Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://39733 [ 30.994420][ T4727] cgroup: Unknown subsys name 'net' [ 31.154131][ T4727] cgroup: Unknown subsys name 'cpuset' [ 31.156288][ T4727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.360390][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.805820][ T4735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.133326][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.133634][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.133723][ T4748] bridge_slave_0: entered allmulticast mode [ 34.134224][ T4748] bridge_slave_0: entered promiscuous mode [ 34.135418][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.135470][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.135514][ T4748] bridge_slave_1: entered allmulticast mode [ 34.135932][ T4748] bridge_slave_1: entered promiscuous mode [ 34.143055][ T4748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.143903][ T4748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.150115][ T4748] team0: Port device team_slave_0 added [ 34.150810][ T4748] team0: Port device team_slave_1 added [ 34.159987][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.160018][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.160032][ T4748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.160701][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.160709][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.160723][ T4748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.170703][ T4748] hsr_slave_0: entered promiscuous mode [ 34.171019][ T4748] hsr_slave_1: entered promiscuous mode [ 34.217175][ T4748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.220008][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.220437][ T4748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.222740][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.223074][ T4748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.224697][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.225270][ T4748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.227116][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.235897][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.235948][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.236114][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.236156][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.251033][ T4748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.255505][ T3248] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.257277][ T3248] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.261358][ T4748] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.264815][ T3961] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.264890][ T3961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.269439][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.269477][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.370228][ T4748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.381739][ T4748] veth0_vlan: entered promiscuous mode [ 34.385644][ T4748] veth1_vlan: entered promiscuous mode [ 34.394535][ T4748] veth0_macvtap: entered promiscuous mode [ 34.395859][ T4748] veth1_macvtap: entered promiscuous mode [ 34.399801][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.401080][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.423761][ T3545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.424958][ T3545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.424982][ T3545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.425001][ T3545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.518065][ T3545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.545780][ T3545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.628255][ T3545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.677139][ T3545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.044707][ T4811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.045266][ T4811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.045458][ T4811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.045858][ T4811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.046233][ T4811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.178060][ T3961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.178090][ T3961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.188443][ T3248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.188473][ T3248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:35 executed programs: 0 [ 35.605920][ T4811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.607468][ T4811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.608059][ T4811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.608404][ T4811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.608596][ T4811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.741486][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.741578][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.741644][ T4831] bridge_slave_0: entered allmulticast mode [ 35.742099][ T4831] bridge_slave_0: entered promiscuous mode [ 35.745299][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.745346][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.745409][ T4831] bridge_slave_1: entered allmulticast mode [ 35.745848][ T4831] bridge_slave_1: entered promiscuous mode [ 35.753522][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.754526][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.760645][ T4831] team0: Port device team_slave_0 added [ 35.761779][ T4831] team0: Port device team_slave_1 added [ 35.769197][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.770642][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.772712][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.773451][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.773459][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.773472][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.788038][ T4831] hsr_slave_0: entered promiscuous mode [ 35.788386][ T4831] hsr_slave_1: entered promiscuous mode [ 35.788618][ T4831] debugfs: 'hsr0' already exists in 'hsr' [ 35.788662][ T4831] Cannot create hsr debugfs directory [ 37.683053][ T4811] Bluetooth: hci0: command tx timeout [ 38.178230][ T3545] bridge_slave_1: left allmulticast mode [ 38.178271][ T3545] bridge_slave_1: left promiscuous mode [ 38.178664][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.182044][ T3545] bridge_slave_0: left allmulticast mode [ 38.182070][ T3545] bridge_slave_0: left promiscuous mode [ 38.182165][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.241444][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.264002][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.273770][ T3545] bond0 (unregistering): Released all slaves [ 38.305715][ T3545] hsr_slave_0: left promiscuous mode [ 38.306888][ T3545] hsr_slave_1: left promiscuous mode [ 38.307323][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.307340][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.309703][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.309715][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.315205][ T3545] veth1_macvtap: left promiscuous mode [ 38.315254][ T3545] veth0_macvtap: left promiscuous mode [ 38.315462][ T3545] veth1_vlan: left promiscuous mode [ 38.315510][ T3545] veth0_vlan: left promiscuous mode [ 38.420580][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 38.424849][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 38.476434][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.601328][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.779944][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.783812][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.785527][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.787874][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.790278][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.799784][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.801575][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.808019][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.011299][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.014233][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.018072][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.018120][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.019280][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.019301][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.163885][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.175731][ T4831] veth0_vlan: entered promiscuous mode [ 39.177456][ T4831] veth1_vlan: entered promiscuous mode [ 39.213697][ T4831] veth0_macvtap: entered promiscuous mode [ 39.216832][ T4831] veth1_macvtap: entered promiscuous mode [ 39.242020][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.244567][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.269557][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.269592][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.274838][ T3248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.274886][ T3248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.274902][ T3248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.274916][ T3248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.282540][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.283020][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.321000][ T4923] ================================================================== [ 39.321015][ T4923] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr+0x44/0x1b8 [ 39.321041][ T4923] Read of size 84 at addr ffff0000ce07d780 by task syz.0.17/4923 [ 39.321048][ T4923] [ 39.321053][ T4923] CPU: 0 UID: 0 PID: 4923 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.321062][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 39.321067][ T4923] Call trace: [ 39.321070][ T4923] show_stack+0x2c/0x3c (C) [ 39.321085][ T4923] __dump_stack+0x30/0x40 [ 39.321098][ T4923] dump_stack_lvl+0xd8/0x12c [ 39.321107][ T4923] print_address_description+0xb0/0x238 [ 39.321116][ T4923] print_report+0x68/0x84 [ 39.321123][ T4923] kasan_report+0x8c/0xc4 [ 39.321132][ T4923] kasan_check_range+0x17c/0x1ac [ 39.321141][ T4923] __asan_memcpy+0x3c/0x84 [ 39.321151][ T4923] copy_from_sockptr+0x44/0x1b8 [ 39.321160][ T4923] vcc_setsockopt+0x174/0x450 [ 39.321168][ T4923] pvc_setsockopt+0x84/0xb0 [ 39.321177][ T4923] do_sock_setsockopt+0x1f0/0x330 [ 39.321187][ T4923] __sys_setsockopt+0x104/0x170 [ 39.321196][ T4923] __arm64_sys_setsockopt+0xc8/0xe4 [ 39.321204][ T4923] invoke_syscall+0x98/0x244 [ 39.321214][ T4923] el0_svc_common+0xec/0x23c [ 39.321224][ T4923] do_el0_svc+0x4c/0x5c [ 39.321233][ T4923] el0_svc+0x64/0x260 [ 39.321244][ T4923] el0t_64_sync_handler+0x48/0x148 [ 39.321253][ T4923] el0t_64_sync+0x198/0x19c [ 39.321262][ T4923] [ 39.321264][ T4923] Allocated by task 4923: [ 39.321268][ T4923] kasan_save_track+0x40/0x78 [ 39.321275][ T4923] kasan_save_alloc_info+0x44/0x54 [ 39.321283][ T4923] __kasan_kmalloc+0x9c/0xb4 [ 39.321290][ T4923] __kmalloc_noprof+0x340/0x6b8 [ 39.321297][ T4923] __cgroup_bpf_run_filter_setsockopt+0x1f4/0xbbc [ 39.321307][ T4923] do_sock_setsockopt+0x2e8/0x330 [ 39.321314][ T4923] __sys_setsockopt+0x104/0x170 [ 39.321321][ T4923] __arm64_sys_setsockopt+0xc8/0xe4 [ 39.321328][ T4923] invoke_syscall+0x98/0x244 [ 39.321336][ T4923] el0_svc_common+0xec/0x23c [ 39.321344][ T4923] do_el0_svc+0x4c/0x5c [ 39.321352][ T4923] el0_svc+0x64/0x260 [ 39.321359][ T4923] el0t_64_sync_handler+0x48/0x148 [ 39.321368][ T4923] el0t_64_sync+0x198/0x19c [ 39.321373][ T4923] [ 39.321375][ T4923] The buggy address belongs to the object at ffff0000ce07d780 [ 39.321375][ T4923] which belongs to the cache kmalloc-64 of size 64 [ 39.321381][ T4923] The buggy address is located 0 bytes inside of [ 39.321381][ T4923] allocated 53-byte region [ffff0000ce07d780, ffff0000ce07d7b5) [ 39.321388][ T4923] [ 39.321389][ T4923] The buggy address belongs to the physical page: [ 39.321393][ T4923] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e07d [ 39.321399][ T4923] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 39.321406][ T4923] page_type: f5(slab) [ 39.321413][ T4923] raw: 05ffc00000000000 ffff0000c00018c0 dead000000000100 dead000000000122 [ 39.321418][ T4923] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 39.321422][ T4923] page dumped because: kasan: bad access detected [ 39.321424][ T4923] [ 39.321426][ T4923] Memory state around the buggy address: [ 39.321429][ T4923] ffff0000ce07d680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.321434][ T4923] ffff0000ce07d700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.321438][ T4923] >ffff0000ce07d780: 00 00 00 00 00 00 05 fc fc fc fc fc fc fc fc fc [ 39.321441][ T4923] ^ [ 39.321445][ T4923] ffff0000ce07d800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.321449][ T4923] ffff0000ce07d880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 39.321452][ T4923] ================================================================== [ 39.331305][ T4923] Disabling lock debugging due to kernel taint