Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. 2025/10/06 06:11:42 parsed 1 programs [ 117.358861][ T6164] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.537826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.546557][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.573329][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.582086][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.260116][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 122.342267][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.349613][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.357361][ T6218] bridge_slave_0: entered allmulticast mode [ 122.365296][ T6218] bridge_slave_0: entered promiscuous mode [ 122.373606][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.380901][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.388116][ T6218] bridge_slave_1: entered allmulticast mode [ 122.395325][ T6218] bridge_slave_1: entered promiscuous mode [ 122.431265][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.444006][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.478108][ T6218] team0: Port device team_slave_0 added [ 122.486237][ T6218] team0: Port device team_slave_1 added [ 122.510880][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.517878][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.544101][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.558299][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.565542][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.591669][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.630885][ T6218] hsr_slave_0: entered promiscuous mode [ 122.637186][ T6218] hsr_slave_1: entered promiscuous mode [ 123.115733][ T6218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.128488][ T6218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.142312][ T6218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.154651][ T6218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.275064][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.305394][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.319851][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.327140][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.352832][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.360036][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.608638][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.665014][ T6218] veth0_vlan: entered promiscuous mode [ 123.687012][ T6218] veth1_vlan: entered promiscuous mode [ 123.733323][ T6218] veth0_macvtap: entered promiscuous mode [ 123.747351][ T6218] veth1_macvtap: entered promiscuous mode [ 123.774168][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.793070][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.815985][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.825743][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.843921][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.863444][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.994045][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.085305][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.169742][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.287240][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.503606][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.517049][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.526555][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.534920][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.544767][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/10/06 06:11:54 executed programs: 0 [ 125.889548][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.898467][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.913206][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.922547][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.930638][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.184386][ T6347] chnl_net:caif_netlink_parms(): no params data found [ 126.299651][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.309038][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.317729][ T6347] bridge_slave_0: entered allmulticast mode [ 126.325994][ T6347] bridge_slave_0: entered promiscuous mode [ 126.335424][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.343048][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.358195][ T6347] bridge_slave_1: entered allmulticast mode [ 126.366218][ T6347] bridge_slave_1: entered promiscuous mode [ 126.487140][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.520096][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.553287][ T79] bridge_slave_1: left allmulticast mode [ 126.558968][ T79] bridge_slave_1: left promiscuous mode [ 126.565592][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.577293][ T79] bridge_slave_0: left allmulticast mode [ 126.583495][ T79] bridge_slave_0: left promiscuous mode [ 126.589284][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.902413][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.914089][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.924913][ T79] bond0 (unregistering): Released all slaves [ 126.987064][ T6347] team0: Port device team_slave_0 added [ 126.998272][ T6347] team0: Port device team_slave_1 added [ 127.060703][ T79] hsr_slave_0: left promiscuous mode [ 127.067331][ T79] hsr_slave_1: left promiscuous mode [ 127.075208][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.082816][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.091660][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.099072][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.129018][ T79] veth1_macvtap: left promiscuous mode [ 127.135072][ T79] veth0_macvtap: left promiscuous mode [ 127.141379][ T79] veth1_vlan: left promiscuous mode [ 127.146755][ T79] veth0_vlan: left promiscuous mode [ 127.597047][ T79] team0 (unregistering): Port device team_slave_1 removed [ 127.632882][ T79] team0 (unregistering): Port device team_slave_0 removed [ 127.898030][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.905306][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.931410][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.948319][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.956708][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.984614][ T5899] Bluetooth: hci0: command tx timeout [ 127.987662][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.064298][ T6347] hsr_slave_0: entered promiscuous mode [ 128.077109][ T6347] hsr_slave_1: entered promiscuous mode [ 128.956973][ T6347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.982440][ T6347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.003670][ T6347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.015951][ T6347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.132003][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.157928][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.172577][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.179891][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.206820][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.214070][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.466483][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.527067][ T6347] veth0_vlan: entered promiscuous mode [ 129.539786][ T6347] veth1_vlan: entered promiscuous mode [ 129.566211][ T6347] veth0_macvtap: entered promiscuous mode [ 129.576163][ T6347] veth1_macvtap: entered promiscuous mode [ 129.597381][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.611658][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.627300][ T1114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.640864][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.649606][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.659189][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.710673][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.719086][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.744546][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.752539][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.030718][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.060423][ T5899] Bluetooth: hci0: command tx timeout [ 130.193202][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.204421][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.214383][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 130.223680][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.235254][ T43] usb 1-1: config 0 descriptor?? [ 130.648804][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.655989][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.663752][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.670795][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.677754][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.684941][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.691961][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.707627][ T43] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 130.845286][ T43] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 131.447630][ T6453] ================================================================== [ 131.455829][ T6453] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x713/0xf10 [ 131.463238][ T6453] Read of size 34 at addr ffffc90002f97d01 by task syz.0.17/6453 [ 131.470949][ T6453] [ 131.473287][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.473303][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.473315][ T6453] Call Trace: [ 131.473323][ T6453] [ 131.473329][ T6453] dump_stack_lvl+0x189/0x250 [ 131.473342][ T6453] ? cp2112_xfer+0x713/0xf10 [ 131.473357][ T6453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.473373][ T6453] ? __pfx__printk+0x10/0x10 [ 131.473390][ T6453] ? __virt_addr_valid+0xdc/0x5c0 [ 131.473406][ T6453] ? __virt_addr_valid+0xdc/0x5c0 [ 131.473423][ T6453] print_report+0xca/0x240 [ 131.473441][ T6453] ? cp2112_xfer+0x713/0xf10 [ 131.473457][ T6453] kasan_report+0x118/0x150 [ 131.473468][ T6453] ? cp2112_xfer+0x713/0xf10 [ 131.473481][ T6453] kasan_check_range+0x2b0/0x2c0 [ 131.473491][ T6453] ? cp2112_xfer+0x713/0xf10 [ 131.473503][ T6453] __asan_memcpy+0x29/0x70 [ 131.473522][ T6453] cp2112_xfer+0x713/0xf10 [ 131.473545][ T6453] ? validate_chain+0x897/0x2140 [ 131.473567][ T6453] ? __pfx_cp2112_xfer+0x10/0x10 [ 131.473596][ T6453] __i2c_smbus_xfer+0x5b6/0x1e50 [ 131.473606][ T6453] ? __lock_acquire+0xab9/0xd20 [ 131.473617][ T6453] ? __pfx_cp2112_xfer+0x10/0x10 [ 131.473631][ T6453] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 131.473640][ T6453] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.473650][ T6453] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.473666][ T6453] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.473683][ T6453] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.473704][ T6453] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 131.473726][ T6453] i2c_smbus_xfer+0x275/0x3c0 [ 131.473743][ T6453] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 131.473754][ T6453] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 131.473767][ T6453] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 131.473782][ T6453] i2cdev_ioctl+0x5d3/0x7f0 [ 131.473793][ T6453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.473805][ T6453] ? __fget_files+0x2a/0x420 [ 131.473827][ T6453] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.473848][ T6453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.473866][ T6453] __se_sys_ioctl+0xfc/0x170 [ 131.473884][ T6453] do_syscall_64+0xfa/0xfa0 [ 131.473898][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.473907][ T6453] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 131.473917][ T6453] ? clear_bhb_loop+0x60/0xb0 [ 131.473927][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.473936][ T6453] RIP: 0033:0x7fafaff8eba9 [ 131.473951][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.473964][ T6453] RSP: 002b:00007fafb0ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.473983][ T6453] RAX: ffffffffffffffda RBX: 00007fafb01d5fa0 RCX: 00007fafaff8eba9 [ 131.473996][ T6453] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 131.474008][ T6453] RBP: 00007fafb0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.474019][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.474029][ T6453] R13: 00007fafb01d6038 R14: 00007fafb01d5fa0 R15: 00007ffe24dca358 [ 131.474045][ T6453] [ 131.474049][ T6453] [ 131.776755][ T6453] The buggy address belongs to stack of task syz.0.17/6453 [ 131.783936][ T6453] and is located at offset 33 in frame: [ 131.789549][ T6453] i2cdev_ioctl_smbus+0x0/0x6d0 [ 131.794392][ T6453] [ 131.796704][ T6453] This frame has 1 object: [ 131.801108][ T6453] [32, 66) 'temp' [ 131.801125][ T6453] [ 131.807131][ T6453] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90002f90000 allocated at copy_process+0x54b/0x3c00 [ 131.820152][ T6453] The buggy address belongs to the physical page: [ 131.826577][ T6453] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807e17c990 pfn:0x7e17c [ 131.836721][ T6453] memcg:ffff88802eab4882 [ 131.841090][ T6453] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.848207][ T6453] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 131.856775][ T6453] raw: ffff88807e17c990 0000000000000000 00000001ffffffff ffff88802eab4882 [ 131.865444][ T6453] page dumped because: kasan: bad access detected [ 131.871842][ T6453] page_owner tracks the page as allocated [ 131.877537][ T6453] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5507, tgid 5507 (dhcpcd), ts 100551240466, free_ts 100504494458 [ 131.896365][ T6453] post_alloc_hook+0x240/0x2a0 [ 131.901124][ T6453] get_page_from_freelist+0x2365/0x2440 [ 131.906656][ T6453] __alloc_frozen_pages_noprof+0x181/0x370 [ 131.912442][ T6453] alloc_pages_mpol+0x232/0x4a0 [ 131.917285][ T6453] alloc_pages_noprof+0xa9/0x190 [ 131.922207][ T6453] __vmalloc_node_range_noprof+0x96c/0x12d0 [ 131.928079][ T6453] __vmalloc_node_noprof+0xc2/0x110 [ 131.933290][ T6453] dup_task_struct+0x3d4/0x830 [ 131.938047][ T6453] copy_process+0x54b/0x3c00 [ 131.942645][ T6453] kernel_clone+0x21e/0x840 [ 131.947136][ T6453] __x64_sys_clone+0x18b/0x1e0 [ 131.951887][ T6453] do_syscall_64+0xfa/0xfa0 [ 131.956391][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.962272][ T6453] page last free pid 6074 tgid 6074 stack trace: [ 131.968584][ T6453] __free_frozen_pages+0xbc4/0xd30 [ 131.973680][ T6453] __folio_put+0x21b/0x2c0 [ 131.978179][ T6453] anon_pipe_read+0x646/0x1040 [ 131.982965][ T6453] vfs_read+0x55a/0xa30 [ 131.987122][ T6453] ksys_read+0x145/0x250 [ 131.991346][ T6453] do_syscall_64+0xfa/0xfa0 [ 131.995837][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.001716][ T6453] [ 132.004026][ T6453] Memory state around the buggy address: [ 132.009660][ T6453] ffffc90002f97c00: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 132.017701][ T6453] ffffc90002f97c80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 132.025746][ T6453] >ffffc90002f97d00: 00 00 00 00 02 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 132.033802][ T6453] ^ [ 132.038893][ T6453] ffffc90002f97d80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f2 00 00 [ 132.046932][ T6453] ffffc90002f97e00: f2 f2 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 132.054969][ T6453] ================================================================== [ 132.070413][ T6453] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.077649][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 132.086773][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.096829][ T6453] Call Trace: [ 132.100096][ T6453] [ 132.103010][ T6453] dump_stack_lvl+0x99/0x250 [ 132.107581][ T6453] ? __asan_memcpy+0x40/0x70 [ 132.112152][ T6453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.117336][ T6453] ? __pfx__printk+0x10/0x10 [ 132.121907][ T6453] vpanic+0x237/0x6d0 [ 132.125886][ T6453] ? __pfx_vpanic+0x10/0x10 [ 132.130379][ T6453] ? preempt_schedule+0xae/0xc0 [ 132.135241][ T6453] ? __pfx_preempt_schedule+0x10/0x10 [ 132.140612][ T6453] panic+0xb9/0xc0 [ 132.144324][ T6453] ? __pfx_panic+0x10/0x10 [ 132.148720][ T6453] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 132.154606][ T6453] ? cp2112_xfer+0x713/0xf10 [ 132.159178][ T6453] check_panic_on_warn+0x89/0xb0 [ 132.164092][ T6453] ? cp2112_xfer+0x713/0xf10 [ 132.168662][ T6453] end_report+0x78/0x160 [ 132.172965][ T6453] kasan_report+0x129/0x150 [ 132.177455][ T6453] ? cp2112_xfer+0x713/0xf10 [ 132.182032][ T6453] kasan_check_range+0x2b0/0x2c0 [ 132.186962][ T6453] ? cp2112_xfer+0x713/0xf10 [ 132.191537][ T6453] __asan_memcpy+0x29/0x70 [ 132.195954][ T6453] cp2112_xfer+0x713/0xf10 [ 132.200358][ T6453] ? validate_chain+0x897/0x2140 [ 132.205302][ T6453] ? __pfx_cp2112_xfer+0x10/0x10 [ 132.210240][ T6453] __i2c_smbus_xfer+0x5b6/0x1e50 [ 132.215198][ T6453] ? __lock_acquire+0xab9/0xd20 [ 132.220054][ T6453] ? __pfx_cp2112_xfer+0x10/0x10 [ 132.225012][ T6453] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 132.230373][ T6453] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 132.236256][ T6453] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.241445][ T6453] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 132.247323][ T6453] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.253639][ T6453] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 132.258996][ T6453] i2c_smbus_xfer+0x275/0x3c0 [ 132.263652][ T6453] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 132.268973][ T6453] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 132.273982][ T6453] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 132.279514][ T6453] i2cdev_ioctl+0x5d3/0x7f0 [ 132.284003][ T6453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.289052][ T6453] ? __fget_files+0x2a/0x420 [ 132.293630][ T6453] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.298554][ T6453] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.303560][ T6453] __se_sys_ioctl+0xfc/0x170 [ 132.308128][ T6453] do_syscall_64+0xfa/0xfa0 [ 132.312614][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.318656][ T6453] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.324787][ T6453] ? clear_bhb_loop+0x60/0xb0 [ 132.329448][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.335410][ T6453] RIP: 0033:0x7fafaff8eba9 [ 132.339806][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.359568][ T6453] RSP: 002b:00007fafb0ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.368059][ T6453] RAX: ffffffffffffffda RBX: 00007fafb01d5fa0 RCX: 00007fafaff8eba9 [ 132.376024][ T6453] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 132.384018][ T6453] RBP: 00007fafb0011e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.391985][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.399935][ T6453] R13: 00007fafb01d6038 R14: 00007fafb01d5fa0 R15: 00007ffe24dca358 [ 132.407895][ T6453] [ 132.411193][ T6453] Kernel Offset: disabled [ 132.415521][ T6453] Rebooting in 86400 seconds..