Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. 2025/10/06 07:21:27 parsed 1 programs [ 116.372272][ T6193] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 119.248917][ T6206] chnl_net:caif_netlink_parms(): no params data found [ 119.344558][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.353005][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.360253][ T6206] bridge_slave_0: entered allmulticast mode [ 119.368227][ T6206] bridge_slave_0: entered promiscuous mode [ 119.377104][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.384380][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.392190][ T6206] bridge_slave_1: entered allmulticast mode [ 119.400044][ T6206] bridge_slave_1: entered promiscuous mode [ 119.439915][ T6206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.451546][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.480644][ T6206] team0: Port device team_slave_0 added [ 119.488545][ T6206] team0: Port device team_slave_1 added [ 119.516906][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.523872][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.550511][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.563113][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.570120][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.596402][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.640278][ T6206] hsr_slave_0: entered promiscuous mode [ 119.646746][ T6206] hsr_slave_1: entered promiscuous mode [ 120.078583][ T6206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.100689][ T6206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.114240][ T6206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.125703][ T6206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.232985][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.259280][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.273410][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.280615][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.302636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.309876][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.573938][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.641478][ T6206] veth0_vlan: entered promiscuous mode [ 120.658435][ T6206] veth1_vlan: entered promiscuous mode [ 120.701248][ T6206] veth0_macvtap: entered promiscuous mode [ 120.714263][ T6206] veth1_macvtap: entered promiscuous mode [ 120.742777][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.762437][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.782409][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.810238][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.830942][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.854377][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.963226][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.001927][ T5165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.013223][ T5165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.023841][ T5165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.033449][ T5165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.041285][ T5165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.080027][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.153768][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.230095][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.480798][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.493743][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.533312][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.543074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.348603][ T49] bridge_slave_1: left allmulticast mode [ 123.354347][ T49] bridge_slave_1: left promiscuous mode [ 123.360821][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.378054][ T49] bridge_slave_0: left allmulticast mode [ 123.383775][ T49] bridge_slave_0: left promiscuous mode [ 123.389753][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.659388][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.671147][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.685963][ T49] bond0 (unregistering): Released all slaves [ 123.829307][ T49] hsr_slave_0: left promiscuous mode [ 123.859896][ T49] hsr_slave_1: left promiscuous mode [ 123.876080][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.883504][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.919073][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.934900][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.962294][ T49] veth1_macvtap: left promiscuous mode [ 123.975122][ T49] veth0_macvtap: left promiscuous mode [ 123.980839][ T49] veth1_vlan: left promiscuous mode [ 124.005024][ T49] veth0_vlan: left promiscuous mode [ 124.629495][ T49] team0 (unregistering): Port device team_slave_1 removed [ 124.672688][ T49] team0 (unregistering): Port device team_slave_0 removed 2025/10/06 07:21:42 executed programs: 0 [ 127.273716][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.287567][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.296334][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.304466][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.312179][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.643551][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 127.766643][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.774683][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.785412][ T6466] bridge_slave_0: entered allmulticast mode [ 127.793442][ T6466] bridge_slave_0: entered promiscuous mode [ 127.803646][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.811284][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.819296][ T6466] bridge_slave_1: entered allmulticast mode [ 127.828552][ T6466] bridge_slave_1: entered promiscuous mode [ 127.872300][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.886364][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.939450][ T6466] team0: Port device team_slave_0 added [ 127.949258][ T6466] team0: Port device team_slave_1 added [ 127.992551][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.999662][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.026867][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.040525][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.048861][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.075277][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.136745][ T6466] hsr_slave_0: entered promiscuous mode [ 128.143467][ T6466] hsr_slave_1: entered promiscuous mode [ 128.655819][ T6466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.667531][ T6466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.680000][ T6466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.691634][ T6466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.819505][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.845446][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.867949][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.875278][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.899377][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.906664][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.158827][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.219389][ T6466] veth0_vlan: entered promiscuous mode [ 129.237787][ T6466] veth1_vlan: entered promiscuous mode [ 129.279443][ T6466] veth0_macvtap: entered promiscuous mode [ 129.291741][ T6466] veth1_macvtap: entered promiscuous mode [ 129.317261][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.344294][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.364370][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.382877][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.401909][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.417759][ T5868] Bluetooth: hci0: command tx timeout [ 129.430258][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.483628][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.508239][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.542238][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.550684][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.855364][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.027904][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.038993][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.049542][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 130.058924][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.074907][ T43] usb 1-1: config 0 descriptor?? [ 130.490781][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.497860][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.504856][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.511814][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.518810][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.525889][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.532846][ T43] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 130.544212][ T43] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 130.684608][ T43] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 131.290676][ T6547] ================================================================== [ 131.298774][ T6547] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x713/0xf10 [ 131.306181][ T6547] Read of size 34 at addr ffffc90003347d01 by task syz.0.17/6547 [ 131.313895][ T6547] [ 131.316239][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.316260][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.316277][ T6547] Call Trace: [ 131.316290][ T6547] [ 131.316297][ T6547] dump_stack_lvl+0x189/0x250 [ 131.316313][ T6547] ? cp2112_xfer+0x713/0xf10 [ 131.316328][ T6547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.316337][ T6547] ? __pfx__printk+0x10/0x10 [ 131.316346][ T6547] ? __virt_addr_valid+0xdc/0x5c0 [ 131.316358][ T6547] ? __virt_addr_valid+0xdc/0x5c0 [ 131.316375][ T6547] print_report+0xca/0x240 [ 131.316393][ T6547] ? cp2112_xfer+0x713/0xf10 [ 131.316413][ T6547] kasan_report+0x118/0x150 [ 131.316432][ T6547] ? cp2112_xfer+0x713/0xf10 [ 131.316452][ T6547] kasan_check_range+0x2b0/0x2c0 [ 131.316462][ T6547] ? cp2112_xfer+0x713/0xf10 [ 131.316474][ T6547] __asan_memcpy+0x29/0x70 [ 131.316487][ T6547] cp2112_xfer+0x713/0xf10 [ 131.316500][ T6547] ? validate_chain+0x897/0x2140 [ 131.316521][ T6547] ? __pfx_cp2112_xfer+0x10/0x10 [ 131.316551][ T6547] __i2c_smbus_xfer+0x5b6/0x1e50 [ 131.316568][ T6547] ? __lock_acquire+0xab9/0xd20 [ 131.316586][ T6547] ? __pfx_cp2112_xfer+0x10/0x10 [ 131.316603][ T6547] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 131.316612][ T6547] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.316623][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.316634][ T6547] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.316643][ T6547] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.316657][ T6547] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 131.316681][ T6547] i2c_smbus_xfer+0x275/0x3c0 [ 131.316698][ T6547] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 131.316717][ T6547] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 131.316739][ T6547] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 131.316755][ T6547] i2cdev_ioctl+0x5d3/0x7f0 [ 131.316766][ T6547] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.316778][ T6547] ? __fget_files+0x2a/0x420 [ 131.316790][ T6547] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.316805][ T6547] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 131.316825][ T6547] __se_sys_ioctl+0xfc/0x170 [ 131.316843][ T6547] do_syscall_64+0xfa/0xfa0 [ 131.316861][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.316878][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.316893][ T6547] ? clear_bhb_loop+0x60/0xb0 [ 131.316903][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.316912][ T6547] RIP: 0033:0x7f632db8eba9 [ 131.316929][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.316938][ T6547] RSP: 002b:00007f632ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.316956][ T6547] RAX: ffffffffffffffda RBX: 00007f632ddd5fa0 RCX: 00007f632db8eba9 [ 131.316969][ T6547] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 131.316981][ T6547] RBP: 00007f632dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.316991][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.317008][ T6547] R13: 00007f632ddd6038 R14: 00007f632ddd5fa0 R15: 00007fff6194a418 [ 131.317028][ T6547] [ 131.317034][ T6547] [ 131.525085][ T5868] Bluetooth: hci0: command tx timeout [ 131.525212][ T6547] The buggy address belongs to stack of task syz.0.17/6547 [ 131.525225][ T6547] and is located at offset 33 in frame: [ 131.525233][ T6547] i2cdev_ioctl_smbus+0x0/0x6d0 [ 131.642396][ T6547] [ 131.644711][ T6547] This frame has 1 object: [ 131.649122][ T6547] [32, 66) 'temp' [ 131.649136][ T6547] [ 131.655174][ T6547] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003340000 allocated at copy_process+0x54b/0x3c00 [ 131.668118][ T6547] The buggy address belongs to the physical page: [ 131.674540][ T6547] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x29cd9 [ 131.684589][ T6547] memcg:ffff888030e63f82 [ 131.688821][ T6547] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.695952][ T6547] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 131.704540][ T6547] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888030e63f82 [ 131.713110][ T6547] page dumped because: kasan: bad access detected [ 131.719514][ T6547] page_owner tracks the page as allocated [ 131.725213][ T6547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 6532, tgid 6532 (dhcpcd-run-hook), ts 129150288463, free_ts 129136449042 [ 131.744843][ T6547] post_alloc_hook+0x240/0x2a0 [ 131.749617][ T6547] get_page_from_freelist+0x2365/0x2440 [ 131.755158][ T6547] __alloc_frozen_pages_noprof+0x181/0x370 [ 131.760957][ T6547] alloc_pages_mpol+0x232/0x4a0 [ 131.765863][ T6547] alloc_pages_noprof+0xa9/0x190 [ 131.770798][ T6547] __vmalloc_node_range_noprof+0x96c/0x12d0 [ 131.776674][ T6547] __vmalloc_node_noprof+0xc2/0x110 [ 131.781860][ T6547] dup_task_struct+0x3d4/0x830 [ 131.786631][ T6547] copy_process+0x54b/0x3c00 [ 131.791213][ T6547] kernel_clone+0x21e/0x840 [ 131.795708][ T6547] __x64_sys_clone+0x18b/0x1e0 [ 131.800468][ T6547] do_syscall_64+0xfa/0xfa0 [ 131.804961][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.810835][ T6547] page last free pid 15 tgid 15 stack trace: [ 131.816809][ T6547] __free_frozen_pages+0xbc4/0xd30 [ 131.821900][ T6547] tlb_remove_table_rcu+0x85/0x100 [ 131.827014][ T6547] rcu_core+0xcab/0x1770 [ 131.831266][ T6547] handle_softirqs+0x286/0x870 [ 131.836047][ T6547] run_ksoftirqd+0x9b/0x100 [ 131.840535][ T6547] smpboot_thread_fn+0x542/0xa60 [ 131.845562][ T6547] kthread+0x711/0x8a0 [ 131.849717][ T6547] ret_from_fork+0x4bc/0x870 [ 131.854312][ T6547] ret_from_fork_asm+0x1a/0x30 [ 131.859079][ T6547] [ 131.861398][ T6547] Memory state around the buggy address: [ 131.867020][ T6547] ffffc90003347c00: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 131.875097][ T6547] ffffc90003347c80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 131.883153][ T6547] >ffffc90003347d00: 00 00 00 00 02 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 131.891212][ T6547] ^ [ 131.896406][ T6547] ffffc90003347d80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f2 00 00 [ 131.904464][ T6547] ffffc90003347e00: f2 f2 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 131.912515][ T6547] ================================================================== [ 131.923469][ T6547] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.930699][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 131.939821][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.949889][ T6547] Call Trace: [ 131.953183][ T6547] [ 131.956214][ T6547] dump_stack_lvl+0x99/0x250 [ 131.960810][ T6547] ? __asan_memcpy+0x40/0x70 [ 131.965400][ T6547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.970596][ T6547] ? __pfx__printk+0x10/0x10 [ 131.975182][ T6547] vpanic+0x237/0x6d0 [ 131.979177][ T6547] ? __pfx_vpanic+0x10/0x10 [ 131.983776][ T6547] ? preempt_schedule+0xae/0xc0 [ 131.988625][ T6547] ? __pfx_preempt_schedule+0x10/0x10 [ 131.994002][ T6547] panic+0xb9/0xc0 [ 131.997740][ T6547] ? __pfx_panic+0x10/0x10 [ 132.002156][ T6547] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 132.008070][ T6547] ? cp2112_xfer+0x713/0xf10 [ 132.012669][ T6547] check_panic_on_warn+0x89/0xb0 [ 132.017591][ T6547] ? cp2112_xfer+0x713/0xf10 [ 132.022178][ T6547] end_report+0x78/0x160 [ 132.026410][ T6547] kasan_report+0x129/0x150 [ 132.030906][ T6547] ? cp2112_xfer+0x713/0xf10 [ 132.035493][ T6547] kasan_check_range+0x2b0/0x2c0 [ 132.040455][ T6547] ? cp2112_xfer+0x713/0xf10 [ 132.045042][ T6547] __asan_memcpy+0x29/0x70 [ 132.049451][ T6547] cp2112_xfer+0x713/0xf10 [ 132.053861][ T6547] ? validate_chain+0x897/0x2140 [ 132.058791][ T6547] ? __pfx_cp2112_xfer+0x10/0x10 [ 132.063726][ T6547] __i2c_smbus_xfer+0x5b6/0x1e50 [ 132.068650][ T6547] ? __lock_acquire+0xab9/0xd20 [ 132.073488][ T6547] ? __pfx_cp2112_xfer+0x10/0x10 [ 132.078422][ T6547] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 132.083868][ T6547] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 132.089751][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.094943][ T6547] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 132.100827][ T6547] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.107144][ T6547] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 132.112511][ T6547] i2c_smbus_xfer+0x275/0x3c0 [ 132.117179][ T6547] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 132.122363][ T6547] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 132.127385][ T6547] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 132.133062][ T6547] i2cdev_ioctl+0x5d3/0x7f0 [ 132.137570][ T6547] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.142596][ T6547] ? __fget_files+0x2a/0x420 [ 132.147189][ T6547] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.152132][ T6547] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 132.157149][ T6547] __se_sys_ioctl+0xfc/0x170 [ 132.161735][ T6547] do_syscall_64+0xfa/0xfa0 [ 132.166229][ T6547] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.171417][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.177508][ T6547] ? clear_bhb_loop+0x60/0xb0 [ 132.182181][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.188070][ T6547] RIP: 0033:0x7f632db8eba9 [ 132.192479][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.212074][ T6547] RSP: 002b:00007f632ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.220487][ T6547] RAX: ffffffffffffffda RBX: 00007f632ddd5fa0 RCX: 00007f632db8eba9 [ 132.228447][ T6547] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 132.236622][ T6547] RBP: 00007f632dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.244593][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.252551][ T6547] R13: 00007f632ddd6038 R14: 00007f632ddd5fa0 R15: 00007fff6194a418 [ 132.260527][ T6547] [ 132.263919][ T6547] Kernel Offset: disabled [ 132.268286][ T6547] Rebooting in 86400 seconds..