Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts.
2026/05/12 04:18:01 parsed 1 programs
[ 70.328933][ T4198] cgroup: Unknown subsys name 'net'
[ 70.440094][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.274202][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.280878][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.013801][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.469892][ T4239] chnl_net:caif_netlink_parms(): no params data found
[ 74.533475][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.541338][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.549530][ T4239] device bridge_slave_0 entered promiscuous mode
[ 74.559571][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.566775][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.575130][ T4239] device bridge_slave_1 entered promiscuous mode
[ 74.601370][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.612839][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.640687][ T4239] team0: Port device team_slave_0 added
[ 74.648774][ T4239] team0: Port device team_slave_1 added
[ 74.670618][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.677605][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.703610][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.716689][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.723778][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.750155][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.790940][ T4239] device hsr_slave_0 entered promiscuous mode
[ 74.797844][ T4239] device hsr_slave_1 entered promiscuous mode
[ 74.933172][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.946201][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.956541][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.966456][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.996951][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.004278][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.012445][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.019550][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.081815][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.096611][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.108504][ T308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.117168][ T308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.126592][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 75.141487][ T4239] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.154041][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.163265][ T308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.170392][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.190946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.201548][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.208633][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.233918][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.244897][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.253763][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.262142][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.275375][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.284904][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.404402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.412528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.426952][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.452960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 75.463189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.484794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 75.495722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.507781][ T4239] device veth0_vlan entered promiscuous mode
[ 75.524694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.532681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.546986][ T4239] device veth1_vlan entered promiscuous mode
[ 75.573885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.583759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.592137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.601715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.613879][ T4239] device veth0_macvtap entered promiscuous mode
[ 75.625472][ T4239] device veth1_macvtap entered promiscuous mode
[ 75.644222][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.654587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.663246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.671641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.680628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.693987][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.701831][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.712141][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.725177][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.734841][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.744092][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.753947][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.074842][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.295398][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.305922][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.318331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.336523][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.344938][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.353345][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.136547][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.436244][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.477436][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/12 04:18:14 executed programs: 0
[ 81.643460][ T4329] chnl_net:caif_netlink_parms(): no params data found
[ 81.708273][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.716202][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.726870][ T4329] device bridge_slave_0 entered promiscuous mode
[ 81.737026][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.746638][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.756116][ T4329] device bridge_slave_1 entered promiscuous mode
[ 81.773428][ T154] device hsr_slave_0 left promiscuous mode
[ 81.780752][ T154] device hsr_slave_1 left promiscuous mode
[ 81.787387][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.797480][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.807384][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 81.817799][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 81.825988][ T154] device bridge_slave_1 left promiscuous mode
[ 81.835645][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.855335][ T154] device bridge_slave_0 left promiscuous mode
[ 81.861806][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.885902][ T154] device veth1_macvtap left promiscuous mode
[ 81.893254][ T154] device veth0_macvtap left promiscuous mode
[ 81.899375][ T154] device veth1_vlan left promiscuous mode
[ 81.906462][ T154] device veth0_vlan left promiscuous mode
[ 82.115455][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 82.129270][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 82.144332][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.158600][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.216745][ T154] bond0 (unregistering): Released all slaves
[ 82.298808][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.313763][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.342734][ T4329] team0: Port device team_slave_0 added
[ 82.351050][ T4329] team0: Port device team_slave_1 added
[ 82.375785][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.385585][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.414919][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.427762][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.437873][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.466459][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.504635][ T4329] device hsr_slave_0 entered promiscuous mode
[ 82.514633][ T4329] device hsr_slave_1 entered promiscuous mode
[ 83.197011][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.213240][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.230098][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.240970][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.378570][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.409432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 83.418651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 83.447044][ T4329] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.460059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 83.483499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 83.500771][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.507922][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.526016][ T3575] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.526503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 83.550858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 83.561785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 83.570693][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.577793][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.589618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 83.613166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 83.622854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 83.633814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 83.645179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 83.655594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 83.665725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 83.675865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 83.690224][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 83.703588][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 83.713415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 83.725700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 83.736234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 83.939690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 83.954292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 83.973593][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.022885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 84.035998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 84.058034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 84.083169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 84.092251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 84.112884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 84.133376][ T4329] device veth0_vlan entered promiscuous mode
[ 84.156809][ T4329] device veth1_vlan entered promiscuous mode
[ 84.202954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 84.220994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 84.239455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 84.248943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 84.260629][ T4329] device veth0_macvtap entered promiscuous mode
[ 84.271632][ T4329] device veth1_macvtap entered promiscuous mode
[ 84.290949][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.298343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 84.308570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 84.317171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 84.326264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 84.339434][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.348458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 84.357977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 84.370018][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.390541][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.399372][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.413138][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.506411][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.532334][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.570443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 84.619197][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.645491][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.657461][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 84.855849][ C1] ------------[ cut here ]------------
[ 84.855863][ C1] WARNING: CPU: 1 PID: 4427 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0
[ 84.855913][ C1] Modules linked in:
[ 84.855935][ C1] CPU: 1 PID: 4427 Comm: syz.0.17 Not tainted syzkaller #0
[ 84.855956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 84.855973][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[ 84.855997][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 90 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 8d d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[ 84.856013][ C1] RSP: 0018:fffffe000005d960 EFLAGS: 00010006
[ 84.856030][ C1] RAX: ffffffff81a0a790 RBX: 0000000000000008 RCX: ffff888072408000
[ 84.856044][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000
[ 84.856056][ C1] RBP: 0000000000000000 R08: fffffe000005d8ff R09: fffffe000005d8d8
[ 84.856069][ C1] R10: dffffc0000000000 R11: fffffbc00000bb20 R12: ffff888072409788
[ 84.856083][ C1] R13: ffffc90001248030 R14: fffffe000005d9c8 R15: 0000000000000000
[ 84.856097][ C1] FS: 0000555581089500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 84.856115][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 84.856128][ C1] CR2: 0000000000000000 CR3: 0000000079e95000 CR4: 00000000003506e0
[ 84.856143][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[ 84.856155][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 84.856167][ C1] Call Trace:
[ 84.856173][ C1] <#DB>
[ 84.856182][ C1] bpf_probe_read_user+0x26/0x70
[ 84.856223][ C1] bpf_prog_a80a2db5f03b572f+0x3d/0x70c
[ 84.856242][ C1] bpf_overflow_handler+0x1c2/0x4a0
[ 84.856287][ C1] ? perf_event_switch_output+0x730/0x730
[ 84.856315][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 84.856338][ C1] __perf_event_overflow+0x364/0x530
[ 84.856363][ C1] perf_bp_event+0x276/0x320
[ 84.856386][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 84.856424][ C1] ? rcu_lock_acquire+0x9/0x30
[ 84.856446][ C1] ? read_lock_is_recursive+0x10/0x10
[ 84.856482][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 84.856507][ C1] atomic_notifier_call_chain+0x15d/0x280
[ 84.856533][ C1] notify_die+0x141/0x1a0
[ 84.856555][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 84.856580][ C1] ? exc_debug+0x6e/0x130
[ 84.856601][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0
[ 84.856625][ C1] notify_debug+0x20/0x30
[ 84.856647][ C1] exc_debug+0xcf/0x130
[ 84.856669][ C1] asm_exc_debug+0x1a/0x40
[ 84.856688][ C1] RIP: 0010:strncpy_from_user+0x167/0x360
[ 84.856712][ C1] Code: 4f a1 75 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd 4f 8b 3c 2f <48> b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 f7 d6 48 b8
[ 84.856729][ C1] RSP: 0018:ffffc9000323fd28 EFLAGS: 00040246
[ 84.856746][ C1] RAX: ffffffff84039721 RBX: ffff88807d946620 RCX: ffff888072408000
[ 84.856761][ C1] RDX: 0000000000000000 RSI: 0000000000000fe0 RDI: 0000000000000007
[ 84.856773][ C1] RBP: ffff88807d946620 R08: 0000000000000fe0 R09: 0000000000000020
[ 84.856786][ C1] R10: dffffc0000000000 R11: fffff940003eca01 R12: 0000000000000fe0
[ 84.856799][ C1] R13: 0000000000000000 R14: 0000000000000fe0 R15: 652e70756f726763
[ 84.856817][ C1] ? strncpy_from_user+0x141/0x360
[ 84.856841][ C1] #DB>
[ 84.856847][ C1]
[ 84.856856][ C1] getname_flags+0xef/0x500
[ 84.856879][ C1] do_sys_openat2+0xdd/0x4b0
[ 84.856898][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 84.856923][ C1] ? do_sys_open+0xe0/0xe0
[ 84.856941][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 84.856967][ C1] ? lock_chain_count+0x20/0x20
[ 84.856989][ C1] ? vtime_user_exit+0x2c8/0x3e0
[ 84.857013][ C1] __x64_sys_openat+0x135/0x160
[ 84.857034][ C1] do_syscall_64+0x4c/0xa0
[ 84.857052][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.857071][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.857091][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.857112][ C1] RIP: 0033:0x7f331a9a5dd9
[ 84.857128][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.857144][ C1] RSP: 002b:00007ffd0fd62ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.857164][ C1] RAX: ffffffffffffffda RBX: 00007f331ac1efa0 RCX: 00007f331a9a5dd9
[ 84.857179][ C1] RDX: 000000000000275a RSI: 0000200000000300 RDI: ffffffffffffffff
[ 84.857194][ C1] RBP: 00007f331aa3bd69 R08: 0000000000000000 R09: 0000000000000000
[ 84.857206][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.857217][ C1] R13: 00007f331ac1efac R14: 00007f331ac1efa0 R15: 00007f331ac1efa0
[ 84.857242][ C1]
[ 84.857256][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 84.857265][ C1] CPU: 1 PID: 4427 Comm: syz.0.17 Not tainted syzkaller #0
[ 84.857285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 84.857295][ C1] Call Trace:
[ 84.857301][ C1] <#DB>
[ 84.857307][ C1] dump_stack_lvl+0x188/0x250
[ 84.857329][ C1] ? show_regs_print_info+0x20/0x20
[ 84.857349][ C1] ? load_image+0x400/0x400
[ 84.857375][ C1] panic+0x2e5/0x810
[ 84.857413][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 84.857441][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.857464][ C1] __warn+0x248/0x2b0
[ 84.857492][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.857514][ C1] report_bug+0x1b7/0x2e0
[ 84.857540][ C1] handle_bug+0x3a/0x70
[ 84.857558][ C1] exc_invalid_op+0x16/0x40
[ 84.857577][ C1] asm_exc_invalid_op+0x16/0x20
[ 84.857595][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[ 84.857618][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 90 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 8d d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[ 84.857633][ C1] RSP: 0018:fffffe000005d960 EFLAGS: 00010006
[ 84.857649][ C1] RAX: ffffffff81a0a790 RBX: 0000000000000008 RCX: ffff888072408000
[ 84.857663][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000
[ 84.857674][ C1] RBP: 0000000000000000 R08: fffffe000005d8ff R09: fffffe000005d8d8
[ 84.857687][ C1] R10: dffffc0000000000 R11: fffffbc00000bb20 R12: ffff888072409788
[ 84.857702][ C1] R13: ffffc90001248030 R14: fffffe000005d9c8 R15: 0000000000000000
[ 84.857720][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.857748][ C1] bpf_probe_read_user+0x26/0x70
[ 84.857770][ C1] bpf_prog_a80a2db5f03b572f+0x3d/0x70c
[ 84.857786][ C1] bpf_overflow_handler+0x1c2/0x4a0
[ 84.857810][ C1] ? perf_event_switch_output+0x730/0x730
[ 84.857834][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 84.857856][ C1] __perf_event_overflow+0x364/0x530
[ 84.857880][ C1] perf_bp_event+0x276/0x320
[ 84.857901][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 84.857935][ C1] ? rcu_lock_acquire+0x9/0x30
[ 84.857955][ C1] ? read_lock_is_recursive+0x10/0x10
[ 84.857982][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 84.858004][ C1] atomic_notifier_call_chain+0x15d/0x280
[ 84.858028][ C1] notify_die+0x141/0x1a0
[ 84.858050][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 84.858074][ C1] ? exc_debug+0x6e/0x130
[ 84.858093][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0
[ 84.858122][ C1] notify_debug+0x20/0x30
[ 84.858162][ C1] exc_debug+0xcf/0x130
[ 84.858183][ C1] asm_exc_debug+0x1a/0x40
[ 84.858202][ C1] RIP: 0010:strncpy_from_user+0x167/0x360
[ 84.858225][ C1] Code: 4f a1 75 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd 4f 8b 3c 2f <48> b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 f7 d6 48 b8
[ 84.858241][ C1] RSP: 0018:ffffc9000323fd28 EFLAGS: 00040246
[ 84.858258][ C1] RAX: ffffffff84039721 RBX: ffff88807d946620 RCX: ffff888072408000
[ 84.858274][ C1] RDX: 0000000000000000 RSI: 0000000000000fe0 RDI: 0000000000000007
[ 84.858286][ C1] RBP: ffff88807d946620 R08: 0000000000000fe0 R09: 0000000000000020
[ 84.858299][ C1] R10: dffffc0000000000 R11: fffff940003eca01 R12: 0000000000000fe0
[ 84.858314][ C1] R13: 0000000000000000 R14: 0000000000000fe0 R15: 652e70756f726763
[ 84.858332][ C1] ? strncpy_from_user+0x141/0x360
[ 84.858357][ C1] #DB>
[ 84.858362][ C1]
[ 84.858372][ C1] getname_flags+0xef/0x500
[ 84.858395][ C1] do_sys_openat2+0xdd/0x4b0
[ 84.858413][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 84.858438][ C1] ? do_sys_open+0xe0/0xe0
[ 84.858456][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 84.858488][ C1] ? lock_chain_count+0x20/0x20
[ 84.858510][ C1] ? vtime_user_exit+0x2c8/0x3e0
[ 84.858534][ C1] __x64_sys_openat+0x135/0x160
[ 84.858555][ C1] do_syscall_64+0x4c/0xa0
[ 84.858574][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.858594][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.858615][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.858636][ C1] RIP: 0033:0x7f331a9a5dd9
[ 84.858651][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.858667][ C1] RSP: 002b:00007ffd0fd62ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.858687][ C1] RAX: ffffffffffffffda RBX: 00007f331ac1efa0 RCX: 00007f331a9a5dd9
[ 84.858702][ C1] RDX: 000000000000275a RSI: 0000200000000300 RDI: ffffffffffffffff
[ 84.858717][ C1] RBP: 00007f331aa3bd69 R08: 0000000000000000 R09: 0000000000000000
[ 84.858730][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.858742][ C1] R13: 00007f331ac1efac R14: 00007f331ac1efa0 R15: 00007f331ac1efa0
[ 84.858766][ C1]
[ 84.858973][ C1] Kernel Offset: disabled
[ 84.858994][ C1]
[ 84.858997][ C1] ================================
[ 84.859000][ C1] WARNING: inconsistent lock state
[ 84.859006][ C1] syzkaller #0 Not tainted
[ 84.859012][ C1] --------------------------------
[ 84.859015][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 84.859020][ C1] syz.0.17/4427 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 84.859034][ C1] ffffffff8c3135f8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0x1c/0xa0
[ 84.859065][ C1] {INITIAL USE} state was registered at:
[ 84.859071][ C1] irq event stamp: 2956
[ 84.859074][ C1] hardirqs last enabled at (2955): [] syscall_enter_from_user_mode+0x21/0x70
[ 84.859094][ C1] hardirqs last disabled at (2956): [] exc_debug+0x6e/0x130
[ 84.859111][ C1] softirqs last enabled at (2892): [] bpf_prog_load+0x10f9/0x1510
[ 84.859129][ C1] softirqs last disabled at (2890): [] bpf_ksym_add+0x29/0x340
[ 84.859144][ C1]
[ 84.859144][ C1] other info that might help us debug this:
[ 84.859148][ C1] Possible unsafe locking scenario:
[ 84.859148][ C1]
[ 84.859150][ C1] CPU0
[ 84.859152][ C1] ----
[ 84.859154][ C1] lock((console_sem).lock);
[ 84.859162][ C1]
[ 84.859164][ C1] lock((console_sem).lock);
[ 84.859171][ C1]
[ 84.859171][ C1] *** DEADLOCK ***
[ 84.859171][ C1]
[ 84.859174][ C1] no locks held by syz.0.17/4427.
[ 84.859179][ C1]
[ 84.859179][ C1] stack backtrace:
[ 84.859182][ C1] CPU: 1 PID: 4427 Comm: syz.0.17 Not tainted syzkaller #0
[ 84.859194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 84.859201][ C1] Call Trace:
[ 84.859205][ C1] <#DB>
[ 84.859209][ C1] dump_stack_lvl+0x188/0x250
[ 84.859226][ C1] ? show_regs_print_info+0x20/0x20
[ 84.859243][ C1] ? print_usage_bug+0x42a/0x690
[ 84.859256][ C1] ? verify_lock_unused+0x18/0x140
[ 84.859272][ C1] lock_acquire+0x2c3/0x400
[ 84.859289][ C1] ? down_trylock+0x1c/0xa0
[ 84.859305][ C1] ? read_lock_is_recursive+0x10/0x10
[ 84.859325][ C1] _raw_spin_lock_irqsave+0xb0/0x100
[ 84.859338][ C1] ? down_trylock+0x1c/0xa0
[ 84.859352][ C1] ? _raw_spin_lock+0x40/0x40
[ 84.859364][ C1] ? verify_lock_unused+0x18/0x140
[ 84.859382][ C1] down_trylock+0x1c/0xa0
[ 84.859397][ C1] __down_trylock_console_sem+0xd4/0x1f0
[ 84.859411][ C1] ? is_console_locked+0x5/0x10
[ 84.859423][ C1] ? panic+0x37b/0x810
[ 84.859438][ C1] ? console_trylock+0x70/0x70
[ 84.859450][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 84.859470][ C1] ? give_up_console+0x20/0x20
[ 84.859489][ C1] console_unblank+0x28/0x180
[ 84.859502][ C1] panic+0x37b/0x810
[ 84.859518][ C1] ? bpf_jit_dump+0xd0/0xd0
[ 84.859536][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.859552][ C1] __warn+0x248/0x2b0
[ 84.859566][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.859582][ C1] report_bug+0x1b7/0x2e0
[ 84.859599][ C1] handle_bug+0x3a/0x70
[ 84.859611][ C1] exc_invalid_op+0x16/0x40
[ 84.859625][ C1] asm_exc_invalid_op+0x16/0x20
[ 84.859638][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[ 84.859653][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 90 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 8d d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[ 84.859664][ C1] RSP: 0018:fffffe000005d960 EFLAGS: 00010006
[ 84.859675][ C1] RAX: ffffffff81a0a790 RBX: 0000000000000008 RCX: ffff888072408000
[ 84.859684][ C1] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000
[ 84.859692][ C1] RBP: 0000000000000000 R08: fffffe000005d8ff R09: fffffe000005d8d8
[ 84.859702][ C1] R10: dffffc0000000000 R11: fffffbc00000bb20 R12: ffff888072409788
[ 84.859712][ C1] R13: ffffc90001248030 R14: fffffe000005d9c8 R15: 0000000000000000
[ 84.859723][ C1] ? copy_from_user_nofault+0x160/0x1c0
[ 84.859742][ C1] bpf_probe_read_user+0x26/0x70
[ 84.859758][ C1] bpf_prog_a80a2db5f03b572f+0x3d/0x70c
[ 84.859769][ C1] bpf_overflow_handler+0x1c2/0x4a0
[ 84.859791][ C1] ? perf_event_switch_output+0x730/0x730
[ 84.859809][ C1] ? __perf_event_account_interrupt+0x187/0x280
[ 84.859824][ C1] __perf_event_overflow+0x364/0x530
[ 84.859840][ C1] perf_bp_event+0x276/0x320
[ 84.859855][ C1] ? perf_event_free_bpf_prog+0x110/0x110
[ 84.859878][ C1] ? rcu_lock_acquire+0x9/0x30
[ 84.859892][ C1] ? read_lock_is_recursive+0x10/0x10
[ 84.859911][ C1] hw_breakpoint_exceptions_notify+0x152/0x470
[ 84.859926][ C1] atomic_notifier_call_chain+0x15d/0x280
[ 84.859942][ C1] notify_die+0x141/0x1a0
[ 84.859956][ C1] ? srcu_init_notifier_head+0x90/0x90
[ 84.859973][ C1] ? exc_debug+0x6e/0x130
[ 84.859986][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0
[ 84.860001][ C1] notify_debug+0x20/0x30
[ 84.860015][ C1] exc_debug+0xcf/0x130
[ 84.860029][ C1] asm_exc_debug+0x1a/0x40
[ 84.860041][ C1] RIP: 0010:strncpy_from_user+0x167/0x360
[ 84.860056][ C1] Code: 4f a1 75 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd 4f 8b 3c 2f <48> b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 f7 d6 48 b8
[ 84.860066][ C1] RSP: 0018:ffffc9000323fd28 EFLAGS: 00040246
[ 84.860076][ C1] RAX: ffffffff84039721 RBX: ffff88807d946620 RCX: ffff888072408000
[ 84.860087][ C1] RDX: 0000000000000000 RSI: 0000000000000fe0 RDI: 0000000000000007
[ 84.860094][ C1] RBP: ffff88807d946620 R08: 0000000000000fe0 R09: 0000000000000020
[ 84.860103][ C1] R10: dffffc0000000000 R11: fffff940003eca01 R12: 0000000000000fe0
[ 84.860143][ C1] R13: 0000000000000000 R14: 0000000000000fe0 R15: 652e70756f726763
[ 84.860154][ C1] ? strncpy_from_user+0x141/0x360
[ 84.860170][ C1] #DB>
[ 84.860174][ C1]
[ 84.860180][ C1] getname_flags+0xef/0x500
[ 84.860194][ C1] do_sys_openat2+0xdd/0x4b0
[ 84.860206][ C1] ? __lock_acquire+0x7d10/0x7d10
[ 84.860225][ C1] ? do_sys_open+0xe0/0xe0
[ 84.860237][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 84.860254][ C1] ? lock_chain_count+0x20/0x20
[ 84.860269][ C1] ? vtime_user_exit+0x2c8/0x3e0
[ 84.860284][ C1] __x64_sys_openat+0x135/0x160
[ 84.860298][ C1] do_syscall_64+0x4c/0xa0
[ 84.860311][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.860324][ C1] ? clear_bhb_loop+0x30/0x80
[ 84.860338][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.860352][ C1] RIP: 0033:0x7f331a9a5dd9
[ 84.860362][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.860372][ C1] RSP: 002b:00007ffd0fd62ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.860385][ C1] RAX: ffffffffffffffda RBX: 00007f331ac1efa0 RCX: 00007f331a9a5dd9
[ 84.860394][ C1] RDX: 000000000000275a RSI: 0000200000000300 RDI: ffffffffffffffff
[ 84.860404][ C1] RBP: 00007f331aa3bd69 R08: 0000000000000000 R09: 0000000000000000
[ 84.860412][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 84.860420][ C1] R13: 00007f331ac1efac R14: 00007f331ac1efa0 R15: 00007f331ac1efa0
[ 84.860434][ C1]