Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://42467 [ 31.052900][ T4721] cgroup: Unknown subsys name 'net' [ 31.202888][ T4721] cgroup: Unknown subsys name 'cpuset' [ 31.205005][ T4721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.370329][ T4721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.654343][ T4729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.720924][ T833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.720953][ T833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.731260][ T833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.732709][ T833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.570019][ T4770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.571858][ T4770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.573582][ T4770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.575292][ T4770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.576780][ T4770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.813112][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.813162][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.813228][ T4774] bridge_slave_0: entered allmulticast mode [ 34.813685][ T4774] bridge_slave_0: entered promiscuous mode [ 34.814723][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.814746][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.814788][ T4774] bridge_slave_1: entered allmulticast mode [ 34.815174][ T4774] bridge_slave_1: entered promiscuous mode [ 34.823166][ T4774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.838624][ T4774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.846465][ T4774] team0: Port device team_slave_0 added [ 34.847155][ T4774] team0: Port device team_slave_1 added [ 34.858162][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.858184][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.858198][ T4774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.858910][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.858918][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.858932][ T4774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.869079][ T4774] hsr_slave_0: entered promiscuous mode [ 34.869390][ T4774] hsr_slave_1: entered promiscuous mode [ 34.914763][ T4774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.917538][ T4774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.917903][ T4774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.920027][ T4774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.920344][ T4774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.922453][ T4774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.923044][ T4774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.924332][ T4774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.937517][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.937575][ T4774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.937726][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.937755][ T4774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.955691][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.959481][ T4774] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.960927][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.962514][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.967500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.967555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.972951][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.972989][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.067600][ T4774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.079117][ T4774] veth0_vlan: entered promiscuous mode [ 35.088636][ T4774] veth1_vlan: entered promiscuous mode [ 35.097068][ T4774] veth0_macvtap: entered promiscuous mode [ 35.098249][ T4774] veth1_macvtap: entered promiscuous mode [ 35.104044][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.105181][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.107271][ T1057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.109148][ T1057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.109304][ T1057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.109327][ T1057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.169088][ T833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.215284][ T833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.275036][ T833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.335851][ T833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.512485][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.513885][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.514091][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.514419][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.515324][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.642818][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.642900][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.642961][ T4825] bridge_slave_0: entered allmulticast mode [ 35.643391][ T4825] bridge_slave_0: entered promiscuous mode [ 35.644527][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.644582][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.644632][ T4825] bridge_slave_1: entered allmulticast mode [ 35.645013][ T4825] bridge_slave_1: entered promiscuous mode [ 35.652196][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.653327][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.660345][ T4825] team0: Port device team_slave_0 added [ 35.661087][ T4825] team0: Port device team_slave_1 added [ 35.667500][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.667521][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.667537][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.668036][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.668043][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.668059][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.678930][ T4825] hsr_slave_0: entered promiscuous mode [ 35.679206][ T4825] hsr_slave_1: entered promiscuous mode [ 35.679400][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 35.679449][ T4825] Cannot create hsr debugfs directory [ 37.531769][ T50] Bluetooth: hci0: command tx timeout [ 38.585219][ T833] bridge_slave_1: left allmulticast mode [ 38.585259][ T833] bridge_slave_1: left promiscuous mode [ 38.585592][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.588865][ T833] bridge_slave_0: left allmulticast mode [ 38.588889][ T833] bridge_slave_0: left promiscuous mode [ 38.588969][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.639213][ T833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.673473][ T833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.702295][ T833] bond0 (unregistering): Released all slaves [ 38.740668][ T833] hsr_slave_0: left promiscuous mode [ 38.742554][ T833] hsr_slave_1: left promiscuous mode [ 38.744021][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.745604][ T833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.747629][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.749050][ T833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.754260][ T833] veth1_macvtap: left promiscuous mode [ 38.755318][ T833] veth0_macvtap: left promiscuous mode [ 38.755396][ T833] veth1_vlan: left promiscuous mode [ 38.755446][ T833] veth0_vlan: left promiscuous mode [ 38.849809][ T833] team0 (unregistering): Port device team_slave_1 removed [ 38.853801][ T833] team0 (unregistering): Port device team_slave_0 removed [ 38.899736][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.164690][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.170220][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.170560][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.175940][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.178237][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.180786][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.183091][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.185852][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.212191][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.283857][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.285478][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.285525][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.289210][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.289254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.387585][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.399379][ T4825] veth0_vlan: entered promiscuous mode [ 39.402362][ T4825] veth1_vlan: entered promiscuous mode [ 39.408709][ T4825] veth0_macvtap: entered promiscuous mode [ 39.409789][ T4825] veth1_macvtap: entered promiscuous mode [ 39.413901][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.414891][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.416809][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418392][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.423544][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.425200][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.444955][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.444980][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.451342][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.452321][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.480335][ T4917] ================================================================== [ 39.480351][ T4917] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr+0x44/0x1b8 [ 39.480376][ T4917] Read of size 84 at addr ffff0000c7644120 by task syz.0.17/4917 [ 39.480383][ T4917] [ 39.480388][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 39.480397][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 39.480401][ T4917] Call trace: [ 39.480404][ T4917] show_stack+0x2c/0x3c (C) [ 39.480418][ T4917] __dump_stack+0x30/0x40 [ 39.480430][ T4917] dump_stack_lvl+0xd8/0x12c [ 39.480439][ T4917] print_address_description+0xb0/0x238 [ 39.480448][ T4917] print_report+0x68/0x84 [ 39.480454][ T4917] kasan_report+0x8c/0xc4 [ 39.480464][ T4917] kasan_check_range+0x17c/0x1ac [ 39.480473][ T4917] __asan_memcpy+0x3c/0x84 [ 39.480482][ T4917] copy_from_sockptr+0x44/0x1b8 [ 39.480491][ T4917] vcc_setsockopt+0x174/0x450 [ 39.480500][ T4917] pvc_setsockopt+0x84/0xb0 [ 39.480508][ T4917] do_sock_setsockopt+0x1f0/0x330 [ 39.480518][ T4917] __sys_setsockopt+0x104/0x170 [ 39.480526][ T4917] __arm64_sys_setsockopt+0xc8/0xe4 [ 39.480535][ T4917] invoke_syscall+0x98/0x244 [ 39.480545][ T4917] el0_svc_common+0xec/0x23c [ 39.480555][ T4917] do_el0_svc+0x4c/0x5c [ 39.480564][ T4917] el0_svc+0x64/0x260 [ 39.480575][ T4917] el0t_64_sync_handler+0x48/0x148 [ 39.480584][ T4917] el0t_64_sync+0x198/0x19c [ 39.480592][ T4917] [ 39.480594][ T4917] Allocated by task 4917: [ 39.480598][ T4917] kasan_save_track+0x40/0x78 [ 39.480605][ T4917] kasan_save_alloc_info+0x44/0x54 [ 39.480613][ T4917] __kasan_kmalloc+0x9c/0xb4 [ 39.480620][ T4917] __kmalloc_noprof+0x340/0x6b8 [ 39.480627][ T4917] __cgroup_bpf_run_filter_setsockopt+0x990/0xbbc [ 39.480637][ T4917] do_sock_setsockopt+0x2e8/0x330 [ 39.480644][ T4917] __sys_setsockopt+0x104/0x170 [ 39.480651][ T4917] __arm64_sys_setsockopt+0xc8/0xe4 [ 39.480658][ T4917] invoke_syscall+0x98/0x244 [ 39.480666][ T4917] el0_svc_common+0xec/0x23c [ 39.480674][ T4917] do_el0_svc+0x4c/0x5c [ 39.480682][ T4917] el0_svc+0x64/0x260 [ 39.480689][ T4917] el0t_64_sync_handler+0x48/0x148 [ 39.480697][ T4917] el0t_64_sync+0x198/0x19c [ 39.480702][ T4917] [ 39.480704][ T4917] The buggy address belongs to the object at ffff0000c7644120 [ 39.480704][ T4917] which belongs to the cache kmalloc-8 of size 8 [ 39.480709][ T4917] The buggy address is located 0 bytes inside of [ 39.480709][ T4917] allocated 1-byte region [ffff0000c7644120, ffff0000c7644121) [ 39.480717][ T4917] [ 39.480718][ T4917] The buggy address belongs to the physical page: [ 39.480722][ T4917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107644 [ 39.480728][ T4917] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 39.480735][ T4917] page_type: f5(slab) [ 39.480742][ T4917] raw: 05ffc00000000000 ffff0000c0001500 dead000000000100 dead000000000122 [ 39.480747][ T4917] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 39.480751][ T4917] page dumped because: kasan: bad access detected [ 39.480754][ T4917] [ 39.480755][ T4917] Memory state around the buggy address: [ 39.480759][ T4917] ffff0000c7644000: 00 fc fc fc 05 fc fc fc 02 fc fc fc 05 fc fc fc [ 39.480763][ T4917] ffff0000c7644080: 05 fc fc fc 00 fc fc fc 05 fc fc fc 02 fc fc fc [ 39.480767][ T4917] >ffff0000c7644100: 00 fc fc fc 01 fc fc fc fa fc fc fc 00 fc fc fc [ 39.480770][ T4917] ^ [ 39.480773][ T4917] ffff0000c7644180: 00 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 39.480777][ T4917] ffff0000c7644200: 00 fc fc fc 00 fc fc fc fa fc fc fc 00 fc fc fc [ 39.480781][ T4917] ================================================================== [ 39.480798][ T4917] Disabling lock debugging due to kernel taint