Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://46551 syzkaller login: [ 30.414016][ T4718] cgroup: Unknown subsys name 'net' [ 30.534330][ T4718] cgroup: Unknown subsys name 'cpuset' [ 30.535652][ T4718] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.700269][ T4718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.136160][ T4725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.296446][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.296623][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.296685][ T4729] bridge_slave_0: entered allmulticast mode [ 33.297134][ T4729] bridge_slave_0: entered promiscuous mode [ 33.298315][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.298358][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.298403][ T4729] bridge_slave_1: entered allmulticast mode [ 33.298871][ T4729] bridge_slave_1: entered promiscuous mode [ 33.306415][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.307208][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.314296][ T4729] team0: Port device team_slave_0 added [ 33.315149][ T4729] team0: Port device team_slave_1 added [ 33.321243][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.321252][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.321263][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.321945][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.321952][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.321965][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.332081][ T4729] hsr_slave_0: entered promiscuous mode [ 33.332406][ T4729] hsr_slave_1: entered promiscuous mode [ 33.376572][ T4729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.378570][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.379122][ T4729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.380049][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.380382][ T4729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.381220][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.381551][ T4729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.382361][ T4729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.391976][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.392021][ T4729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.392165][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.392193][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.410068][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.414582][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.415036][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.418079][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.419992][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.420036][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.425204][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.425227][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.431359][ T4729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.431372][ T4729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.517377][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.528779][ T4729] veth0_vlan: entered promiscuous mode [ 33.532479][ T4729] veth1_vlan: entered promiscuous mode [ 33.539278][ T4729] veth0_macvtap: entered promiscuous mode [ 33.540374][ T4729] veth1_macvtap: entered promiscuous mode [ 33.545179][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.546300][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.549447][ T1310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.549640][ T1310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.549826][ T1310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.549880][ T1310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648855][ T1310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.686536][ T1310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.735878][ T1310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.777497][ T1310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.141053][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.141067][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.146784][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.146797][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.333851][ T4806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.334177][ T4806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.334354][ T4806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.334693][ T4806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.334911][ T4806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:34 executed programs: 0 [ 34.628449][ T4806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.628897][ T4806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.629092][ T4806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.629494][ T4806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.630706][ T4806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.761973][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.762027][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.762122][ T4818] bridge_slave_0: entered allmulticast mode [ 34.762548][ T4818] bridge_slave_0: entered promiscuous mode [ 34.763549][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.763594][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.763688][ T4818] bridge_slave_1: entered allmulticast mode [ 34.764103][ T4818] bridge_slave_1: entered promiscuous mode [ 34.770757][ T4818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.771707][ T4818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.779159][ T4818] team0: Port device team_slave_0 added [ 34.779928][ T4818] team0: Port device team_slave_1 added [ 34.786272][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.786281][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.786295][ T4818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.787257][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.787266][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.787283][ T4818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.798133][ T4818] hsr_slave_0: entered promiscuous mode [ 34.798467][ T4818] hsr_slave_1: entered promiscuous mode [ 34.798659][ T4818] debugfs: 'hsr0' already exists in 'hsr' [ 34.798698][ T4818] Cannot create hsr debugfs directory [ 36.663055][ T4806] Bluetooth: hci0: command tx timeout [ 36.858513][ T1310] bridge_slave_1: left allmulticast mode [ 36.858543][ T1310] bridge_slave_1: left promiscuous mode [ 36.858834][ T1310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.860580][ T1310] bridge_slave_0: left allmulticast mode [ 36.860593][ T1310] bridge_slave_0: left promiscuous mode [ 36.860659][ T1310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.914248][ T1310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.917333][ T1310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.918633][ T1310] bond0 (unregistering): Released all slaves [ 36.952667][ T1310] hsr_slave_0: left promiscuous mode [ 36.954254][ T1310] hsr_slave_1: left promiscuous mode [ 36.954576][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.954591][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.954996][ T1310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.955007][ T1310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.958537][ T1310] veth1_macvtap: left promiscuous mode [ 36.958570][ T1310] veth0_macvtap: left promiscuous mode [ 36.958629][ T1310] veth1_vlan: left promiscuous mode [ 36.958668][ T1310] veth0_vlan: left promiscuous mode [ 37.049379][ T1310] team0 (unregistering): Port device team_slave_1 removed [ 37.061127][ T1310] team0 (unregistering): Port device team_slave_0 removed [ 37.115608][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.553186][ T4818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.554448][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.554789][ T4818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.555834][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.556194][ T4818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.557145][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.557433][ T4818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.558400][ T4818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.590111][ T4818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.595763][ T4818] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.598453][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.598478][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.600318][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.600341][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.617438][ T4818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.617452][ T4818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.788749][ T4818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.800180][ T4818] veth0_vlan: entered promiscuous mode [ 37.802023][ T4818] veth1_vlan: entered promiscuous mode [ 37.875171][ T4818] veth0_macvtap: entered promiscuous mode [ 37.876189][ T4818] veth1_macvtap: entered promiscuous mode [ 37.879260][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.880825][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.910641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.910654][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.921831][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.921843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.926562][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.926672][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.926693][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.926708][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.959228][ T4910] ------------[ cut here ]------------ [ 37.959237][ T4910] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x6e0/0x7fc, CPU#0: syz.0.17/4910 [ 37.961842][ T4910] Modules linked in: [ 37.962530][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 37.964211][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.966150][ T4910] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 37.967658][ T4910] pc : __kvmalloc_node_noprof+0x6e0/0x7fc [ 37.968835][ T4910] lr : __kvmalloc_node_noprof+0x400/0x7fc [ 37.970013][ T4910] sp : ffff800096277930 [ 37.970809][ T4910] x29: ffff800096277980 x28: 00000000ffffffff x27: 0000001000000000 [ 37.972404][ T4910] x26: 0001000000000000 x25: 0000000000000000 x24: 00000000000028c0 [ 37.973933][ T4910] x23: ffff8000826370bc x22: ffff800096277ca8 x21: 0000008000000000 [ 37.975530][ T4910] x20: ffff700012c4ef58 x19: 0000000000000000 x18: 0000000000000000 [ 37.977066][ T4910] x17: ffff80008016662c x16: ffff800080cdbcb4 x15: ffff800082636d98 [ 37.978709][ T4910] x14: 0000000000000001 x13: 0000000000000005 x12: 0000000000000000 [ 37.980263][ T4910] x11: 0000000000000000 x10: 0000000000000003 x9 : ffff800088a30ae0 [ 37.981876][ T4910] x8 : 0000000000000cc0 x7 : 0000000000000000 x6 : ffff800080b8610c [ 37.983442][ T4910] x5 : 00000000ffffffff x4 : 00000000000028c0 x3 : 0000008000000000 [ 37.985058][ T4910] x2 : 0000008000000000 x1 : ffff0000cdb79d80 x0 : 0000000000000001 [ 37.986694][ T4910] Call trace: [ 37.987325][ T4910] __kvmalloc_node_noprof+0x6e0/0x7fc (P) [ 37.988494][ T4910] udmabuf_create+0x220/0xb34 [ 37.989409][ T4910] udmabuf_ioctl+0x1b0/0x2b4 [ 37.990318][ T4910] __arm64_sys_ioctl+0x154/0x1cc [ 37.991302][ T4910] invoke_syscall+0x98/0x244 [ 37.992160][ T4910] el0_svc_common+0xec/0x23c [ 37.993039][ T4910] do_el0_svc+0x4c/0x5c [ 37.993827][ T4910] el0_svc+0x60/0x1d8 [ 37.994581][ T4910] el0t_64_sync_handler+0x44/0x104 [ 37.995543][ T4910] el0t_64_sync+0x198/0x19c [ 37.996369][ T4910] irq event stamp: 718 [ 37.997147][ T4910] hardirqs last enabled at (717): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 37.999143][ T4910] hardirqs last disabled at (718): [] el1_brk64+0x20/0x54 [ 38.000863][ T4910] softirqs last enabled at (222): [] do_sve_acc+0x3ac/0x56c [ 38.002579][ T4910] softirqs last disabled at (220): [] do_sve_acc+0x104/0x56c [ 38.004263][ T4910] ---[ end trace 0000000000000000 ]---