Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. 2026/01/30 18:14:23 parsed 1 programs [ 104.344786][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 104.344803][ T30] audit: type=1400 audit(1769796863.040:105): avc: denied { node_bind } for pid=6207 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 106.597899][ T30] audit: type=1400 audit(1769796865.290:106): avc: denied { unlink } for pid=6217 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 107.923586][ T6217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.844915][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.855695][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.865867][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.879112][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.886851][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.050856][ T30] audit: type=1400 audit(1769796868.740:107): avc: denied { unmount } for pid=6233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.175689][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.183513][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.400946][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.437284][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.774808][ T30] audit: type=1401 audit(1769796869.460:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 111.566652][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 112.026724][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.033895][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.065724][ T6258] bridge_slave_0: entered allmulticast mode [ 112.075289][ T6258] bridge_slave_0: entered promiscuous mode [ 112.110464][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.117745][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.125533][ T6258] bridge_slave_1: entered allmulticast mode [ 112.133988][ T6258] bridge_slave_1: entered promiscuous mode [ 112.190014][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.205471][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.258814][ T6258] team0: Port device team_slave_0 added [ 112.268266][ T6258] team0: Port device team_slave_1 added [ 112.311929][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.343276][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.370695][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.393090][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.400375][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.427734][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.649443][ T6258] hsr_slave_0: entered promiscuous mode [ 112.655832][ T6258] hsr_slave_1: entered promiscuous mode [ 113.147523][ T6258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.159690][ T6258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.182116][ T6258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.195802][ T6258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.297235][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.322143][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.333924][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.341056][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.357001][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.364132][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.585669][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.631303][ T6258] veth0_vlan: entered promiscuous mode [ 113.648055][ T6258] veth1_vlan: entered promiscuous mode [ 113.680419][ T6258] veth0_macvtap: entered promiscuous mode [ 113.690915][ T6258] veth1_macvtap: entered promiscuous mode [ 113.711049][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.728441][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.748862][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.758559][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.776752][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.786950][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/30 18:14:32 executed programs: 0 [ 114.032525][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.045046][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.053062][ T6363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.062645][ T6363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.070341][ T6363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.078218][ T6363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.087065][ T6367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.094916][ T6367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.106533][ T6367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.116178][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.123491][ T6363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.136101][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.146580][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.169115][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.178696][ T6363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.192556][ T6363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.203978][ T6363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.217415][ T6363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.235887][ T6363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.245413][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.254174][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.266854][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.281203][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.290096][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.298334][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.863514][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.277484][ T6365] chnl_net:caif_netlink_parms(): no params data found [ 115.311097][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 115.405699][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 115.482971][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 115.536923][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 115.812566][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.820750][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.829541][ T6365] bridge_slave_0: entered allmulticast mode [ 115.837866][ T6365] bridge_slave_0: entered promiscuous mode [ 115.879747][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.887670][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.895351][ T6359] bridge_slave_0: entered allmulticast mode [ 115.902808][ T6359] bridge_slave_0: entered promiscuous mode [ 115.911686][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.919480][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.926933][ T6359] bridge_slave_1: entered allmulticast mode [ 115.934439][ T6359] bridge_slave_1: entered promiscuous mode [ 115.942007][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.949820][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.957385][ T6365] bridge_slave_1: entered allmulticast mode [ 115.965194][ T6365] bridge_slave_1: entered promiscuous mode [ 115.999960][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.008016][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.015785][ T6369] bridge_slave_0: entered allmulticast mode [ 116.023296][ T6369] bridge_slave_0: entered promiscuous mode [ 116.063622][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.106874][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.114049][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.123325][ T6371] bridge_slave_0: entered allmulticast mode [ 116.131098][ T6371] bridge_slave_0: entered promiscuous mode [ 116.139910][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.147495][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.155415][ T6371] bridge_slave_1: entered allmulticast mode [ 116.162820][ T6371] bridge_slave_1: entered promiscuous mode [ 116.170586][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.178217][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.185952][ T51] Bluetooth: hci0: command tx timeout [ 116.192279][ T6369] bridge_slave_1: entered allmulticast mode [ 116.200127][ T6369] bridge_slave_1: entered promiscuous mode [ 116.265494][ T51] Bluetooth: hci2: command tx timeout [ 116.265659][ T5865] Bluetooth: hci1: command tx timeout [ 116.297907][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.305311][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.312492][ T6361] bridge_slave_0: entered allmulticast mode [ 116.319929][ T6361] bridge_slave_0: entered promiscuous mode [ 116.329258][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.342860][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.352143][ T5865] Bluetooth: hci4: command tx timeout [ 116.354676][ T51] Bluetooth: hci3: command tx timeout [ 116.367586][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.395546][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.402660][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.410174][ T6361] bridge_slave_1: entered allmulticast mode [ 116.418597][ T6361] bridge_slave_1: entered promiscuous mode [ 116.452886][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.468288][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.479435][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.491856][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.503028][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.549386][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.578067][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.596790][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.609219][ T6359] team0: Port device team_slave_0 added [ 116.618465][ T6359] team0: Port device team_slave_1 added [ 116.652515][ T6371] team0: Port device team_slave_0 added [ 116.678760][ T6369] team0: Port device team_slave_0 added [ 116.708668][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.761096][ T6365] team0: Port device team_slave_0 added [ 116.771815][ T6371] team0: Port device team_slave_1 added [ 116.781093][ T6369] team0: Port device team_slave_1 added [ 116.826138][ T6365] team0: Port device team_slave_1 added [ 116.887564][ T6361] team0: Port device team_slave_0 added [ 116.916997][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.923962][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.951289][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.987070][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.994034][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.021618][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.035771][ T6361] team0: Port device team_slave_1 added [ 117.041952][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.049042][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.076981][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.088786][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.097088][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.123491][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.136648][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.143595][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.171355][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.183213][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.190836][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.218111][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.255557][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.262514][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.289835][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.308204][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.315903][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.342304][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.359560][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.367045][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.398867][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.414327][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.421919][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.452487][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.566229][ T6371] hsr_slave_0: entered promiscuous mode [ 117.572840][ T6371] hsr_slave_1: entered promiscuous mode [ 117.583228][ T6371] debugfs: 'hsr0' already exists in 'hsr' [ 117.589303][ T6371] Cannot create hsr debugfs directory [ 117.743010][ T6359] hsr_slave_0: entered promiscuous mode [ 117.751342][ T6359] hsr_slave_1: entered promiscuous mode [ 117.758148][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 117.763891][ T6359] Cannot create hsr debugfs directory [ 117.800048][ T6365] hsr_slave_0: entered promiscuous mode [ 117.807821][ T6365] hsr_slave_1: entered promiscuous mode [ 117.814106][ T6365] debugfs: 'hsr0' already exists in 'hsr' [ 117.821113][ T6365] Cannot create hsr debugfs directory [ 117.857001][ T6369] hsr_slave_0: entered promiscuous mode [ 117.863710][ T6369] hsr_slave_1: entered promiscuous mode [ 117.870790][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 117.876822][ T6369] Cannot create hsr debugfs directory [ 117.902970][ T6361] hsr_slave_0: entered promiscuous mode [ 117.909207][ T6361] hsr_slave_1: entered promiscuous mode [ 117.915509][ T6361] debugfs: 'hsr0' already exists in 'hsr' [ 117.921222][ T6361] Cannot create hsr debugfs directory [ 118.264668][ T51] Bluetooth: hci0: command tx timeout [ 118.274751][ T33] bridge_slave_1: left allmulticast mode [ 118.280494][ T33] bridge_slave_1: left promiscuous mode [ 118.287926][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.297953][ T33] bridge_slave_0: left allmulticast mode [ 118.303601][ T33] bridge_slave_0: left promiscuous mode [ 118.310130][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.345466][ T51] Bluetooth: hci2: command tx timeout [ 118.348550][ T5865] Bluetooth: hci1: command tx timeout [ 118.424672][ T5865] Bluetooth: hci4: command tx timeout [ 118.425030][ T51] Bluetooth: hci3: command tx timeout [ 118.669437][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.680974][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.692020][ T33] bond0 (unregistering): Released all slaves [ 118.991837][ T33] hsr_slave_0: left promiscuous mode [ 118.998447][ T33] hsr_slave_1: left promiscuous mode [ 119.004503][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.012619][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.026133][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.033547][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.053429][ T33] veth1_macvtap: left promiscuous mode [ 119.059195][ T33] veth0_macvtap: left promiscuous mode [ 119.065762][ T33] veth1_vlan: left promiscuous mode [ 119.071089][ T33] veth0_vlan: left promiscuous mode [ 119.423016][ T33] team0 (unregistering): Port device team_slave_1 removed [ 119.449709][ T33] team0 (unregistering): Port device team_slave_0 removed [ 119.773074][ T6371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.782937][ T6371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.793499][ T6371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.813934][ T6371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.958891][ T6371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.987790][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.030367][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.037503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.064479][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.071640][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.118182][ T6371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 120.143128][ T6371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.272108][ T6369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.298537][ T6369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.316535][ T6369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.344922][ T51] Bluetooth: hci0: command tx timeout [ 120.366624][ T6369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.427896][ T51] Bluetooth: hci1: command tx timeout [ 120.428409][ T5865] Bluetooth: hci2: command tx timeout [ 120.507791][ T6361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.508389][ T5865] Bluetooth: hci4: command tx timeout [ 120.514525][ T51] Bluetooth: hci3: command tx timeout [ 120.531076][ T6361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.543952][ T6361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.573215][ T6361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.599380][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.783188][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.849484][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.876433][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.923584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.930745][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.966153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.973420][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.020802][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.101264][ T6371] veth0_vlan: entered promiscuous mode [ 121.112264][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.125860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.133199][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.172892][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.186866][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.194033][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.211600][ T6371] veth1_vlan: entered promiscuous mode [ 121.218865][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.231628][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.388830][ T6365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.414234][ T6365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.432313][ T6371] veth0_macvtap: entered promiscuous mode [ 121.452352][ T6371] veth1_macvtap: entered promiscuous mode [ 121.462620][ T6365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.502040][ T6365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.558664][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.577829][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.606374][ T6371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.696212][ T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.717329][ T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.777296][ T2959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.792035][ T2959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.819862][ T6369] veth0_vlan: entered promiscuous mode [ 121.862279][ T6369] veth1_vlan: entered promiscuous mode [ 121.938208][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.992729][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.006353][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.018313][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.075453][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.083634][ T6369] veth0_macvtap: entered promiscuous mode [ 122.103288][ T6369] veth1_macvtap: entered promiscuous mode [ 122.139073][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.153399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.160635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.186880][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.198500][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.226605][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.243670][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.250951][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.262357][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.269520][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state 2026/01/30 18:14:41 executed programs: 10 [ 122.300662][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.350402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.357567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.387437][ T30] audit: type=1400 audit(1769796881.080:109): avc: denied { read write } for pid=6632 comm="syz.4.21" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.415851][ T6361] veth0_vlan: entered promiscuous mode [ 122.419073][ T30] audit: type=1400 audit(1769796881.100:110): avc: denied { open } for pid=6632 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.431121][ T6361] veth1_vlan: entered promiscuous mode [ 122.446452][ T51] Bluetooth: hci0: command tx timeout [ 122.459508][ T30] audit: type=1400 audit(1769796881.100:111): avc: denied { ioctl } for pid=6632 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.488109][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.505116][ T51] Bluetooth: hci2: command tx timeout [ 122.505839][ T5865] Bluetooth: hci1: command tx timeout [ 122.566446][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.585223][ T5865] Bluetooth: hci3: command tx timeout [ 122.585963][ T51] Bluetooth: hci4: command tx timeout [ 122.607185][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.655118][ T980] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.656126][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.713313][ T6361] veth0_macvtap: entered promiscuous mode [ 122.754493][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.780677][ T6361] veth1_macvtap: entered promiscuous mode [ 122.840007][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 122.857583][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.885114][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.893962][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.903125][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.920042][ T980] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 122.945833][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.969915][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.991534][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.014119][ T980] usb 5-1: config 0 descriptor?? [ 123.060435][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.116037][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.145372][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.154454][ T2959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.171101][ T2959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.196769][ T2959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.207534][ T2959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.350209][ T6359] veth0_vlan: entered promiscuous mode [ 123.405569][ T6359] veth1_vlan: entered promiscuous mode [ 123.419331][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.429129][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.450678][ T980] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 123.452444][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.464610][ T980] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 123.512290][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.543076][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.598074][ T6359] veth0_macvtap: entered promiscuous mode [ 123.606614][ T6582] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.608964][ T6359] veth1_macvtap: entered promiscuous mode [ 123.640256][ T980] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 123.703375][ T6365] veth0_vlan: entered promiscuous mode [ 123.734022][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.768861][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.784116][ T6365] veth1_vlan: entered promiscuous mode [ 123.785579][ T6582] usb 4-1: Using ep0 maxpacket: 32 [ 123.807283][ T6582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.814627][ T3548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.848825][ T6582] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.852698][ T980] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 123.886094][ T6582] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 123.898723][ T3548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.912613][ T6582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.923194][ T3548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.931544][ T6582] usb 4-1: config 0 descriptor?? [ 123.953918][ T6365] veth0_macvtap: entered promiscuous mode [ 123.964893][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.981485][ T3548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.023872][ T6365] veth1_macvtap: entered promiscuous mode [ 124.059389][ T980] ft260 0003:0403:6030.0001: failed to retrieve status: -71, no wakeup [ 124.069810][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.095079][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.107541][ T980] ft260 0003:0403:6030.0001: failed to retrieve status: -71 [ 124.126172][ T980] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 124.130664][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 124.157632][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.182647][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.184906][ T980] usb 5-1: USB disconnect, device number 2 [ 124.215035][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.236783][ T5881] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 124.247639][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.269733][ T5881] usb 2-1: config 0 descriptor?? [ 124.278829][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.290427][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.307435][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.343657][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.402199][ T6582] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 124.427016][ T3548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.438358][ T3548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.445055][ T6582] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 124.458212][ T3548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.591109][ T6582] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 124.603966][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.635208][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.695262][ T5881] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 124.708761][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.719119][ T5881] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 124.726286][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.791657][ T6582] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 124.814761][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.880414][ T5881] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 124.887978][ T6590] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.985498][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 124.997380][ T6582] ft260 0003:0403:6030.0002: failed to retrieve status: -71, no wakeup [ 125.002003][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.009163][ T6582] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 125.024905][ T6582] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 125.034818][ T6679] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.040255][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.055288][ T6590] usb 5-1: Using ep0 maxpacket: 32 [ 125.066802][ T6590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.072875][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.090361][ T6582] usb 4-1: USB disconnect, device number 2 [ 125.097616][ T5881] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 125.101955][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.110978][ T6590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.157428][ T24] usb 1-1: config 0 descriptor?? [ 125.162902][ T6590] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.191362][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.205128][ T6679] usb 3-1: Using ep0 maxpacket: 32 [ 125.221096][ T6679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.237763][ T6590] usb 5-1: config 0 descriptor?? [ 125.260316][ T6679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.272310][ T6679] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.281914][ T6679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.298558][ T5881] ft260 0003:0403:6030.0003: failed to retrieve status: -71, no wakeup [ 125.309060][ T6679] usb 3-1: config 0 descriptor?? [ 125.326213][ T5881] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 125.345312][ T5881] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 125.385935][ T5881] usb 2-1: USB disconnect, device number 2 [ 125.592595][ T24] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 125.600267][ T24] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 125.657486][ T6590] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 125.669799][ T6590] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 125.790049][ T24] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 125.827255][ T980] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.878471][ T6590] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 125.976158][ T6679] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 125.991050][ T24] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 126.004694][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 126.011985][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.023745][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.036014][ T980] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 126.046827][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.059077][ T980] usb 4-1: config 0 descriptor?? [ 126.079207][ T6590] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 126.120820][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.183359][ T6679] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 126.202085][ T24] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 126.214035][ T24] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 126.231528][ T24] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 126.263838][ T24] usb 1-1: USB disconnect, device number 2 [ 126.275002][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 126.285536][ T6683] ================================================================== [ 126.293613][ T6683] BUG: KASAN: stack-out-of-bounds in ft260_smbus_write+0x1e3/0x250 [ 126.301525][ T6683] Read of size 42 at addr ffffc90003dffd79 by task syz.4.22/6683 [ 126.309240][ T6683] [ 126.311588][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT(full) [ 126.311615][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.311633][ T6683] Call Trace: [ 126.311640][ T6683] [ 126.311647][ T6683] dump_stack_lvl+0x100/0x190 [ 126.311679][ T6683] print_report+0x156/0x4c9 [ 126.311705][ T6683] ? __virt_addr_valid+0x81/0x620 [ 126.311727][ T6683] ? ft260_smbus_write+0x1e3/0x250 [ 126.311746][ T6683] kasan_report+0xdf/0x1a0 [ 126.311772][ T6683] ? ft260_smbus_write+0x1e3/0x250 [ 126.311794][ T6683] kasan_check_range+0x10f/0x1e0 [ 126.311823][ T6683] __asan_memcpy+0x23/0x60 [ 126.311843][ T6683] ft260_smbus_write+0x1e3/0x250 [ 126.311864][ T6683] ft260_smbus_xfer+0x222/0x600 [ 126.311885][ T6683] __i2c_smbus_xfer+0x4c3/0xf10 [ 126.311916][ T6683] ? __pfx_ft260_smbus_xfer+0x10/0x10 [ 126.311936][ T6683] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 126.311964][ T6683] ? rt_mutex_slowtrylock+0x93/0x100 [ 126.311992][ T6683] i2c_smbus_xfer+0x185/0x3c0 [ 126.312021][ T6683] i2cdev_ioctl_smbus+0x233/0xac0 [ 126.312045][ T6683] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 126.312066][ T6683] ? __might_fault+0xc5/0x140 [ 126.312085][ T6683] ? __might_fault+0xc5/0x140 [ 126.312110][ T6683] i2cdev_ioctl+0x3cf/0x830 [ 126.312132][ T6683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 126.312159][ T6683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 126.312182][ T6683] __x64_sys_ioctl+0x18e/0x210 [ 126.312202][ T6683] do_syscall_64+0xc9/0xf80 [ 126.312224][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.312258][ T6683] RIP: 0033:0x7fcb3e19aef9 [ 126.312278][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.312300][ T6683] RSP: 002b:00007fcb3ef99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.312321][ T6683] RAX: ffffffffffffffda RBX: 00007fcb3e405fa0 RCX: 00007fcb3e19aef9 [ 126.312335][ T6683] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 126.312347][ T6683] RBP: 00007fcb3e22fee0 R08: 0000000000000000 R09: 0000000000000000 [ 126.312359][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.312371][ T6683] R13: 00007fcb3e406038 R14: 00007fcb3e405fa0 R15: 00007fff757a4fc8 [ 126.312391][ T6683] [ 126.312398][ T6683] [ 126.537765][ T6683] The buggy address belongs to stack of task syz.4.22/6683 [ 126.544938][ T6683] and is located at offset 49 in frame: [ 126.550545][ T6683] i2cdev_ioctl_smbus+0x0/0xac0 [ 126.555385][ T6683] [ 126.557686][ T6683] This frame has 1 object: [ 126.562075][ T6683] [48, 82) 'temp' [ 126.562086][ T6683] [ 126.568070][ T6683] The buggy address belongs to a vmalloc virtual mapping [ 126.575068][ T6683] The buggy address belongs to the physical page: [ 126.581462][ T6683] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7732f [ 126.590217][ T6683] memcg:ffff8880373cb702 [ 126.594528][ T6683] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.601723][ T6683] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 126.610305][ T6683] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880373cb702 [ 126.618881][ T6683] page dumped because: kasan: bad access detected [ 126.625280][ T6683] page_owner tracks the page as allocated [ 126.630970][ T6683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5476, tgid 5476 (dhcpcd), ts 90580469351, free_ts 88678369553 [ 126.650088][ T6683] post_alloc_hook+0x1e1/0x250 [ 126.654845][ T6683] get_page_from_freelist+0xe3d/0x2e10 [ 126.660289][ T6683] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 126.666167][ T6683] alloc_pages_mpol+0x1fb/0x550 [ 126.671001][ T6683] alloc_pages_noprof+0x131/0x390 [ 126.676010][ T6683] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 126.681888][ T6683] __vmalloc_node_noprof+0xad/0xf0 [ 126.686985][ T6683] copy_process+0x5ec/0x7890 [ 126.691565][ T6683] kernel_clone+0xfc/0x930 [ 126.695967][ T6683] __do_sys_clone+0xd9/0x120 [ 126.700547][ T6683] do_syscall_64+0xc9/0xf80 [ 126.705034][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.710914][ T6683] page last free pid 6054 tgid 6054 stack trace: [ 126.717217][ T6683] __free_frozen_pages+0x822/0x1130 [ 126.722405][ T6683] qlist_free_all+0x47/0xe0 [ 126.726896][ T6683] kasan_quarantine_reduce+0x1a0/0x1f0 [ 126.732335][ T6683] __kasan_slab_alloc+0x69/0x90 [ 126.737167][ T6683] __kmalloc_noprof+0x300/0x9c0 [ 126.741995][ T6683] tomoyo_realpath_from_path+0xb6/0x690 [ 126.747523][ T6683] tomoyo_path_perm+0x276/0x460 [ 126.752361][ T6683] security_inode_getattr+0x116/0x280 [ 126.757715][ T6683] vfs_fstat+0x4b/0xe0 [ 126.761770][ T6683] __do_sys_newfstat+0x8b/0x110 [ 126.766604][ T6683] do_syscall_64+0xc9/0xf80 [ 126.771109][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.776990][ T6683] [ 126.779377][ T6683] Memory state around the buggy address: [ 126.784981][ T6683] ffffc90003dffc80: f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.793022][ T6683] ffffc90003dffd00: 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1 00 [ 126.801062][ T6683] >ffffc90003dffd80: 00 00 00 02 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 [ 126.809098][ T6683] ^ [ 126.813922][ T6683] ffffc90003dffe00: 00 00 00 00 00 f1 f1 f1 f1 f1 f1 04 f2 00 00 f3 [ 126.821968][ T6683] ffffc90003dffe80: f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 126.830265][ T6683] ================================================================== [ 126.854272][ T6683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.861580][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT(full) [ 126.870688][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 126.880834][ T6683] Call Trace: [ 126.884104][ T6683] [ 126.887017][ T6683] dump_stack_lvl+0x100/0x190 [ 126.891686][ T6683] vpanic+0x20d/0x630 [ 126.895649][ T6683] panic+0xd1/0xd1 [ 126.899349][ T6683] ? __pfx_panic+0x10/0x10 [ 126.903741][ T6683] ? ft260_smbus_write+0x1e3/0x250 [ 126.908846][ T6683] ? preempt_schedule_common+0x42/0xc0 [ 126.914640][ T6683] ? check_panic_on_warn+0x1f/0x90 [ 126.919742][ T6683] check_panic_on_warn.cold+0x19/0x34 [ 126.925095][ T6683] end_report.part.0+0x3a/0x90 [ 126.929846][ T6683] kasan_report.cold+0xe/0x18 [ 126.934558][ T6683] ? ft260_smbus_write+0x1e3/0x250 [ 126.939656][ T6683] kasan_check_range+0x10f/0x1e0 [ 126.944581][ T6683] __asan_memcpy+0x23/0x60 [ 126.949072][ T6683] ft260_smbus_write+0x1e3/0x250 [ 126.954077][ T6683] ft260_smbus_xfer+0x222/0x600 [ 126.958995][ T6683] __i2c_smbus_xfer+0x4c3/0xf10 [ 126.963836][ T6683] ? __pfx_ft260_smbus_xfer+0x10/0x10 [ 126.969185][ T6683] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 126.974544][ T6683] ? rt_mutex_slowtrylock+0x93/0x100 [ 126.979816][ T6683] i2c_smbus_xfer+0x185/0x3c0 [ 126.984497][ T6683] i2cdev_ioctl_smbus+0x233/0xac0 [ 126.989506][ T6683] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 126.995206][ T6683] ? __might_fault+0xc5/0x140 [ 126.999870][ T6683] ? __might_fault+0xc5/0x140 [ 127.004548][ T6683] i2cdev_ioctl+0x3cf/0x830 [ 127.009181][ T6683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 127.014202][ T6683] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 127.019212][ T6683] __x64_sys_ioctl+0x18e/0x210 [ 127.023961][ T6683] do_syscall_64+0xc9/0xf80 [ 127.028450][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.034323][ T6683] RIP: 0033:0x7fcb3e19aef9 [ 127.038723][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.058315][ T6683] RSP: 002b:00007fcb3ef99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.066712][ T6683] RAX: ffffffffffffffda RBX: 00007fcb3e405fa0 RCX: 00007fcb3e19aef9 [ 127.074684][ T6683] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 127.082636][ T6683] RBP: 00007fcb3e22fee0 R08: 0000000000000000 R09: 0000000000000000 [ 127.090589][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.098540][ T6683] R13: 00007fcb3e406038 R14: 00007fcb3e405fa0 R15: 00007fff757a4fc8 [ 127.106501][ T6683] [ 127.109807][ T6683] Kernel Offset: disabled [ 127.114232][ T6683] Rebooting in 86400 seconds.. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.