Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts.
2025/11/06 18:56:37 parsed 1 programs
syzkaller login: [ 54.191907][ T4189] cgroup: Unknown subsys name 'net'
[ 54.320188][ T4189] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 55.512220][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 57.145803][ T1436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.160004][ T1436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.174897][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 57.177076][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 57.184305][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 57.201055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 57.769115][ T4222] chnl_net:caif_netlink_parms(): no params data found
[ 57.833583][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.842377][ T4222] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.850497][ T4222] device bridge_slave_0 entered promiscuous mode
[ 57.860012][ T4222] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.867178][ T4222] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.875190][ T4222] device bridge_slave_1 entered promiscuous mode
[ 57.902262][ T4222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 57.918497][ T4222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 57.949074][ T4222] team0: Port device team_slave_0 added
[ 57.956705][ T4222] team0: Port device team_slave_1 added
[ 57.982283][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 57.989301][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 58.015472][ T4222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 58.028457][ T4222] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 58.035410][ T4222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 58.061349][ T4222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 58.100080][ T4222] device hsr_slave_0 entered promiscuous mode
[ 58.107005][ T4222] device hsr_slave_1 entered promiscuous mode
[ 58.239415][ T4222] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 58.251243][ T4222] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 58.261696][ T4222] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 58.271279][ T4222] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 58.350540][ T4222] 8021q: adding VLAN 0 to HW filter on device bond0
[ 58.364458][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 58.373093][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 58.385683][ T4222] 8021q: adding VLAN 0 to HW filter on device team0
[ 58.396223][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 58.406348][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 58.416170][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.423437][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 58.435365][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 58.448735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 58.457651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 58.466517][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.473626][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.483391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 58.501073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 58.510099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 58.519287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 58.527964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 58.549252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 58.568207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 58.580027][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 58.588765][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 58.602510][ T4222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 58.613841][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 58.622016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 58.630854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 58.731930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 58.739468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 58.762828][ T4222] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 58.791703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 58.800367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 58.821186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 58.829624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 58.839007][ T4222] device veth0_vlan entered promiscuous mode
[ 58.845449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 58.853490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 58.864346][ T4222] device veth1_vlan entered promiscuous mode
[ 58.880275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 58.889392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 58.897881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 58.908267][ T4222] device veth0_macvtap entered promiscuous mode
[ 58.916182][ T4222] device veth1_macvtap entered promiscuous mode
[ 58.943895][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.951455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 58.959880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 58.968957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 58.990334][ T4222] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 58.997632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 59.006048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 59.017935][ T4222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.026649][ T4222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.037255][ T4222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.045925][ T4222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 59.133414][ T4222] syz-executor (4222) used greatest stack depth: 19368 bytes left
2025/11/06 18:56:45 executed programs: 0
[ 60.896017][ T4286] chnl_net:caif_netlink_parms(): no params data found
[ 60.958074][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.965175][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.975351][ T4286] device bridge_slave_0 entered promiscuous mode
[ 60.990230][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.999167][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.007319][ T4286] device bridge_slave_1 entered promiscuous mode
[ 61.032401][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 61.044149][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 61.073756][ T4286] team0: Port device team_slave_0 added
[ 61.083348][ T4286] team0: Port device team_slave_1 added
[ 61.107563][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 61.114493][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.140622][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 61.152429][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 61.159477][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 61.185478][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 61.228721][ T4286] device hsr_slave_0 entered promiscuous mode
[ 61.240024][ T4286] device hsr_slave_1 entered promiscuous mode
[ 61.247101][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 61.254903][ T4286] Cannot create hsr debugfs directory
[ 61.333445][ T4286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.817534][ T4241] Bluetooth: hci0: command 0x0409 tx timeout
[ 64.421837][ T4286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.469347][ T4286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.522426][ T4286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 64.702482][ T4286] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 64.711143][ T4286] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 64.721102][ T4286] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 64.729789][ T4286] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 64.779290][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.789599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 64.797914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 64.809528][ T4286] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.820463][ T144] device hsr_slave_0 left promiscuous mode
[ 64.827251][ T144] device hsr_slave_1 left promiscuous mode
[ 64.833415][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 64.840973][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 64.849532][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 64.856989][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 64.864367][ T144] device bridge_slave_1 left promiscuous mode
[ 64.870997][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.881471][ T144] device bridge_slave_0 left promiscuous mode
[ 64.886994][ T4242] Bluetooth: hci0: command 0x041b tx timeout
[ 64.889718][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.906046][ T144] device veth1_macvtap left promiscuous mode
[ 64.912481][ T144] device veth0_macvtap left promiscuous mode
[ 64.918536][ T144] device veth1_vlan left promiscuous mode
[ 64.924310][ T144] device veth0_vlan left promiscuous mode
[ 65.035442][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 65.048001][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 65.060168][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 65.073765][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 65.116395][ T144] bond0 (unregistering): Released all slaves
[ 65.193311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 65.202475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 65.211008][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.218103][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 65.226314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 65.239838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 65.248720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 65.256988][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.264014][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 65.271589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 65.285119][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 65.300219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 65.314185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 65.322897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 65.332423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 65.342487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 65.357833][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 65.374386][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 65.386460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 65.396547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 65.404834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 65.412956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 65.421187][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 65.499769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 65.507548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 65.518553][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.537452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 65.545979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 65.568332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 65.576582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 65.586704][ T4286] device veth0_vlan entered promiscuous mode
[ 65.596220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 65.604323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 65.616070][ T4286] device veth1_vlan entered promiscuous mode
[ 65.639079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 65.648960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 65.657767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 65.666317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 65.678199][ T4286] device veth0_macvtap entered promiscuous mode
[ 65.689068][ T4286] device veth1_macvtap entered promiscuous mode
[ 65.707094][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.714397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 65.723971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 65.733744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 65.742883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 65.754403][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 65.762801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 65.772307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 65.783281][ T4286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.793260][ T4286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.802096][ T4286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.811244][ T4286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.881111][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.908888][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.916355][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2025/11/06 18:56:50 executed programs: 2
[ 65.925307][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 65.933378][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.958597][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 66.973606][ T4191] Bluetooth: hci0: command 0x040f tx timeout
[ 67.272451][ C0] ------------[ cut here ]------------
[ 67.278144][ C0] WARNING: CPU: 0 PID: 3561 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0
[ 67.287498][ C0] Modules linked in:
[ 67.291407][ C0] CPU: 0 PID: 3561 Comm: udevd Not tainted syzkaller #0
[ 67.298404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 67.308508][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[ 67.314685][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[ 67.334345][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00010246
[ 67.340442][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88807c8d8000
[ 67.348422][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 67.356390][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f91b001
[ 67.364364][ C0] R10: ffffed100f91b001 R11: 1ffff1100f91b000 R12: ffff88807c8d9788
[ 67.372343][ C0] R13: 00007ffffffff000 R14: ffffc900000079c8 R15: 0000000000000000
[ 67.380327][ C0] FS: 00007f1ff2768880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 67.389264][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 67.396259][ C0] CR2: 000000c006ad4000 CR3: 0000000020714000 CR4: 00000000003506f0
[ 67.404229][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 67.412204][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 67.420202][ C0] Call Trace:
[ 67.423471][ C0]
[ 67.426300][ C0] bpf_probe_read_compat+0xdd/0x170
[ 67.431507][ C0] ? bpf_trace_run3+0x17e/0x320
[ 67.436349][ C0] ? bpf_trace_run2+0x2d0/0x2d0
[ 67.441193][ C0] ? kasan_quarantine_put+0x39/0x220
[ 67.446469][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.452194][ C0] ? kasan_quarantine_put+0xd4/0x220
[ 67.457502][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 67.462686][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.468409][ C0] ? __bpf_trace_kmem_cache_free+0x99/0xc0
[ 67.474219][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.479951][ C0] ? kmem_cache_free+0x1e7/0x210
[ 67.484885][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.490609][ C0] ? __iterate_interfaces+0x243/0x500
[ 67.495973][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 67.502212][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 67.508473][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[ 67.515647][ C0] ? mac80211_hwsim_beacon+0x9b/0x180
[ 67.521015][ C0] ? __hrtimer_run_queues+0x53d/0xc40
[ 67.526381][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 67.532356][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 67.538390][ C0] ? hw_scan_work+0xeb0/0xeb0
[ 67.543047][ C0] ? hrtimer_interrupt+0x8d0/0x8d0
[ 67.548163][ C0] ? hrtimer_run_softirq+0x176/0x240
[ 67.553443][ C0] ? handle_softirqs+0x328/0x820
[ 67.558385][ C0] ? __irq_exit_rcu+0x12f/0x220
[ 67.563251][ C0] ? do_softirq+0x200/0x200
[ 67.567755][ C0] ? irqtime_account_irq+0xb2/0x1b0
[ 67.572946][ C0] ? __irq_exit_rcu+0x12f/0x220
[ 67.577795][ C0] ? irq_exit_rcu+0x20/0x20
[ 67.582293][ C0] ? irq_exit_rcu+0x5/0x20
[ 67.586680][ C0] ? sysvec_apic_timer_interrupt+0xa0/0xc0
[ 67.592484][ C0]
[ 67.595408][ C0]
[ 67.598341][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 67.604493][ C0] ? __up_read+0x208/0x660
[ 67.608908][ C0] ? kasan_check_range+0xf/0x290
[ 67.613840][ C0] ? __up_read+0x208/0x660
[ 67.618255][ C0] ? __lock_acquire+0x7c60/0x7c60
[ 67.623272][ C0] ? up_read+0x20/0x20
[ 67.627341][ C0] ? preempt_count_add+0x8d/0x190
[ 67.632361][ C0] ? kernfs_fop_readdir+0x763/0x7e0
[ 67.637565][ C0] ? down_read_killable+0x1ce/0x340
[ 67.642754][ C0] ? fsnotify_perm+0x254/0x560
[ 67.647519][ C0] ? iterate_dir+0x218/0x560
[ 67.652103][ C0] ? kernfs_rename_ns+0x930/0x930
[ 67.657128][ C0] ? __se_sys_getdents64+0xe5/0x260
[ 67.662320][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 67.667519][ C0] ? __x64_sys_getdents64+0x80/0x80
[ 67.672746][ C0] ? filldir+0x720/0x720
[ 67.677014][ C0] ? syscall_enter_from_user_mode+0x2a/0x70
[ 67.682912][ C0] ? do_syscall_64+0x4c/0xa0
[ 67.687503][ C0] ? clear_bhb_loop+0x30/0x80
[ 67.692175][ C0] ? clear_bhb_loop+0x30/0x80
[ 67.697200][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 67.703272][ C0]
[ 67.706286][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 67.713537][ C0] CPU: 0 PID: 3561 Comm: udevd Not tainted syzkaller #0
[ 67.720443][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 67.730471][ C0] Call Trace:
[ 67.733728][ C0]
[ 67.736549][ C0] dump_stack_lvl+0x168/0x230
[ 67.741200][ C0] ? show_regs_print_info+0x20/0x20
[ 67.746376][ C0] ? load_image+0x3b0/0x3b0
[ 67.750859][ C0] panic+0x2c9/0x7f0
[ 67.754738][ C0] ? bpf_jit_dump+0xd0/0xd0
[ 67.759238][ C0] ? copy_from_user_nofault+0x160/0x1c0
[ 67.764757][ C0] __warn+0x248/0x2b0
[ 67.768712][ C0] ? copy_from_user_nofault+0x160/0x1c0
[ 67.774233][ C0] report_bug+0x1b7/0x2e0
[ 67.778541][ C0] handle_bug+0x3a/0x70
[ 67.782670][ C0] exc_invalid_op+0x16/0x40
[ 67.787146][ C0] asm_exc_invalid_op+0x16/0x20
[ 67.791970][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[ 67.798123][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[ 67.817702][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00010246
[ 67.823743][ C0] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88807c8d8000
[ 67.831690][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 67.839650][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f91b001
[ 67.847600][ C0] R10: ffffed100f91b001 R11: 1ffff1100f91b000 R12: ffff88807c8d9788
[ 67.855554][ C0] R13: 00007ffffffff000 R14: ffffc900000079c8 R15: 0000000000000000
[ 67.863503][ C0] ? copy_from_user_nofault+0x160/0x1c0
[ 67.869025][ C0] ? copy_from_user_nofault+0x160/0x1c0
[ 67.874545][ C0] bpf_probe_read_compat+0xdd/0x170
[ 67.879719][ C0] ? bpf_trace_run3+0x17e/0x320
[ 67.884544][ C0] ? bpf_trace_run2+0x2d0/0x2d0
[ 67.889368][ C0] ? kasan_quarantine_put+0x39/0x220
[ 67.894625][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.900316][ C0] ? kasan_quarantine_put+0xd4/0x220
[ 67.905576][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 67.910748][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.916442][ C0] ? __bpf_trace_kmem_cache_free+0x99/0xc0
[ 67.922226][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.927920][ C0] ? kmem_cache_free+0x1e7/0x210
[ 67.932835][ C0] ? mac80211_hwsim_beacon_tx+0x4f3/0x920
[ 67.938531][ C0] ? __iterate_interfaces+0x243/0x500
[ 67.943874][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 67.950088][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[ 67.956303][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[ 67.963472][ C0] ? mac80211_hwsim_beacon+0x9b/0x180
[ 67.968817][ C0] ? __hrtimer_run_queues+0x53d/0xc40
[ 67.974165][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 67.980117][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0
[ 67.986069][ C0] ? hw_scan_work+0xeb0/0xeb0
[ 67.990722][ C0] ? hrtimer_interrupt+0x8d0/0x8d0
[ 67.995809][ C0] ? hrtimer_run_softirq+0x176/0x240
[ 68.001071][ C0] ? handle_softirqs+0x328/0x820
[ 68.005981][ C0] ? __irq_exit_rcu+0x12f/0x220
[ 68.010805][ C0] ? do_softirq+0x200/0x200
[ 68.015284][ C0] ? irqtime_account_irq+0xb2/0x1b0
[ 68.020456][ C0] ? __irq_exit_rcu+0x12f/0x220
[ 68.025277][ C0] ? irq_exit_rcu+0x20/0x20
[ 68.029756][ C0] ? irq_exit_rcu+0x5/0x20
[ 68.034144][ C0] ? sysvec_apic_timer_interrupt+0xa0/0xc0
[ 68.039936][ C0]
[ 68.042841][ C0]
[ 68.045747][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 68.051879][ C0] ? __up_read+0x208/0x660
[ 68.056268][ C0] ? kasan_check_range+0xf/0x290
[ 68.061180][ C0] ? __up_read+0x208/0x660
[ 68.065572][ C0] ? __lock_acquire+0x7c60/0x7c60
[ 68.070571][ C0] ? up_read+0x20/0x20
[ 68.074619][ C0] ? preempt_count_add+0x8d/0x190
[ 68.079627][ C0] ? kernfs_fop_readdir+0x763/0x7e0
[ 68.084802][ C0] ? down_read_killable+0x1ce/0x340
[ 68.089972][ C0] ? fsnotify_perm+0x254/0x560
[ 68.094709][ C0] ? iterate_dir+0x218/0x560
[ 68.099274][ C0] ? kernfs_rename_ns+0x930/0x930
[ 68.104271][ C0] ? __se_sys_getdents64+0xe5/0x260
[ 68.109438][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 68.114615][ C0] ? __x64_sys_getdents64+0x80/0x80
[ 68.119794][ C0] ? filldir+0x720/0x720
[ 68.124012][ C0] ? syscall_enter_from_user_mode+0x2a/0x70
[ 68.129878][ C0] ? do_syscall_64+0x4c/0xa0
[ 68.134439][ C0] ? clear_bhb_loop+0x30/0x80
[ 68.139085][ C0] ? clear_bhb_loop+0x30/0x80
[ 68.143734][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.149778][ C0]
[ 68.152941][ C0] Kernel Offset: disabled
[ 68.157301][ C0] Rebooting in 86400 seconds..