Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://42213 syzkaller login: [ 31.497600][ T4719] cgroup: Unknown subsys name 'net' [ 31.588582][ T4719] cgroup: Unknown subsys name 'cpuset' [ 31.590744][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.745677][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.699169][ T4726] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.734443][ T4727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.735736][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.736079][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.736447][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.736651][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.510262][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.510299][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.516662][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.516685][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.939854][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.941584][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.942478][ T4784] bridge_slave_0: entered allmulticast mode [ 34.942960][ T4784] bridge_slave_0: entered promiscuous mode [ 34.944205][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.944226][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.944282][ T4784] bridge_slave_1: entered allmulticast mode [ 34.944710][ T4784] bridge_slave_1: entered promiscuous mode [ 34.954569][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.955474][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.961527][ T4784] team0: Port device team_slave_0 added [ 34.962762][ T4784] team0: Port device team_slave_1 added [ 34.969842][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.969862][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.969876][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.970601][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.970609][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.970623][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.981192][ T4784] hsr_slave_0: entered promiscuous mode [ 34.981561][ T4784] hsr_slave_1: entered promiscuous mode [ 35.055882][ T4784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.059128][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.059761][ T4784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.061480][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.061982][ T4784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.063938][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.064438][ T4784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.068140][ T4784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.085519][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.085575][ T4784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.085742][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.085780][ T4784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.101782][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.105216][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.107811][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.112043][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.117849][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.117905][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.118294][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.118315][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.218401][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.230155][ T4784] veth0_vlan: entered promiscuous mode [ 35.232018][ T4784] veth1_vlan: entered promiscuous mode [ 35.239656][ T4784] veth0_macvtap: entered promiscuous mode [ 35.240798][ T4784] veth1_macvtap: entered promiscuous mode [ 35.245071][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.251428][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.266725][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.266765][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.266795][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.266816][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.341416][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.399344][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.464015][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.514261][ T4727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.515446][ T4727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.515625][ T4727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.516007][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.516206][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.541997][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.655871][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.656240][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.656377][ T4822] bridge_slave_0: entered allmulticast mode [ 35.657179][ T4822] bridge_slave_0: entered promiscuous mode [ 35.658246][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.658297][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.658341][ T4822] bridge_slave_1: entered allmulticast mode [ 35.658747][ T4822] bridge_slave_1: entered promiscuous mode [ 35.665521][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.667002][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.673420][ T4822] team0: Port device team_slave_0 added [ 35.674394][ T4822] team0: Port device team_slave_1 added [ 35.680449][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.680471][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.680488][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.681031][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.681038][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.681051][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.692392][ T4822] hsr_slave_0: entered promiscuous mode [ 35.692638][ T4822] hsr_slave_1: entered promiscuous mode [ 35.692816][ T4822] debugfs: 'hsr0' already exists in 'hsr' [ 35.692856][ T4822] Cannot create hsr debugfs directory [ 37.556267][ T4727] Bluetooth: hci0: command tx timeout [ 38.427106][ T40] bridge_slave_1: left allmulticast mode [ 38.427152][ T40] bridge_slave_1: left promiscuous mode [ 38.427488][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.434083][ T40] bridge_slave_0: left allmulticast mode [ 38.435372][ T40] bridge_slave_0: left promiscuous mode [ 38.436831][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.487341][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.497711][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.536864][ T40] bond0 (unregistering): Released all slaves [ 38.568591][ T40] hsr_slave_0: left promiscuous mode [ 38.569987][ T40] hsr_slave_1: left promiscuous mode [ 38.571340][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.572904][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.574830][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.576452][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.582153][ T40] veth1_macvtap: left promiscuous mode [ 38.582199][ T40] veth0_macvtap: left promiscuous mode [ 38.582270][ T40] veth1_vlan: left promiscuous mode [ 38.582308][ T40] veth0_vlan: left promiscuous mode [ 38.683146][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.690360][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.737443][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.963572][ T4822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.965861][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.969603][ T4822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.973413][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.975117][ T4822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.976739][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.977036][ T4822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.982212][ T4822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.020159][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.025186][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.029816][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.029862][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.033558][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.033612][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.062450][ T4822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.155420][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.167734][ T4822] veth0_vlan: entered promiscuous mode [ 39.171081][ T4822] veth1_vlan: entered promiscuous mode [ 39.178453][ T4822] veth0_macvtap: entered promiscuous mode [ 39.179816][ T4822] veth1_macvtap: entered promiscuous mode [ 39.183282][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.184271][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.206492][ T3591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206762][ T3591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206787][ T3591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.206810][ T3591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213084][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.213107][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.215633][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.215643][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.253448][ T4916] ------------[ cut here ]------------ [ 39.253463][ T4916] WARNING: mm/vma.h:277 at vma_add_pgoff+0x50c/0x700, CPU#0: syz.0.17/4916 [ 39.255981][ T4916] Modules linked in: [ 39.256705][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.258213][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.259958][ T4916] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.261275][ T4916] pc : vma_add_pgoff+0x50c/0x700 [ 39.262128][ T4916] lr : vma_add_pgoff+0x50c/0x700 [ 39.262958][ T4916] sp : ffff8000977c75c0 [ 39.263690][ T4916] x29: ffff8000977c75e0 x28: 1fffe0001aaaf54a x27: 0000000000000002 [ 39.265221][ T4916] x26: ffff0000ced2cd00 x25: dfff800000000000 x24: 1fffe0001aaaf550 [ 39.266752][ T4916] x23: ffff0000d557aa80 x22: 0000000000020a98 x21: ffff0000d557aa48 [ 39.268302][ T4916] x20: ffff0000d557aa00 x19: 0000000020002000 x18: 0000000000000000 [ 39.269856][ T4916] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 39.271389][ T4916] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 39.272819][ T4916] x11: 0000000000000000 x10: 0000000000000003 x9 : 0000000000000000 [ 39.274242][ T4916] x8 : 0000000000000000 x7 : ffff800080bee7b0 x6 : 0000000000000000 [ 39.275701][ T4916] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080ae89e0 [ 39.277151][ T4916] x2 : 0000000000020002 x1 : ffff0000c8733b00 x0 : 0000000000000000 [ 39.278532][ T4916] Call trace: [ 39.279119][ T4916] vma_add_pgoff+0x50c/0x700 (P) [ 39.280019][ T4916] __split_vma+0x6a8/0x83c [ 39.280833][ T4916] vms_gather_munmap_vmas+0x2ac/0x101c [ 39.281819][ T4916] do_vmi_align_munmap+0x218/0x364 [ 39.282757][ T4916] do_vmi_munmap+0x1d0/0x254 [ 39.283601][ T4916] __vm_munmap+0x20c/0x394 [ 39.284426][ T4916] __arm64_sys_munmap+0x6c/0x84 [ 39.285372][ T4916] invoke_syscall+0x98/0x244 [ 39.286166][ T4916] el0_svc_common+0xec/0x23c [ 39.287009][ T4916] do_el0_svc+0x4c/0x5c [ 39.287780][ T4916] el0_svc+0x64/0x260 [ 39.288514][ T4916] el0t_64_sync_handler+0x44/0x104 [ 39.289406][ T4916] el0t_64_sync+0x198/0x19c [ 39.290211][ T4916] irq event stamp: 854 [ 39.290929][ T4916] hardirqs last enabled at (853): [] el0_svc+0x54/0x260 [ 39.292485][ T4916] hardirqs last disabled at (854): [] el1_brk64+0x20/0x54 [ 39.294030][ T4916] softirqs last enabled at (212): [] do_sve_acc+0x32c/0x4b8 [ 39.295638][ T4916] softirqs last disabled at (210): [] do_sve_acc+0x10c/0x4b8 [ 39.297270][ T4916] ---[ end trace 0000000000000000 ]---