Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts.
2026/09/06 23:47:12 parsed 1 programs
2026/09/06 23:47:12 serving rpc on tcp://41243
syzkaller login: [ 63.079353][ T4198] cgroup: Unknown subsys name 'net'
[ 63.228072][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 64.433354][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 66.216754][ T4226] chnl_net:caif_netlink_parms(): no params data found
[ 66.260436][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.268264][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.277010][ T4226] device bridge_slave_0 entered promiscuous mode
[ 66.287927][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.295067][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.302706][ T4226] device bridge_slave_1 entered promiscuous mode
[ 66.320681][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 66.331394][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 66.354547][ T4226] team0: Port device team_slave_0 added
[ 66.365536][ T4226] team0: Port device team_slave_1 added
[ 66.380297][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 66.387362][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.413486][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 66.427983][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 66.435401][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.461590][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.497819][ T4226] device hsr_slave_0 entered promiscuous mode
[ 66.504966][ T4226] device hsr_slave_1 entered promiscuous mode
[ 66.629208][ T4226] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.641524][ T4226] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.652615][ T4226] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.663517][ T4226] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.690229][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.697462][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.705616][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.712693][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.736228][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.745820][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.793983][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.808321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 66.822369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 66.835536][ T4226] 8021q: adding VLAN 0 to HW filter on device team0
[ 66.847303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 66.856737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 66.866919][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.874247][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.893422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 66.902444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 66.912508][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.919799][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.931640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 66.942583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 66.964642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 66.975734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 66.984675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 66.995170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.004439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 67.014689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.023418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 67.031962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.044398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.055294][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 67.169475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 67.178638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 67.192793][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.214790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 67.223890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 67.243891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 67.252641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 67.264796][ T4226] device veth0_vlan entered promiscuous mode
[ 67.273865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 67.282181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.294800][ T4226] device veth1_vlan entered promiscuous mode
[ 67.319320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 67.328806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.337160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 67.346679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.358269][ T4226] device veth0_macvtap entered promiscuous mode
[ 67.369356][ T4226] device veth1_macvtap entered promiscuous mode
[ 67.388900][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.398796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.407692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 67.417023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 67.425822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.439312][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.447650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 67.456863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.467887][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.477144][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.486600][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.495357][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.742145][ T1211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 67.874604][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.882684][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.905810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 67.917084][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.925073][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.933311][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/06 23:47:19 executed programs: 0
[ 69.110254][ T4283] chnl_net:caif_netlink_parms(): no params data found
[ 69.148959][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.156129][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.165300][ T4283] device bridge_slave_0 entered promiscuous mode
[ 69.175489][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.182638][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.191012][ T4283] device bridge_slave_1 entered promiscuous mode
[ 69.211936][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.223619][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.243971][ T4283] team0: Port device team_slave_0 added
[ 69.252502][ T4283] team0: Port device team_slave_1 added
[ 69.271949][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.279054][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.305058][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.316764][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.324059][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.350289][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.377275][ T4283] device hsr_slave_0 entered promiscuous mode
[ 69.385939][ T4283] device hsr_slave_1 entered promiscuous mode
[ 69.392929][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 69.400838][ T4283] Cannot create hsr debugfs directory
[ 70.479305][ T1211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.083691][ T13] Bluetooth: hci0: command 0x0409 tx timeout
[ 71.245322][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.252229][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.807942][ T1211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.859894][ T1211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 73.163279][ T4306] Bluetooth: hci0: command 0x041b tx timeout
[ 73.675060][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.684445][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.693781][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.702384][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.767108][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.778529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 73.787176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 73.797592][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.811797][ T1211] device hsr_slave_0 left promiscuous mode
[ 73.818690][ T1211] device hsr_slave_1 left promiscuous mode
[ 73.825463][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 73.833143][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 73.842234][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 73.850504][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 73.858493][ T1211] device bridge_slave_1 left promiscuous mode
[ 73.865989][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.878773][ T1211] device bridge_slave_0 left promiscuous mode
[ 73.885935][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.902856][ T1211] device veth1_macvtap left promiscuous mode
[ 73.909580][ T1211] device veth0_macvtap left promiscuous mode
[ 73.916136][ T1211] device veth1_vlan left promiscuous mode
[ 73.922052][ T1211] device veth0_vlan left promiscuous mode
[ 74.050706][ T1211] team0 (unregistering): Port device team_slave_1 removed
[ 74.062510][ T1211] team0 (unregistering): Port device team_slave_0 removed
[ 74.075830][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 74.089755][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 74.143421][ T1211] bond0 (unregistering): Released all slaves
[ 74.203960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 74.212777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 74.221210][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.228294][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.236883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 74.249471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 74.258589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 74.267921][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.275027][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.286071][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 74.316291][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 74.326604][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 74.335949][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 74.344656][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 74.353562][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 74.361897][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 74.370846][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 74.379397][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 74.390985][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 74.401233][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 74.416850][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 74.506350][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 74.514351][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 74.526867][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.545914][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 74.554618][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 74.571890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 74.580472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 74.589302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 74.597526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 74.612382][ T4283] device veth0_vlan entered promiscuous mode
[ 74.626465][ T4283] device veth1_vlan entered promiscuous mode
[ 74.646979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 74.663762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 74.671851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 74.683164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 74.693679][ T4283] device veth0_macvtap entered promiscuous mode
[ 74.704311][ T4283] device veth1_macvtap entered promiscuous mode
[ 74.723745][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.731085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 74.742946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 74.751237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 74.761723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 74.777283][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.787576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 74.797300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 74.809476][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.821001][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.830607][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.840088][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.907787][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.924951][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.934758][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 74.965610][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.983339][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.990839][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 75.243718][ T13] Bluetooth: hci0: command 0x040f tx timeout
[ 75.324134][ T4297] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 75.734050][ T4297] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 75.742193][ T4297] usb 1-1: config 0 has no interface number 0
[ 75.953329][ T4297] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 75.962392][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 75.970560][ T4297] usb 1-1: Product: syz
[ 75.975205][ T4297] usb 1-1: Manufacturer: syz
[ 75.979781][ T4297] usb 1-1: SerialNumber: syz
[ 75.989825][ T4297] usb 1-1: config 0 descriptor??
[ 76.273157][ T4297] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 76.293416][ T4297] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 76.304584][ T4297] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 76.314175][ T4297] usb 1-1: media controller created
[ 76.326287][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 77.323680][ T4306] Bluetooth: hci0: command 0x0419 tx timeout
[ 77.413959][ T4297] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 77.414267][ T4333] ==================================================================
[ 77.428274][ T4333] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d1/0x630
[ 77.435842][ T4333] Read of size 1 at addr ffff888017b97b91 by task syz.0.17/4333
[ 77.443477][ T4333]
[ 77.445812][ T4333] CPU: 0 PID: 4333 Comm: syz.0.17 Not tainted syzkaller #0
[ 77.452998][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 77.463182][ T4333] Call Trace:
[ 77.466462][ T4333]
[ 77.469405][ T4333] dump_stack_lvl+0x188/0x250
[ 77.474075][ T4333] ? show_regs_print_info+0x20/0x20
[ 77.479264][ T4333] ? load_image+0x410/0x410
[ 77.483758][ T4333] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 77.489222][ T4333] ? mutex_lock_io_nested+0x60/0x60
[ 77.494404][ T4333] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 77.500372][ T4333] print_address_description+0x60/0x2d0
[ 77.505899][ T4333] ? ec168_i2c_xfer+0x4d1/0x630
[ 77.510741][ T4333] kasan_report+0xdf/0x130
[ 77.515142][ T4333] ? ec168_i2c_xfer+0x4d1/0x630
[ 77.519977][ T4333] ec168_i2c_xfer+0x4d1/0x630
[ 77.524646][ T4333] ? ec168_ctrl_msg+0x6a0/0x6a0
[ 77.529494][ T4333] __i2c_transfer+0x88d/0x2090
[ 77.534258][ T4333] ? i2c_cmd+0x110/0x110
[ 77.538492][ T4333] ? __might_fault+0xb7/0x110
[ 77.543166][ T4333] i2c_transfer+0x25d/0x3a0
[ 77.547755][ T4333] ? __i2c_transfer+0x2090/0x2090
[ 77.552762][ T4333] ? __might_fault+0xb3/0x110
[ 77.557428][ T4333] ? _copy_from_user+0x111/0x170
[ 77.562407][ T4333] i2cdev_ioctl_rdwr+0x3dc/0x6c0
[ 77.567447][ T4333] i2cdev_ioctl+0x610/0x7b0
[ 77.571951][ T4333] ? i2cdev_write+0x120/0x120
[ 77.576688][ T4333] ? lock_chain_count+0x20/0x20
[ 77.581553][ T4333] ? bpf_lsm_file_ioctl+0x5/0x10
[ 77.586483][ T4333] ? security_file_ioctl+0x7c/0xa0
[ 77.591586][ T4333] ? i2cdev_write+0x120/0x120
[ 77.596252][ T4333] __se_sys_ioctl+0xfa/0x170
[ 77.600852][ T4333] do_syscall_64+0x4c/0xa0
[ 77.605255][ T4333] ? clear_bhb_loop+0x30/0x80
[ 77.609917][ T4333] ? clear_bhb_loop+0x30/0x80
[ 77.614578][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.620468][ T4333] RIP: 0033:0x7f2e97d58159
[ 77.624919][ T4333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.644627][ T4333] RSP: 002b:00007ffe5903b9a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 77.653058][ T4333] RAX: ffffffffffffffda RBX: 00007f2e97fdffa0 RCX: 00007f2e97d58159
[ 77.661036][ T4333] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 77.668998][ T4333] RBP: 00007f2e97def024 R08: 0000000000000000 R09: 0000000000000000
[ 77.676957][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.684914][ T4333] R13: 00007f2e97fdffac R14: 00007f2e97fdffa0 R15: 00007f2e97fdffa0
[ 77.692929][ T4333]
[ 77.695937][ T4333]
[ 77.698250][ T4333] Allocated by task 4333:
[ 77.702556][ T4333] __kasan_kmalloc+0xaf/0xe0
[ 77.707155][ T4333] memdup_user+0x22/0xb0
[ 77.711478][ T4333] i2cdev_ioctl_rdwr+0x140/0x6c0
[ 77.716398][ T4333] i2cdev_ioctl+0x610/0x7b0
[ 77.721147][ T4333] __se_sys_ioctl+0xfa/0x170
[ 77.725720][ T4333] do_syscall_64+0x4c/0xa0
[ 77.730120][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.735996][ T4333]
[ 77.738303][ T4333] The buggy address belongs to the object at ffff888017b97b90
[ 77.738303][ T4333] which belongs to the cache kmalloc-8 of size 8
[ 77.751991][ T4333] The buggy address is located 1 bytes inside of
[ 77.751991][ T4333] 8-byte region [ffff888017b97b90, ffff888017b97b98)
[ 77.764907][ T4333] The buggy address belongs to the page:
[ 77.770526][ T4333] page:ffffea00005ee5c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888017b97fc8 pfn:0x17b97
[ 77.781969][ T4333] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 77.789511][ T4333] raw: 00fff00000000200 ffffea000089ec00 0000000200000002 ffff888016c41280
[ 77.798078][ T4333] raw: ffff888017b97fc8 0000000080660062 00000001ffffffff 0000000000000000
[ 77.806651][ T4333] page dumped because: kasan: bad access detected
[ 77.813071][ T4333] page_owner tracks the page as allocated
[ 77.818786][ T4333] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2549315339, free_ts 0
[ 77.833897][ T4333] get_page_from_freelist+0x24f6/0x2670
[ 77.839610][ T4333] __alloc_pages+0x1ee/0x480
[ 77.844206][ T4333] alloc_page_interleave+0x24/0x1e0
[ 77.849399][ T4333] new_slab+0xc0/0x4b0
[ 77.853449][ T4333] ___slab_alloc+0x807/0xdd0
[ 77.858038][ T4333] __kmalloc+0x11d/0x340
[ 77.862262][ T4333] acpi_ns_internalize_name+0x2cd/0x3b0
[ 77.867794][ T4333] acpi_ns_get_node+0x1a7/0x360
[ 77.872633][ T4333] acpi_get_handle+0x184/0x290
[ 77.877381][ T4333] acpi_evaluate_object_typed+0xcc/0x380
[ 77.883089][ T4333] acpi_init_properties+0x20c/0xbc0
[ 77.888285][ T4333] acpi_init_device_object+0x1ebc/0x2820
[ 77.894039][ T4333] acpi_add_single_object+0xed/0x1970
[ 77.899413][ T4333] acpi_bus_check_add+0x363/0x800
[ 77.904432][ T4333] acpi_ns_walk_namespace+0x21f/0x6a0
[ 77.909785][ T4333] acpi_walk_namespace+0xe4/0x120
[ 77.914792][ T4333] page_owner free stack trace missing
[ 77.920143][ T4333]
[ 77.922449][ T4333] Memory state around the buggy address:
[ 77.928056][ T4333] ffff888017b97a80: fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc 00 fc
[ 77.936101][ T4333] ffff888017b97b00: fc fc fc fa fc fc fc fc 00 fc fc fc fc 00 fc fc
[ 77.944177][ T4333] >ffff888017b97b80: fc fc 01 fc fc fc fc 00 fc fc fc fc 00 fc fc fc
[ 77.952218][ T4333] ^
[ 77.956811][ T4333] ffff888017b97c00: fc 02 fc fc fc fc fa fc fc fc fc 00 fc fc fc fc
[ 77.964945][ T4333] ffff888017b97c80: 00 fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc fa
[ 77.972988][ T4333] ==================================================================
[ 77.981061][ T4333] Disabling lock debugging due to kernel taint
[ 77.991175][ T4333] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.998379][ T4333] CPU: 0 PID: 4333 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 78.007163][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 78.017209][ T4333] Call Trace:
[ 78.020591][ T4333]
[ 78.023506][ T4333] dump_stack_lvl+0x188/0x250
[ 78.029017][ T4333] ? show_regs_print_info+0x20/0x20
[ 78.034218][ T4333] ? load_image+0x410/0x410
[ 78.038718][ T4333] panic+0x2f8/0x850
[ 78.042601][ T4333] ? bpf_jit_dump+0xd0/0xd0
[ 78.047091][ T4333] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 78.053059][ T4333] ? _raw_spin_unlock+0x40/0x40
[ 78.057886][ T4333] ? ec168_i2c_xfer+0x4d1/0x630
[ 78.062751][ T4333] check_panic_on_warn+0x80/0xa0
[ 78.067677][ T4333] ? ec168_i2c_xfer+0x4d1/0x630
[ 78.072566][ T4333] end_report+0x6d/0xf0
[ 78.076717][ T4333] kasan_report+0x102/0x130
[ 78.081221][ T4333] ? ec168_i2c_xfer+0x4d1/0x630
[ 78.086091][ T4333] ec168_i2c_xfer+0x4d1/0x630
[ 78.090807][ T4333] ? ec168_ctrl_msg+0x6a0/0x6a0
[ 78.095685][ T4333] __i2c_transfer+0x88d/0x2090
[ 78.100470][ T4333] ? i2c_cmd+0x110/0x110
[ 78.104705][ T4333] ? __might_fault+0xb7/0x110
[ 78.109368][ T4333] i2c_transfer+0x25d/0x3a0
[ 78.113952][ T4333] ? __i2c_transfer+0x2090/0x2090
[ 78.118958][ T4333] ? __might_fault+0xb3/0x110
[ 78.123648][ T4333] ? _copy_from_user+0x111/0x170
[ 78.128588][ T4333] i2cdev_ioctl_rdwr+0x3dc/0x6c0
[ 78.133533][ T4333] i2cdev_ioctl+0x610/0x7b0
[ 78.138051][ T4333] ? i2cdev_write+0x120/0x120
[ 78.142742][ T4333] ? lock_chain_count+0x20/0x20
[ 78.147592][ T4333] ? bpf_lsm_file_ioctl+0x5/0x10
[ 78.152525][ T4333] ? security_file_ioctl+0x7c/0xa0
[ 78.157635][ T4333] ? i2cdev_write+0x120/0x120
[ 78.162332][ T4333] __se_sys_ioctl+0xfa/0x170
[ 78.166921][ T4333] do_syscall_64+0x4c/0xa0
[ 78.171328][ T4333] ? clear_bhb_loop+0x30/0x80
[ 78.175995][ T4333] ? clear_bhb_loop+0x30/0x80
[ 78.180693][ T4333] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.186576][ T4333] RIP: 0033:0x7f2e97d58159
[ 78.190979][ T4333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 78.210772][ T4333] RSP: 002b:00007ffe5903b9a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 78.219170][ T4333] RAX: ffffffffffffffda RBX: 00007f2e97fdffa0 RCX: 00007f2e97d58159
[ 78.227131][ T4333] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004
[ 78.235107][ T4333] RBP: 00007f2e97def024 R08: 0000000000000000 R09: 0000000000000000
[ 78.243098][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 78.251067][ T4333] R13: 00007f2e97fdffac R14: 00007f2e97fdffa0 R15: 00007f2e97fdffa0
[ 78.259895][ T4333]
[ 78.263075][ T4333] Kernel Offset: disabled
[ 78.267432][ T4333] Rebooting in 86400 seconds..