Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://35043 [ 31.166974][ T4723] cgroup: Unknown subsys name 'net' [ 31.297112][ T4723] cgroup: Unknown subsys name 'cpuset' [ 31.299128][ T4723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.484710][ T4723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.378433][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.482085][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.483344][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.484802][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.486886][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.487270][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.637915][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.637939][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.645008][ T3169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.645030][ T3169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.940914][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.941178][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.941236][ T4791] bridge_slave_0: entered allmulticast mode [ 34.941659][ T4791] bridge_slave_0: entered promiscuous mode [ 34.943127][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.943177][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.943219][ T4791] bridge_slave_1: entered allmulticast mode [ 34.943619][ T4791] bridge_slave_1: entered promiscuous mode [ 34.952890][ T4791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.953698][ T4791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.960693][ T4791] team0: Port device team_slave_0 added [ 34.961412][ T4791] team0: Port device team_slave_1 added [ 34.968316][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.968340][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.968355][ T4791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.969044][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.969051][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.969064][ T4791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.979321][ T4791] hsr_slave_0: entered promiscuous mode [ 34.979626][ T4791] hsr_slave_1: entered promiscuous mode [ 35.021360][ T4791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.024796][ T4791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.025495][ T4791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.027771][ T4791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.028381][ T4791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.029727][ T4791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.030391][ T4791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.031787][ T4791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.040261][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.040309][ T4791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.040460][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.040488][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.054869][ T4791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.060207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.061512][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.066047][ T4791] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.068219][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.068263][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.070749][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.070768][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.165817][ T4791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.178498][ T4791] veth0_vlan: entered promiscuous mode [ 35.180982][ T4791] veth1_vlan: entered promiscuous mode [ 35.188402][ T4791] veth0_macvtap: entered promiscuous mode [ 35.189827][ T4791] veth1_macvtap: entered promiscuous mode [ 35.194399][ T4791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.198159][ T4791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.202306][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.202412][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.202467][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.202517][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.291116][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.358857][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.393951][ T4742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.395298][ T4742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.395479][ T4742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.395895][ T4742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.396090][ T4742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.409025][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.459556][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.525806][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.525872][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.525927][ T4829] bridge_slave_0: entered allmulticast mode [ 35.526324][ T4829] bridge_slave_0: entered promiscuous mode [ 35.527072][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.527091][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.527141][ T4829] bridge_slave_1: entered allmulticast mode [ 35.527690][ T4829] bridge_slave_1: entered promiscuous mode [ 35.535299][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.536272][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.542538][ T4829] team0: Port device team_slave_0 added [ 35.543237][ T4829] team0: Port device team_slave_1 added [ 35.550455][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.550474][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.550487][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.550983][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.550990][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.551005][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.562386][ T4829] hsr_slave_0: entered promiscuous mode [ 35.562668][ T4829] hsr_slave_1: entered promiscuous mode [ 35.562842][ T4829] debugfs: 'hsr0' already exists in 'hsr' [ 35.562878][ T4829] Cannot create hsr debugfs directory [ 37.466002][ T4742] Bluetooth: hci0: command tx timeout [ 38.903417][ T12] bridge_slave_1: left allmulticast mode [ 38.904343][ T12] bridge_slave_1: left promiscuous mode [ 38.904648][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.909221][ T12] bridge_slave_0: left allmulticast mode [ 38.909258][ T12] bridge_slave_0: left promiscuous mode [ 38.909329][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.964249][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.967577][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.970247][ T12] bond0 (unregistering): Released all slaves [ 39.049697][ T12] hsr_slave_0: left promiscuous mode [ 39.051043][ T12] hsr_slave_1: left promiscuous mode [ 39.052508][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.053874][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.055797][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.057034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.061658][ T12] veth1_macvtap: left promiscuous mode [ 39.062739][ T12] veth0_macvtap: left promiscuous mode [ 39.063691][ T12] veth1_vlan: left promiscuous mode [ 39.064649][ T12] veth0_vlan: left promiscuous mode [ 39.153239][ T12] team0 (unregistering): Port device team_slave_1 removed [ 39.161479][ T12] team0 (unregistering): Port device team_slave_0 removed [ 39.209976][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.323131][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.486219][ T4829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.488438][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.488812][ T4829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.490399][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.490700][ T4829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.492677][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.493194][ T4829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.494622][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.524989][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.530171][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.533801][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.533849][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.543741][ T4829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.545469][ T4829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.547244][ T4742] Bluetooth: hci0: command tx timeout [ 39.554234][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.554279][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.663699][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.673187][ T4829] veth0_vlan: entered promiscuous mode [ 39.675158][ T4829] veth1_vlan: entered promiscuous mode [ 39.683288][ T4829] veth0_macvtap: entered promiscuous mode [ 39.684290][ T4829] veth1_macvtap: entered promiscuous mode [ 39.689245][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.691487][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.693050][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693727][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693750][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693771][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.718024][ T3169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.718046][ T3169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.726121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.726143][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.743556][ T4929] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.7 ** replaying previous printk message ** [ 39.754315][ T4930] ================================================================== [ 39.754327][ T4930] BUG: KASAN: slab-out-of-bounds in ieee80211_ie_split_ric+0x4a8/0x508 [ 39.754345][ T4930] Read of size 1 at addr ffff0000c2aac9c1 by task syz.0.18/4930 [ 39.754355][ T4930] [ 39.754360][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 39.754372][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.754377][ T4930] Call trace: [ 39.754380][ T4930] show_stack+0x2c/0x3c (C) [ 39.754394][ T4930] __dump_stack+0x30/0x40 [ 39.754404][ T4930] dump_stack_lvl+0xd8/0x12c [ 39.754413][ T4930] print_address_description+0xb0/0x238 [ 39.754421][ T4930] print_report+0x68/0x84 [ 39.754428][ T4930] kasan_report+0x8c/0xc4 [ 39.754437][ T4930] __asan_report_load1_noabort+0x20/0x2c [ 39.754447][ T4930] ieee80211_ie_split_ric+0x4a8/0x508 [ 39.754455][ T4930] cfg80211_connect+0xca8/0x1be4 [ 39.754465][ T4930] cfg80211_mgd_wext_connect+0x3ac/0x508 [ 39.754475][ T4930] cfg80211_mgd_wext_siwessid+0x2c4/0x40c [ 39.754484][ T4930] cfg80211_wext_siwessid+0xc4/0x13c [ 39.754494][ T4930] ioctl_standard_iw_point+0x678/0xb04 [ 39.754503][ T4930] ioctl_standard_call+0xb4/0x178 [ 39.754513][ T4930] wext_ioctl_dispatch+0x104/0x36c [ 39.754522][ T4930] wext_handle_ioctl+0x154/0x288 [ 39.754532][ T4930] sock_ioctl+0x154/0x7ec [ 39.754541][ T4930] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.754552][ T4930] invoke_syscall+0x98/0x244 [ 39.754561][ T4930] el0_svc_common+0xec/0x23c [ 39.754571][ T4930] do_el0_svc+0x4c/0x5c [ 39.754580][ T4930] el0_svc+0x64/0x260 [ 39.754589][ T4930] el0t_64_sync_handler+0x48/0x148 [ 39.754597][ T4930] el0t_64_sync+0x198/0x19c [ 39.754605][ T4930] [ 39.754606][ T4930] Allocated by task 4930: [ 39.754610][ T4930] kasan_save_track+0x40/0x78 [ 39.754617][ T4930] kasan_save_alloc_info+0x44/0x54 [ 39.754625][ T4930] __kasan_kmalloc+0x9c/0xb4 [ 39.754631][ T4930] __kmalloc_node_track_caller_noprof+0x434/0x6d4 [ 39.754639][ T4930] kmemdup_noprof+0x44/0x8c [ 39.754645][ T4930] cfg80211_wext_siwgenie+0x170/0x28c [ 39.754659][ T4930] ioctl_standard_iw_point+0x678/0xb04 [ 39.754667][ T4930] ioctl_standard_call+0xb4/0x178 [ 39.754675][ T4930] wext_ioctl_dispatch+0x104/0x36c [ 39.754684][ T4930] wext_handle_ioctl+0x154/0x288 [ 39.754692][ T4930] sock_ioctl+0x154/0x7ec [ 39.754698][ T4930] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.754707][ T4930] invoke_syscall+0x98/0x244 [ 39.754714][ T4930] el0_svc_common+0xec/0x23c [ 39.754722][ T4930] do_el0_svc+0x4c/0x5c [ 39.754730][ T4930] el0_svc+0x64/0x260 [ 39.754736][ T4930] el0t_64_sync_handler+0x48/0x148 [ 39.754743][ T4930] el0t_64_sync+0x198/0x19c [ 39.754748][ T4930] [ 39.754750][ T4930] The buggy address belongs to the object at ffff0000c2aac9c0 [ 39.754750][ T4930] which belongs to the cache kmalloc-8 of size 8 [ 39.754755][ T4930] The buggy address is located 0 bytes to the right of [ 39.754755][ T4930] allocated 1-byte region [ffff0000c2aac9c0, ffff0000c2aac9c1) [ 39.754762][ T4930] [ 39.754764][ T4930] The buggy address belongs to the physical page: [ 39.754768][ T4930] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000c2aaca20 pfn:0x102aac [ 39.754774][ T4930] flags: 0x5ffc00000000200(workingset|node=0|zone=2|lastcpupid=0x7ff) [ 39.754782][ T4930] page_type: f5(slab) [ 39.754788][ T4930] raw: 05ffc00000000200 ffff0000c0001500 ffff0000c0000348 fffffdffc30937d0 [ 39.754794][ T4930] raw: ffff0000c2aaca20 0000000800800064 00000000f5000000 0000000000000000 [ 39.754797][ T4930] page dumped because: kasan: bad access detected [ 39.754800][ T4930] [ 39.754801][ T4930] Memory state around the buggy address: [ 39.754805][ T4930] ffff0000c2aac880: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 39.754809][ T4930] ffff0000c2aac900: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 39.754813][ T4930] >ffff0000c2aac980: fa fc fc fc fa fc fc fc 01 fc fc fc fa fc fc fc [ 39.754816][ T4930] ^ [ 39.754820][ T4930] ffff0000c2aaca00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 39.754824][ T4930] ffff0000c2aaca80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 39.754827][ T4930] ================================================================== [ 39.754844][ T4930] Disabling lock debugging due to kernel taint [ 39.754853][ T4930] ------------[ cut here ]------------ [ 39.754857][ T4930] memcpy: detected buffer overflow: 18446744073709551615 byte write of buffer size 0 [ 39.754966][ T4930] WARNING: lib/string_helpers.c:1037 at __fortify_report+0xa0/0xb8, CPU#0: syz.0.18/4930 [ 39.817963][ T4930] Modules linked in: [ 39.818530][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.0.18 Tainted: G B syzkaller #0 PREEMPT [ 39.820008][ T4930] Tainted: [B]=BAD_PAGE [ 39.820582][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.822075][ T4930] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.823217][ T4930] pc : __fortify_report+0xa0/0xb8 [ 39.823929][ T4930] lr : __fortify_report+0xa0/0xb8 [ 39.824655][ T4930] sp : ffff8000986876a0 [ 39.825286][ T4930] x29: ffff8000986876a0 x28: 1fffe000199c09e6 x27: 1fffe000199c09da [ 39.826526][ T4930] x26: ffff0000c2aac9c0 x25: 0000000000000001 x24: ffff0000d02ad200 [ 39.827711][ T4930] x23: ffff0000cce04ed0 x22: ffff800086cbcad8 x21: 0000000000000001 [ 39.828884][ T4930] x20: ffffffffffffffff x19: 0000000000000000 x18: 0000000000000000 [ 39.830042][ T4930] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 39.831373][ T4930] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 39.832695][ T4930] x11: 0000000000000000 x10: 0000000000000002 x9 : e75ac9114b2ee700 [ 39.833921][ T4930] x8 : e75ac9114b2ee700 x7 : 0000000000000000 x6 : ffff80008048ce60 [ 39.835123][ T4930] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7010 [ 39.836359][ T4930] x2 : 0000000100000000 x1 : ffff0000d1543a80 x0 : 0000000000000000 [ 39.837605][ T4930] Call trace: [ 39.838081][ T4930] __fortify_report+0xa0/0xb8 (P) [ 39.838819][ T4930] __fortify_panic+0x10/0x14 [ 39.839488][ T4930] cfg80211_connect+0x1918/0x1be4 [ 39.840175][ T4930] cfg80211_mgd_wext_connect+0x3ac/0x508 [ 39.841031][ T4930] cfg80211_mgd_wext_siwessid+0x2c4/0x40c [ 39.841886][ T4930] cfg80211_wext_siwessid+0xc4/0x13c [ 39.842683][ T4930] ioctl_standard_iw_point+0x678/0xb04 [ 39.843469][ T4930] ioctl_standard_call+0xb4/0x178 [ 39.844148][ T4930] wext_ioctl_dispatch+0x104/0x36c [ 39.844892][ T4930] wext_handle_ioctl+0x154/0x288 [ 39.845598][ T4930] sock_ioctl+0x154/0x7ec [ 39.846267][ T4930] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.846974][ T4930] invoke_syscall+0x98/0x244 [ 39.847618][ T4930] el0_svc_common+0xec/0x23c [ 39.848263][ T4930] do_el0_svc+0x4c/0x5c [ 39.848811][ T4930] el0_svc+0x64/0x260 [ 39.849410][ T4930] el0t_64_sync_handler+0x48/0x148 [ 39.850178][ T4930] el0t_64_sync+0x198/0x19c [ 39.850833][ T4930] irq event stamp: 1077 [ 39.851402][ T4930] hardirqs last enabled at (1077): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 39.852859][ T4930] hardirqs last disabled at (1076): [] el1_interrupt+0x28/0x60 [ 39.854186][ T4930] softirqs last enabled at (978): [] __dev_queue_xmit+0x14d0/0x2ba4 [ 39.855503][ T4930] softirqs last disabled at (972): [] __dev_queue_xmit+0x1fc/0x2ba4 [ 39.856915][ T4930] ---[ end trace 0000000000000000 ]--- [ 39.860157][ T4930] ------------[ cut here ]------------ [ 39.860169][ T4930] kernel BUG at lib/string_helpers.c:1044! [ 39.860176][ T4930] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 39.862914][ T4930] Modules linked in: [ 39.863509][ T4930] CPU: 1 UID: 0 PID: 4930 Comm: syz.0.18 Tainted: G B W syzkaller #0 PREEMPT [ 39.864950][ T4930] Tainted: [B]=BAD_PAGE, [W]=WARN [ 39.865685][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 39.867078][ T4930] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.868230][ T4930] pc : __fortify_panic+0x10/0x14 [ 39.868919][ T4930] lr : __fortify_panic+0x10/0x14 [ 39.869675][ T4930] sp : ffff8000986876d0 [ 39.870282][ T4930] x29: ffff8000986876d0 x28: 1fffe000199c09e6 x27: 1fffe000199c09da [ 39.871525][ T4930] x26: ffff0000c2aac9c0 x25: 0000000000000001 x24: ffff0000d02ad200 [ 39.872776][ T4930] x23: ffff0000cce04ed0 x22: 0000000000000002 x21: 0000000000000000 [ 39.874022][ T4930] x20: ffff0000e2cc0740 x19: ffffffffffffffff x18: 0000000000000000 [ 39.875221][ T4930] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 39.876376][ T4930] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 39.877544][ T4930] x11: 0000000000000000 x10: 0000000000000002 x9 : e75ac9114b2ee700 [ 39.878763][ T4930] x8 : e75ac9114b2ee700 x7 : 0000000000000000 x6 : ffff80008048ce60 [ 39.879899][ T4930] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7010 [ 39.881093][ T4930] x2 : 0000000100000000 x1 : ffff0000d1543a80 x0 : 0000000000000000 [ 39.882215][ T4930] Call trace: [ 39.882684][ T4930] __fortify_panic+0x10/0x14 (P) [ 39.883434][ T4930] cfg80211_connect+0x1918/0x1be4 [ 39.884216][ T4930] cfg80211_mgd_wext_connect+0x3ac/0x508 [ 39.885095][ T4930] cfg80211_mgd_wext_siwessid+0x2c4/0x40c [ 39.885932][ T4930] cfg80211_wext_siwessid+0xc4/0x13c [ 39.886724][ T4930] ioctl_standard_iw_point+0x678/0xb04 [ 39.887537][ T4930] ioctl_standard_call+0xb4/0x178 [ 39.888323][ T4930] wext_ioctl_dispatch+0x104/0x36c [ 39.889075][ T4930] wext_handle_ioctl+0x154/0x288 [ 39.889823][ T4930] sock_ioctl+0x154/0x7ec [ 39.890502][ T4930] __arm64_sys_ioctl+0x14c/0x1c4 [ 39.891279][ T4930] invoke_syscall+0x98/0x244 [ 39.891925][ T4930] el0_svc_common+0xec/0x23c [ 39.892587][ T4930] do_el0_svc+0x4c/0x5c [ 39.893313][ T4930] el0_svc+0x64/0x260 [ 39.893958][ T4930] el0t_64_sync_handler+0x48/0x148 [ 39.894671][ T4930] el0t_64_sync+0x198/0x19c [ 39.895336][ T4930] Code: d503233f a9bf7bfd 910003fd 94618cfa (d4210000) [ 39.896332][ T4930] ---[ end trace 0000000000000000 ]--- [ 40.117771][ T4930] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 40.118839][ T4930] SMP: stopping secondary CPUs [ 40.119522][ T4930] Kernel Offset: disabled [ 40.120082][ T4930] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 40.121068][ T4930] Memory Limit: none [ 40.343106][ T4930] Rebooting in 86400 seconds..