Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2026/01/14 08:01:11 parsed 1 programs [ 90.667140][ T5824] cgroup: Unknown subsys name 'net' [ 90.739178][ T5824] cgroup: Unknown subsys name 'cpuset' [ 90.748127][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.533325][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.749836][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 95.839219][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.847039][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.855162][ T5838] bridge_slave_0: entered allmulticast mode [ 95.863214][ T5838] bridge_slave_0: entered promiscuous mode [ 95.872811][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.879997][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.887511][ T5838] bridge_slave_1: entered allmulticast mode [ 95.894975][ T5838] bridge_slave_1: entered promiscuous mode [ 95.930818][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.943922][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.982319][ T5838] team0: Port device team_slave_0 added [ 95.991036][ T5838] team0: Port device team_slave_1 added [ 96.023603][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.030600][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.056611][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.070187][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.077367][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.103448][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.154062][ T5838] hsr_slave_0: entered promiscuous mode [ 96.161054][ T5838] hsr_slave_1: entered promiscuous mode [ 96.349367][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.363235][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.373953][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.385945][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.419637][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.426896][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.435388][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.442648][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.508079][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.527757][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.536636][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.555816][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.571824][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.579014][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.595882][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.603161][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.794005][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.846882][ T5838] veth0_vlan: entered promiscuous mode [ 96.860919][ T5838] veth1_vlan: entered promiscuous mode [ 96.893389][ T5838] veth0_macvtap: entered promiscuous mode [ 96.905265][ T5838] veth1_macvtap: entered promiscuous mode [ 96.926677][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.943123][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.959725][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.970709][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.986774][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.996212][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063190][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.085249][ T38] cfg80211: failed to load regulatory.db [ 97.190252][ T5838] syz-executor (5838) used greatest stack depth: 18016 bytes left [ 97.224165][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.307595][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.376262][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.504944][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.045100][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.059348][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.096639][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.105466][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.106742][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.117833][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.125704][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.135007][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.143550][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.133482][ T1141] bridge_slave_1: left allmulticast mode [ 100.139289][ T1141] bridge_slave_1: left promiscuous mode [ 100.164140][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.249708][ T1141] bridge_slave_0: left allmulticast mode [ 100.257868][ T1141] bridge_slave_0: left promiscuous mode [ 100.266190][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.055497][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.067938][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.078395][ T1141] bond0 (unregistering): Released all slaves [ 101.206536][ T1141] hsr_slave_0: left promiscuous mode [ 101.218975][ T1141] hsr_slave_1: left promiscuous mode [ 101.227761][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.242409][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.265543][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.283831][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.325422][ T1141] veth1_macvtap: left promiscuous mode [ 101.331216][ T1141] veth0_macvtap: left promiscuous mode [ 101.338107][ T1141] veth1_vlan: left promiscuous mode [ 101.343791][ T1141] veth0_vlan: left promiscuous mode [ 101.839599][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 101.873408][ T1141] team0 (unregistering): Port device team_slave_0 removed 2026/01/14 08:01:26 executed programs: 0 [ 103.027368][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.039444][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.048507][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.056808][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.065091][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.035409][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 104.303422][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.311537][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.318816][ T5981] bridge_slave_0: entered allmulticast mode [ 104.344679][ T5981] bridge_slave_0: entered promiscuous mode [ 104.365871][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.382169][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.389528][ T5981] bridge_slave_1: entered allmulticast mode [ 104.398140][ T5981] bridge_slave_1: entered promiscuous mode [ 104.479442][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.508464][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.575229][ T5981] team0: Port device team_slave_0 added [ 104.584980][ T5981] team0: Port device team_slave_1 added [ 104.646689][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.654083][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.688233][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.742204][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.749218][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.781372][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.844847][ T5981] hsr_slave_0: entered promiscuous mode [ 104.855212][ T5981] hsr_slave_1: entered promiscuous mode [ 105.162965][ T52] Bluetooth: hci0: command tx timeout [ 105.365111][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.378361][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.396089][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.409466][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.535669][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.564623][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.585212][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.592582][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.609532][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.616812][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.913238][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.004101][ T5981] veth0_vlan: entered promiscuous mode [ 106.023998][ T5981] veth1_vlan: entered promiscuous mode [ 106.078727][ T5981] veth0_macvtap: entered promiscuous mode [ 106.089927][ T5981] veth1_macvtap: entered promiscuous mode [ 106.115481][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.132365][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.149167][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.160620][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.181452][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.190315][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.268224][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.284019][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.330537][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.339728][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.430695][ T6052] FAULT_INJECTION: forcing a failure. [ 106.430695][ T6052] name failslab, interval 1, probability 0, space 0, times 1 [ 106.456513][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.456544][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.456565][ T6052] Call Trace: [ 106.456574][ T6052] [ 106.456583][ T6052] dump_stack_lvl+0xe8/0x150 [ 106.456613][ T6052] should_fail_ex+0x414/0x560 [ 106.456651][ T6052] should_failslab+0xa8/0x100 [ 106.456682][ T6052] kmem_cache_alloc_noprof+0x88/0x710 [ 106.456717][ T6052] ? mas_dup_build+0x141/0x1250 [ 106.456743][ T6052] mas_dup_build+0x141/0x1250 [ 106.456769][ T6052] ? __lock_acquire+0x6b6/0x2cf0 [ 106.456808][ T6052] __mt_dup+0x147/0x230 [ 106.456827][ T6052] ? __pfx___mt_dup+0x10/0x10 [ 106.456857][ T6052] ? get_mm_exe_file+0x1c/0x170 [ 106.456901][ T6052] ? get_mm_exe_file+0x1c/0x170 [ 106.456931][ T6052] ? get_mm_exe_file+0x1c/0x170 [ 106.456973][ T6052] dup_mmap+0x3b7/0x1b80 [ 106.457016][ T6052] ? __pfx_dup_mmap+0x10/0x10 [ 106.457037][ T6052] ? copy_mm+0x131/0x4b0 [ 106.457080][ T6052] copy_mm+0x13c/0x4b0 [ 106.457106][ T6052] copy_process+0x1812/0x3ba0 [ 106.457143][ T6052] ? copy_process+0x913/0x3ba0 [ 106.457176][ T6052] ? __pfx_copy_process+0x10/0x10 [ 106.457214][ T6052] kernel_clone+0x21e/0x820 [ 106.457244][ T6052] ? __pfx_kernel_clone+0x10/0x10 [ 106.457291][ T6052] __se_sys_clone3+0x256/0x2d0 [ 106.457321][ T6052] ? __pfx___se_sys_clone3+0x10/0x10 [ 106.457383][ T6052] ? __pfx_ksys_write+0x10/0x10 [ 106.457422][ T6052] do_syscall_64+0xec/0xf80 [ 106.457454][ T6052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.457475][ T6052] ? trace_irq_disable+0x37/0x100 [ 106.457502][ T6052] ? clear_bhb_loop+0x40/0x90 [ 106.457529][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.457550][ T6052] RIP: 0033:0x7fcb8cb8f749 [ 106.457580][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.457597][ T6052] RSP: 002b:00007ffd59279d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 106.457619][ T6052] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcb8cb8f749 [ 106.457634][ T6052] RDX: 00007ffd59279d20 RSI: 0000000000000058 RDI: 00007ffd59279d20 [ 106.457654][ T6052] RBP: 00007ffd59279e90 R08: 0000000000000000 R09: 0000000000000058 [ 106.457667][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.457679][ T6052] R13: 00007fcb8cde5fa0 R14: 00007fcb8cde5fa0 R15: 0000000000000002 [ 106.457714][ T6052] [ 106.791217][ T6056] FAULT_INJECTION: forcing a failure. [ 106.791217][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 106.807267][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 106.807297][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.807310][ T6056] Call Trace: [ 106.807318][ T6056] [ 106.807327][ T6056] dump_stack_lvl+0xe8/0x150 [ 106.807358][ T6056] should_fail_ex+0x414/0x560 [ 106.807388][ T6056] should_failslab+0xa8/0x100 [ 106.807419][ T6056] kmem_cache_alloc_noprof+0x88/0x710 [ 106.807454][ T6056] ? vm_area_dup+0x2b/0x680 [ 106.807480][ T6056] vm_area_dup+0x2b/0x680 [ 106.807507][ T6056] dup_mmap+0x870/0x1b80 [ 106.807558][ T6056] ? __pfx_dup_mmap+0x10/0x10 [ 106.807580][ T6056] ? copy_mm+0x131/0x4b0 [ 106.807625][ T6056] copy_mm+0x13c/0x4b0 [ 106.807651][ T6056] copy_process+0x1812/0x3ba0 [ 106.807688][ T6056] ? copy_process+0x913/0x3ba0 [ 106.807720][ T6056] ? __pfx_copy_process+0x10/0x10 [ 106.807757][ T6056] kernel_clone+0x21e/0x820 [ 106.807788][ T6056] ? __pfx_kernel_clone+0x10/0x10 [ 106.807835][ T6056] __se_sys_clone3+0x256/0x2d0 [ 106.807865][ T6056] ? __pfx___se_sys_clone3+0x10/0x10 [ 106.807928][ T6056] ? __pfx_ksys_write+0x10/0x10 [ 106.807966][ T6056] do_syscall_64+0xec/0xf80 [ 106.808000][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.808021][ T6056] ? trace_irq_disable+0x37/0x100 [ 106.808048][ T6056] ? clear_bhb_loop+0x40/0x90 [ 106.808076][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.808097][ T6056] RIP: 0033:0x7fcb8cb8f749 [ 106.808117][ T6056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.808134][ T6056] RSP: 002b:00007ffd59279d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 106.808157][ T6056] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcb8cb8f749 [ 106.808172][ T6056] RDX: 00007ffd59279d20 RSI: 0000000000000058 RDI: 00007ffd59279d20 [ 106.808186][ T6056] RBP: 00007ffd59279e90 R08: 0000000000000000 R09: 0000000000000058 [ 106.808199][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.808211][ T6056] R13: 00007fcb8cde5fa0 R14: 00007fcb8cde5fa0 R15: 0000000000000002 [ 106.808246][ T6056] [ 107.117873][ T6061] FAULT_INJECTION: forcing a failure. [ 107.117873][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 107.133452][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 107.133482][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.133495][ T6061] Call Trace: [ 107.133503][ T6061] [ 107.133513][ T6061] dump_stack_lvl+0xe8/0x150 [ 107.133542][ T6061] should_fail_ex+0x414/0x560 [ 107.133580][ T6061] should_failslab+0xa8/0x100 [ 107.133609][ T6061] kmem_cache_alloc_noprof+0x88/0x710 [ 107.133644][ T6061] ? anon_vma_fork+0x1f6/0x500 [ 107.133670][ T6061] anon_vma_fork+0x1f6/0x500 [ 107.133700][ T6061] dup_mmap+0x954/0x1b80 [ 107.133743][ T6061] ? __pfx_dup_mmap+0x10/0x10 [ 107.133764][ T6061] ? copy_mm+0x131/0x4b0 [ 107.133809][ T6061] copy_mm+0x13c/0x4b0 [ 107.133836][ T6061] copy_process+0x1812/0x3ba0 [ 107.133872][ T6061] ? copy_process+0x913/0x3ba0 [ 107.133906][ T6061] ? __pfx_copy_process+0x10/0x10 [ 107.133944][ T6061] kernel_clone+0x21e/0x820 [ 107.133975][ T6061] ? __pfx_kernel_clone+0x10/0x10 [ 107.134023][ T6061] __se_sys_clone3+0x256/0x2d0 [ 107.134052][ T6061] ? __pfx___se_sys_clone3+0x10/0x10 [ 107.134115][ T6061] ? __pfx_ksys_write+0x10/0x10 [ 107.134173][ T6061] do_syscall_64+0xec/0xf80 [ 107.134207][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.134228][ T6061] ? trace_irq_disable+0x37/0x100 [ 107.134255][ T6061] ? clear_bhb_loop+0x40/0x90 [ 107.134282][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.134304][ T6061] RIP: 0033:0x7fcb8cb8f749 [ 107.134324][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.134341][ T6061] RSP: 002b:00007ffd59279d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 107.134364][ T6061] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcb8cb8f749 [ 107.134378][ T6061] RDX: 00007ffd59279d20 RSI: 0000000000000058 RDI: 00007ffd59279d20 [ 107.134392][ T6061] RBP: 00007ffd59279e90 R08: 0000000000000000 R09: 0000000000000058 [ 107.134406][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.134418][ T6061] R13: 00007fcb8cde5fa0 R14: 00007fcb8cde5fa0 R15: 0000000000000002 [ 107.134453][ T6061] [ 107.134766][ T6061] ------------[ cut here ]------------ [ 107.275851][ T52] Bluetooth: hci0: command tx timeout [ 107.364525][ T6061] WARNING: mm/rmap.c:480 at unlink_anon_vmas+0x701/0x730, CPU#1: syz.0.19/6061 [ 107.374010][ T6061] Modules linked in: [ 107.378170][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 107.387392][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.397562][ T6061] RIP: 0010:unlink_anon_vmas+0x701/0x730 [ 107.403443][ T6061] Code: ac ff 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 df 56 09 cc e8 8e ed ac ff 90 0f 0b 90 e9 e2 f9 ff ff e8 80 ed ac ff 90 <0f> 0b 90 eb d3 48 c7 c1 10 ab c4 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 107.423453][ T6061] RSP: 0018:ffffc900030876c0 EFLAGS: 00010293 [ 107.429705][ T6061] RAX: ffffffff821460b0 RBX: dffffc0000000000 RCX: ffff888075d05ac0 [ 107.437807][ T6061] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 107.446021][ T6061] RBP: 0000000000000001 R08: ffffffff8fc47af7 R09: 1ffffffff1f88f5e [ 107.454218][ T6061] R10: dffffc0000000000 R11: fffffbfff1f88f5f R12: 1ffff1100e39b320 [ 107.462764][ T6061] R13: ffff88803054b2c0 R14: ffff888071cd98d0 R15: ffff888071cd98f0 [ 107.470798][ T6061] FS: 0000555566dd2500(0000) GS:ffff888125aad000(0000) knlGS:0000000000000000 [ 107.480337][ T6061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.487580][ T6061] CR2: 00007fcb8cde7dac CR3: 0000000071dd0000 CR4: 00000000003526f0 [ 107.495716][ T6061] Call Trace: [ 107.499044][ T6061] [ 107.502088][ T6061] ? __put_anon_vma+0x24b/0x2d0 [ 107.507030][ T6061] anon_vma_fork+0x4b9/0x500 [ 107.511804][ T6061] dup_mmap+0x954/0x1b80 [ 107.516112][ T6061] ? __pfx_dup_mmap+0x10/0x10 [ 107.520837][ T6061] ? copy_mm+0x131/0x4b0 [ 107.525226][ T6061] copy_mm+0x13c/0x4b0 [ 107.529353][ T6061] copy_process+0x1812/0x3ba0 [ 107.534185][ T6061] ? copy_process+0x913/0x3ba0 [ 107.539012][ T6061] ? __pfx_copy_process+0x10/0x10 [ 107.544183][ T6061] kernel_clone+0x21e/0x820 [ 107.548752][ T6061] ? __pfx_kernel_clone+0x10/0x10 [ 107.553918][ T6061] __se_sys_clone3+0x256/0x2d0 [ 107.559242][ T6061] ? __pfx___se_sys_clone3+0x10/0x10 [ 107.565324][ T6061] ? __pfx_ksys_write+0x10/0x10 [ 107.570376][ T6061] do_syscall_64+0xec/0xf80 [ 107.575094][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.581203][ T6061] ? trace_irq_disable+0x37/0x100 [ 107.586431][ T6061] ? clear_bhb_loop+0x40/0x90 [ 107.591185][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.597212][ T6061] RIP: 0033:0x7fcb8cb8f749 [ 107.601800][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.621634][ T6061] RSP: 002b:00007ffd59279d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 107.630114][ T6061] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcb8cb8f749 [ 107.638262][ T6061] RDX: 00007ffd59279d20 RSI: 0000000000000058 RDI: 00007ffd59279d20 [ 107.646421][ T6061] RBP: 00007ffd59279e90 R08: 0000000000000000 R09: 0000000000000058 [ 107.654508][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.663009][ T6061] R13: 00007fcb8cde5fa0 R14: 00007fcb8cde5fa0 R15: 0000000000000002 [ 107.671052][ T6061] [ 107.674621][ T6061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.681953][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 107.691096][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.701457][ T6061] Call Trace: [ 107.704769][ T6061] [ 107.707731][ T6061] vpanic+0x1e0/0x670 [ 107.711765][ T6061] panic+0xb9/0xc0 [ 107.715531][ T6061] ? __pfx_panic+0x10/0x10 [ 107.720016][ T6061] __warn+0x317/0x4b0 [ 107.724041][ T6061] ? unlink_anon_vmas+0x701/0x730 [ 107.729102][ T6061] ? unlink_anon_vmas+0x701/0x730 [ 107.734162][ T6061] __report_bug+0x288/0x500 [ 107.738709][ T6061] ? unlink_anon_vmas+0x701/0x730 [ 107.743848][ T6061] ? __pfx___report_bug+0x10/0x10 [ 107.748917][ T6061] ? unlink_anon_vmas+0x701/0x730 [ 107.754042][ T6061] report_bug+0x16a/0x220 [ 107.758410][ T6061] ? unlink_anon_vmas+0x701/0x730 [ 107.763447][ T6061] ? unlink_anon_vmas+0x703/0x730 [ 107.768664][ T6061] handle_bug+0x98/0x200 [ 107.773024][ T6061] exc_invalid_op+0x1a/0x50 [ 107.777639][ T6061] asm_exc_invalid_op+0x1a/0x20 [ 107.782696][ T6061] RIP: 0010:unlink_anon_vmas+0x701/0x730 [ 107.788448][ T6061] Code: ac ff 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 df 56 09 cc e8 8e ed ac ff 90 0f 0b 90 e9 e2 f9 ff ff e8 80 ed ac ff 90 <0f> 0b 90 eb d3 48 c7 c1 10 ab c4 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 107.808635][ T6061] RSP: 0018:ffffc900030876c0 EFLAGS: 00010293 [ 107.815172][ T6061] RAX: ffffffff821460b0 RBX: dffffc0000000000 RCX: ffff888075d05ac0 [ 107.823436][ T6061] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 107.831573][ T6061] RBP: 0000000000000001 R08: ffffffff8fc47af7 R09: 1ffffffff1f88f5e [ 107.839689][ T6061] R10: dffffc0000000000 R11: fffffbfff1f88f5f R12: 1ffff1100e39b320 [ 107.848290][ T6061] R13: ffff88803054b2c0 R14: ffff888071cd98d0 R15: ffff888071cd98f0 [ 107.856434][ T6061] ? unlink_anon_vmas+0x700/0x730 [ 107.861515][ T6061] ? __put_anon_vma+0x24b/0x2d0 [ 107.866580][ T6061] anon_vma_fork+0x4b9/0x500 [ 107.871214][ T6061] dup_mmap+0x954/0x1b80 [ 107.875612][ T6061] ? __pfx_dup_mmap+0x10/0x10 [ 107.880603][ T6061] ? copy_mm+0x131/0x4b0 [ 107.884919][ T6061] copy_mm+0x13c/0x4b0 [ 107.889212][ T6061] copy_process+0x1812/0x3ba0 [ 107.894021][ T6061] ? copy_process+0x913/0x3ba0 [ 107.898830][ T6061] ? __pfx_copy_process+0x10/0x10 [ 107.903909][ T6061] kernel_clone+0x21e/0x820 [ 107.908487][ T6061] ? __pfx_kernel_clone+0x10/0x10 [ 107.913557][ T6061] __se_sys_clone3+0x256/0x2d0 [ 107.918626][ T6061] ? __pfx___se_sys_clone3+0x10/0x10 [ 107.924138][ T6061] ? __pfx_ksys_write+0x10/0x10 [ 107.929206][ T6061] do_syscall_64+0xec/0xf80 [ 107.933770][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.939852][ T6061] ? trace_irq_disable+0x37/0x100 [ 107.944908][ T6061] ? clear_bhb_loop+0x40/0x90 [ 107.949610][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.955633][ T6061] RIP: 0033:0x7fcb8cb8f749 [ 107.960068][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.979955][ T6061] RSP: 002b:00007ffd59279d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 107.988489][ T6061] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcb8cb8f749 [ 107.996484][ T6061] RDX: 00007ffd59279d20 RSI: 0000000000000058 RDI: 00007ffd59279d20 [ 108.004561][ T6061] RBP: 00007ffd59279e90 R08: 0000000000000000 R09: 0000000000000058 [ 108.012572][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.020566][ T6061] R13: 00007fcb8cde5fa0 R14: 00007fcb8cde5fa0 R15: 0000000000000002 [ 108.028617][ T6061] [ 108.032251][ T6061] Kernel Offset: disabled [ 108.036592][ T6061] Rebooting in 86400 seconds..