Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. 2026/08/26 19:44:33 parsed 1 programs 2026/08/26 19:44:33 serving rpc on tcp://38671 [ 66.465633][ T4197] cgroup: Unknown subsys name 'net' [ 66.594361][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.090402][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.911722][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 70.981338][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.990396][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.998889][ T4246] device bridge_slave_0 entered promiscuous mode [ 71.009044][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.016191][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.025970][ T4246] device bridge_slave_1 entered promiscuous mode [ 71.052347][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.064688][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.092333][ T4246] team0: Port device team_slave_0 added [ 71.100321][ T4246] team0: Port device team_slave_1 added [ 71.122941][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.129972][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.156376][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.170105][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.177082][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.203347][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.244077][ T4246] device hsr_slave_0 entered promiscuous mode [ 71.251076][ T4246] device hsr_slave_1 entered promiscuous mode [ 71.382464][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.394977][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.405621][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.415727][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.446154][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.453414][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.461622][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.468744][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.479439][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.486001][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.530168][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.545525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.560235][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.570958][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.580138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.596210][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.609847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.618828][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.625907][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.637908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.646655][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.653776][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.674245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.683172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.695537][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.709351][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.725051][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.738685][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.755566][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.885635][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.893318][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.905458][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.922952][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.932305][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.952274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.961108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.970772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.978664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.986429][ T4246] device veth0_vlan entered promiscuous mode [ 71.998350][ T4246] device veth1_vlan entered promiscuous mode [ 72.014930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.024481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.032806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.042820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.053452][ T4246] device veth0_macvtap entered promiscuous mode [ 72.063443][ T4246] device veth1_macvtap entered promiscuous mode [ 72.078799][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.086499][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.095023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.103607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.112652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.124868][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.146705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.155640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.167751][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.177055][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.186935][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.195976][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.709865][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.717886][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.731026][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.769394][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.777269][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.785645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/26 19:44:42 executed programs: 0 [ 73.754156][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 73.825048][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.832324][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.843101][ T4296] device bridge_slave_0 entered promiscuous mode [ 73.852446][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.862144][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.870530][ T4296] device bridge_slave_1 entered promiscuous mode [ 73.903255][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.915785][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.951380][ T4296] team0: Port device team_slave_0 added [ 73.959657][ T4296] team0: Port device team_slave_1 added [ 73.981899][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.989146][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.015470][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.028414][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.035473][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.061704][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.098995][ T4296] device hsr_slave_0 entered promiscuous mode [ 74.106237][ T4296] device hsr_slave_1 entered promiscuous mode [ 74.126039][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.134190][ T4296] Cannot create hsr debugfs directory [ 74.221761][ T4296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.628678][ T4311] Bluetooth: hci0: command 0x0409 tx timeout [ 77.445866][ T4296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.484553][ T4296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.551549][ T4296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.677030][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.687822][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.697018][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.707562][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.714561][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 77.764699][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.776935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.785237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.807275][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.817469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.826212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.834888][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.842002][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.851606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.879477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.888935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.897299][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.904397][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.931172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.944019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.955652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.964814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.974433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.984746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.993793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.019984][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.028755][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.042606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.051064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.061669][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.165818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.174664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.195130][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.221472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.231424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.255830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.266401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.276577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.284784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.295651][ T4296] device veth0_vlan entered promiscuous mode [ 78.320621][ T145] device hsr_slave_0 left promiscuous mode [ 78.326980][ T145] device hsr_slave_1 left promiscuous mode [ 78.333951][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.342172][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.350940][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.359330][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.366857][ T145] device bridge_slave_1 left promiscuous mode [ 78.373872][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.385830][ T145] device bridge_slave_0 left promiscuous mode [ 78.393227][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.410156][ T145] device veth1_macvtap left promiscuous mode [ 78.416339][ T145] device veth0_macvtap left promiscuous mode [ 78.422756][ T145] device veth1_vlan left promiscuous mode [ 78.429286][ T145] device veth0_vlan left promiscuous mode [ 78.576316][ T145] team0 (unregistering): Port device team_slave_1 removed [ 78.591590][ T145] team0 (unregistering): Port device team_slave_0 removed [ 78.604766][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.618038][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.670678][ T145] bond0 (unregistering): Released all slaves [ 78.724650][ T4296] device veth1_vlan entered promiscuous mode [ 78.745702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.753821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.764913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.774251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.786250][ T4296] device veth0_macvtap entered promiscuous mode [ 78.796696][ T4296] device veth1_macvtap entered promiscuous mode [ 78.820166][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.828930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.837551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.852615][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.860365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.869194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.880109][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.889488][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.899111][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.907828][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.992268][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.001545][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.010390][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.027343][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.035321][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.043477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.101382][ C0] ------------[ cut here ]------------ [ 79.101388][ C0] WARNING: CPU: 0 PID: 4319 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 79.101418][ C0] Modules linked in: [ 79.101425][ C0] CPU: 0 PID: 4319 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.101435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.101440][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.101451][ C0] Code: 24 45 31 f6 31 ff 89 de e8 cd 92 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 8f d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.101459][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 79.101466][ C0] RAX: ffffffff81a07050 RBX: 0000000000000008 RCX: ffff88801dd95940 [ 79.101473][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.101479][ C0] RBP: 0000000000000000 R08: ffff88801dd95947 R09: 1ffff11003bb2b28 [ 79.101485][ C0] R10: dffffc0000000000 R11: ffffed1003bb2b29 R12: ffff88801dd970c8 [ 79.101491][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000000000000 [ 79.101497][ C0] FS: 0000555560745500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 79.101505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.101511][ C0] CR2: 0000001b31363fff CR3: 0000000023af5000 CR4: 00000000003506f0 [ 79.101520][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.101526][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 79.101531][ C0] Call Trace: [ 79.101534][ C0] <#DB> [ 79.101539][ C0] bpf_probe_read_compat+0xdd/0x170 [ 79.101552][ C0] bpf_prog_e31a0068e84a1a8d+0x3d/0xb7c [ 79.101561][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 79.101574][ C0] ? perf_event_switch_output+0x730/0x730 [ 79.101586][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 79.101596][ C0] __perf_event_overflow+0x35f/0x550 [ 79.101607][ C0] perf_bp_event+0x276/0x320 [ 79.101617][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 79.101634][ C0] ? rcu_lock_acquire+0x9/0x30 [ 79.101644][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.101658][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 79.101669][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 79.101680][ C0] notify_die+0x141/0x1a0 [ 79.101690][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 79.101701][ C0] ? exc_debug+0x6e/0x130 [ 79.101710][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 79.101721][ C0] notify_debug+0x20/0x30 [ 79.101731][ C0] exc_debug+0xcf/0x130 [ 79.101740][ C0] asm_exc_debug+0x1a/0x40 [ 79.101749][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 79.101759][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 79.101766][ C0] RSP: 0018:ffffc9000321fb78 EFLAGS: 00050206 [ 79.101773][ C0] RAX: ffffffff83e88b01 RBX: 00000000000000a0 RCX: 000000000000001f [ 79.101779][ C0] RDX: 00000000000000a0 RSI: 0000200000000301 RDI: ffffc900010b60c9 [ 79.101785][ C0] RBP: 0000000000000000 R08: ffffc900010b60e7 R09: 1ffff92000216c1c [ 79.101791][ C0] R10: dffffc0000000000 R11: fffff52000216c1d R12: 00007ffffffff000 [ 79.101797][ C0] R13: 0000200000000320 R14: ffffc900010b6048 R15: 0000200000000280 [ 79.101805][ C0] ? _copy_from_user+0xe1/0x170 [ 79.101817][ C0] [ 79.101819][ C0] [ 79.101822][ C0] _copy_from_user+0xfa/0x170 [ 79.101832][ C0] copy_from_bpfptr+0x67/0x80 [ 79.101842][ C0] bpf_prog_load+0xb11/0x14e0 [ 79.101854][ C0] ? map_freeze+0x360/0x360 [ 79.101864][ C0] ? __might_fault+0xb7/0x110 [ 79.101877][ C0] ? __might_fault+0xb3/0x110 [ 79.101886][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 79.101895][ C0] ? security_bpf+0x7a/0xa0 [ 79.101904][ C0] __sys_bpf+0x532/0x6f0 [ 79.101918][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 79.101933][ C0] __x64_sys_bpf+0x78/0x90 [ 79.101942][ C0] do_syscall_64+0x4c/0xa0 [ 79.101950][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.101958][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.101966][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.101975][ C0] RIP: 0033:0x7f56e25e70d9 [ 79.101983][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.101989][ C0] RSP: 002b:00007ffeea9cd1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.101998][ C0] RAX: ffffffffffffffda RBX: 00007f56e286efa0 RCX: 00007f56e25e70d9 [ 79.102004][ C0] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 79.102010][ C0] RBP: 00007f56e267e024 R08: 0000000000000000 R09: 0000000000000000 [ 79.102015][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.102020][ C0] R13: 00007f56e286efac R14: 00007f56e286efa0 R15: 00007f56e286efa0 [ 79.102030][ C0] [ 79.102035][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.102039][ C0] CPU: 0 PID: 4319 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.102047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.102051][ C0] Call Trace: [ 79.102054][ C0] <#DB> [ 79.102057][ C0] dump_stack_lvl+0x188/0x250 [ 79.102068][ C0] ? show_regs_print_info+0x20/0x20 [ 79.102078][ C0] ? load_image+0x410/0x410 [ 79.102091][ C0] panic+0x2f8/0x850 [ 79.102101][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 79.102113][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.102122][ C0] __warn+0x248/0x2b0 [ 79.102131][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.102141][ C0] report_bug+0x1b9/0x2e0 [ 79.102152][ C0] handle_bug+0x3a/0x70 [ 79.102160][ C0] exc_invalid_op+0x16/0x40 [ 79.102169][ C0] asm_exc_invalid_op+0x16/0x20 [ 79.102177][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.102186][ C0] Code: 24 45 31 f6 31 ff 89 de e8 cd 92 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 8f d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.102193][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 79.102200][ C0] RAX: ffffffff81a07050 RBX: 0000000000000008 RCX: ffff88801dd95940 [ 79.102206][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.102211][ C0] RBP: 0000000000000000 R08: ffff88801dd95947 R09: 1ffff11003bb2b28 [ 79.102217][ C0] R10: dffffc0000000000 R11: ffffed1003bb2b29 R12: ffff88801dd970c8 [ 79.102223][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000000000000 [ 79.102231][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.102242][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.102251][ C0] bpf_probe_read_compat+0xdd/0x170 [ 79.102262][ C0] bpf_prog_e31a0068e84a1a8d+0x3d/0xb7c [ 79.102270][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 79.102281][ C0] ? perf_event_switch_output+0x730/0x730 [ 79.102293][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 79.102303][ C0] __perf_event_overflow+0x35f/0x550 [ 79.102313][ C0] perf_bp_event+0x276/0x320 [ 79.102323][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 79.102339][ C0] ? rcu_lock_acquire+0x9/0x30 [ 79.102348][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.102360][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 79.102370][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 79.102380][ C0] notify_die+0x141/0x1a0 [ 79.102389][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 79.102400][ C0] ? exc_debug+0x6e/0x130 [ 79.102408][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 79.102424][ C0] notify_debug+0x20/0x30 [ 79.102433][ C0] exc_debug+0xcf/0x130 [ 79.102442][ C0] asm_exc_debug+0x1a/0x40 [ 79.102449][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 79.102458][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 79.102465][ C0] RSP: 0018:ffffc9000321fb78 EFLAGS: 00050206 [ 79.102471][ C0] RAX: ffffffff83e88b01 RBX: 00000000000000a0 RCX: 000000000000001f [ 79.102477][ C0] RDX: 00000000000000a0 RSI: 0000200000000301 RDI: ffffc900010b60c9 [ 79.102483][ C0] RBP: 0000000000000000 R08: ffffc900010b60e7 R09: 1ffff92000216c1c [ 79.102488][ C0] R10: dffffc0000000000 R11: fffff52000216c1d R12: 00007ffffffff000 [ 79.102494][ C0] R13: 0000200000000320 R14: ffffc900010b6048 R15: 0000200000000280 [ 79.102502][ C0] ? _copy_from_user+0xe1/0x170 [ 79.102517][ C0] [ 79.102519][ C0] [ 79.102522][ C0] _copy_from_user+0xfa/0x170 [ 79.102531][ C0] copy_from_bpfptr+0x67/0x80 [ 79.102541][ C0] bpf_prog_load+0xb11/0x14e0 [ 79.102553][ C0] ? map_freeze+0x360/0x360 [ 79.102562][ C0] ? __might_fault+0xb7/0x110 [ 79.102574][ C0] ? __might_fault+0xb3/0x110 [ 79.102582][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 79.102591][ C0] ? security_bpf+0x7a/0xa0 [ 79.102599][ C0] __sys_bpf+0x532/0x6f0 [ 79.102608][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 79.102623][ C0] __x64_sys_bpf+0x78/0x90 [ 79.102632][ C0] do_syscall_64+0x4c/0xa0 [ 79.102639][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.102647][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.102656][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.102665][ C0] RIP: 0033:0x7f56e25e70d9 [ 79.102671][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.102678][ C0] RSP: 002b:00007ffeea9cd1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.102686][ C0] RAX: ffffffffffffffda RBX: 00007f56e286efa0 RCX: 00007f56e25e70d9 [ 79.102692][ C0] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 79.102698][ C0] RBP: 00007f56e267e024 R08: 0000000000000000 R09: 0000000000000000 [ 79.102703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.102708][ C0] R13: 00007f56e286efac R14: 00007f56e286efa0 R15: 00007f56e286efa0 [ 79.102718][ C0] [ 79.102944][ C0] Kernel Offset: disabled [ 79.102952][ C0] [ 79.102954][ C0] ================================ [ 79.102957][ C0] WARNING: inconsistent lock state [ 79.102959][ C0] syzkaller #0 Not tainted [ 79.102963][ C0] -------------------------------- [ 79.102965][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 79.102969][ C0] syz.0.17/4319 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 79.102978][ C0] ffffffff8c313a38 ((console_sem).lock){....}-{2:2}, at: down_trylock+0x1c/0xa0 [ 79.103000][ C0] {INITIAL USE} state was registered at: [ 79.103003][ C0] irq event stamp: 5522 [ 79.103006][ C0] hardirqs last enabled at (5521): [] pcpu_memcg_post_alloc_hook+0x232/0x3b0 [ 79.103019][ C0] hardirqs last disabled at (5522): [] exc_debug+0x6e/0x130 [ 79.103029][ C0] softirqs last enabled at (5462): [] bpf_prog_load+0x10ee/0x14e0 [ 79.103039][ C0] softirqs last disabled at (5460): [] bpf_ksym_add+0x28/0x330 [ 79.103048][ C0] [ 79.103048][ C0] other info that might help us debug this: [ 79.103051][ C0] Possible unsafe locking scenario: [ 79.103051][ C0] [ 79.103052][ C0] CPU0 [ 79.103054][ C0] ---- [ 79.103055][ C0] lock((console_sem).lock); [ 79.103060][ C0] [ 79.103062][ C0] lock((console_sem).lock); [ 79.103067][ C0] [ 79.103067][ C0] *** DEADLOCK *** [ 79.103067][ C0] [ 79.103069][ C0] no locks held by syz.0.17/4319. [ 79.103072][ C0] [ 79.103072][ C0] stack backtrace: [ 79.103075][ C0] CPU: 0 PID: 4319 Comm: syz.0.17 Not tainted syzkaller #0 [ 79.103083][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.103087][ C0] Call Trace: [ 79.103089][ C0] <#DB> [ 79.103092][ C0] dump_stack_lvl+0x188/0x250 [ 79.103103][ C0] ? show_regs_print_info+0x20/0x20 [ 79.103113][ C0] ? print_usage_bug+0x42a/0x690 [ 79.103121][ C0] ? verify_lock_unused+0x15/0x140 [ 79.103131][ C0] lock_acquire+0x2c3/0x400 [ 79.103141][ C0] ? down_trylock+0x1c/0xa0 [ 79.103150][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.103161][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 79.103170][ C0] ? down_trylock+0x1c/0xa0 [ 79.103178][ C0] ? _raw_spin_lock+0x40/0x40 [ 79.103186][ C0] ? verify_lock_unused+0x15/0x140 [ 79.103196][ C0] down_trylock+0x1c/0xa0 [ 79.103205][ C0] __down_trylock_console_sem+0xd4/0x1f0 [ 79.103215][ C0] ? is_console_locked+0x5/0x10 [ 79.103222][ C0] ? panic+0x395/0x850 [ 79.103230][ C0] ? console_trylock+0x70/0x70 [ 79.103238][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 79.103247][ C0] ? give_up_console+0x20/0x20 [ 79.103258][ C0] console_unblank+0x28/0x180 [ 79.103266][ C0] panic+0x395/0x850 [ 79.103276][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 79.103287][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.103296][ C0] __warn+0x248/0x2b0 [ 79.103305][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.103314][ C0] report_bug+0x1b9/0x2e0 [ 79.103323][ C0] handle_bug+0x3a/0x70 [ 79.103331][ C0] exc_invalid_op+0x16/0x40 [ 79.103339][ C0] asm_exc_invalid_op+0x16/0x20 [ 79.103347][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 79.103357][ C0] Code: 24 45 31 f6 31 ff 89 de e8 cd 92 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 8f d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 79.103364][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 79.103371][ C0] RAX: ffffffff81a07050 RBX: 0000000000000008 RCX: ffff88801dd95940 [ 79.103377][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.103382][ C0] RBP: 0000000000000000 R08: ffff88801dd95947 R09: 1ffff11003bb2b28 [ 79.103388][ C0] R10: dffffc0000000000 R11: ffffed1003bb2b29 R12: ffff88801dd970c8 [ 79.103394][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000000000000 [ 79.103401][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.103417][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 79.103427][ C0] bpf_probe_read_compat+0xdd/0x170 [ 79.103437][ C0] bpf_prog_e31a0068e84a1a8d+0x3d/0xb7c [ 79.103445][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 79.103456][ C0] ? perf_event_switch_output+0x730/0x730 [ 79.103466][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 79.103476][ C0] __perf_event_overflow+0x35f/0x550 [ 79.103485][ C0] perf_bp_event+0x276/0x320 [ 79.103495][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 79.103509][ C0] ? rcu_lock_acquire+0x9/0x30 [ 79.103518][ C0] ? read_lock_is_recursive+0x10/0x10 [ 79.103529][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 79.103538][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 79.103548][ C0] notify_die+0x141/0x1a0 [ 79.103557][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 79.103567][ C0] ? exc_debug+0x6e/0x130 [ 79.103575][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 79.103584][ C0] notify_debug+0x20/0x30 [ 79.103593][ C0] exc_debug+0xcf/0x130 [ 79.103601][ C0] asm_exc_debug+0x1a/0x40 [ 79.103609][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 79.103618][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 79.103625][ C0] RSP: 0018:ffffc9000321fb78 EFLAGS: 00050206 [ 79.103631][ C0] RAX: ffffffff83e88b01 RBX: 00000000000000a0 RCX: 000000000000001f [ 79.103637][ C0] RDX: 00000000000000a0 RSI: 0000200000000301 RDI: ffffc900010b60c9 [ 79.103643][ C0] RBP: 0000000000000000 R08: ffffc900010b60e7 R09: 1ffff92000216c1c [ 79.103648][ C0] R10: dffffc0000000000 R11: fffff52000216c1d R12: 00007ffffffff000 [ 79.103654][ C0] R13: 0000200000000320 R14: ffffc900010b6048 R15: 0000200000000280 [ 79.103661][ C0] ? _copy_from_user+0xe1/0x170 [ 79.103672][ C0] [ 79.103674][ C0] [ 79.103676][ C0] _copy_from_user+0xfa/0x170 [ 79.103686][ C0] copy_from_bpfptr+0x67/0x80 [ 79.103695][ C0] bpf_prog_load+0xb11/0x14e0 [ 79.103706][ C0] ? map_freeze+0x360/0x360 [ 79.103715][ C0] ? __might_fault+0xb7/0x110 [ 79.103726][ C0] ? __might_fault+0xb3/0x110 [ 79.103734][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 79.103742][ C0] ? security_bpf+0x7a/0xa0 [ 79.103750][ C0] __sys_bpf+0x532/0x6f0 [ 79.103759][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 79.103772][ C0] __x64_sys_bpf+0x78/0x90 [ 79.103781][ C0] do_syscall_64+0x4c/0xa0 [ 79.103788][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.103796][ C0] ? clear_bhb_loop+0x30/0x80 [ 79.103804][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.103813][ C0] RIP: 0033:0x7f56e25e70d9 [ 79.103820][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.103826][ C0] RSP: 002b:00007ffeea9cd1b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.103835][ C0] RAX: ffffffffffffffda RBX: 00007f56e286efa0 RCX: 00007f56e25e70d9 [ 79.103840][ C0] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 79.103846][ C0] RBP: 00007f56e267e024 R08: 0000000000000000 R09: 0000000000000000 [ 79.103851][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.103856][ C0] R13: 00007f56e286efac R14: 00007f56e286efa0 R15: 00007f56e286efa0 [ 79.103865][ C0]