Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2026/09/20 02:36:00 parsed 1 programs 2026/09/20 02:36:00 serving rpc on tcp://38321 [ 88.901464][ T5630] cgroup: Unknown subsys name 'net' [ 89.019088][ T5630] cgroup: Unknown subsys name 'cpuset' [ 89.022606][ T5630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.773511][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.918420][ T10] cfg80211: failed to load regulatory.db [ 94.108925][ T5644] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.113518][ T5644] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 94.137050][ T5644] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 94.144322][ T5644] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 94.173444][ T5644] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 95.526837][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.527506][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.527616][ T5664] bridge_slave_0: entered allmulticast mode [ 95.529085][ T5664] bridge_slave_0: entered promiscuous mode [ 95.543458][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.543951][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.546823][ T5664] bridge_slave_1: entered allmulticast mode [ 95.552872][ T5664] bridge_slave_1: entered promiscuous mode [ 95.602759][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.607825][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.641860][ T5664] team0: Port device team_slave_0 added [ 95.644159][ T5664] team0: Port device team_slave_1 added [ 95.676767][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.676785][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.676811][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.679260][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.679277][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.679322][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.789276][ T5664] hsr_slave_0: entered promiscuous mode [ 95.790165][ T5664] hsr_slave_1: entered promiscuous mode [ 95.956926][ T5664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.962996][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.964048][ T5664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.976754][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.979618][ T5664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.003851][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.008055][ T5664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.021203][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.053187][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.053280][ T5664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.053766][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.053890][ T5664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.139715][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.161461][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.162546][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.187816][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.194344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.194440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.227340][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.227755][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.604926][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.654010][ T5664] veth0_vlan: entered promiscuous mode [ 96.667394][ T5664] veth1_vlan: entered promiscuous mode [ 96.701723][ T5664] veth0_macvtap: entered promiscuous mode [ 96.712458][ T5664] veth1_macvtap: entered promiscuous mode [ 96.733927][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.749035][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.815887][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827132][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827259][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827376][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.964109][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.061827][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.149198][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.238421][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.283630][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.292664][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.302061][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.304385][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.312176][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.626742][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.626763][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.678562][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.678585][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.862771][ T12] bridge_slave_1: left allmulticast mode [ 99.862847][ T12] bridge_slave_1: left promiscuous mode [ 99.864225][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.902133][ T12] bridge_slave_0: left allmulticast mode [ 99.902162][ T12] bridge_slave_0: left promiscuous mode [ 99.902385][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 2026/09/20 02:36:15 executed programs: 0 [ 100.082432][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.084204][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.098884][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.117912][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.118770][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.192570][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.209095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.211271][ T12] bond0 (unregistering): Released all slaves [ 100.337982][ T12] hsr_slave_0: left promiscuous mode [ 100.339020][ T12] hsr_slave_1: left promiscuous mode [ 100.339989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.340020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.341604][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.341624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.397757][ T12] veth1_macvtap: left promiscuous mode [ 100.397816][ T12] veth0_macvtap: left promiscuous mode [ 100.397933][ T12] veth1_vlan: left promiscuous mode [ 100.398021][ T12] veth0_vlan: left promiscuous mode [ 100.747433][ T12] team0 (unregistering): Port device team_slave_1 removed [ 100.777800][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.994277][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.165216][ T4934] Bluetooth: hci0: command tx timeout [ 102.187541][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.321523][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.321713][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.321840][ T5754] bridge_slave_0: entered allmulticast mode [ 102.323820][ T5754] bridge_slave_0: entered promiscuous mode [ 102.356166][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.356326][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.356459][ T5754] bridge_slave_1: entered allmulticast mode [ 102.358432][ T5754] bridge_slave_1: entered promiscuous mode [ 102.429529][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.432998][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.492610][ T5754] team0: Port device team_slave_0 added [ 102.578176][ T5754] team0: Port device team_slave_1 added [ 102.635923][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.635944][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.635971][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.638604][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.638619][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.638646][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.876965][ T5754] hsr_slave_0: entered promiscuous mode [ 102.878155][ T5754] hsr_slave_1: entered promiscuous mode [ 103.224333][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.662431][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.681079][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.682454][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.702624][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.703889][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.725858][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.727182][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.731544][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.858690][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.887199][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.905523][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.905632][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.913247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.913362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.236037][ T4934] Bluetooth: hci0: command tx timeout [ 104.509289][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.575923][ T5754] veth0_vlan: entered promiscuous mode [ 104.586853][ T5754] veth1_vlan: entered promiscuous mode [ 104.637121][ T5754] veth0_macvtap: entered promiscuous mode [ 104.642402][ T5754] veth1_macvtap: entered promiscuous mode [ 104.677706][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.695760][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.764742][ T38] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.764791][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.764828][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.776357][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.852488][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.852511][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.912404][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.912428][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.235072][ T5686] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.387588][ T5686] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 105.391008][ T5686] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.391036][ T5686] usb 1-1: config 0 has no interface number 0 [ 105.404056][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.404082][ T5686] usb 1-1: Product: syz [ 105.404096][ T5686] usb 1-1: Manufacturer: syz [ 105.404111][ T5686] usb 1-1: SerialNumber: syz [ 105.456066][ T5686] usb 1-1: config 0 descriptor?? [ 105.661421][ T5686] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 105.682056][ T5686] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.682763][ T5686] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 105.682823][ T5686] usb 1-1: media controller created [ 105.723787][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.314986][ T4934] Bluetooth: hci0: command tx timeout [ 106.798647][ T5686] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 106.798714][ T5867] ================================================================== [ 106.798727][ T5867] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630 [ 106.798766][ T5867] Read of size 1 at addr ffff88807d89da21 by task syz.0.17/5867 [ 106.798781][ T5867] [ 106.798798][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.798819][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.798838][ T5867] Call Trace: [ 106.798849][ T5867] [ 106.798859][ T5867] dump_stack_lvl+0xe8/0x150 [ 106.798890][ T5867] print_address_description+0x55/0x1e0 [ 106.798919][ T5867] ? ec168_i2c_xfer+0x4d4/0x630 [ 106.798945][ T5867] print_report+0x58/0x70 [ 106.798971][ T5867] kasan_report+0x117/0x150 [ 106.798996][ T5867] ? ec168_i2c_xfer+0x4d4/0x630 [ 106.799026][ T5867] ec168_i2c_xfer+0x4d4/0x630 [ 106.799057][ T5867] __i2c_transfer+0x7bf/0x1fe0 [ 106.799082][ T5867] ? rt_mutex_lock_nested+0x167/0x1c0 [ 106.799109][ T5867] ? i2c_transfer+0xc7/0x2d0 [ 106.799130][ T5867] i2c_transfer+0x1cb/0x2d0 [ 106.799150][ T5867] i2cdev_ioctl_rdwr+0x460/0x740 [ 106.799177][ T5867] compat_i2cdev_ioctl+0x59f/0x5c0 [ 106.799201][ T5867] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 106.799228][ T5867] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 106.799261][ T5867] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 106.799286][ T5867] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 106.799308][ T5867] ? kmem_cache_free+0x182/0x650 [ 106.799333][ T5867] ? __se_sys_futex_time32+0x3ab/0x440 [ 106.799365][ T5867] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.799391][ T5867] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 106.799427][ T5867] __do_fast_syscall_32+0x27a/0x6a0 [ 106.799453][ T5867] ? do_fast_syscall_32+0x33/0x70 [ 106.799488][ T5867] ? asm_int80_emulation+0x1a/0x20 [ 106.799509][ T5867] ? do_int80_emulation+0x299/0x500 [ 106.799532][ T5867] ? trace_irq_disable+0x3b/0x140 [ 106.799555][ T5867] do_fast_syscall_32+0x33/0x70 [ 106.799580][ T5867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.799606][ T5867] RIP: 0023:0xf7f670ec [ 106.799630][ T5867] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 106.799649][ T5867] RSP: 002b:00000000ffa2bf2c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 106.799677][ T5867] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 106.799692][ T5867] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.799706][ T5867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.799719][ T5867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.799732][ T5867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.799753][ T5867] [ 106.799761][ T5867] [ 106.799767][ T5867] Allocated by task 5867: [ 106.799777][ T5867] kasan_save_track+0x3e/0x80 [ 106.799797][ T5867] __kasan_kmalloc+0x93/0xb0 [ 106.799818][ T5867] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 106.799838][ T5867] memdup_user+0x2b/0xd0 [ 106.799857][ T5867] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 106.799875][ T5867] compat_i2cdev_ioctl+0x59f/0x5c0 [ 106.799894][ T5867] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 106.799914][ T5867] __do_fast_syscall_32+0x27a/0x6a0 [ 106.799936][ T5867] do_fast_syscall_32+0x33/0x70 [ 106.799957][ T5867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.799981][ T5867] [ 106.799986][ T5867] The buggy address belongs to the object at ffff88807d89da20 [ 106.799986][ T5867] which belongs to the cache kmalloc-8 of size 8 [