Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. 2026/02/16 11:13:19 parsed 1 programs [ 111.391027][ T4604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 112.967405][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.977920][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.987473][ T1596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.009199][ T1596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.017851][ T1596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.025912][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.567736][ T4652] chnl_net:caif_netlink_parms(): no params data found [ 114.623802][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.631244][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.639911][ T4652] device bridge_slave_0 entered promiscuous mode [ 114.648930][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.656088][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.664658][ T4652] device bridge_slave_1 entered promiscuous mode [ 114.693181][ T4652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.704962][ T4652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.735511][ T4652] team0: Port device team_slave_0 added [ 114.744465][ T4652] team0: Port device team_slave_1 added [ 114.769639][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.776736][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.803476][ T4652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.816761][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.823732][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.851394][ T4652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.892347][ T4652] device hsr_slave_0 entered promiscuous mode [ 114.907425][ T4652] device hsr_slave_1 entered promiscuous mode [ 115.675304][ T4652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.690222][ T4652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.726557][ T4652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.736551][ T4652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.842438][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.881365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.889535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.900609][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.912931][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.922520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.933978][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.941124][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.982516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.992045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.003053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.013631][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.020826][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.067862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.078203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.089097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.100394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.109435][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.118582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.128166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.137260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.151454][ T4652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.163369][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.174173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.186428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.197619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.363193][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.371077][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.387888][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.448697][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.459473][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.470119][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.479010][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.487829][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.495580][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.506389][ T4652] device veth0_vlan entered promiscuous mode [ 116.549448][ T4652] device veth1_vlan entered promiscuous mode [ 116.573551][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.582013][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.591874][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.601007][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.613658][ T4652] device veth0_macvtap entered promiscuous mode [ 116.636295][ T4652] device veth1_macvtap entered promiscuous mode [ 116.659423][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.668139][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.677223][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.697539][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.709165][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.732894][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.745652][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.760794][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.773888][ T4652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.788464][ T4652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.806662][ T4652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.815430][ T4652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/16 11:13:30 executed programs: 0 [ 118.468587][ T4784] chnl_net:caif_netlink_parms(): no params data found [ 118.557764][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.573350][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.584863][ T4784] device bridge_slave_0 entered promiscuous mode [ 118.608122][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.627134][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.635273][ T4784] device bridge_slave_1 entered promiscuous mode [ 118.679231][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.691880][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.749495][ T4784] team0: Port device team_slave_0 added [ 118.772474][ T4784] team0: Port device team_slave_1 added [ 118.813414][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.821141][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.851983][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.878832][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.894735][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.902382][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.928653][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.968142][ T4784] device hsr_slave_0 entered promiscuous mode [ 118.975050][ T4784] device hsr_slave_1 entered promiscuous mode [ 118.982390][ T4784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.991464][ T4784] Cannot create hsr debugfs directory [ 120.327530][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 121.103898][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.172814][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.235328][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.112375][ T4784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.135549][ T4784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.144804][ T4784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.156003][ T4784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.176500][ T9] device hsr_slave_0 left promiscuous mode [ 122.184497][ T9] device hsr_slave_1 left promiscuous mode [ 122.193335][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.201134][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.211632][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.220189][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.230634][ T9] device bridge_slave_1 left promiscuous mode [ 122.237354][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.247023][ T9] device bridge_slave_0 left promiscuous mode [ 122.253298][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.270825][ T9] device veth1_macvtap left promiscuous mode [ 122.279253][ T9] device veth0_macvtap left promiscuous mode [ 122.285385][ T9] device veth1_vlan left promiscuous mode [ 122.292107][ T9] device veth0_vlan left promiscuous mode [ 122.406920][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 122.545362][ T9] team0 (unregistering): Port device team_slave_1 removed [ 122.565398][ T9] team0 (unregistering): Port device team_slave_0 removed [ 122.581724][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.598861][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.679732][ T9] bond0 (unregistering): Released all slaves [ 122.825939][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.843057][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.854084][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.867351][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.880796][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.898785][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.910120][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.917271][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.925488][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.956361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.985857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.996454][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.003635][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.014829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.024411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.035975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.050406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.079091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.105641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.115973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.127783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.136434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.149291][ T4784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.161905][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.176979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.188245][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.384347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.393138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.405626][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.427708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.438779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.461151][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.470121][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.482055][ T4784] device veth0_vlan entered promiscuous mode [ 123.491065][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.501343][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.514168][ T4784] device veth1_vlan entered promiscuous mode [ 123.539063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.548821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.558259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.567210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.577929][ T4784] device veth0_macvtap entered promiscuous mode [ 123.590372][ T4784] device veth1_macvtap entered promiscuous mode [ 123.609972][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.618498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.628918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.638002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.648254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.661332][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.671058][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.680905][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.694067][ T4784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.704167][ T4784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.714389][ T4784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.724555][ T4784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.794493][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.812182][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.821407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/02/16 11:13:35 executed programs: 2 [ 123.846581][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.854968][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.865276][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.931828][ T5045] FAULT_INJECTION: forcing a failure. [ 123.931828][ T5045] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.948196][ T5045] CPU: 1 PID: 5045 Comm: syz.0.16 Not tainted syzkaller #0 [ 123.955446][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.965570][ T5045] Call Trace: [ 123.968878][ T5045] [ 123.971845][ T5045] dump_stack_lvl+0x188/0x250 [ 123.976663][ T5045] ? show_regs_print_info+0x20/0x20 [ 123.982020][ T5045] ? load_image+0x400/0x400 [ 123.986557][ T5045] ? __lock_acquire+0x7d10/0x7d10 [ 123.991620][ T5045] should_fail+0x38c/0x4c0 [ 123.996075][ T5045] prepare_alloc_pages+0x1e4/0x5f0 [ 124.001225][ T5045] __alloc_pages+0x11b/0x480 [ 124.005854][ T5045] ? zone_statistics+0x170/0x170 [ 124.010841][ T5045] ? alloc_pages+0x438/0x550 [ 124.015472][ T5045] pte_alloc_one+0x7b/0x310 [ 124.020104][ T5045] ? rcu_lock_release+0x20/0x20 [ 124.024986][ T5045] ? lookup_memtype+0x257/0x2c0 [ 124.029904][ T5045] ? pat_pfn_immune_to_uc_mtrr+0x30/0x30 [ 124.035784][ T5045] __pte_alloc+0x21/0x150 [ 124.040168][ T5045] ? reserve_pfn_range+0x198/0x7b0 [ 124.045485][ T5045] remap_pfn_range_notrack+0x81f/0xa00 [ 124.051000][ T5045] ? track_pfn_remap+0x1cc/0x210 [ 124.056007][ T5045] remap_pfn_range+0xed/0x160 [ 124.060730][ T5045] ? remap_pfn_range_notrack+0xa00/0xa00 [ 124.066394][ T5045] ? vm_area_alloc+0x20/0xe0 [ 124.071016][ T5045] ? xsk_mmap+0x323/0x410 [ 124.075385][ T5045] mmap_file+0x5d/0xb0 [ 124.079679][ T5045] mmap_region+0xf88/0x1650 [ 124.084231][ T5045] do_mmap+0x819/0xe90 [ 124.088349][ T5045] vm_mmap_pgoff+0x1c1/0x2d0 [ 124.092975][ T5045] ? account_locked_vm+0xe0/0xe0 [ 124.097942][ T5045] ? __fget_files+0x40f/0x480 [ 124.102661][ T5045] ksys_mmap_pgoff+0x54b/0x790 [ 124.107487][ T5045] ? mmap_region+0x1650/0x1650 [ 124.112294][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 124.117539][ T5045] do_syscall_64+0x4c/0xa0 [ 124.121986][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.126718][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.131428][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.137357][ T5045] RIP: 0033:0x7f99ca0310b9 [ 124.141808][ T5045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.161446][ T5045] RSP: 002b:00007f99c9296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.169892][ T5045] RAX: ffffffffffffffda RBX: 00007f99ca25dfa0 RCX: 00007f99ca0310b9 [ 124.177892][ T5045] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 124.185896][ T5045] RBP: 00007f99c9296090 R08: 0000000000000003 R09: 0000000100000000 [ 124.193903][ T5045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 124.201897][ T5045] R13: 0000000000000000 R14: 00007f99ca25dfa0 R15: 00007fff0e4efc08 [ 124.209919][ T5045] [ 124.225509][ T5045] ------------[ cut here ]------------ [ 124.231508][ T5045] WARNING: CPU: 1 PID: 5045 at arch/x86/mm/pat/memtype.c:1020 untrack_pfn+0x3cb/0x440 [ 124.242687][ T5045] Modules linked in: [ 124.247683][ T5045] CPU: 1 PID: 5045 Comm: syz.0.16 Not tainted syzkaller #0 [ 124.254961][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.266544][ T5045] RIP: 0010:untrack_pfn+0x3cb/0x440 [ 124.272504][ T5045] Code: ff df 66 42 c7 44 2b 04 f8 f8 45 85 e4 4c 8b 74 24 10 74 6a e8 66 33 42 00 4d 85 f6 75 a5 e8 5c 33 42 00 eb 17 e8 55 33 42 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 42 c6 44 2b 08 f8 42 c6 44 2b [ 124.293749][ T5045] RSP: 0018:ffffc9000120f6c0 EFLAGS: 00010293 [ 124.299988][ T5045] RAX: ffffffff8136eeeb RBX: 1ffff92000241edc RCX: ffff88805d37bb80 [ 124.309187][ T5045] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 124.317470][ T5045] RBP: ffffc9000120f7b8 R08: 0000000000000000 R09: ffffc9000120f670 [ 124.325491][ T5045] R10: dffffc0000000000 R11: fffffbfff1b13b66 R12: ffff888071c3d578 [ 124.334764][ T5045] R13: ffff888071c3d528 R14: 0000000000000028 R15: 00000000ffffffea [ 124.343032][ T5045] FS: 00007f99c92966c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 124.352196][ T5045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.359390][ T5045] CR2: 0000200000000140 CR3: 00000000732c7000 CR4: 00000000003506e0 [ 124.367502][ T5045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.375508][ T5045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.383657][ T5045] Call Trace: [ 124.387096][ T5045] [ 124.390062][ T5045] ? track_pfn_insert+0x90/0x90 [ 124.394949][ T5045] ? local_lock_release+0x97/0x170 [ 124.400187][ T5045] ? mmu_notifier_invalidate_range_start+0xc0/0xf0 [ 124.407356][ T5045] ? uprobe_munmap+0x165/0x3f0 [ 124.412277][ T5045] ? __lock_acquire+0x7d10/0x7d10 [ 124.417745][ T5045] unmap_single_vma+0x1c1/0x2b0 [ 124.422948][ T5045] zap_page_range_single+0x2d4/0x3f0 [ 124.428606][ T5045] ? zap_vma_ptes+0xf0/0xf0 [ 124.433524][ T5045] ? __pte_alloc+0x116/0x150 [ 124.439346][ T5045] ? reserve_pfn_range+0x198/0x7b0 [ 124.444500][ T5045] remap_pfn_range_notrack+0x9a2/0xa00 [ 124.450456][ T5045] ? track_pfn_remap+0x1cc/0x210 [ 124.455527][ T5045] remap_pfn_range+0xed/0x160 [ 124.460629][ T5045] ? remap_pfn_range_notrack+0xa00/0xa00 [ 124.466304][ T5045] ? vm_area_alloc+0x20/0xe0 [ 124.471214][ T5045] ? xsk_mmap+0x323/0x410 [ 124.475585][ T5045] mmap_file+0x5d/0xb0 [ 124.480060][ T5045] mmap_region+0xf88/0x1650 [ 124.484740][ T5045] do_mmap+0x819/0xe90 [ 124.489994][ T5045] vm_mmap_pgoff+0x1c1/0x2d0 [ 124.494655][ T5045] ? account_locked_vm+0xe0/0xe0 [ 124.498836][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 124.500858][ T5045] ? __fget_files+0x40f/0x480 [ 124.510533][ T5045] ksys_mmap_pgoff+0x54b/0x790 [ 124.515434][ T5045] ? mmap_region+0x1650/0x1650 [ 124.520523][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 124.525860][ T5045] do_syscall_64+0x4c/0xa0 [ 124.530674][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.535587][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.540639][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.547588][ T5045] RIP: 0033:0x7f99ca0310b9 [ 124.552122][ T5045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.573859][ T5045] RSP: 002b:00007f99c9296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.582554][ T5045] RAX: ffffffffffffffda RBX: 00007f99ca25dfa0 RCX: 00007f99ca0310b9 [ 124.590899][ T5045] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 124.599110][ T5045] RBP: 00007f99c9296090 R08: 0000000000000003 R09: 0000000100000000 [ 124.607396][ T5045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 124.615397][ T5045] R13: 0000000000000000 R14: 00007f99ca25dfa0 R15: 00007fff0e4efc08 [ 124.623920][ T5045] [ 124.627172][ T5045] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.634486][ T5045] CPU: 1 PID: 5045 Comm: syz.0.16 Not tainted syzkaller #0 [ 124.641721][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.651895][ T5045] Call Trace: [ 124.655205][ T5045] [ 124.658157][ T5045] dump_stack_lvl+0x188/0x250 [ 124.662892][ T5045] ? show_regs_print_info+0x20/0x20 [ 124.668120][ T5045] ? load_image+0x400/0x400 [ 124.672676][ T5045] panic+0x2e5/0x810 [ 124.676610][ T5045] ? bpf_jit_dump+0xd0/0xd0 [ 124.681164][ T5045] ? untrack_pfn+0x3cb/0x440 [ 124.685796][ T5045] __warn+0x248/0x2b0 [ 124.689902][ T5045] ? untrack_pfn+0x3cb/0x440 [ 124.694532][ T5045] report_bug+0x1b7/0x2e0 [ 124.698904][ T5045] handle_bug+0x3a/0x70 [ 124.703126][ T5045] exc_invalid_op+0x16/0x40 [ 124.707659][ T5045] asm_exc_invalid_op+0x16/0x20 [ 124.712546][ T5045] RIP: 0010:untrack_pfn+0x3cb/0x440 [ 124.717775][ T5045] Code: ff df 66 42 c7 44 2b 04 f8 f8 45 85 e4 4c 8b 74 24 10 74 6a e8 66 33 42 00 4d 85 f6 75 a5 e8 5c 33 42 00 eb 17 e8 55 33 42 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 42 c6 44 2b 08 f8 42 c6 44 2b [ 124.737980][ T5045] RSP: 0018:ffffc9000120f6c0 EFLAGS: 00010293 [ 124.744082][ T5045] RAX: ffffffff8136eeeb RBX: 1ffff92000241edc RCX: ffff88805d37bb80 [ 124.752092][ T5045] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 124.760096][ T5045] RBP: ffffc9000120f7b8 R08: 0000000000000000 R09: ffffc9000120f670 [ 124.768094][ T5045] R10: dffffc0000000000 R11: fffffbfff1b13b66 R12: ffff888071c3d578 [ 124.776090][ T5045] R13: ffff888071c3d528 R14: 0000000000000028 R15: 00000000ffffffea [ 124.784220][ T5045] ? untrack_pfn+0x3cb/0x440 [ 124.788853][ T5045] ? track_pfn_insert+0x90/0x90 [ 124.793739][ T5045] ? local_lock_release+0x97/0x170 [ 124.798875][ T5045] ? mmu_notifier_invalidate_range_start+0xc0/0xf0 [ 124.805411][ T5045] ? uprobe_munmap+0x165/0x3f0 [ 124.810196][ T5045] ? __lock_acquire+0x7d10/0x7d10 [ 124.815250][ T5045] unmap_single_vma+0x1c1/0x2b0 [ 124.820316][ T5045] zap_page_range_single+0x2d4/0x3f0 [ 124.825655][ T5045] ? zap_vma_ptes+0xf0/0xf0 [ 124.830239][ T5045] ? __pte_alloc+0x116/0x150 [ 124.834870][ T5045] ? reserve_pfn_range+0x198/0x7b0 [ 124.840138][ T5045] remap_pfn_range_notrack+0x9a2/0xa00 [ 124.845661][ T5045] ? track_pfn_remap+0x1cc/0x210 [ 124.850650][ T5045] remap_pfn_range+0xed/0x160 [ 124.855365][ T5045] ? remap_pfn_range_notrack+0xa00/0xa00 [ 124.861039][ T5045] ? vm_area_alloc+0x20/0xe0 [ 124.865667][ T5045] ? xsk_mmap+0x323/0x410 [ 124.870029][ T5045] mmap_file+0x5d/0xb0 [ 124.874130][ T5045] mmap_region+0xf88/0x1650 [ 124.878685][ T5045] do_mmap+0x819/0xe90 [ 124.882797][ T5045] vm_mmap_pgoff+0x1c1/0x2d0 [ 124.887434][ T5045] ? account_locked_vm+0xe0/0xe0 [ 124.892410][ T5045] ? __fget_files+0x40f/0x480 [ 124.897227][ T5045] ksys_mmap_pgoff+0x54b/0x790 [ 124.902040][ T5045] ? mmap_region+0x1650/0x1650 [ 124.906837][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 124.912073][ T5045] do_syscall_64+0x4c/0xa0 [ 124.916513][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.921216][ T5045] ? clear_bhb_loop+0x30/0x80 [ 124.925916][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.931838][ T5045] RIP: 0033:0x7f99ca0310b9 [ 124.936422][ T5045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.956078][ T5045] RSP: 002b:00007f99c9296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.964619][ T5045] RAX: ffffffffffffffda RBX: 00007f99ca25dfa0 RCX: 00007f99ca0310b9 [ 124.972817][ T5045] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 124.980826][ T5045] RBP: 00007f99c9296090 R08: 0000000000000003 R09: 0000000100000000 [ 124.988948][ T5045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 124.996960][ T5045] R13: 0000000000000000 R14: 00007f99ca25dfa0 R15: 00007fff0e4efc08 [ 125.004989][ T5045] [ 125.008298][ T5045] Kernel Offset: disabled [ 125.012794][ T5045] Rebooting in 86400 seconds..