[ 9.628364][ T3993] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.656432][ T297] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.662867][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://40345 syzkaller login: [ 33.011339][ T4337] cgroup: Unknown subsys name 'net' [ 33.233759][ T4337] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.537964][ T4337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.425653][ T4350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.427339][ T4350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.428823][ T4350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.430582][ T4350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.432547][ T4350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.434175][ T4350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.620163][ T4358] chnl_net:caif_netlink_parms(): no params data found [ 36.639235][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.640924][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.643729][ T4358] device bridge_slave_0 entered promiscuous mode [ 36.646233][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.647710][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.649549][ T4358] device bridge_slave_1 entered promiscuous mode [ 36.657212][ T4358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.659829][ T4358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.668780][ T4358] team0: Port device team_slave_0 added [ 36.670654][ T4358] team0: Port device team_slave_1 added [ 36.677502][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.678726][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.684854][ T4358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.688251][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.689396][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.694567][ T4358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.741996][ T4358] device hsr_slave_0 entered promiscuous mode [ 36.791058][ T4358] device hsr_slave_1 entered promiscuous mode [ 36.866310][ T4358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.893670][ T4358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.931912][ T4358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.984132][ T4358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.018313][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.019737][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.021286][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.022601][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.040961][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.044841][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.047481][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.049834][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.053385][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.057897][ T4358] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.061104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.063010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.064289][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.068174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.070076][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.071494][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.080980][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.083029][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.086055][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.089299][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.093937][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.096846][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.149823][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.151986][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.156162][ T4358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.162723][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.168962][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.171714][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.173432][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.176638][ T4358] device veth0_vlan entered promiscuous mode [ 37.179926][ T4358] device veth1_vlan entered promiscuous mode [ 37.187247][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.189086][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.191516][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.194200][ T4358] device veth0_macvtap entered promiscuous mode [ 37.198286][ T4358] device veth1_macvtap entered promiscuous mode [ 37.204844][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.206314][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.208550][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.212388][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.214019][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.216772][ T4358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.218416][ T4358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.220014][ T4358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.222620][ T4358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.693214][ T297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.719186][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.722008][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.724729][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.730499][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.732365][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.733950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:38 executed programs: 0 [ 38.715434][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.717311][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.719085][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.722216][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.724021][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.725518][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.770379][ T4429] chnl_net:caif_netlink_parms(): no params data found [ 38.786686][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.788109][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.790009][ T4429] device bridge_slave_0 entered promiscuous mode [ 38.792978][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.794528][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.796265][ T4429] device bridge_slave_1 entered promiscuous mode [ 38.803359][ T4429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.806121][ T4429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.814815][ T4429] team0: Port device team_slave_0 added [ 38.816739][ T4429] team0: Port device team_slave_1 added [ 38.822365][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.823857][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.829684][ T4429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.832861][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.834124][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.839417][ T4429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.892062][ T4429] device hsr_slave_0 entered promiscuous mode [ 38.931500][ T4429] device hsr_slave_1 entered promiscuous mode [ 38.970915][ T4429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.972492][ T4429] Cannot create hsr debugfs directory [ 40.392010][ T297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.741036][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 42.661587][ T297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.762780][ T297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.821249][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 43.885659][ T4429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.993370][ T4429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.083711][ T4429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.122174][ T4429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.154500][ T297] device hsr_slave_0 left promiscuous mode [ 44.211020][ T297] device hsr_slave_1 left promiscuous mode [ 44.300886][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.302355][ T297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.304267][ T297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.305773][ T297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.307526][ T297] device bridge_slave_1 left promiscuous mode [ 44.308998][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.361657][ T297] device bridge_slave_0 left promiscuous mode [ 44.362963][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.481422][ T297] device veth1_macvtap left promiscuous mode [ 44.482535][ T297] device veth0_macvtap left promiscuous mode [ 44.483660][ T297] device veth1_vlan left promiscuous mode [ 44.484746][ T297] device veth0_vlan left promiscuous mode [ 44.890853][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 46.622686][ T297] team0 (unregistering): Port device team_slave_1 removed [ 46.781768][ T297] team0 (unregistering): Port device team_slave_0 removed [ 46.951915][ T297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.970876][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 47.171666][ T297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.801712][ T297] bond0 (unregistering): Released all slaves [ 49.092641][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.096382][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.098328][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.101396][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.103981][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.105934][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.107811][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.109307][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.117494][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.119288][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.121888][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.123555][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.124982][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.127567][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.134638][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.136666][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.139450][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.144754][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.147906][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.149928][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.154100][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.155914][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.158981][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.160908][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.163752][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.214987][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.216694][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.220014][ T4429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.226844][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.228840][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.234572][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.236557][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.238976][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.240764][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.244326][ T4429] device veth0_vlan entered promiscuous mode [ 49.247459][ T4429] device veth1_vlan entered promiscuous mode [ 49.254066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.255975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.257573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.259485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.265395][ T4429] device veth0_macvtap entered promiscuous mode [ 49.267929][ T4429] device veth1_macvtap entered promiscuous mode [ 49.275057][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.276553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.278282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.280132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.282470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.285808][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.287500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.289311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.293652][ T4429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.295403][ T4429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.297088][ T4429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.298733][ T4429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.319251][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.323713][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.325902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.332383][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.333909][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.335676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.409421][ T4508] ================================================================== [ 49.411205][ T4508] BUG: KASAN: slab-out-of-bounds in sk_skb_adjust_room+0x2b0/0x52c [ 49.412782][ T4508] Read of size 8 at addr ffff0000d9f45f90 by task syz.0.17/4508 [ 49.414442][ T4508] [ 49.414934][ T4508] CPU: 1 PID: 4508 Comm: syz.0.17 Not tainted syzkaller #0 [ 49.416519][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.418571][ T4508] Call trace: [ 49.419236][ T4508] dump_backtrace+0x1c4/0x1f0 [ 49.420224][ T4508] show_stack+0x2c/0x3c [ 49.421068][ T4508] __dump_stack+0x30/0x40 [ 49.421933][ T4508] dump_stack_lvl+0xf4/0x15c [ 49.422890][ T4508] print_address_description+0x88/0x218 [ 49.424038][ T4508] print_report+0x50/0x68 [ 49.424949][ T4508] kasan_report+0xa8/0xfc [ 49.425861][ T4508] __asan_report_load8_noabort+0x2c/0x38 [ 49.427024][ T4508] sk_skb_adjust_room+0x2b0/0x52c [ 49.428098][ T4508] bpf_prog_e15ab8bd9cea3c06+0x58/0x90 [ 49.429244][ T4508] bpf_prog_run_pin_on_cpu+0x70/0x1e8 [ 49.430375][ T4508] sk_psock_verdict_recv+0x23c/0x86c [ 49.431405][ T4508] unix_stream_read_skb+0x11c/0x270 [ 49.432461][ T4508] sk_psock_verdict_data_ready+0x94/0x348 [ 49.433707][ T4508] unix_stream_sendmsg+0x4d4/0x894 [ 49.434826][ T4508] __sys_sendto+0x324/0x440 [ 49.435806][ T4508] __arm64_sys_sendto+0xe4/0x104 [ 49.436881][ T4508] invoke_syscall+0x98/0x290 [ 49.437736][ T4508] el0_svc_common+0x13c/0x258 [ 49.438639][ T4508] do_el0_svc+0x5c/0x134 [ 49.439544][ T4508] el0_svc+0x58/0x12c [ 49.440366][ T4508] el0t_64_sync_handler+0x84/0xf0 [ 49.441445][ T4508] el0t_64_sync+0x18c/0x190 [ 49.442382][ T4508] [ 49.442921][ T4508] Allocated by task 4508: [ 49.443855][ T4508] kasan_set_track+0x4c/0x80 [ 49.444881][ T4508] kasan_save_alloc_info+0x24/0x30 [ 49.445920][ T4508] __kasan_slab_alloc+0x70/0x88 [ 49.446954][ T4508] slab_post_alloc_hook+0x74/0x430 [ 49.447988][ T4508] kmem_cache_alloc+0x234/0x310 [ 49.449017][ T4508] sk_prot_alloc+0x60/0x1e8 [ 49.449924][ T4508] sk_alloc+0x44/0x3a0 [ 49.450713][ T4508] unix_create1+0xd0/0x750 [ 49.451586][ T4508] unix_create+0x148/0x1f4 [ 49.452513][ T4508] __sock_create+0x448/0x8a8 [ 49.453450][ T4508] __sys_socketpair+0x35c/0x6d8 [ 49.454459][ T4508] __arm64_sys_socketpair+0xa0/0xbc [ 49.455478][ T4508] invoke_syscall+0x98/0x290 [ 49.456363][ T4508] el0_svc_common+0x13c/0x258 [ 49.457345][ T4508] do_el0_svc+0x5c/0x134 [ 49.458243][ T4508] el0_svc+0x58/0x12c [ 49.459139][ T4508] el0t_64_sync_handler+0x84/0xf0 [ 49.460222][ T4508] el0t_64_sync+0x18c/0x190 [ 49.461152][ T4508] [ 49.461648][ T4508] The buggy address belongs to the object at ffff0000d9f45800 [ 49.461648][ T4508] which belongs to the cache UNIX-STREAM of size 1920 [ 49.464757][ T4508] The buggy address is located 16 bytes to the right of [ 49.464757][ T4508] 1920-byte region [ffff0000d9f45800, ffff0000d9f45f80) [ 49.467624][ T4508] [ 49.468104][ T4508] The buggy address belongs to the physical page: [ 49.469470][ T4508] page:00000000cc6eb9f9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119f40 [ 49.471682][ T4508] head:00000000cc6eb9f9 order:3 compound_mapcount:0 compound_pincount:0 [ 49.473412][ T4508] memcg:ffff0000c3726401 [ 49.474335][ T4508] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 49.476121][ T4508] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c4ce8300 [ 49.478064][ T4508] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff0000c3726401 [ 49.479973][ T4508] page dumped because: kasan: bad access detected [ 49.481394][ T4508] [ 49.481910][ T4508] Memory state around the buggy address: [ 49.483057][ T4508] ffff0000d9f45e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.484712][ T4508] ffff0000d9f45f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.486278][ T4508] >ffff0000d9f45f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.487858][ T4508] ^ [ 49.488771][ T4508] ffff0000d9f46000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.490390][ T4508] ffff0000d9f46080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.492032][ T4508] ================================================================== [ 49.494431][ T4508] Disabling lock debugging due to kernel taint