Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. 2026/08/24 19:18:55 parsed 1 programs 2026/08/24 19:18:55 serving rpc on tcp://39159 [ 67.485999][ T29] audit: type=1400 audit(1787599135.937:129): avc: denied { node_bind } for pid=5596 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.681905][ T29] audit: type=1400 audit(1787599138.137:130): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 69.706660][ T29] audit: type=1400 audit(1787599138.167:131): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.713008][ T5602] cgroup: Unknown subsys name 'net' [ 69.736857][ T29] audit: type=1400 audit(1787599138.197:132): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.841919][ T5602] cgroup: Unknown subsys name 'cpuset' [ 69.849621][ T5602] cgroup: Unknown subsys name 'rlimit' [ 70.007651][ T29] audit: type=1400 audit(1787599138.467:133): avc: denied { setattr } for pid=5602 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.051004][ T29] audit: type=1400 audit(1787599138.467:134): avc: denied { create } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.073098][ T29] audit: type=1400 audit(1787599138.467:135): avc: denied { write } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.096433][ T29] audit: type=1400 audit(1787599138.467:136): avc: denied { read } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.117077][ T29] audit: type=1400 audit(1787599138.477:137): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 70.119503][ T5606] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 70.142234][ T29] audit: type=1400 audit(1787599138.477:138): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 71.172498][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.912908][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 72.912924][ T29] audit: type=1400 audit(1787599141.367:143): avc: denied { execmem } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.947114][ T29] audit: type=1400 audit(1787599141.407:144): avc: denied { create } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.965243][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.968712][ T29] audit: type=1400 audit(1787599141.407:145): avc: denied { read write } for pid=5612 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.975932][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.005990][ T29] audit: type=1400 audit(1787599141.407:146): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 73.015678][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.030093][ T29] audit: type=1400 audit(1787599141.407:147): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="socket:[5431]" dev="sockfs" ino=5431 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.063289][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.070796][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.081693][ T29] audit: type=1400 audit(1787599141.537:148): avc: denied { read } for pid=5612 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.104164][ T29] audit: type=1400 audit(1787599141.537:149): avc: denied { open } for pid=5612 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.127649][ T29] audit: type=1400 audit(1787599141.537:150): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.163347][ T29] audit: type=1400 audit(1787599141.617:151): avc: denied { mounton } for pid=5612 comm="syz-executor" path="/root/syzkaller.SW7XJO/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.187722][ T29] audit: type=1400 audit(1787599141.617:152): avc: denied { mount } for pid=5612 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.217524][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.909590][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.917283][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.924691][ T5631] bridge_slave_0: entered allmulticast mode [ 73.931634][ T5631] bridge_slave_0: entered promiscuous mode [ 73.940407][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.947639][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.954751][ T5631] bridge_slave_1: entered allmulticast mode [ 73.961701][ T5631] bridge_slave_1: entered promiscuous mode [ 73.981318][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.992005][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.012824][ T5631] team0: Port device team_slave_0 added [ 74.019960][ T5631] team0: Port device team_slave_1 added [ 74.037276][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.044212][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.070235][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.082444][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.089407][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.115471][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.145092][ T5631] hsr_slave_0: entered promiscuous mode [ 74.151755][ T5631] hsr_slave_1: entered promiscuous mode [ 74.250604][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.261449][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.269970][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.278302][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.286375][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.296635][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.304814][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.314656][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.339879][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.347378][ T5631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.354960][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.362123][ T5631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.406918][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.422029][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.430506][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.444071][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.456728][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.463840][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.476036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.483155][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.711511][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.745299][ T5631] veth0_vlan: entered promiscuous mode [ 74.757779][ T5631] veth1_vlan: entered promiscuous mode [ 74.781923][ T5631] veth0_macvtap: entered promiscuous mode [ 74.790978][ T5631] veth1_macvtap: entered promiscuous mode [ 74.810277][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.827159][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.856468][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896805][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.911761][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928730][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.977716][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.041147][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.119307][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.213994][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.594255][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.603151][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.631876][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.639963][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/24 19:19:05 executed programs: 0 [ 77.065482][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.073646][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.081436][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.089187][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.097236][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.309945][ T1165] bridge_slave_1: left allmulticast mode [ 77.316289][ T1165] bridge_slave_1: left promiscuous mode [ 77.323079][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.333244][ T1165] bridge_slave_0: left allmulticast mode [ 77.340222][ T1165] bridge_slave_0: left promiscuous mode [ 77.346003][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.433080][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.443259][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.456753][ T1165] bond0 (unregistering): Released all slaves [ 77.553828][ T1165] hsr_slave_0: left promiscuous mode [ 77.559937][ T1165] hsr_slave_1: left promiscuous mode [ 77.567668][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.575119][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.584520][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.592905][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.607723][ T1165] veth1_macvtap: left promiscuous mode [ 77.614038][ T1165] veth0_macvtap: left promiscuous mode [ 77.620341][ T1165] veth1_vlan: left promiscuous mode [ 77.625784][ T1165] veth0_vlan: left promiscuous mode [ 77.849173][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 77.874124][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 77.966617][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 78.224486][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 78.224500][ T29] audit: type=1400 audit(1787599146.677:175): avc: denied { write } for pid=5756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.277337][ T29] audit: type=1400 audit(1787599146.737:176): avc: denied { write } for pid=5769 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.342752][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.350249][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.358568][ T5728] bridge_slave_0: entered allmulticast mode [ 78.366486][ T5728] bridge_slave_0: entered promiscuous mode [ 78.376272][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.383933][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.391790][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.399316][ T5728] bridge_slave_1: entered allmulticast mode [ 78.406198][ T5728] bridge_slave_1: entered promiscuous mode [ 78.437354][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.448562][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.743575][ T5728] team0: Port device team_slave_0 added [ 78.762437][ T5728] team0: Port device team_slave_1 added [ 78.839102][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.856040][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.882056][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.900631][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.907653][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.933820][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.025137][ T29] audit: type=1400 audit(1787599147.477:177): avc: denied { write } for pid=5774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.089792][ T5728] hsr_slave_0: entered promiscuous mode [ 79.110648][ T5728] hsr_slave_1: entered promiscuous mode [ 79.131501][ T29] audit: type=1400 audit(1787599147.577:178): avc: denied { write } for pid=5785 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.161248][ T4912] Bluetooth: hci0: command tx timeout [ 79.260399][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.601902][ T29] audit: type=1400 audit(1787599148.057:179): avc: denied { write } for pid=5788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.670328][ T29] audit: type=1400 audit(1787599148.127:180): avc: denied { write } for pid=5799 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.785454][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.798041][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.807971][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.817660][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.826141][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.839940][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.850074][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.862835][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.945088][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.968912][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.991781][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.999028][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.009516][ T29] audit: type=1400 audit(1787599148.457:181): avc: denied { write } for pid=5802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.042779][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.049930][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.075164][ T29] audit: type=1400 audit(1787599148.527:182): avc: denied { write } for pid=5820 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.403428][ T29] audit: type=1400 audit(1787599148.857:183): avc: denied { write } for pid=5825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.477035][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.483966][ T29] audit: type=1400 audit(1787599148.937:184): avc: denied { write } for pid=5844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.537955][ T5728] veth0_vlan: entered promiscuous mode [ 80.551450][ T5728] veth1_vlan: entered promiscuous mode [ 80.582934][ T5728] veth0_macvtap: entered promiscuous mode [ 80.597274][ T5728] veth1_macvtap: entered promiscuous mode [ 80.626944][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.639938][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.705696][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.714505][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.748219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.760433][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.792445][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.795875][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800609][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.837861][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874165][ T5858] ------------[ cut here ]------------ [ 80.879748][ T5858] !(flags & __GFP_NOWARN) [ 80.879761][ T5858] WARNING: mm/slub.c:6908 at __kvmalloc_node_noprof+0x63c/0x970, CPU#1: syz.0.17/5858 [ 80.894114][ T5858] Modules linked in: [ 80.898477][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 80.907937][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.918433][ T5858] RIP: 0010:__kvmalloc_node_noprof+0x63c/0x970 [ 80.924616][ T5858] Code: c1 e8 58 09 ff ff 4d 85 f6 0f 85 bb fd ff ff 48 81 fb ff ff ff 7f 0f 86 4f fd ff ff 41 81 e4 00 20 00 00 0f 85 a1 fd ff ff 90 <0f> 0b 90 e9 98 fd ff ff 41 be 10 00 00 00 e9 8d fd ff ff be 42 01 [ 80.944406][ T5858] RSP: 0018:ffffc90003a3fb78 EFLAGS: 00010246 [ 80.950531][ T5858] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 80.958575][ T5858] RDX: 0000000000000000 RSI: ffffffff8c61c900 RDI: ffffffff8e6af928 [ 80.966662][ T5858] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 80.974641][ T5858] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 80.983272][ T5858] R13: 00000000000028c0 R14: 0000000000000000 R15: 0000001000000000 [ 80.991310][ T5858] FS: 0000555589336500(0000) GS:ffff888123c7b000(0000) knlGS:0000000000000000 [ 81.000296][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.006947][ T5858] CR2: 00007f87e6670000 CR3: 000000006f0f9000 CR4: 00000000003526f0 [ 81.014962][ T5858] Call Trace: [ 81.018319][ T5858] [ 81.021258][ T5858] ? udmabuf_create+0x2e8/0x12a0 [ 81.026262][ T5858] udmabuf_create+0x2e8/0x12a0 [ 81.031052][ T5858] ? __pfx_udmabuf_create+0x10/0x10 [ 81.036390][ T5858] ? find_held_lock+0x2b/0x80 [ 81.041081][ T5858] ? __might_fault+0xc5/0x140 [ 81.045822][ T5858] ? __might_fault+0xc5/0x140 [ 81.050525][ T5858] udmabuf_ioctl+0x18f/0x300 [ 81.055141][ T5858] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.060325][ T5858] ? selinux_file_ioctl+0x13b/0x290 [ 81.065537][ T5858] ? selinux_file_ioctl+0xb6/0x290 [ 81.070707][ T5858] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.075892][ T5858] __x64_sys_ioctl+0x18e/0x210 [ 81.080676][ T5858] do_syscall_64+0x123/0x790 [ 81.085284][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.091296][ T5858] RIP: 0033:0x7f87e679e0d9 [ 81.095773][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.115607][ T5858] RSP: 002b:00007ffe6f883a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.124030][ T5858] RAX: ffffffffffffffda RBX: 00007f87e6a25fa0 RCX: 00007f87e679e0d9 [ 81.132077][ T5858] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000003 [ 81.140560][ T5858] RBP: 00007f87e6835024 R08: 0000000000000000 R09: 0000000000000000 [ 81.148629][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.156642][ T5858] R13: 00007f87e6a25fac R14: 00007f87e6a25fa0 R15: 00007f87e6a25fa0 [ 81.164634][ T5858] [ 81.167779][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.175064][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 81.184177][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 81.194325][ T5858] Call Trace: [ 81.197611][ T5858] [ 81.200589][ T5858] dump_stack_lvl+0x100/0x190 [ 81.205280][ T5858] vpanic+0x553/0x970 [ 81.209276][ T5858] ? __pfx_vpanic+0x10/0x10 [ 81.213796][ T5858] panic+0xd1/0xe0 [ 81.217530][ T5858] ? __pfx_panic+0x10/0x10 [ 81.221963][ T5858] check_panic_on_warn.cold+0x19/0x34 [ 81.227431][ T5858] ? __kvmalloc_node_noprof+0x63c/0x970 [ 81.232991][ T5858] __warn.cold+0x191/0x318 [ 81.237414][ T5858] __report_bug+0x30f/0x440 [ 81.242015][ T5858] ? __kvmalloc_node_noprof+0x63c/0x970 [ 81.247577][ T5858] ? __pfx___report_bug+0x10/0x10 [ 81.252639][ T5858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.258549][ T5858] ? policy_nodemask+0xed/0x4f0 [ 81.263407][ T5858] ? __kvmalloc_node_noprof+0x63c/0x970 [ 81.268963][ T5858] report_bug+0xb3/0x220 [ 81.273235][ T5858] ? __kvmalloc_node_noprof+0x63c/0x970 [ 81.278882][ T5858] handle_bug+0x16a/0x2a0 [ 81.283224][ T5858] exc_invalid_op+0x17/0x50 [ 81.287749][ T5858] asm_exc_invalid_op+0x1a/0x20 [ 81.292601][ T5858] RIP: 0010:__kvmalloc_node_noprof+0x63c/0x970 [ 81.298863][ T5858] Code: c1 e8 58 09 ff ff 4d 85 f6 0f 85 bb fd ff ff 48 81 fb ff ff ff 7f 0f 86 4f fd ff ff 41 81 e4 00 20 00 00 0f 85 a1 fd ff ff 90 <0f> 0b 90 e9 98 fd ff ff 41 be 10 00 00 00 e9 8d fd ff ff be 42 01 [ 81.318569][ T5858] RSP: 0018:ffffc90003a3fb78 EFLAGS: 00010246 [ 81.324648][ T5858] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 81.332625][ T5858] RDX: 0000000000000000 RSI: ffffffff8c61c900 RDI: ffffffff8e6af928 [ 81.340605][ T5858] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 81.348582][ T5858] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 81.356550][ T5858] R13: 00000000000028c0 R14: 0000000000000000 R15: 0000001000000000 [ 81.364532][ T5858] ? __kvmalloc_node_noprof+0x618/0x970 [ 81.370102][ T5858] ? udmabuf_create+0x2e8/0x12a0 [ 81.375049][ T5858] udmabuf_create+0x2e8/0x12a0 [ 81.379841][ T5858] ? __pfx_udmabuf_create+0x10/0x10 [ 81.385079][ T5858] ? find_held_lock+0x2b/0x80 [ 81.389775][ T5858] ? __might_fault+0xc5/0x140 [ 81.394462][ T5858] ? __might_fault+0xc5/0x140 [ 81.399147][ T5858] udmabuf_ioctl+0x18f/0x300 [ 81.403737][ T5858] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.408898][ T5858] ? selinux_file_ioctl+0x13b/0x290 [ 81.414113][ T5858] ? selinux_file_ioctl+0xb6/0x290 [ 81.419241][ T5858] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 81.424390][ T5858] __x64_sys_ioctl+0x18e/0x210 [ 81.429170][ T5858] do_syscall_64+0x123/0x790 [ 81.433771][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.439663][ T5858] RIP: 0033:0x7f87e679e0d9 [ 81.444083][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.463706][ T5858] RSP: 002b:00007ffe6f883a08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.472122][ T5858] RAX: ffffffffffffffda RBX: 00007f87e6a25fa0 RCX: 00007f87e679e0d9 [ 81.480137][ T5858] RDX: 0000200000000040 RSI: 0000000040187542 RDI: 0000000000000003 [ 81.488113][ T5858] RBP: 00007f87e6835024 R08: 0000000000000000 R09: 0000000000000000 [ 81.496179][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.504147][ T5858] R13: 00007f87e6a25fac R14: 00007f87e6a25fa0 R15: 00007f87e6a25fa0 [ 81.512128][ T5858] [ 81.515429][ T5858] Kernel Offset: disabled [ 81.519749][ T5858] Rebooting in 86400 seconds..