Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. 2025/12/08 10:48:30 parsed 1 programs [ 92.078575][ T4600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 94.525283][ T4640] chnl_net:caif_netlink_parms(): no params data found [ 94.587286][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.594457][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.604327][ T4640] device bridge_slave_0 entered promiscuous mode [ 94.613212][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.621879][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.630362][ T4640] device bridge_slave_1 entered promiscuous mode [ 94.660937][ T4640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.672573][ T4640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.703662][ T4640] team0: Port device team_slave_0 added [ 94.712239][ T4640] team0: Port device team_slave_1 added [ 94.737123][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.744103][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.771749][ T4640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.784662][ T4640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.792007][ T4640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.818548][ T4640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.856835][ T4640] device hsr_slave_0 entered promiscuous mode [ 94.864244][ T4640] device hsr_slave_1 entered promiscuous mode [ 95.637122][ T4640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.646990][ T4640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.657472][ T4640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.669992][ T4640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.744295][ T4640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.759250][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.769421][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.781280][ T4640] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.792450][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.801721][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.811778][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.818923][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.829434][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.865622][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.876980][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.887885][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.895129][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.904473][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.935586][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.944248][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.957041][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.966674][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.000660][ T4640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.012334][ T4640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.024215][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.033844][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.044006][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.053019][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.063550][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.072450][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.083665][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.247080][ T4640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.255498][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.263126][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.281848][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.291269][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.329577][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.341557][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.350684][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.358789][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.369978][ T4640] device veth0_vlan entered promiscuous mode [ 96.397546][ T4640] device veth1_vlan entered promiscuous mode [ 96.421475][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.431746][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.444545][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.453802][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.466546][ T4640] device veth0_macvtap entered promiscuous mode [ 96.491542][ T4640] device veth1_macvtap entered promiscuous mode [ 96.511245][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.521113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.531577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.541277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.551636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.566372][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.577959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.587261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.597171][ T4640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.607078][ T4640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.618181][ T4640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.627614][ T4640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.218049][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.236658][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.271601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.282060][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.305525][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.314713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/12/08 10:48:40 executed programs: 0 [ 99.095647][ T4818] chnl_net:caif_netlink_parms(): no params data found [ 99.113243][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.179528][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.186750][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.195061][ T4818] device bridge_slave_0 entered promiscuous mode [ 99.204146][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.211662][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.220332][ T4818] device bridge_slave_1 entered promiscuous mode [ 99.252490][ T4818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.267623][ T4818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.301960][ T4818] team0: Port device team_slave_0 added [ 99.310045][ T4818] team0: Port device team_slave_1 added [ 99.334491][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.343339][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.373855][ T4818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.390009][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.397572][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.426542][ T4818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.470282][ T4818] device hsr_slave_0 entered promiscuous mode [ 99.480005][ T4818] device hsr_slave_1 entered promiscuous mode [ 99.487563][ T4818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.495347][ T4818] Cannot create hsr debugfs directory [ 100.956142][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 102.018476][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.081684][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.130971][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.921018][ T4818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.930611][ T4818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.940958][ T4818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.953120][ T4818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.004247][ T4818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.016313][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.024237][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.036706][ T4818] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.047773][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 103.065940][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.074679][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.083405][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.090516][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.101446][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.110658][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.120321][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.129371][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.136520][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.156947][ T4818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.167678][ T4818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.179014][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.188537][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.197913][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.207594][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.216220][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.224672][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.233579][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.242005][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.250967][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.259370][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.268407][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.276748][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.372591][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.380468][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.391897][ T4818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.415557][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.424278][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.452032][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.460500][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.468973][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.477367][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.487207][ T4818] device veth0_vlan entered promiscuous mode [ 103.507560][ T4818] device veth1_vlan entered promiscuous mode [ 103.529736][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.538043][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.546414][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.554893][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.565987][ T4818] device veth0_macvtap entered promiscuous mode [ 103.574272][ T4818] device veth1_macvtap entered promiscuous mode [ 103.601777][ T154] device hsr_slave_0 left promiscuous mode [ 103.609026][ T154] device hsr_slave_1 left promiscuous mode [ 103.616119][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.623598][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.631467][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.639178][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.647321][ T154] device bridge_slave_1 left promiscuous mode [ 103.653522][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.661997][ T154] device bridge_slave_0 left promiscuous mode [ 103.668414][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.680625][ T154] device veth1_macvtap left promiscuous mode [ 103.686699][ T154] device veth0_macvtap left promiscuous mode [ 103.692738][ T154] device veth1_vlan left promiscuous mode [ 103.698668][ T154] device veth0_vlan left promiscuous mode [ 103.810159][ T154] team0 (unregistering): Port device team_slave_1 removed [ 103.824513][ T154] team0 (unregistering): Port device team_slave_0 removed [ 103.835166][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.847586][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.888818][ T154] bond0 (unregistering): Released all slaves [ 103.962155][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.971135][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.979282][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.987561][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.997197][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.012503][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.021340][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.030668][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.040528][ T4818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.049763][ T4818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.058638][ T4818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.067474][ T4818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.138448][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.154031][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.166107][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.181333][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/08 10:48:45 executed programs: 2 [ 104.190889][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.199416][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.238093][ T5080] FAULT_INJECTION: forcing a failure. [ 104.238093][ T5080] name failslab, interval 1, probability 0, space 0, times 1 [ 104.252073][ T5080] CPU: 0 PID: 5080 Comm: syz.0.16 Not tainted syzkaller #0 [ 104.259308][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.269388][ T5080] Call Trace: [ 104.272803][ T5080] [ 104.275719][ T5080] dump_stack_lvl+0x168/0x230 [ 104.280471][ T5080] ? show_regs_print_info+0x20/0x20 [ 104.285685][ T5080] ? load_image+0x3b0/0x3b0 [ 104.290262][ T5080] ? __might_sleep+0xf0/0xf0 [ 104.294836][ T5080] ? __lock_acquire+0x7c60/0x7c60 [ 104.299841][ T5080] should_fail+0x38c/0x4c0 [ 104.304338][ T5080] should_failslab+0x5/0x20 [ 104.308834][ T5080] slab_pre_alloc_hook+0x51/0xc0 [ 104.313857][ T5080] ? vm_area_alloc+0x20/0xe0 [ 104.318427][ T5080] kmem_cache_alloc+0x3d/0x290 [ 104.323169][ T5080] vm_area_alloc+0x20/0xe0 [ 104.327588][ T5080] mmap_region+0xac7/0x1660 [ 104.332086][ T5080] ? bpf_lsm_mmap_addr+0x5/0x10 [ 104.336943][ T5080] do_mmap+0x81f/0xea0 [ 104.341002][ T5080] vm_mmap_pgoff+0x1b2/0x2b0 [ 104.345697][ T5080] ? account_locked_vm+0xe0/0xe0 [ 104.350656][ T5080] ? __fget_files+0x40f/0x480 [ 104.355316][ T5080] ksys_mmap_pgoff+0x542/0x780 [ 104.360081][ T5080] ? mmap_region+0x1660/0x1660 [ 104.364864][ T5080] ? lockdep_hardirqs_on+0x94/0x140 [ 104.370047][ T5080] do_syscall_64+0x4c/0xa0 [ 104.374455][ T5080] ? clear_bhb_loop+0x30/0x80 [ 104.379111][ T5080] ? clear_bhb_loop+0x30/0x80 [ 104.383770][ T5080] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.389729][ T5080] RIP: 0033:0x7f1651100969 [ 104.394220][ T5080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.413803][ T5080] RSP: 002b:00007f1650370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.422215][ T5080] RAX: ffffffffffffffda RBX: 00007f1651327fa0 RCX: 00007f1651100969 [ 104.430165][ T5080] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 104.438225][ T5080] RBP: 00007f1650370090 R08: 0000000000000003 R09: 0000000100000000 [ 104.446203][ T5080] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 104.454159][ T5080] R13: 0000000000000000 R14: 00007f1651327fa0 R15: 00007ffcba737068 [ 104.462116][ T5080] [ 104.491991][ T5082] FAULT_INJECTION: forcing a failure. [ 104.491991][ T5082] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 104.506269][ T5082] CPU: 0 PID: 5082 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.513597][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.523650][ T5082] Call Trace: [ 104.526942][ T5082] [ 104.529878][ T5082] dump_stack_lvl+0x168/0x230 [ 104.534565][ T5082] ? show_regs_print_info+0x20/0x20 [ 104.539762][ T5082] ? load_image+0x3b0/0x3b0 [ 104.544273][ T5082] ? __lock_acquire+0x7c60/0x7c60 [ 104.549313][ T5082] should_fail+0x38c/0x4c0 [ 104.553767][ T5082] prepare_alloc_pages+0x1e4/0x5f0 [ 104.558894][ T5082] __alloc_pages+0x10e/0x470 [ 104.563490][ T5082] ? zone_statistics+0x170/0x170 [ 104.568427][ T5082] ? walk_system_ram_range+0x1f7/0x2a0 [ 104.574061][ T5082] ? alloc_pages+0x438/0x550 [ 104.578674][ T5082] pte_alloc_one+0x80/0x2f0 [ 104.583193][ T5082] ? rcu_lock_release+0x20/0x20 [ 104.588046][ T5082] ? lookup_memtype+0x237/0x2a0 [ 104.592905][ T5082] ? pat_pfn_immune_to_uc_mtrr+0x30/0x30 [ 104.598628][ T5082] __pte_alloc+0x21/0x150 [ 104.602958][ T5082] ? reserve_pfn_range+0x208/0x790 [ 104.608083][ T5082] remap_pfn_range_notrack+0x81f/0xa00 [ 104.613638][ T5082] ? track_pfn_remap+0x1cc/0x210 [ 104.618576][ T5082] remap_pfn_range+0xed/0x160 [ 104.623251][ T5082] ? remap_pfn_range_notrack+0xa00/0xa00 [ 104.628879][ T5082] ? vm_area_alloc+0x20/0xe0 [ 104.633469][ T5082] ? xsk_mmap+0x323/0x410 [ 104.637889][ T5082] mmap_file+0x5d/0xb0 [ 104.642228][ T5082] mmap_region+0xf8f/0x1660 [ 104.646750][ T5082] do_mmap+0x81f/0xea0 [ 104.650823][ T5082] vm_mmap_pgoff+0x1b2/0x2b0 [ 104.655422][ T5082] ? account_locked_vm+0xe0/0xe0 [ 104.660357][ T5082] ? __fget_files+0x40f/0x480 [ 104.665041][ T5082] ksys_mmap_pgoff+0x542/0x780 [ 104.669894][ T5082] ? mmap_region+0x1660/0x1660 [ 104.674729][ T5082] ? lockdep_hardirqs_on+0x94/0x140 [ 104.679931][ T5082] do_syscall_64+0x4c/0xa0 [ 104.684345][ T5082] ? clear_bhb_loop+0x30/0x80 [ 104.689020][ T5082] ? clear_bhb_loop+0x30/0x80 [ 104.693703][ T5082] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.699612][ T5082] RIP: 0033:0x7f1651100969 [ 104.704027][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.723630][ T5082] RSP: 002b:00007f1650370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.732044][ T5082] RAX: ffffffffffffffda RBX: 00007f1651327fa0 RCX: 00007f1651100969 [ 104.740034][ T5082] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 104.748019][ T5082] RBP: 00007f1650370090 R08: 0000000000000003 R09: 0000000100000000 [ 104.755998][ T5082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 104.764147][ T5082] R13: 0000000000000000 R14: 00007f1651327fa0 R15: 00007ffcba737068 [ 104.772129][ T5082] [ 104.781619][ T5082] ------------[ cut here ]------------ [ 104.787321][ T5082] WARNING: CPU: 1 PID: 5082 at arch/x86/mm/pat/memtype.c:1020 untrack_pfn+0x389/0x400 [ 104.797141][ T5082] Modules linked in: [ 104.801094][ T5082] CPU: 1 PID: 5082 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.808485][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.818858][ T5082] RIP: 0010:untrack_pfn+0x389/0x400 [ 104.824102][ T5082] Code: 45 85 e4 49 bd 00 00 00 00 00 fc ff df 74 71 e8 7d 75 41 00 4c 8b 64 24 10 4d 85 e4 75 ac e8 6e 75 41 00 eb 11 e8 67 75 41 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 48 c7 44 24 20 0e 36 e0 45 4a [ 104.846316][ T5082] RSP: 0018:ffffc900032ef6c0 EFLAGS: 00010293 [ 104.852528][ T5082] RAX: ffffffff813656a9 RBX: 1ffff9200065dedc RCX: ffff88802a8fd940 [ 104.861158][ T5082] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 104.870707][ T5082] RBP: ffffc900032ef7b8 R08: 0000000000000000 R09: ffffc900032ef670 [ 104.880064][ T5082] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807a2ce050 [ 104.891682][ T5082] R13: ffff88807a2ce000 R14: 0000000000000028 R15: 00000000ffffffea [ 104.901803][ T5082] FS: 00007f16503706c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 104.912333][ T5082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.920124][ T5082] CR2: 000000c006a6a000 CR3: 00000000256a0000 CR4: 00000000003506f0 [ 104.929632][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.938064][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.947583][ T5082] Call Trace: [ 104.950882][ T5082] [ 104.953853][ T5082] ? track_pfn_insert+0x90/0x90 [ 104.968812][ T5082] ? local_lock_release+0x97/0x170 [ 104.973976][ T5082] ? mmu_notifier_invalidate_range_start+0xc0/0xf0 [ 104.980951][ T5082] ? uprobe_munmap+0x165/0x3f0 [ 104.986511][ T5082] ? __lock_acquire+0x7c60/0x7c60 [ 104.991574][ T5082] unmap_single_vma+0x1c1/0x2b0 [ 104.996941][ T5082] zap_page_range_single+0x292/0x380 [ 105.002259][ T5082] ? zap_vma_ptes+0xf0/0xf0 [ 105.007144][ T5082] ? __pte_alloc+0x116/0x150 [ 105.011791][ T5082] ? reserve_pfn_range+0x208/0x790 [ 105.018343][ T5082] remap_pfn_range_notrack+0x9a2/0xa00 [ 105.024027][ T5082] ? track_pfn_remap+0x1cc/0x210 [ 105.030842][ T5082] remap_pfn_range+0xed/0x160 [ 105.042556][ T5082] ? remap_pfn_range_notrack+0xa00/0xa00 [ 105.049778][ T5082] ? vm_area_alloc+0x20/0xe0 [ 105.054401][ T5082] ? xsk_mmap+0x323/0x410 [ 105.059184][ T5082] mmap_file+0x5d/0xb0 [ 105.063285][ T5082] mmap_region+0xf8f/0x1660 [ 105.069686][ T5082] do_mmap+0x81f/0xea0 [ 105.074253][ T5082] vm_mmap_pgoff+0x1b2/0x2b0 [ 105.079865][ T5082] ? account_locked_vm+0xe0/0xe0 [ 105.084831][ T5082] ? __fget_files+0x40f/0x480 [ 105.091175][ T5082] ksys_mmap_pgoff+0x542/0x780 [ 105.096226][ T5082] ? mmap_region+0x1660/0x1660 [ 105.101119][ T5082] ? lockdep_hardirqs_on+0x94/0x140 [ 105.108180][ T5082] do_syscall_64+0x4c/0xa0 [ 105.112628][ T5082] ? clear_bhb_loop+0x30/0x80 [ 105.119489][ T5082] ? clear_bhb_loop+0x30/0x80 [ 105.124298][ T5082] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.126140][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 105.130744][ T5082] RIP: 0033:0x7f1651100969 [ 105.141025][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.161548][ T5082] RSP: 002b:00007f1650370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.170619][ T5082] RAX: ffffffffffffffda RBX: 00007f1651327fa0 RCX: 00007f1651100969 [ 105.179040][ T5082] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 105.187294][ T5082] RBP: 00007f1650370090 R08: 0000000000000003 R09: 0000000100000000 [ 105.195288][ T5082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 105.205015][ T5082] R13: 0000000000000000 R14: 00007f1651327fa0 R15: 00007ffcba737068 [ 105.213351][ T5082] [ 105.216660][ T5082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.223969][ T5082] CPU: 0 PID: 5082 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.231182][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.241256][ T5082] Call Trace: [ 105.244544][ T5082] [ 105.247485][ T5082] dump_stack_lvl+0x168/0x230 [ 105.252182][ T5082] ? show_regs_print_info+0x20/0x20 [ 105.257392][ T5082] ? load_image+0x3b0/0x3b0 [ 105.261925][ T5082] panic+0x2c9/0x7f0 [ 105.265836][ T5082] ? bpf_jit_dump+0xd0/0xd0 [ 105.270375][ T5082] ? untrack_pfn+0x389/0x400 [ 105.274985][ T5082] __warn+0x248/0x2b0 [ 105.278986][ T5082] ? untrack_pfn+0x389/0x400 [ 105.283599][ T5082] report_bug+0x1b7/0x2e0 [ 105.287955][ T5082] handle_bug+0x3a/0x70 [ 105.292128][ T5082] exc_invalid_op+0x16/0x40 [ 105.296645][ T5082] asm_exc_invalid_op+0x16/0x20 [ 105.301510][ T5082] RIP: 0010:untrack_pfn+0x389/0x400 [ 105.306720][ T5082] Code: 45 85 e4 49 bd 00 00 00 00 00 fc ff df 74 71 e8 7d 75 41 00 4c 8b 64 24 10 4d 85 e4 75 ac e8 6e 75 41 00 eb 11 e8 67 75 41 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 48 c7 44 24 20 0e 36 e0 45 4a [ 105.326451][ T5082] RSP: 0018:ffffc900032ef6c0 EFLAGS: 00010293 [ 105.332552][ T5082] RAX: ffffffff813656a9 RBX: 1ffff9200065dedc RCX: ffff88802a8fd940 [ 105.340540][ T5082] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000000000000020 [ 105.348522][ T5082] RBP: ffffc900032ef7b8 R08: 0000000000000000 R09: ffffc900032ef670 [ 105.356562][ T5082] R10: fffffbfff1ad26b6 R11: 1ffffffff1ad26b5 R12: ffff88807a2ce050 [ 105.364545][ T5082] R13: ffff88807a2ce000 R14: 0000000000000028 R15: 00000000ffffffea [ 105.372655][ T5082] ? untrack_pfn+0x389/0x400 [ 105.377375][ T5082] ? track_pfn_insert+0x90/0x90 [ 105.382243][ T5082] ? local_lock_release+0x97/0x170 [ 105.387370][ T5082] ? mmu_notifier_invalidate_range_start+0xc0/0xf0 [ 105.394007][ T5082] ? uprobe_munmap+0x165/0x3f0 [ 105.398779][ T5082] ? __lock_acquire+0x7c60/0x7c60 [ 105.403832][ T5082] unmap_single_vma+0x1c1/0x2b0 [ 105.408702][ T5082] zap_page_range_single+0x292/0x380 [ 105.414003][ T5082] ? zap_vma_ptes+0xf0/0xf0 [ 105.418549][ T5082] ? __pte_alloc+0x116/0x150 [ 105.423151][ T5082] ? reserve_pfn_range+0x208/0x790 [ 105.428281][ T5082] remap_pfn_range_notrack+0x9a2/0xa00 [ 105.433772][ T5082] ? track_pfn_remap+0x1cc/0x210 [ 105.438733][ T5082] remap_pfn_range+0xed/0x160 [ 105.443426][ T5082] ? remap_pfn_range_notrack+0xa00/0xa00 [ 105.449067][ T5082] ? vm_area_alloc+0x20/0xe0 [ 105.453756][ T5082] ? xsk_mmap+0x323/0x410 [ 105.458108][ T5082] mmap_file+0x5d/0xb0 [ 105.462198][ T5082] mmap_region+0xf8f/0x1660 [ 105.466739][ T5082] do_mmap+0x81f/0xea0 [ 105.470946][ T5082] vm_mmap_pgoff+0x1b2/0x2b0 [ 105.475579][ T5082] ? account_locked_vm+0xe0/0xe0 [ 105.480642][ T5082] ? __fget_files+0x40f/0x480 [ 105.485460][ T5082] ksys_mmap_pgoff+0x542/0x780 [ 105.490261][ T5082] ? mmap_region+0x1660/0x1660 [ 105.495141][ T5082] ? lockdep_hardirqs_on+0x94/0x140 [ 105.500361][ T5082] do_syscall_64+0x4c/0xa0 [ 105.504797][ T5082] ? clear_bhb_loop+0x30/0x80 [ 105.509485][ T5082] ? clear_bhb_loop+0x30/0x80 [ 105.514171][ T5082] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.520076][ T5082] RIP: 0033:0x7f1651100969 [ 105.524508][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.544132][ T5082] RSP: 002b:00007f1650370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 105.552576][ T5082] RAX: ffffffffffffffda RBX: 00007f1651327fa0 RCX: 00007f1651100969 [ 105.560564][ T5082] RDX: 000000000100000e RSI: 0000000000001000 RDI: 0000200000ffc000 [ 105.568633][ T5082] RBP: 00007f1650370090 R08: 0000000000000003 R09: 0000000100000000 [ 105.576626][ T5082] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 105.584614][ T5082] R13: 0000000000000000 R14: 00007f1651327fa0 R15: 00007ffcba737068 [ 105.592640][ T5082] [ 105.595964][ T5082] Kernel Offset: disabled [ 105.600443][ T5082] Rebooting in 86400 seconds..