Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://36149 [ 31.046594][ T4724] cgroup: Unknown subsys name 'net' [ 31.147612][ T4724] cgroup: Unknown subsys name 'cpuset' [ 31.149666][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.313291][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.427925][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.536737][ T4743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.537206][ T4743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.537361][ T4743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.537757][ T4743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.537957][ T4743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.304946][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.305220][ T4771] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.305285][ T4771] bridge_slave_0: entered allmulticast mode [ 35.305749][ T4771] bridge_slave_0: entered promiscuous mode [ 35.307299][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.307357][ T4771] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.307404][ T4771] bridge_slave_1: entered allmulticast mode [ 35.307790][ T4771] bridge_slave_1: entered promiscuous mode [ 35.314692][ T4771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.317732][ T4771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.323772][ T4771] team0: Port device team_slave_0 added [ 35.324633][ T4771] team0: Port device team_slave_1 added [ 35.345752][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.345777][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.345794][ T4771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.346522][ T4771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.346530][ T4771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.346543][ T4771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.356696][ T4771] hsr_slave_0: entered promiscuous mode [ 35.357007][ T4771] hsr_slave_1: entered promiscuous mode [ 35.405799][ T4771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.409042][ T4771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.409671][ T4771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.411246][ T4771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.411672][ T4771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.413768][ T4771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.414608][ T4771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.416121][ T4771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.424199][ T4771] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.424253][ T4771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.424407][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.424435][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.441532][ T4771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.445127][ T1972] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.447697][ T1972] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.453173][ T4771] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.456633][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.456684][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.458819][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.458842][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.554481][ T4771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.564438][ T4771] veth0_vlan: entered promiscuous mode [ 35.568177][ T4771] veth1_vlan: entered promiscuous mode [ 35.584599][ T4771] veth0_macvtap: entered promiscuous mode [ 35.587482][ T4771] veth1_macvtap: entered promiscuous mode [ 35.591548][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.592724][ T4771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.597174][ T4047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.599015][ T4047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.601003][ T4047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.602831][ T4047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.689880][ T3811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.749500][ T3811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.800361][ T3811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.818958][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.818988][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.828881][ T4047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.828906][ T4047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.878618][ T3811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.254317][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.254711][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.257607][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.259158][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.259569][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.391022][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.391115][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.391172][ T4833] bridge_slave_0: entered allmulticast mode [ 36.391587][ T4833] bridge_slave_0: entered promiscuous mode [ 36.392520][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.392570][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.392619][ T4833] bridge_slave_1: entered allmulticast mode [ 36.393027][ T4833] bridge_slave_1: entered promiscuous mode [ 36.399885][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.401780][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.410464][ T4833] team0: Port device team_slave_0 added [ 36.412013][ T4833] team0: Port device team_slave_1 added [ 36.418496][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.418517][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.418534][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.419064][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.419072][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.419087][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.428534][ T4833] hsr_slave_0: entered promiscuous mode [ 36.428825][ T4833] hsr_slave_1: entered promiscuous mode [ 36.429020][ T4833] debugfs: 'hsr0' already exists in 'hsr' [ 36.429058][ T4833] Cannot create hsr debugfs directory [ 38.325233][ T4743] Bluetooth: hci0: command tx timeout [ 39.064553][ T3811] bridge_slave_1: left allmulticast mode [ 39.064597][ T3811] bridge_slave_1: left promiscuous mode [ 39.064910][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.071108][ T3811] bridge_slave_0: left allmulticast mode [ 39.071140][ T3811] bridge_slave_0: left promiscuous mode [ 39.071209][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.126478][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.156185][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.205741][ T3811] bond0 (unregistering): Released all slaves [ 39.257070][ T3811] hsr_slave_0: left promiscuous mode [ 39.257377][ T3811] hsr_slave_1: left promiscuous mode [ 39.257643][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.257665][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.258019][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.258030][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.265939][ T3811] veth1_macvtap: left promiscuous mode [ 39.265989][ T3811] veth0_macvtap: left promiscuous mode [ 39.266064][ T3811] veth1_vlan: left promiscuous mode [ 39.266103][ T3811] veth0_vlan: left promiscuous mode [ 39.362805][ T3811] team0 (unregistering): Port device team_slave_1 removed [ 39.366559][ T3811] team0 (unregistering): Port device team_slave_0 removed [ 39.419164][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.701572][ T4833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.704964][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.706744][ T4833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.709005][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.710952][ T4833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.713224][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.716669][ T4833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.719210][ T4833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.847322][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.854268][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.856671][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.856717][ T4047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.860961][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.860998][ T4047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.877465][ T4833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.016839][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.065636][ T4833] veth0_vlan: entered promiscuous mode [ 40.067422][ T4833] veth1_vlan: entered promiscuous mode [ 40.073272][ T4833] veth0_macvtap: entered promiscuous mode [ 40.075931][ T4833] veth1_macvtap: entered promiscuous mode [ 40.079617][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.080866][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.084500][ T1972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088521][ T1972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088566][ T1972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088596][ T1972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.148898][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.148926][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.166690][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.166716][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.195532][ T4925] ================================================================== [ 40.195548][ T4925] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr+0x44/0x1b8 [ 40.195569][ T4925] Read of size 84 at addr ffff0000d23743a0 by task syz.0.17/4925 [ 40.195577][ T4925] [ 40.195581][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 40.195590][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 40.195595][ T4925] Call trace: [ 40.195597][ T4925] show_stack+0x2c/0x3c (C) [ 40.195613][ T4925] __dump_stack+0x30/0x40 [ 40.195624][ T4925] dump_stack_lvl+0xd8/0x12c [ 40.195633][ T4925] print_address_description+0xb0/0x238 [ 40.195642][ T4925] print_report+0x68/0x84 [ 40.195648][ T4925] kasan_report+0x8c/0xc4 [ 40.195658][ T4925] kasan_check_range+0x17c/0x1ac [ 40.195667][ T4925] __asan_memcpy+0x3c/0x84 [ 40.195677][ T4925] copy_from_sockptr+0x44/0x1b8 [ 40.195685][ T4925] vcc_setsockopt+0x174/0x450 [ 40.195694][ T4925] pvc_setsockopt+0x84/0xb0 [ 40.195702][ T4925] do_sock_setsockopt+0x1f0/0x330 [ 40.195712][ T4925] __sys_setsockopt+0x104/0x170 [ 40.195721][ T4925] __arm64_sys_setsockopt+0xc8/0xe4 [ 40.195729][ T4925] invoke_syscall+0x98/0x244 [ 40.195740][ T4925] el0_svc_common+0xec/0x23c [ 40.195749][ T4925] do_el0_svc+0x4c/0x5c [ 40.195758][ T4925] el0_svc+0x64/0x260 [ 40.195769][ T4925] el0t_64_sync_handler+0x48/0x148 [ 40.195779][ T4925] el0t_64_sync+0x198/0x19c [ 40.195787][ T4925] [ 40.195789][ T4925] Allocated by task 4925: [ 40.195792][ T4925] kasan_save_track+0x40/0x78 [ 40.195800][ T4925] kasan_save_alloc_info+0x44/0x54 [ 40.195808][ T4925] __kasan_kmalloc+0x9c/0xb4 [ 40.195814][ T4925] __kmalloc_noprof+0x340/0x6b8 [ 40.195821][ T4925] __cgroup_bpf_run_filter_setsockopt+0x990/0xbbc [ 40.195831][ T4925] do_sock_setsockopt+0x2e8/0x330 [ 40.195838][ T4925] __sys_setsockopt+0x104/0x170 [ 40.195845][ T4925] __arm64_sys_setsockopt+0xc8/0xe4 [ 40.195852][ T4925] invoke_syscall+0x98/0x244 [ 40.195860][ T4925] el0_svc_common+0xec/0x23c [ 40.195868][ T4925] do_el0_svc+0x4c/0x5c [ 40.195876][ T4925] el0_svc+0x64/0x260 [ 40.195883][ T4925] el0t_64_sync_handler+0x48/0x148 [ 40.195891][ T4925] el0t_64_sync+0x198/0x19c [ 40.195896][ T4925] [ 40.195898][ T4925] The buggy address belongs to the object at ffff0000d23743a0 [ 40.195898][ T4925] which belongs to the cache kmalloc-8 of size 8 [ 40.195904][ T4925] The buggy address is located 0 bytes inside of [ 40.195904][ T4925] allocated 4-byte region [ffff0000d23743a0, ffff0000d23743a4) [ 40.195910][ T4925] [ 40.195912][ T4925] The buggy address belongs to the physical page: [ 40.195916][ T4925] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d2374460 pfn:0x112374 [ 40.195923][ T4925] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 40.195930][ T4925] page_type: f5(slab) [ 40.195937][ T4925] raw: 05ffc00000000200 ffff0000c0001500 ffff0000c0000348 fffffdffc32f1f10 [ 40.195943][ T4925] raw: ffff0000d2374460 0000000800800041 00000000f5000000 0000000000000000 [ 40.195946][ T4925] page dumped because: kasan: bad access detected [ 40.195949][ T4925] [ 40.195951][ T4925] Memory state around the buggy address: [ 40.195955][ T4925] ffff0000d2374280: 07 fc fc fc 07 fc fc fc 07 fc fc fc 07 fc fc fc [ 40.195959][ T4925] ffff0000d2374300: 07 fc fc fc 07 fc fc fc 05 fc fc fc 05 fc fc fc [ 40.195963][ T4925] >ffff0000d2374380: fa fc fc fc 04 fc fc fc fa fc fc fc fa fc fc fc [ 40.195966][ T4925] ^ [ 40.195970][ T4925] ffff0000d2374400: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 40.195974][ T4925] ffff0000d2374480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 40.195977][ T4925] ================================================================== [ 40.207178][ T4925] Disabling lock debugging due to kernel taint