[ 7.383135][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7.385216][ T4398] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 7.417718][ T13] gve 0000:00:00.0 enp0s0: Device link is up. OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. 1970/01/01 00:00:23 parsed 1 programs 1970/01/01 00:00:23 serving rpc on tcp://44341 syzkaller login: [ 24.740895][ T4719] cgroup: Unknown subsys name 'net' [ 24.881162][ T4719] cgroup: Unknown subsys name 'cpuset' [ 24.882495][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.026684][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.112542][ T4725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.925410][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.925422][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.934441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.934454][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.279166][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.279427][ T4772] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.279489][ T4772] bridge_slave_0: entered allmulticast mode [ 29.281845][ T4772] bridge_slave_0: entered promiscuous mode [ 29.285136][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.285503][ T4772] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.285553][ T4772] bridge_slave_1: entered allmulticast mode [ 29.285931][ T4772] bridge_slave_1: entered promiscuous mode [ 29.297372][ T4772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.298244][ T4772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.305168][ T4772] team0: Port device team_slave_0 added [ 29.305842][ T4772] team0: Port device team_slave_1 added [ 29.311615][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.311624][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.311634][ T4772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.312316][ T4772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.312324][ T4772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.312335][ T4772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.322018][ T4772] hsr_slave_0: entered promiscuous mode [ 29.322321][ T4772] hsr_slave_1: entered promiscuous mode [ 29.380126][ T4772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.382672][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.383008][ T4772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.384514][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.384944][ T4772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.385860][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.386236][ T4772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.389723][ T4772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.404134][ T4772] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.404178][ T4772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.404318][ T4772] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.404345][ T4772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.420564][ T4772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.423459][ T4772] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.521577][ T4772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.533660][ T4772] veth0_vlan: entered promiscuous mode [ 29.537704][ T4772] veth1_vlan: entered promiscuous mode [ 29.546506][ T4772] veth0_macvtap: entered promiscuous mode [ 29.547584][ T4772] veth1_macvtap: entered promiscuous mode [ 29.552885][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.555012][ T4772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.580190][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.580836][ T1366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.580865][ T1366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.580881][ T1366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.622881][ T4810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.623341][ T4810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.623506][ T4810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.623857][ T4810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.624045][ T4810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.655984][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.705591][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.783790][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.843252][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:29 executed programs: 0 [ 29.919129][ T4810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.919520][ T4810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.920486][ T4810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.920791][ T4810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.920978][ T4810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.047091][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047157][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.047244][ T4824] bridge_slave_0: entered allmulticast mode [ 30.047631][ T4824] bridge_slave_0: entered promiscuous mode [ 30.048599][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.048644][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.048697][ T4824] bridge_slave_1: entered allmulticast mode [ 30.049092][ T4824] bridge_slave_1: entered promiscuous mode [ 30.056421][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.057268][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.064088][ T4824] team0: Port device team_slave_0 added [ 30.064789][ T4824] team0: Port device team_slave_1 added [ 30.073136][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.073145][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.073158][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.073676][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.073682][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.073693][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.085574][ T4824] hsr_slave_0: entered promiscuous mode [ 30.085852][ T4824] hsr_slave_1: entered promiscuous mode [ 30.086058][ T4824] debugfs: 'hsr0' already exists in 'hsr' [ 30.086095][ T4824] Cannot create hsr debugfs directory [ 31.930049][ T50] Bluetooth: hci0: command tx timeout [ 33.136923][ T57] bridge_slave_1: left allmulticast mode [ 33.136955][ T57] bridge_slave_1: left promiscuous mode [ 33.137422][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.144671][ T57] bridge_slave_0: left allmulticast mode [ 33.144686][ T57] bridge_slave_0: left promiscuous mode [ 33.144755][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.204345][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.240823][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.260342][ T57] bond0 (unregistering): Released all slaves [ 33.309544][ T57] hsr_slave_0: left promiscuous mode [ 33.310669][ T57] hsr_slave_1: left promiscuous mode [ 33.310982][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.310996][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.313095][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.313109][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.316672][ T57] veth1_macvtap: left promiscuous mode [ 33.316704][ T57] veth0_macvtap: left promiscuous mode [ 33.316751][ T57] veth1_vlan: left promiscuous mode [ 33.316790][ T57] veth0_vlan: left promiscuous mode [ 33.418557][ T57] team0 (unregistering): Port device team_slave_1 removed [ 33.422329][ T57] team0 (unregistering): Port device team_slave_0 removed [ 33.463965][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 33.678050][ T4824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.679292][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.683953][ T4824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.686680][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.686994][ T4824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.688291][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.688592][ T4824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.689399][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.726126][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.732747][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.735174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.735209][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.738266][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.738287][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.746015][ T4824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.746029][ T4824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.891899][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.909254][ T4824] veth0_vlan: entered promiscuous mode [ 33.915764][ T4824] veth1_vlan: entered promiscuous mode [ 33.923872][ T4824] veth0_macvtap: entered promiscuous mode [ 33.924977][ T4824] veth1_macvtap: entered promiscuous mode [ 33.928124][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.933992][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.954733][ T1366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.954745][ T1366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.964697][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.964709][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.979673][ T1366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.981023][ T1366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.981042][ T1366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.981062][ T1366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.001955][ T4916] ------------[ cut here ]------------ [ 34.001963][ T4916] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x6e0/0x7fc, CPU#0: syz.0.17/4916 [ 34.004904][ T4916] Modules linked in: [ 34.005747][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 34.007419][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.009235][ T4916] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.010935][ T4916] pc : __kvmalloc_node_noprof+0x6e0/0x7fc [ 34.012194][ T4916] lr : __kvmalloc_node_noprof+0x400/0x7fc [ 34.013486][ T4916] sp : ffff80009a7b7930 [ 34.014428][ T4916] x29: ffff80009a7b7980 x28: 00000000ffffffff x27: 0000001000000000 [ 34.016263][ T4916] x26: 0001000000000000 x25: 0000000000000000 x24: 00000000000028c0 [ 34.018130][ T4916] x23: ffff8000826370bc x22: ffff80009a7b7ca8 x21: 0000008000000000 [ 34.020061][ T4916] x20: ffff7000134f6f58 x19: 0000000000000000 x18: 0000000000000000 [ 34.022053][ T4916] x17: ffff80008016662c x16: ffff800080cdbcb4 x15: ffff800082636d98 [ 34.023988][ T4916] x14: 0000000000000001 x13: 0000000000000005 x12: 0000000000000000 [ 34.025792][ T4916] x11: 0000000000000000 x10: 0000000000000003 x9 : ffff800088a30ae0 [ 34.027553][ T4916] x8 : 0000000000000cc0 x7 : 0000000000000000 x6 : ffff800080b8610c [ 34.029372][ T4916] x5 : 00000000ffffffff x4 : 00000000000028c0 x3 : 0000008000000000 [ 34.031132][ T4916] x2 : 0000008000000000 x1 : ffff0000d0e48000 x0 : 0000000000000001 [ 34.032756][ T4916] Call trace: [ 34.033451][ T4916] __kvmalloc_node_noprof+0x6e0/0x7fc (P) [ 34.034809][ T4916] udmabuf_create+0x220/0xb34 [ 34.035912][ T4916] udmabuf_ioctl+0x1b0/0x2b4 [ 34.036934][ T4916] __arm64_sys_ioctl+0x154/0x1cc [ 34.037952][ T4916] invoke_syscall+0x98/0x244 [ 34.038898][ T4916] el0_svc_common+0xec/0x23c [ 34.039967][ T4916] do_el0_svc+0x4c/0x5c [ 34.040813][ T4916] el0_svc+0x60/0x1d8 [ 34.041654][ T4916] el0t_64_sync_handler+0x44/0x104 [ 34.042790][ T4916] el0t_64_sync+0x198/0x19c [ 34.043763][ T4916] irq event stamp: 730 [ 34.044654][ T4916] hardirqs last enabled at (729): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 34.046716][ T4916] hardirqs last disabled at (730): [] el1_brk64+0x20/0x54 [ 34.048361][ T4916] softirqs last enabled at (218): [] do_sve_acc+0x3ac/0x56c [ 34.049640][ T50] Bluetooth: hci0: command tx timeout [ 34.051189][ T4916] softirqs last disabled at (216): [] do_sve_acc+0x104/0x56c [ 34.052901][ T4916] ---[ end trace 0000000000000000 ]---