Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://37207 [ 32.056559][ T4726] cgroup: Unknown subsys name 'net' [ 32.216195][ T4726] cgroup: Unknown subsys name 'cpuset' [ 32.218441][ T4726] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.405309][ T4726] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.214687][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.214716][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.223003][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.223031][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.268017][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.400414][ T4737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.401398][ T4737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.401622][ T4737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.401943][ T4737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.402145][ T4737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.444474][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.445998][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.446094][ T4785] bridge_slave_0: entered allmulticast mode [ 36.446584][ T4785] bridge_slave_0: entered promiscuous mode [ 36.447579][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.447610][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.447673][ T4785] bridge_slave_1: entered allmulticast mode [ 36.448067][ T4785] bridge_slave_1: entered promiscuous mode [ 36.458805][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.461540][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.477279][ T4785] team0: Port device team_slave_0 added [ 36.479115][ T4785] team0: Port device team_slave_1 added [ 36.486321][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.487699][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.492905][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.496526][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.496554][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.496574][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.509445][ T4785] hsr_slave_0: entered promiscuous mode [ 36.509784][ T4785] hsr_slave_1: entered promiscuous mode [ 36.555490][ T4785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.559412][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.559997][ T4785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.561889][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.562195][ T4785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.563908][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.565191][ T4785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.566914][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.576276][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.576331][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.576474][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.576503][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.593258][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.597892][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.599359][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.603380][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.607021][ T867] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.607084][ T867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.611345][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.611385][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.717745][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.730031][ T4785] veth0_vlan: entered promiscuous mode [ 36.733757][ T4785] veth1_vlan: entered promiscuous mode [ 36.741550][ T4785] veth0_macvtap: entered promiscuous mode [ 36.742762][ T4785] veth1_macvtap: entered promiscuous mode [ 36.748441][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.749645][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.752845][ T867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.755470][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.774967][ T867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.776713][ T867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.869196][ T15] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.928104][ T15] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.012123][ T15] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.048453][ T15] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:37 executed programs: 0 [ 37.142176][ T4737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.142645][ T4737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.142828][ T4737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.143161][ T4737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.143397][ T4737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.274795][ T4828] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.274876][ T4828] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.274990][ T4828] bridge_slave_0: entered allmulticast mode [ 37.275412][ T4828] bridge_slave_0: entered promiscuous mode [ 37.276653][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.276706][ T4828] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.276773][ T4828] bridge_slave_1: entered allmulticast mode [ 37.277186][ T4828] bridge_slave_1: entered promiscuous mode [ 37.284550][ T4828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.286846][ T4828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.293075][ T4828] team0: Port device team_slave_0 added [ 37.294004][ T4828] team0: Port device team_slave_1 added [ 37.300376][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.300401][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.300416][ T4828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.301123][ T4828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.301131][ T4828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.301145][ T4828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.311545][ T4828] hsr_slave_0: entered promiscuous mode [ 37.311831][ T4828] hsr_slave_1: entered promiscuous mode [ 37.312014][ T4828] debugfs: 'hsr0' already exists in 'hsr' [ 37.312065][ T4828] Cannot create hsr debugfs directory [ 39.195100][ T50] Bluetooth: hci0: command tx timeout [ 40.229160][ T15] bridge_slave_1: left allmulticast mode [ 40.229200][ T15] bridge_slave_1: left promiscuous mode [ 40.229553][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.236101][ T15] bridge_slave_0: left allmulticast mode [ 40.237788][ T15] bridge_slave_0: left promiscuous mode [ 40.237892][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.307072][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.321447][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.327662][ T15] bond0 (unregistering): Released all slaves [ 40.354384][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.386655][ T15] hsr_slave_0: left promiscuous mode [ 40.386972][ T15] hsr_slave_1: left promiscuous mode [ 40.388505][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.388524][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.389972][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.389984][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.397181][ T15] veth1_macvtap: left promiscuous mode [ 40.397247][ T15] veth0_macvtap: left promiscuous mode [ 40.397304][ T15] veth1_vlan: left promiscuous mode [ 40.397349][ T15] veth0_vlan: left promiscuous mode [ 40.496554][ T15] team0 (unregistering): Port device team_slave_1 removed [ 40.500331][ T15] team0 (unregistering): Port device team_slave_0 removed [ 40.546800][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.844078][ T4828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.846782][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.847191][ T4828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.850135][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.850725][ T4828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.852601][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.852919][ T4828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.862085][ T4828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.940636][ T4828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.946988][ T4828] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.949872][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.949917][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.952745][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.952798][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.075929][ T4828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.088134][ T4828] veth0_vlan: entered promiscuous mode [ 41.089754][ T4828] veth1_vlan: entered promiscuous mode [ 41.100242][ T4828] veth0_macvtap: entered promiscuous mode [ 41.102770][ T4828] veth1_macvtap: entered promiscuous mode [ 41.109948][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.111046][ T4828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.125444][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.125644][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.127963][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.127984][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135033][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.135058][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.143610][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.146620][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.274891][ T50] Bluetooth: hci0: command tx timeout [ 41.290199][ T4947] ================================================================== [ 41.290209][ T4947] BUG: KASAN: slab-out-of-bounds in string_nocheck+0xd8/0x140 [ 41.290234][ T4947] Read of size 1 at addr ffff0000d0cf899c by task syz.0.17/4947 [ 41.290243][ T4947] [ 41.290255][ T4947] CPU: 1 UID: 0 PID: 4947 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 41.290267][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.290281][ T4947] Call trace: [ 41.290285][ T4947] show_stack+0x2c/0x3c (C) [ 41.290300][ T4947] __dump_stack+0x30/0x40 [ 41.290312][ T4947] dump_stack_lvl+0xd8/0x12c [ 41.290322][ T4947] print_address_description+0xb0/0x238 [ 41.290331][ T4947] print_report+0x68/0x84 [ 41.290338][ T4947] kasan_report+0x8c/0xc4 [ 41.290350][ T4947] __asan_report_load1_noabort+0x20/0x2c [ 41.290360][ T4947] string_nocheck+0xd8/0x140 [ 41.290370][ T4947] string+0x8c/0xc8 [ 41.290380][ T4947] vsnprintf+0x880/0xd10 [ 41.290389][ T4947] pointer+0x5e8/0x6b4 [ 41.290399][ T4947] vsnprintf+0x618/0xd10 [ 41.290408][ T4947] vprintk_store+0x344/0xb94 [ 41.290418][ T4947] vprintk_emit+0x1bc/0x514 [ 41.290426][ T4947] vprintk_default+0x54/0x80 [ 41.290435][ T4947] vprintk+0x9c/0x114 [ 41.290444][ T4947] _printk+0xe0/0x130 [ 41.290451][ T4947] __dynamic_pr_debug+0x148/0x1e4 [ 41.290459][ T4947] nfc_llcp_get_sdp_ssap+0x350/0x3fc [ 41.290467][ T4947] llcp_sock_bind+0x2e0/0x58c [ 41.290475][ T4947] __sys_bind+0x1c4/0x268 [ 41.290486][ T4947] __arm64_sys_bind+0x84/0x9c [ 41.290494][ T4947] invoke_syscall+0x98/0x244 [ 41.290504][ T4947] el0_svc_common+0xec/0x23c [ 41.290514][ T4947] do_el0_svc+0x4c/0x5c [ 41.290523][ T4947] el0_svc+0x64/0x260 [ 41.290531][ T4947] el0t_64_sync_handler+0x44/0x104 [ 41.290540][ T4947] el0t_64_sync+0x198/0x19c [ 41.290548][ T4947] [ 41.290549][ T4947] Allocated by task 4947: [ 41.290553][ T4947] kasan_save_track+0x40/0x78 [ 41.290561][ T4947] kasan_save_alloc_info+0x40/0x50 [ 41.290569][ T4947] __kasan_kmalloc+0x9c/0xb4 [ 41.290576][ T4947] __kmalloc_node_track_caller_noprof+0x434/0x6d4 [ 41.290584][ T4947] kmemdup_noprof+0x44/0x8c [ 41.290592][ T4947] llcp_sock_bind+0x2b0/0x58c [ 41.290598][ T4947] __sys_bind+0x1c4/0x268 [ 41.290605][ T4947] __arm64_sys_bind+0x84/0x9c [ 41.290612][ T4947] invoke_syscall+0x98/0x244 [ 41.290620][ T4947] el0_svc_common+0xec/0x23c [ 41.290628][ T4947] do_el0_svc+0x4c/0x5c [ 41.290636][ T4947] el0_svc+0x64/0x260 [ 41.290642][ T4947] el0t_64_sync_handler+0x44/0x104 [ 41.290649][ T4947] el0t_64_sync+0x198/0x19c [ 41.290654][ T4947] [ 41.290656][ T4947] The buggy address belongs to the object at ffff0000d0cf8980 [ 41.290656][ T4947] which belongs to the cache kmalloc-32 of size 32 [ 41.290661][ T4947] The buggy address is located 0 bytes to the right of [ 41.290661][ T4947] allocated 28-byte region [ffff0000d0cf8980, ffff0000d0cf899c) [ 41.290669][ T4947] [ 41.290671][ T4947] The buggy address belongs to the physical page: [ 41.290675][ T4947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110cf8 [ 41.290682][ T4947] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 41.290688][ T4947] page_type: f5(slab) [ 41.290695][ T4947] raw: 05ffc00000000000 ffff0000c0001780 dead000000000100 dead000000000122 [ 41.290701][ T4947] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 41.290704][ T4947] page dumped because: kasan: bad access detected [ 41.290707][ T4947] [ 41.290709][ T4947] Memory state around the buggy address: [ 41.290712][ T4947] ffff0000d0cf8880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 41.290717][ T4947] ffff0000d0cf8900: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 41.290721][ T4947] >ffff0000d0cf8980: 00 00 00 04 fc fc fc fc 00 00 00 fc fc fc fc fc [ 41.290724][ T4947] ^ [ 41.290728][ T4947] ffff0000d0cf8a00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 41.290732][ T4947] ffff0000d0cf8a80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 41.290735][ T4947] ================================================================== [ 41.290738][ T4947] Disabling lock debugging due to kernel taint