCX: 00007fd3a2c9be59
[ 86.340016][ T4426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 86.348398][ T4426] RBP: 00007fd3a2d31d6f R08: 0000000000000000 R09: 0000000000000000
[ 86.366384][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.374432][ T4426] R13: 00007fd3a2f14fac R14: 00007fd3a2f14fa0 R15: 00007fd3a2f14fa0
[ 86.385919][ T4426]
[ 86.389024][ T4426] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.396426][ T4426] CPU: 1 PID: 4426 Comm: syz.0.17 Not tainted syzkaller #0
[ 86.403662][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 86.414192][ T4426] Call Trace:
[ 86.417521][ T4426]
[ 86.420518][ T4426] dump_stack_lvl+0x188/0x250
[ 86.425323][ T4426] ? show_regs_print_info+0x20/0x20
[ 86.430565][ T4426] ? load_image+0x400/0x400
[ 86.435169][ T4426] panic+0x2e5/0x810
[ 86.439144][ T4426] ? bpf_jit_dump+0xd0/0xd0
[ 86.443706][ T4426] ? vmx_queue_exception+0x2b9/0x470
[ 86.449035][ T4426] __warn+0x248/0x2b0
[ 86.453063][ T4426] ? vmx_queue_exception+0x2b9/0x470
[ 86.458391][ T4426] report_bug+0x1b7/0x2e0
[ 86.462771][ T4426] handle_bug+0x3a/0x70
[ 86.467408][ T4426] exc_invalid_op+0x16/0x40
[ 86.471960][ T4426] asm_exc_invalid_op+0x16/0x20
[ 86.476855][ T4426] RIP: 0010:vmx_queue_exception+0x2b9/0x470
[ 86.482799][ T4426] Code: 01 00 00 e8 d9 92 58 00 eb 0c e8 d2 92 58 00 eb 05 e8 cb 92 58 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 92 58 00 <0f> 0b e9 a7 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 6e fd ff ff e8 3e
[ 86.502643][ T4426] RSP: 0018:ffffc9000339f590 EFLAGS: 00010293
[ 86.508765][ T4426] RAX: ffffffff8120a359 RBX: ffff88807e3ac000 RCX: ffff888022b95940
[ 86.516795][ T4426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 86.524819][ T4426] RBP: 0000000000000000 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05
[ 86.532932][ T4426] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: ffff88807e3ae6fc
[ 86.541046][ T4426] R13: dffffc0000000000 R14: 000000000000000f R15: 000000008000080f
[ 86.549079][ T4426] ? vmx_queue_exception+0x2b9/0x470
[ 86.554424][ T4426] ? kvm_inject_exception+0x15f/0x320
[ 86.559852][ T4426] vcpu_enter_guest+0x849/0x7010
[ 86.564936][ T4426] ? __lock_acquire+0x7d10/0x7d10
[ 86.570121][ T4426] ? local_bh_enable+0x20/0x20
[ 86.574953][ T4426] ? is_bpf_text_address+0x254/0x270
[ 86.580291][ T4426] ? __kernel_text_address+0x9a/0x100
[ 86.585812][ T4426] ? mark_lock+0x94/0x320
[ 86.590197][ T4426] ? __lock_acquire+0x13bc/0x7d10
[ 86.595278][ T4426] ? kfree+0xef/0x2a0
[ 86.599320][ T4426] ? mark_lock+0x94/0x320
[ 86.604022][ T4426] ? __lock_acquire+0x12e8/0x7d10
[ 86.609208][ T4426] ? kasan_set_track+0x62/0x70
[ 86.614118][ T4426] ? kasan_set_track+0x4b/0x70
[ 86.618944][ T4426] ? security_file_ioctl+0x6c/0xa0
[ 86.624190][ T4426] ? verify_lock_unused+0x140/0x140
[ 86.629487][ T4426] ? mark_lock+0x94/0x320
[ 86.633866][ T4426] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 86.640169][ T4426] ? __vmx_interrupt_blocked+0x192/0x1e0
[ 86.645854][ T4426] ? vmx_check_nested_events+0xcfa/0x2390
[ 86.651628][ T4426] ? __local_bh_enable_ip+0x136/0x1c0
[ 86.657149][ T4426] ? read_lock_is_recursive+0x10/0x10
[ 86.663094][ T4426] ? handle_vmfunc+0xfb0/0xfb0
[ 86.667944][ T4426] kvm_arch_vcpu_ioctl_run+0xdea/0x1f40
[ 86.673565][ T4426] kvm_vcpu_ioctl+0x8f7/0xc10
[ 86.678306][ T4426] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[ 86.684004][ T4426] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 86.690052][ T4426] ? lock_chain_count+0x20/0x20
[ 86.694967][ T4426] ? bpf_lsm_file_ioctl+0x5/0x10
[ 86.699951][ T4426] ? security_file_ioctl+0x7c/0xa0
[ 86.705586][ T4426] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[ 86.711277][ T4426] __se_sys_ioctl+0xfa/0x170
[ 86.715924][ T4426] do_syscall_64+0x4c/0xa0
[ 86.720387][ T4426] ? clear_bhb_loop+0x30/0x80
[ 86.725204][ T4426] ? clear_bhb_loop+0x30/0x80
[ 86.729926][ T4426] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.735867][ T4426] RIP: 0033:0x7fd3a2c9be59
[ 86.740324][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.759989][ T4426] RSP: 002b:00007ffedd904448 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.768451][ T4426] RAX: ffffffffffffffda RBX: 00007fd3a2f14fa0 RCX: 00007fd3a2c9be59
[ 86.776469][ T4426] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 86.784659][ T4426] RBP: 00007fd3a2d31d6f R08: 0000000000000000 R09: 0000000000000000
[ 86.792695][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.801607][ T4426] R13: 00007fd3a2f14fac R14: 00007fd3a2f14fa0 R15: 00007fd3a2f14fa0
[ 86.809646][ T4426]
[ 86.813001][ T4426] Kernel Offset: disabled
[ 86.817474][ T4426] Rebooting in 86400 seconds..