Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. 2026/03/24 12:00:11 parsed 1 programs [ 88.738559][ T5841] cgroup: Unknown subsys name 'net' [ 88.848640][ T5841] cgroup: Unknown subsys name 'cpuset' [ 88.857782][ T5841] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.645230][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.961765][ T991] cfg80211: failed to load regulatory.db [ 94.081213][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.741588][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.750115][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.812614][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.820688][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.526929][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 97.634924][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.642978][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.651051][ T5913] bridge_slave_0: entered allmulticast mode [ 97.658529][ T5913] bridge_slave_0: entered promiscuous mode [ 97.668429][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.676325][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.683658][ T5913] bridge_slave_1: entered allmulticast mode [ 97.691651][ T5913] bridge_slave_1: entered promiscuous mode [ 97.728171][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.740294][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.775883][ T5913] team0: Port device team_slave_0 added [ 97.784119][ T5913] team0: Port device team_slave_1 added [ 97.811784][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.819119][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.845357][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.861015][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.868367][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.894577][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.939407][ T5913] hsr_slave_0: entered promiscuous mode [ 97.946354][ T5913] hsr_slave_1: entered promiscuous mode [ 98.116258][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.130299][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.140632][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.151377][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.244065][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.267908][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.282919][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.290935][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.308694][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.315984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.511779][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.562814][ T5913] veth0_vlan: entered promiscuous mode [ 98.575668][ T5913] veth1_vlan: entered promiscuous mode [ 98.612676][ T5913] veth0_macvtap: entered promiscuous mode [ 98.623310][ T5913] veth1_macvtap: entered promiscuous mode [ 98.647831][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.662681][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.682022][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.692091][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709840][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.720247][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.872146][ T1127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.939884][ T1127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.011580][ T1127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.141850][ T1127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.142076][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.162766][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.171397][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.180300][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.188557][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/03/24 12:00:26 executed programs: 0 [ 99.884681][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.893295][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.904851][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.914386][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.922302][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.100800][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 100.195233][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.203396][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.213858][ T5950] bridge_slave_0: entered allmulticast mode [ 100.224823][ T5950] bridge_slave_0: entered promiscuous mode [ 100.233726][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.242143][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.250349][ T5950] bridge_slave_1: entered allmulticast mode [ 100.258103][ T5950] bridge_slave_1: entered promiscuous mode [ 100.295431][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.308310][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.343588][ T5950] team0: Port device team_slave_0 added [ 100.352017][ T5950] team0: Port device team_slave_1 added [ 100.383610][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.390717][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.417280][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.431657][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.439010][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.466314][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.516066][ T5950] hsr_slave_0: entered promiscuous mode [ 100.523268][ T5950] hsr_slave_1: entered promiscuous mode [ 100.530045][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 100.536243][ T5950] Cannot create hsr debugfs directory [ 101.905605][ T1127] bridge_slave_1: left allmulticast mode [ 101.913766][ T1127] bridge_slave_1: left promiscuous mode [ 101.921005][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.938441][ T1127] bridge_slave_0: left allmulticast mode [ 101.956414][ T5157] Bluetooth: hci0: command tx timeout [ 101.963816][ T1127] bridge_slave_0: left promiscuous mode [ 101.973300][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.246207][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.257827][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.268193][ T1127] bond0 (unregistering): Released all slaves [ 102.391448][ T1127] hsr_slave_0: left promiscuous mode [ 102.398169][ T1127] hsr_slave_1: left promiscuous mode [ 102.405042][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.412564][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.421633][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.429378][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.449149][ T1127] veth1_macvtap: left promiscuous mode [ 102.455915][ T1127] veth0_macvtap: left promiscuous mode [ 102.461707][ T1127] veth1_vlan: left promiscuous mode [ 102.467492][ T1127] veth0_vlan: left promiscuous mode [ 102.821199][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 102.851920][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 103.456913][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.472295][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.499311][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.681227][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.849949][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.887426][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.911380][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.919108][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.940984][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.948263][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.036713][ T5157] Bluetooth: hci0: command tx timeout [ 104.272965][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.340197][ T5950] veth0_vlan: entered promiscuous mode [ 104.357756][ T5950] veth1_vlan: entered promiscuous mode [ 104.403390][ T5950] veth0_macvtap: entered promiscuous mode [ 104.417593][ T5950] veth1_macvtap: entered promiscuous mode [ 104.441651][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.460625][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.482953][ T1127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.502667][ T1127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.513329][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.530355][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.615875][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.632862][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.666466][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.684523][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.045138][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.230029][ T5842] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.244955][ T5842] usb 1-1: config 0 has no interface number 0 [ 105.262058][ T5842] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 105.271409][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.282306][ T5842] usb 1-1: Product: syz [ 105.286898][ T5842] usb 1-1: Manufacturer: syz [ 105.291862][ T5842] usb 1-1: SerialNumber: syz [ 105.307989][ T5842] usb 1-1: config 0 descriptor?? [ 105.523680][ T5842] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 105.540617][ T5842] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.552440][ T5842] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 105.564531][ T5842] usb 1-1: media controller created [ 105.580030][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.115270][ T5157] Bluetooth: hci0: command tx timeout [ 106.677612][ T5842] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 106.680476][ T6015] ================================================================== [ 106.691888][ T6015] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4cd/0x640 [ 106.699516][ T6015] Read of size 1 at addr ffff8880216b9381 by task syz.0.17/6015 [ 106.707208][ T6015] [ 106.709625][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.709660][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.709682][ T6015] Call Trace: [ 106.709690][ T6015] [ 106.709700][ T6015] dump_stack_lvl+0xe8/0x150 [ 106.709736][ T6015] print_address_description+0x55/0x1e0 [ 106.709767][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.709795][ T6015] print_report+0x58/0x70 [ 106.709822][ T6015] kasan_report+0x117/0x150 [ 106.709846][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.709876][ T6015] ec168_i2c_xfer+0x4cd/0x640 [ 106.709910][ T6015] __i2c_transfer+0x79a/0x1f70 [ 106.709939][ T6015] ? i2c_transfer+0xc8/0x2d0 [ 106.709961][ T6015] i2c_transfer+0x1cc/0x2d0 [ 106.709983][ T6015] i2cdev_ioctl_rdwr+0x460/0x740 [ 106.710011][ T6015] i2cdev_ioctl+0x6a5/0x880 [ 106.710032][ T6015] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 106.710055][ T6015] ? __pfx___se_sys_futex+0x10/0x10 [ 106.710074][ T6015] ? rcu_is_watching+0x15/0xb0 [ 106.710095][ T6015] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.710116][ T6015] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 106.710137][ T6015] __se_sys_ioctl+0xfc/0x170 [ 106.710160][ T6015] do_syscall_64+0x14d/0xf80 [ 106.710187][ T6015] ? trace_irq_disable+0x3b/0x140 [ 106.710210][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.710231][ T6015] ? clear_bhb_loop+0x40/0x90 [ 106.710254][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.710275][ T6015] RIP: 0033:0x7f43a7f9c799 [ 106.710299][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.710316][ T6015] RSP: 002b:00007ffc17587fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.710346][ T6015] RAX: ffffffffffffffda RBX: 00007f43a8215fa0 RCX: 00007f43a7f9c799 [ 106.710362][ T6015] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 106.710375][ T6015] RBP: 00007f43a8032c99 R08: 0000000000000000 R09: 0000000000000000 [ 106.710388][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.710399][ T6015] R13: 00007f43a8215fac R14: 00007f43a8215fa0 R15: 00007f43a8215fa0 [ 106.710423][ T6015] [ 106.710431][ T6015] [ 106.927531][ T6015] Allocated by task 6015: [ 106.931877][ T6015] kasan_save_track+0x3e/0x80 [ 106.936589][ T6015] __kasan_kmalloc+0x93/0xb0 [ 106.941200][ T6015] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 106.947622][ T6015] memdup_user+0x2b/0xd0 [ 106.951872][ T6015] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 106.956819][ T6015] i2cdev_ioctl+0x6a5/0x880 [ 106.961356][ T6015] __se_sys_ioctl+0xfc/0x170 [ 106.966018][ T6015] do_syscall_64+0x14d/0xf80 [ 106.970743][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.976663][ T6015] [ 106.979012][ T6015] The buggy address belongs to the object at ffff8880216b9380 [ 106.979012][ T6015] which belongs to the cache kmalloc-8 of size 8 [ 106.992734][ T6015] The buggy address is located 0 bytes to the right of [ 106.992734][ T6015] allocated 1-byte region [ffff8880216b9380, ffff8880216b9381) [ 107.007077][ T6015] [ 107.009412][ T6015] The buggy address belongs to the physical page: [ 107.015833][ T6015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880216b91e0 pfn:0x216b9 [ 107.025921][ T6015] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 107.034046][ T6015] page_type: f5(slab) [ 107.038057][ T6015] raw: 00fff00000000200 ffff88813fe32500 ffff88813fe31348 ffffea000087ba90 [ 107.046666][ T6015] raw: ffff8880216b91e0 000000080080007b 00000000f5000000 0000000000000000 [ 107.055260][ T6015] page dumped because: kasan: bad access detected [ 107.061776][ T6015] page_owner tracks the page as allocated [ 107.067508][ T6015] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3279848024, free_ts 3222224875 [ 107.087323][ T6015] post_alloc_hook+0x231/0x280 [ 107.092146][ T6015] get_page_from_freelist+0x2418/0x24b0 [ 107.097745][ T6015] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 107.103570][ T6015] allocate_slab+0x77/0x660 [ 107.108576][ T6015] refill_objects+0x339/0x3d0 [ 107.113287][ T6015] __pcs_replace_empty_main+0x321/0x720 [ 107.118974][ T6015] __kmalloc_noprof+0x474/0x760 [ 107.123830][ T6015] acpi_ns_internalize_name+0x2c9/0x3e0 [ 107.129424][ T6015] acpi_ns_get_node_unlocked+0x186/0x480 [ 107.135099][ T6015] acpi_ns_get_node+0x76/0xc0 [ 107.139794][ T6015] acpi_ns_evaluate+0x283/0x1230 [ 107.144751][ T6015] acpi_ut_evaluate_object+0xe1/0x560 [ 107.150145][ T6015] acpi_ut_execute_CID+0xc6/0x710 [ 107.155181][ T6015] acpi_ns_get_device_callback+0x2bc/0x4c0 [ 107.161006][ T6015] acpi_ns_walk_namespace+0x2a7/0x770 [ 107.166388][ T6015] acpi_get_devices+0x14b/0x1e0 [ 107.171251][ T6015] page last free pid 1 tgid 1 stack trace: [ 107.177066][ T6015] __free_frozen_pages+0xbc7/0xd30 [ 107.182191][ T6015] __slab_free+0x274/0x2c0 [ 107.186731][ T6015] qlist_free_all+0x99/0x100 [ 107.191338][ T6015] kasan_quarantine_remove_cache+0x342/0x360 [ 107.197335][ T6015] kmem_cache_shrink+0xd/0x20 [ 107.202051][ T6015] acpi_os_purge_cache+0x15/0x20 [ 107.206995][ T6015] acpi_purge_cached_objects+0xd5/0x100 [ 107.212548][ T6015] acpi_initialize_objects+0x2e/0xb0 [ 107.217855][ T6015] acpi_bus_init+0xa8/0x360 [ 107.222409][ T6015] acpi_init+0xa1/0x1f0 [ 107.226582][ T6015] do_one_initcall+0x250/0x870 [ 107.231375][ T6015] do_initcall_level+0x104/0x190 [ 107.236375][ T6015] do_initcalls+0x59/0xa0 [ 107.240720][ T6015] kernel_init_freeable+0x2a6/0x3e0 [ 107.245951][ T6015] kernel_init+0x1d/0x1d0 [ 107.250289][ T6015] ret_from_fork+0x51e/0xb90 [ 107.254887][ T6015] [ 107.257208][ T6015] Memory state around the buggy address: [ 107.262923][ T6015] ffff8880216b9280: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 107.270998][ T6015] ffff8880216b9300: 00 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc [ 107.279511][ T6015] >ffff8880216b9380: 01 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 107.287602][ T6015] ^ [ 107.291706][ T6015] ffff8880216b9400: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 107.299770][ T6015] ffff8880216b9480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 107.308004][ T6015] ================================================================== [ 107.318260][ T6015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.325506][ T6015] CPU: 1 UID: 0 PID: 6015 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.334639][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.344742][ T6015] Call Trace: [ 107.348045][ T6015] [ 107.350997][ T6015] vpanic+0x56c/0xa60 [ 107.355003][ T6015] ? __pfx_vpanic+0x10/0x10 [ 107.359528][ T6015] ? __pfx___schedule+0x10/0x10 [ 107.364411][ T6015] panic+0xc5/0xd0 [ 107.368154][ T6015] ? __pfx_panic+0x10/0x10 [ 107.372601][ T6015] ? preempt_schedule_common+0x82/0xd0 [ 107.378093][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 107.383000][ T6015] check_panic_on_warn+0x89/0xb0 [ 107.388006][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 107.392934][ T6015] end_report+0x73/0x170 [ 107.397450][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 107.402432][ T6015] kasan_report+0x128/0x150 [ 107.407051][ T6015] ? ec168_i2c_xfer+0x4cd/0x640 [ 107.411946][ T6015] ec168_i2c_xfer+0x4cd/0x640 [ 107.416651][ T6015] __i2c_transfer+0x79a/0x1f70 [ 107.421445][ T6015] ? i2c_transfer+0xc8/0x2d0 [ 107.426584][ T6015] i2c_transfer+0x1cc/0x2d0 [ 107.431175][ T6015] i2cdev_ioctl_rdwr+0x460/0x740 [ 107.436148][ T6015] i2cdev_ioctl+0x6a5/0x880 [ 107.440681][ T6015] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 107.445737][ T6015] ? __pfx___se_sys_futex+0x10/0x10 [ 107.451058][ T6015] ? rcu_is_watching+0x15/0xb0 [ 107.456988][ T6015] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.462142][ T6015] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 107.467828][ T6015] __se_sys_ioctl+0xfc/0x170 [ 107.472597][ T6015] do_syscall_64+0x14d/0xf80 [ 107.477241][ T6015] ? trace_irq_disable+0x3b/0x140 [ 107.482357][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.488507][ T6015] ? clear_bhb_loop+0x40/0x90 [ 107.493227][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.499148][ T6015] RIP: 0033:0x7f43a7f9c799 [ 107.503591][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.523397][ T6015] RSP: 002b:00007ffc17587fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.531836][ T6015] RAX: ffffffffffffffda RBX: 00007f43a8215fa0 RCX: 00007f43a7f9c799 [ 107.540334][ T6015] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 107.549039][ T6015] RBP: 00007f43a8032c99 R08: 0000000000000000 R09: 0000000000000000 [ 107.557220][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.565926][ T6015] R13: 00007f43a8215fac R14: 00007f43a8215fa0 R15: 00007f43a8215fa0 [ 107.574124][ T6015] [ 107.578082][ T6015] Kernel Offset: disabled [ 107.582441][ T6015] Rebooting in 86400 seconds..