no interfaces have a carrier
[ 42.979565][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0
[ 42.996066][ T5507] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts.
2026/03/22 04:26:54 parsed 1 programs
syzkaller login: [ 71.057212][ T5841] cgroup: Unknown subsys name 'net'
[ 71.167097][ T5841] cgroup: Unknown subsys name 'cpuset'
[ 71.175695][ T5841] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 72.574826][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.332906][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 77.398440][ T5902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.408087][ T5902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.418578][ T5902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.429683][ T5902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.437366][ T5902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.245354][ T5918] chnl_net:caif_netlink_parms(): no params data found
[ 78.336392][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.344295][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.351514][ T5918] bridge_slave_0: entered allmulticast mode
[ 78.359891][ T5918] bridge_slave_0: entered promiscuous mode
[ 78.369552][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.376916][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.384192][ T5918] bridge_slave_1: entered allmulticast mode
[ 78.392223][ T5918] bridge_slave_1: entered promiscuous mode
[ 78.426947][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.439179][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.475914][ T5918] team0: Port device team_slave_0 added
[ 78.484167][ T5918] team0: Port device team_slave_1 added
[ 78.510522][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.517507][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.543444][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.556665][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.563592][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 78.589505][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.631227][ T5918] hsr_slave_0: entered promiscuous mode
[ 78.639339][ T5918] hsr_slave_1: entered promiscuous mode
[ 78.785763][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.797501][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.808061][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.818307][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.850263][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.857654][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.865338][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.872450][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.939209][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.960062][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.968546][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.983204][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.999346][ T733] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.006479][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.023113][ T733] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.030268][ T733] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.203421][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.260441][ T5918] veth0_vlan: entered promiscuous mode
[ 79.273843][ T5918] veth1_vlan: entered promiscuous mode
[ 79.310504][ T5918] veth0_macvtap: entered promiscuous mode
[ 79.321466][ T5918] veth1_macvtap: entered promiscuous mode
[ 79.345341][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.361619][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.382395][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.393155][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.406254][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.417288][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.568781][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.686836][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.789456][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.831756][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.840362][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.869435][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 79.897657][ T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 79.906443][ T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/03/22 04:27:05 executed programs: 0
[ 80.386615][ T5902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.394657][ T5902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.402533][ T5902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.411709][ T5902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.422669][ T5902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.562856][ T5955] chnl_net:caif_netlink_parms(): no params data found
[ 80.641656][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.649273][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.656820][ T5955] bridge_slave_0: entered allmulticast mode
[ 80.664600][ T5955] bridge_slave_0: entered promiscuous mode
[ 80.673128][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.680658][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.687848][ T5955] bridge_slave_1: entered allmulticast mode
[ 80.695522][ T5955] bridge_slave_1: entered promiscuous mode
[ 80.728993][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.741992][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.772756][ T5955] team0: Port device team_slave_0 added
[ 80.781029][ T5955] team0: Port device team_slave_1 added
[ 80.809674][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.816640][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.842565][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.856208][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.863138][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.889352][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.942278][ T5955] hsr_slave_0: entered promiscuous mode
[ 80.949213][ T5955] hsr_slave_1: entered promiscuous mode
[ 80.956104][ T5955] debugfs: 'hsr0' already exists in 'hsr'
[ 80.961918][ T5955] Cannot create hsr debugfs directory
[ 81.450687][ T24] cfg80211: failed to load regulatory.db
[ 82.462181][ T36] bridge_slave_1: left allmulticast mode
[ 82.468628][ T36] bridge_slave_1: left promiscuous mode
[ 82.476040][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.487055][ T51] Bluetooth: hci0: command tx timeout
[ 82.494207][ T36] bridge_slave_0: left allmulticast mode
[ 82.500081][ T36] bridge_slave_0: left promiscuous mode
[ 82.506108][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.662558][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.673320][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.683653][ T36] bond0 (unregistering): Released all slaves
[ 82.802804][ T36] hsr_slave_0: left promiscuous mode
[ 82.814392][ T36] hsr_slave_1: left promiscuous mode
[ 82.821046][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 82.831491][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 82.840615][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 82.848064][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 82.863155][ T36] veth1_macvtap: left promiscuous mode
[ 82.869664][ T36] veth0_macvtap: left promiscuous mode
[ 82.875458][ T36] veth1_vlan: left promiscuous mode
[ 82.880813][ T36] veth0_vlan: left promiscuous mode
[ 83.200183][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 83.214165][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 83.644882][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.668999][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.683047][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.701388][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.945412][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.024588][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.042869][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.050076][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.071720][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.078905][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.468482][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.548657][ T5955] veth0_vlan: entered promiscuous mode
[ 84.569108][ T5955] veth1_vlan: entered promiscuous mode
[ 84.574634][ T51] Bluetooth: hci0: command tx timeout
[ 84.621785][ T5955] veth0_macvtap: entered promiscuous mode
[ 84.643464][ T5955] veth1_macvtap: entered promiscuous mode
[ 84.677422][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.703301][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.727998][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.752957][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.771773][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.781963][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.866572][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.887750][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.927720][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.936678][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.254416][ T5937] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 85.418011][ T5937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 85.426225][ T5937] usb 1-1: config 0 has no interface number 0
[ 85.436817][ T5937] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 85.446063][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.454165][ T5937] usb 1-1: Product: syz
[ 85.458368][ T5937] usb 1-1: Manufacturer: syz
[ 85.462976][ T5937] usb 1-1: SerialNumber: syz
[ 85.470834][ T5937] usb 1-1: config 0 descriptor??
[ 85.678622][ T5937] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 85.693127][ T5937] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 85.703746][ T5937] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 85.712260][ T5937] usb 1-1: media controller created
[ 85.726141][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 86.645644][ T51] Bluetooth: hci0: command tx timeout
[ 86.809255][ T5937] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 86.810658][ T6028] ==================================================================
[ 86.823413][ T6028] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4cd/0x640
[ 86.830969][ T6028] Read of size 1 at addr ffff88802ba578a1 by task syz.0.17/6028
[ 86.838603][ T6028]
[ 86.840951][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 86.840970][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 86.840986][ T6028] Call Trace:
[ 86.840995][ T6028]
[ 86.841003][ T6028] dump_stack_lvl+0xe8/0x150
[ 86.841031][ T6028] print_address_description+0x55/0x1e0
[ 86.841053][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 86.841074][ T6028] print_report+0x58/0x70
[ 86.841092][ T6028] kasan_report+0x117/0x150
[ 86.841110][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 86.841133][ T6028] ec168_i2c_xfer+0x4cd/0x640
[ 86.841158][ T6028] __i2c_transfer+0x79a/0x1f70
[ 86.841180][ T6028] ? i2c_transfer+0xc8/0x2d0
[ 86.841197][ T6028] i2c_transfer+0x1cc/0x2d0
[ 86.841216][ T6028] i2cdev_ioctl_rdwr+0x460/0x740
[ 86.841238][ T6028] i2cdev_ioctl+0x6a5/0x880
[ 86.841255][ T6028] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 86.841273][ T6028] ? __pfx___se_sys_futex+0x10/0x10
[ 86.841289][ T6028] ? rcu_is_watching+0x15/0xb0
[ 86.841305][ T6028] ? bpf_lsm_file_ioctl+0x9/0x20
[ 86.841322][ T6028] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 86.841341][ T6028] __se_sys_ioctl+0xfc/0x170
[ 86.841360][ T6028] do_syscall_64+0x14d/0xf80
[ 86.841380][ T6028] ? trace_irq_disable+0x3b/0x140
[ 86.841399][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.841415][ T6028] ? clear_bhb_loop+0x40/0x90
[ 86.841432][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.841447][ T6028] RIP: 0033:0x7f912cf9c799
[ 86.841467][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.841481][ T6028] RSP: 002b:00007ffd0b478018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 86.841498][ T6028] RAX: ffffffffffffffda RBX: 00007f912d215fa0 RCX: 00007f912cf9c799
[ 86.841510][ T6028] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004
[ 86.841521][ T6028] RBP: 00007f912d032c99 R08: 0000000000000000 R09: 0000000000000000
[ 86.841532][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.841543][ T6028] R13: 00007f912d215fac R14: 00007f912d215fa0 R15: 00007f912d215fa0
[ 86.841560][ T6028]
[ 86.841566][ T6028]
[ 87.055839][ T6028] Allocated by task 6028:
[ 87.060150][ T6028] kasan_save_track+0x3e/0x80
[ 87.064816][ T6028] __kasan_kmalloc+0x93/0xb0
[ 87.069388][ T6028] __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[ 87.075785][ T6028] memdup_user+0x2b/0xd0
[ 87.080017][ T6028] i2cdev_ioctl_rdwr+0x1c6/0x740
[ 87.084938][ T6028] i2cdev_ioctl+0x6a5/0x880
[ 87.089425][ T6028] __se_sys_ioctl+0xfc/0x170
[ 87.093997][ T6028] do_syscall_64+0x14d/0xf80
[ 87.098577][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.104453][ T6028]
[ 87.106758][ T6028] The buggy address belongs to the object at ffff88802ba578a0
[ 87.106758][ T6028] which belongs to the cache kmalloc-8 of size 8
[ 87.120461][ T6028] The buggy address is located 0 bytes to the right of
[ 87.120461][ T6028] allocated 1-byte region [ffff88802ba578a0, ffff88802ba578a1)
[ 87.134759][ T6028]
[ 87.137069][ T6028] The buggy address belongs to the physical page:
[ 87.143472][ T6028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba57
[ 87.152217][ T6028] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 87.159317][ T6028] page_type: f5(slab)
[ 87.163282][ T6028] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122
[ 87.171848][ T6028] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000
[ 87.180407][ T6028] page dumped because: kasan: bad access detected
[ 87.186811][ T6028] page_owner tracks the page as allocated
[ 87.192503][ T6028] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9767749344, free_ts 8826012894
[ 87.212277][ T6028] post_alloc_hook+0x231/0x280
[ 87.217032][ T6028] get_page_from_freelist+0x2418/0x24b0
[ 87.222564][ T6028] __alloc_frozen_pages_noprof+0x233/0x3d0
[ 87.228358][ T6028] allocate_slab+0x77/0x660
[ 87.232849][ T6028] refill_objects+0x339/0x3d0
[ 87.237510][ T6028] __pcs_replace_empty_main+0x321/0x720
[ 87.243048][ T6028] __kmalloc_node_track_caller_noprof+0x572/0x7b0
[ 87.249454][ T6028] kstrdup+0x42/0x100
[ 87.253442][ T6028] __kernfs_new_node+0xaa/0x970
[ 87.258284][ T6028] kernfs_new_node+0x102/0x210
[ 87.263040][ T6028] kernfs_create_dir_ns+0x44/0x130
[ 87.268146][ T6028] sysfs_create_dir_ns+0x12f/0x2a0
[ 87.273249][ T6028] kobject_add_internal+0x62b/0xd00
[ 87.278434][ T6028] kobject_add+0x163/0x240
[ 87.282847][ T6028] device_add+0x408/0xb70
[ 87.287168][ T6028] usb_create_ep_devs+0x12c/0x230
[ 87.292190][ T6028] page last free pid 9 tgid 9 stack trace:
[ 87.297977][ T6028] __free_frozen_pages+0xbc7/0xd30
[ 87.303074][ T6028] vfree+0x1d1/0x2f0
[ 87.306962][ T6028] delayed_vfree_work+0x55/0x80
[ 87.311804][ T6028] process_one_work+0x9a3/0x1710
[ 87.316731][ T6028] worker_thread+0xba8/0x11e0
[ 87.321390][ T6028] kthread+0x388/0x470
[ 87.325444][ T6028] ret_from_fork+0x51e/0xb90
[ 87.330024][ T6028] ret_from_fork_asm+0x1a/0x30
[ 87.334772][ T6028]
[ 87.337090][ T6028] Memory state around the buggy address:
[ 87.342703][ T6028] ffff88802ba57780: 00 fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc
[ 87.350747][ T6028] ffff88802ba57800: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc
[ 87.358796][ T6028] >ffff88802ba57880: fa fc fc fc 01 fc fc fc 00 fc fc fc fa fc fc fc
[ 87.366839][ T6028] ^
[ 87.371933][ T6028] ffff88802ba57900: 06 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 87.379978][ T6028] ffff88802ba57980: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 87.388018][ T6028] ==================================================================
[ 87.413563][ T6028] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.420777][ T6028] CPU: 0 UID: 0 PID: 6028 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 87.429877][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.439919][ T6028] Call Trace:
[ 87.443187][ T6028]
[ 87.446106][ T6028] vpanic+0x56c/0xa60
[ 87.450086][ T6028] ? __pfx_vpanic+0x10/0x10
[ 87.454582][ T6028] ? __pfx___schedule+0x10/0x10
[ 87.459423][ T6028] panic+0xc5/0xd0
[ 87.463136][ T6028] ? __pfx_panic+0x10/0x10
[ 87.467544][ T6028] ? preempt_schedule_common+0x82/0xd0
[ 87.472995][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 87.477836][ T6028] check_panic_on_warn+0x89/0xb0
[ 87.482762][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 87.487606][ T6028] end_report+0x73/0x170
[ 87.491836][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 87.496674][ T6028] kasan_report+0x128/0x150
[ 87.501168][ T6028] ? ec168_i2c_xfer+0x4cd/0x640
[ 87.506012][ T6028] ec168_i2c_xfer+0x4cd/0x640
[ 87.510687][ T6028] __i2c_transfer+0x79a/0x1f70
[ 87.515443][ T6028] ? i2c_transfer+0xc8/0x2d0
[ 87.520020][ T6028] i2c_transfer+0x1cc/0x2d0
[ 87.524510][ T6028] i2cdev_ioctl_rdwr+0x460/0x740
[ 87.529439][ T6028] i2cdev_ioctl+0x6a5/0x880
[ 87.533931][ T6028] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 87.538948][ T6028] ? __pfx___se_sys_futex+0x10/0x10
[ 87.544131][ T6028] ? rcu_is_watching+0x15/0xb0
[ 87.548882][ T6028] ? bpf_lsm_file_ioctl+0x9/0x20
[ 87.553805][ T6028] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 87.558816][ T6028] __se_sys_ioctl+0xfc/0x170
[ 87.563396][ T6028] do_syscall_64+0x14d/0xf80
[ 87.567979][ T6028] ? trace_irq_disable+0x3b/0x140
[ 87.572994][ T6028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.579045][ T6028] ? clear_bhb_loop+0x40/0x90
[ 87.583708][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 87.589588][ T6028] RIP: 0033:0x7f912cf9c799
[ 87.593992][ T6028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 87.613586][ T6028] RSP: 002b:00007ffd0b478018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 87.621990][ T6028] RAX: ffffffffffffffda RBX: 00007f912d215fa0 RCX: 00007f912cf9c799
[ 87.629952][ T6028] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004
[ 87.637910][ T6028] RBP: 00007f912d032c99 R08: 0000000000000000 R09: 0000000000000000
[ 87.645865][ T6028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 87.653819][ T6028] R13: 00007f912d215fac R14: 00007f912d215fa0 R15: 00007f912d215fa0
[ 87.661784][ T6028]
[ 87.665164][ T6028] Kernel Offset: disabled
[ 87.669472][ T6028] Rebooting in 86400 seconds..