Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. 2026/03/22 09:44:00 parsed 1 programs [ 89.007176][ T5843] cgroup: Unknown subsys name 'net' [ 89.157757][ T5843] cgroup: Unknown subsys name 'cpuset' [ 89.167376][ T5843] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.872783][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.836930][ T24] cfg80211: failed to load regulatory.db [ 94.015463][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.068311][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.077610][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.117065][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.126539][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.690496][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 96.791651][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.799960][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.807349][ T5907] bridge_slave_0: entered allmulticast mode [ 96.815707][ T5907] bridge_slave_0: entered promiscuous mode [ 96.826636][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.834042][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.841320][ T5907] bridge_slave_1: entered allmulticast mode [ 96.851618][ T5907] bridge_slave_1: entered promiscuous mode [ 96.896320][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.912439][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.953083][ T5907] team0: Port device team_slave_0 added [ 96.993092][ T5907] team0: Port device team_slave_1 added [ 97.048478][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.057043][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.083115][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.100753][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.108347][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.134462][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.190119][ T5907] hsr_slave_0: entered promiscuous mode [ 97.197448][ T5907] hsr_slave_1: entered promiscuous mode [ 97.398729][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.412188][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.423239][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.436624][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.546120][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.575732][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.592223][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.599904][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.618403][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.625632][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.851371][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.917053][ T5907] veth0_vlan: entered promiscuous mode [ 97.931702][ T5907] veth1_vlan: entered promiscuous mode [ 97.976724][ T5907] veth0_macvtap: entered promiscuous mode [ 97.989465][ T5907] veth1_macvtap: entered promiscuous mode [ 98.021455][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.041561][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.061351][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.071527][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.085279][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.094666][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.278553][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.299980][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.310750][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.320035][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.328755][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.337955][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.368747][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.443437][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.543123][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/22 09:44:14 executed programs: 0 [ 99.655910][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.666659][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.678702][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.687218][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.696183][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.889352][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 99.990534][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.998392][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.006068][ T5950] bridge_slave_0: entered allmulticast mode [ 100.014300][ T5950] bridge_slave_0: entered promiscuous mode [ 100.024680][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.032023][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.039664][ T5950] bridge_slave_1: entered allmulticast mode [ 100.048036][ T5950] bridge_slave_1: entered promiscuous mode [ 100.088692][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.102444][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.142432][ T5950] team0: Port device team_slave_0 added [ 100.151647][ T5950] team0: Port device team_slave_1 added [ 100.185334][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.192321][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.218874][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.232404][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.240826][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.266972][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.325056][ T5950] hsr_slave_0: entered promiscuous mode [ 100.332903][ T5950] hsr_slave_1: entered promiscuous mode [ 100.340144][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 100.346276][ T5950] Cannot create hsr debugfs directory [ 101.024990][ T49] bridge_slave_1: left allmulticast mode [ 101.031496][ T49] bridge_slave_1: left promiscuous mode [ 101.038197][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.055877][ T49] bridge_slave_0: left allmulticast mode [ 101.061571][ T49] bridge_slave_0: left promiscuous mode [ 101.068370][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.250795][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.262457][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.272730][ T49] bond0 (unregistering): Released all slaves [ 101.402406][ T49] hsr_slave_0: left promiscuous mode [ 101.412279][ T49] hsr_slave_1: left promiscuous mode [ 101.423328][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.434259][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.442860][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.450847][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.469729][ T49] veth1_macvtap: left promiscuous mode [ 101.476359][ T49] veth0_macvtap: left promiscuous mode [ 101.482027][ T49] veth1_vlan: left promiscuous mode [ 101.487926][ T49] veth0_vlan: left promiscuous mode [ 101.757752][ T5931] Bluetooth: hci0: command tx timeout [ 101.854239][ T49] team0 (unregistering): Port device team_slave_1 removed [ 101.878068][ T49] team0 (unregistering): Port device team_slave_0 removed [ 102.305387][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.322921][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.337342][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.352040][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.550569][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.590018][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.817348][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.824579][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.850145][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.857401][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.139601][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.206285][ T5950] veth0_vlan: entered promiscuous mode [ 103.221704][ T5950] veth1_vlan: entered promiscuous mode [ 103.274046][ T5950] veth0_macvtap: entered promiscuous mode [ 103.289743][ T5950] veth1_macvtap: entered promiscuous mode [ 103.320557][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.339357][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.360278][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.369171][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.381489][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.390443][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.469128][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.477299][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.511998][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.524086][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.824099][ T1222] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.833960][ T5931] Bluetooth: hci0: command tx timeout [ 103.978611][ T1222] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.986754][ T1222] usb 1-1: config 0 has no interface number 0 [ 103.998085][ T1222] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 104.007372][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.016407][ T1222] usb 1-1: Product: syz [ 104.021228][ T1222] usb 1-1: Manufacturer: syz [ 104.025897][ T1222] usb 1-1: SerialNumber: syz [ 104.034220][ T1222] usb 1-1: config 0 descriptor?? [ 104.244166][ T1222] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 104.258907][ T1222] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.269598][ T1222] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 104.280202][ T1222] usb 1-1: media controller created [ 104.297079][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.356585][ T1222] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 105.356978][ T5996] ================================================================== [ 105.370841][ T5996] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4cd/0x640 [ 105.378446][ T5996] Read of size 1 at addr ffff8880216a4e81 by task syz.0.17/5996 [ 105.386109][ T5996] [ 105.388494][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 105.388520][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.388541][ T5996] Call Trace: [ 105.388554][ T5996] [ 105.388564][ T5996] dump_stack_lvl+0xe8/0x150 [ 105.388602][ T5996] print_address_description+0x55/0x1e0 [ 105.388634][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 105.388664][ T5996] print_report+0x58/0x70 [ 105.388691][ T5996] kasan_report+0x117/0x150 [ 105.388718][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 105.388753][ T5996] ec168_i2c_xfer+0x4cd/0x640 [ 105.388791][ T5996] __i2c_transfer+0x79a/0x1f70 [ 105.388867][ T5996] ? i2c_transfer+0xc8/0x2d0 [ 105.388892][ T5996] i2c_transfer+0x1cc/0x2d0 [ 105.388918][ T5996] i2cdev_ioctl_rdwr+0x460/0x740 [ 105.388947][ T5996] i2cdev_ioctl+0x6a5/0x880 [ 105.388969][ T5996] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 105.388992][ T5996] ? __pfx___se_sys_futex+0x10/0x10 [ 105.389010][ T5996] ? rcu_is_watching+0x15/0xb0 [ 105.389030][ T5996] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.389050][ T5996] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 105.389074][ T5996] __se_sys_ioctl+0xfc/0x170 [ 105.389098][ T5996] do_syscall_64+0x14d/0xf80 [ 105.389126][ T5996] ? trace_irq_disable+0x3b/0x140 [ 105.389150][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.389170][ T5996] ? clear_bhb_loop+0x40/0x90 [ 105.389194][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.389215][ T5996] RIP: 0033:0x7f0ee519c799 [ 105.389241][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.389259][ T5996] RSP: 002b:00007ffc8a9410d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.389283][ T5996] RAX: ffffffffffffffda RBX: 00007f0ee5415fa0 RCX: 00007f0ee519c799 [ 105.389300][ T5996] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 105.389315][ T5996] RBP: 00007f0ee5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 105.389329][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.389342][ T5996] R13: 00007f0ee5415fac R14: 00007f0ee5415fa0 R15: 00007f0ee5415fa0 [ 105.389367][ T5996] [ 105.389375][ T5996] [ 105.605400][ T5996] Allocated by task 5996: [ 105.609740][ T5996] kasan_save_track+0x3e/0x80 [ 105.614434][ T5996] __kasan_kmalloc+0x93/0xb0 [ 105.619041][ T5996] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 105.625474][ T5996] memdup_user+0x2b/0xd0 [ 105.629741][ T5996] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 105.634699][ T5996] i2cdev_ioctl+0x6a5/0x880 [ 105.639222][ T5996] __se_sys_ioctl+0xfc/0x170 [ 105.643844][ T5996] do_syscall_64+0x14d/0xf80 [ 105.648461][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.654379][ T5996] [ 105.656725][ T5996] The buggy address belongs to the object at ffff8880216a4e80 [ 105.656725][ T5996] which belongs to the cache kmalloc-8 of size 8 [ 105.670456][ T5996] The buggy address is located 0 bytes to the right of [ 105.670456][ T5996] allocated 1-byte region [ffff8880216a4e80, ffff8880216a4e81) [ 105.684786][ T5996] [ 105.687129][ T5996] The buggy address belongs to the physical page: [ 105.693582][ T5996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880216a41e0 pfn:0x216a4 [ 105.703684][ T5996] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 105.711777][ T5996] page_type: f5(slab) [ 105.715789][ T5996] raw: 00fff00000000200 ffff88801b041500 ffffea000085a650 ffffea0000b00050 [ 105.724397][ T5996] raw: ffff8880216a41e0 000000080080007b 00000000f5000000 0000000000000000 [ 105.732987][ T5996] page dumped because: kasan: bad access detected [ 105.739425][ T5996] page_owner tracks the page as allocated [ 105.745153][ T5996] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3148848266, free_ts 3082225736 [ 105.764970][ T5996] post_alloc_hook+0x231/0x280 [ 105.769753][ T5996] get_page_from_freelist+0x2418/0x24b0 [ 105.775321][ T5996] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 105.781148][ T5996] allocate_slab+0x77/0x660 [ 105.785677][ T5996] refill_objects+0x339/0x3d0 [ 105.790378][ T5996] __pcs_replace_empty_main+0x321/0x720 [ 105.795946][ T5996] __kmalloc_noprof+0x474/0x760 [ 105.800822][ T5996] acpi_ns_internalize_name+0x2c9/0x3e0 [ 105.806385][ T5996] acpi_ns_get_node_unlocked+0x186/0x480 [ 105.812034][ T5996] acpi_ns_get_node+0x76/0xc0 [ 105.816740][ T5996] acpi_get_handle+0x192/0x2a0 [ 105.821532][ T5996] acpi_has_method+0x8c/0xe0 [ 105.826141][ T5996] acpi_is_video_device+0xc1/0x1c0 [ 105.831276][ T5996] acpi_init_device_object+0x23e0/0x2ae0 [ 105.836935][ T5996] acpi_add_single_object+0x106/0x1c20 [ 105.842410][ T5996] acpi_bus_check_add+0x2b7/0x8a0 [ 105.847641][ T5996] page last free pid 1 tgid 1 stack trace: [ 105.853459][ T5996] __free_frozen_pages+0xbc7/0xd30 [ 105.858584][ T5996] __slab_free+0x274/0x2c0 [ 105.863013][ T5996] qlist_free_all+0x99/0x100 [ 105.868239][ T5996] kasan_quarantine_remove_cache+0x1cc/0x360 [ 105.874325][ T5996] kmem_cache_shrink+0xd/0x20 [ 105.879070][ T5996] acpi_os_purge_cache+0x15/0x20 [ 105.884027][ T5996] acpi_purge_cached_objects+0xd5/0x100 [ 105.889601][ T5996] acpi_initialize_objects+0x2e/0xb0 [ 105.894916][ T5996] acpi_bus_init+0xa8/0x360 [ 105.899434][ T5996] acpi_init+0xa1/0x1f0 [ 105.903606][ T5996] do_one_initcall+0x250/0x870 [ 105.908401][ T5996] do_initcall_level+0x104/0x190 [ 105.913363][ T5996] do_initcalls+0x59/0xa0 [ 105.917814][ T5996] kernel_init_freeable+0x2a6/0x3e0 [ 105.923047][ T5996] kernel_init+0x1d/0x1d0 [ 105.927396][ T5996] ret_from_fork+0x51e/0xb90 [ 105.932011][ T5996] [ 105.934346][ T5996] Memory state around the buggy address: [ 105.939987][ T5996] ffff8880216a4d80: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc [ 105.948145][ T5996] ffff8880216a4e00: 00 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 105.956219][ T5996] >ffff8880216a4e80: 01 fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 105.964294][ T5996] ^ [ 105.968376][ T5996] ffff8880216a4f00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 105.976453][ T5996] ffff8880216a4f80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 105.984522][ T5996] ================================================================== [ 105.995727][ T5996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.002985][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 106.012131][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.022234][ T5996] Call Trace: [ 106.025555][ T5996] [ 106.028518][ T5996] vpanic+0x56c/0xa60 [ 106.032557][ T5996] ? __pfx_vpanic+0x10/0x10 [ 106.037120][ T5996] ? __pfx___schedule+0x10/0x10 [ 106.042021][ T5996] panic+0xc5/0xd0 [ 106.045791][ T5996] ? __pfx_panic+0x10/0x10 [ 106.050253][ T5996] ? preempt_schedule_common+0x82/0xd0 [ 106.055766][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.060757][ T5996] check_panic_on_warn+0x89/0xb0 [ 106.066004][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.070905][ T5996] end_report+0x73/0x170 [ 106.075196][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.080105][ T5996] kasan_report+0x128/0x150 [ 106.084649][ T5996] ? ec168_i2c_xfer+0x4cd/0x640 [ 106.089550][ T5996] ec168_i2c_xfer+0x4cd/0x640 [ 106.094288][ T5996] __i2c_transfer+0x79a/0x1f70 [ 106.099099][ T5996] ? i2c_transfer+0xc8/0x2d0 [ 106.103752][ T5996] i2c_transfer+0x1cc/0x2d0 [ 106.108384][ T5996] i2cdev_ioctl_rdwr+0x460/0x740 [ 106.113355][ T5996] i2cdev_ioctl+0x6a5/0x880 [ 106.117892][ T5996] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 106.122937][ T5996] ? __pfx___se_sys_futex+0x10/0x10 [ 106.128153][ T5996] ? rcu_is_watching+0x15/0xb0 [ 106.132938][ T5996] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.137903][ T5996] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 106.142950][ T5996] __se_sys_ioctl+0xfc/0x170 [ 106.147561][ T5996] do_syscall_64+0x14d/0xf80 [ 106.152174][ T5996] ? trace_irq_disable+0x3b/0x140 [ 106.157228][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.163365][ T5996] ? clear_bhb_loop+0x40/0x90 [ 106.168074][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.173999][ T5996] RIP: 0033:0x7f0ee519c799 [ 106.178438][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.198068][ T5996] RSP: 002b:00007ffc8a9410d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.206523][ T5996] RAX: ffffffffffffffda RBX: 00007f0ee5415fa0 RCX: 00007f0ee519c799 [ 106.214528][ T5996] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 106.222519][ T5996] RBP: 00007f0ee5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 106.230512][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.238499][ T5996] R13: 00007f0ee5415fac R14: 00007f0ee5415fa0 R15: 00007f0ee5415fa0 [ 106.246506][ T5996] [ 106.250446][ T5996] Kernel Offset: disabled [ 106.254826][ T5996] Rebooting in 86400 seconds..