Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts.
2026/04/26 16:10:44 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 132.397323][ T6279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 132.851643][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.851764][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 135.414188][ T2054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 135.414207][ T2054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 135.455678][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 135.455696][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 136.952214][ T6296] chnl_net:caif_netlink_parms(): no params data found
[ 137.050945][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.051177][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 137.051326][ T6296] bridge_slave_0: entered allmulticast mode
[ 137.053133][ T6296] bridge_slave_0: entered promiscuous mode
[ 137.224154][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.224336][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 137.224507][ T6296] bridge_slave_1: entered allmulticast mode
[ 137.226260][ T6296] bridge_slave_1: entered promiscuous mode
[ 137.284776][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 137.288426][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 137.335592][ T6296] team0: Port device team_slave_0 added
[ 137.338461][ T6296] team0: Port device team_slave_1 added
[ 137.382724][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 137.382734][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.382747][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 137.399086][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 137.399101][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.399125][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 137.657002][ T6296] hsr_slave_0: entered promiscuous mode
[ 137.658623][ T6296] hsr_slave_1: entered promiscuous mode
[ 139.400760][ T6296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 139.448918][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 139.457883][ T6296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 139.498117][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 139.499255][ T6296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 139.544418][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 139.547229][ T6296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 139.578374][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 139.745808][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 139.785518][ T6296] 8021q: adding VLAN 0 to HW filter on device team0
[ 139.809360][ T2054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.809602][ T2054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 139.861063][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.861322][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 140.258451][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 140.364747][ T6296] veth0_vlan: entered promiscuous mode
[ 140.383317][ T6296] veth1_vlan: entered promiscuous mode
[ 140.468026][ T6296] veth0_macvtap: entered promiscuous mode
[ 140.479521][ T6296] veth1_macvtap: entered promiscuous mode
[ 140.527565][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 140.565800][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 140.600850][ T3510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.607816][ T3510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.610544][ T3510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.611086][ T3510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.327794][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 141.360464][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 141.361526][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 141.363088][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 141.365518][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 141.520298][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.402483][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 143.521626][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 144.001831][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 144.943850][ T68] bridge_slave_1: left allmulticast mode
[ 144.943874][ T68] bridge_slave_1: left promiscuous mode
[ 144.944091][ T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 145.004774][ T68] bridge_slave_0: left allmulticast mode
[ 145.004798][ T68] bridge_slave_0: left promiscuous mode
[ 145.004953][ T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 145.624248][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 145.704176][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 145.725569][ T68] bond0 (unregistering): Released all slaves
[ 145.770929][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1
[ 146.174194][ T68] hsr_slave_0: left promiscuous mode
[ 146.213930][ T68] hsr_slave_1: left promiscuous mode
[ 146.215099][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 146.215122][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 146.254684][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 146.254709][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 146.334600][ T68] veth1_macvtap: left promiscuous mode
[ 146.334659][ T68] veth0_macvtap: left promiscuous mode
[ 146.334812][ T68] veth1_vlan: left promiscuous mode
[ 146.334914][ T68] veth0_vlan: left promiscuous mode
[ 146.995309][ T68] team0 (unregistering): Port device team_slave_1 removed
[ 147.054124][ T68] team0 (unregistering): Port device team_slave_0 removed
[ 147.217571][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2
[ 147.984037][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3
[ 149.386182][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4
2026/04/26 16:11:07 executed programs: 0
[ 150.529661][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 150.532486][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 150.535912][ T6610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 150.552628][ T6610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 150.558890][ T6610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 151.055686][ T6607] chnl_net:caif_netlink_parms(): no params data found
[ 151.148294][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 151.148495][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.148629][ T6607] bridge_slave_0: entered allmulticast mode
[ 151.150385][ T6607] bridge_slave_0: entered promiscuous mode
[ 151.155997][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 151.156358][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.156582][ T6607] bridge_slave_1: entered allmulticast mode
[ 151.159697][ T6607] bridge_slave_1: entered promiscuous mode
[ 151.208488][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 151.214005][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 151.255027][ T6607] team0: Port device team_slave_0 added
[ 151.258054][ T6607] team0: Port device team_slave_1 added
[ 151.292305][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 151.292316][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.292329][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 151.298113][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 151.298128][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.298168][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 151.400606][ T6607] hsr_slave_0: entered promiscuous mode
[ 151.401729][ T6607] hsr_slave_1: entered promiscuous mode
[ 152.683652][ T5146] Bluetooth: hci0: command tx timeout
[ 153.504061][ T6607] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 153.541148][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 153.542271][ T6607] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 153.594432][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 153.598857][ T6607] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.639028][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 153.640296][ T6607] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 153.678921][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 153.890868][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.940808][ T6607] 8021q: adding VLAN 0 to HW filter on device team0
[ 153.962735][ T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.962969][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.992228][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.992484][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.377104][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.497493][ T6607] veth0_vlan: entered promiscuous mode
[ 154.531205][ T6607] veth1_vlan: entered promiscuous mode
[ 154.602610][ T6607] veth0_macvtap: entered promiscuous mode
[ 154.615994][ T6607] veth1_macvtap: entered promiscuous mode
[ 154.668443][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 154.695231][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 154.716184][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.716408][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.716442][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.716474][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.763597][ T5146] Bluetooth: hci0: command tx timeout
[ 155.125495][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.125528][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 155.230548][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.230567][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 155.780991][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 155.985985][ T37] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 155.986004][ T37] usb 1-1: config 0 has no interface number 0
[ 155.988353][ T37] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 155.988379][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 155.988396][ T37] usb 1-1: Product: syz
[ 155.988408][ T37] usb 1-1: Manufacturer: syz
[ 155.988415][ T37] usb 1-1: SerialNumber: syz
[ 156.033358][ T37] usb 1-1: config 0 descriptor??
[ 156.259440][ T37] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 156.279451][ T37] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 156.279921][ T37] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 156.279995][ T37] usb 1-1: media controller created
[ 156.308394][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 156.854706][ T5146] Bluetooth: hci0: command tx timeout
[ 157.416486][ T37] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 157.422229][ T6724] ==================================================================
[ 157.422246][ T6724] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4cd/0x640
[ 157.422273][ T6724] Read of size 1 at addr ffff88802c445481 by task syz.0.17/6724
[ 157.422289][ T6724]
[ 157.422313][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 157.422334][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G[ 157.422334][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 157.422352][ T6724] Call Trace:
[ 157.422359][ T6724]
[ 157.422368][ T6724] dump_stack_lvl+0xe8/0x150
[ 157.422390][ T6724] print_address_description+0x55/0x1e0
[ 157.422410][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.422427][ T6724] print_report+0x58/0x70
[ 157.422444][ T6724] kasan_report+0x117/0x150
[ 157.422472][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.422492][ T6724] ec168_i2c_xfer+0x4cd/0x640
[ 157.422514][ T6724] __i2c_transfer+0x79a/0x1f70
[ 157.422542][ T6724] ? i2c_transfer+0xc8/0x2d0
[ 157.422566][ T6724] i2c_transfer+0x1cc/0x2d0
[ 157.422590][ T6724] i2cdev_ioctl_rdwr+0x460/0x740
[ 157.422618][ T6724] i2cdev_ioctl+0x6a8/0x890
[ 157.422641][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 157.422665][ T6724] ? __fget_files+0x3a6/0x420
[ 157.422686][ T6724] ? __fget_files+0x2a/0x420
[ 157.422708][ T6724] ? bpf_lsm_file_ioctl+0x9/0x20
[ 157.422729][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 157.422752][ T6724] __se_sys_ioctl+0xff/0x170
[ 157.422778][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.422797][ T6724] do_syscall_64+0x15f/0xf80
[ 157.422821][ T6724] ? trace_irq_disable+0x3b/0x140
[ 157.422842][ T6724] ? clear_bhb_loop+0x40/0x90
[ 157.422863][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.422881][ T6724] RIP: 0033:0x7f0f6a60c799
[ 157.422908][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 157.422923][ T6724] RSP: 002b:00007f0f69c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 157.422949][ T6724] RAX: ffffffffffffffda RBX: 00007f0f6a885fa0 RCX: 00007f0f6a60c799
[ 157.422963][ T6724] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004
[ 157.422975][ T6724] RBP: 00007f0f6a6a2c99 R08: 0000000000000000 R09: 0000000000000000
[ 157.422987][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 157.422999][ T6724] R13: 00007f0f6a886038 R14: 00007f0f6a885fa0 R15: 00007ffc1a6ca5a8
[ 157.423020][ T6724]
[ 157.423027][ T6724]
[ 157.423031][ T6724] Allocated by task 6724:
[ 157.423040][ T6724] kasan_save_track+0x3e/0x80
[ 157.423061][ T6724] __kasan_kmalloc+0x93/0xb0
[ 157.423090][ T6724] __kmalloc_node_track_caller_noprof+0x372/0x7e0
[ 157.423113][ T6724] memdup_user+0x2b/0xd0
[ 157.423132][ T6724] i2cdev_ioctl_rdwr+0x1c6/0x740
[ 157.423152][ T6724] i2cdev_ioctl+0x6a8/0x890
[ 157.423170][ T6724] __se_sys_ioctl+0xff/0x170
[ 157.423191][ T6724] do_syscall_64+0x15f/0xf80
[ 157.423211][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.423227][ T6724]
[ 157.423232][ T6724] The buggy address belongs to the object at ffff88802c445480
[ 157.423232][ T6724] which belongs to the cache kmalloc-8 of size 8
[ 157.423247][ T6724] The buggy address is located 0 bytes to the right of
[ 157.423247][ T6724] allocated 1-byte region [ffff88802c445480, ffff88802c445481)
[ 157.423265][ T6724]
[ 157.423270][ T6724] The buggy address belongs to the physical page:
[ 157.423284][ T6724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c445460 pfn:0x2c445
[ 157.423302][ T6724] flags: 0x80000000000200(workingset|node=0|zone=1)
[ 157.423323][ T6724] page_type: f5(slab)
[ 157.423339][ T6724] raw: 0080000000000200 ffff88813fe1b500 ffff88813fe1a488 ffffea0000b05a10
[ 157.423355][ T6724] raw: ffff88802c445460 0000000800800076 00000000f5000000 0000000000000000
[ 157.423364][ T6724] page dumped because: kasan: bad access detected
[ 157.423380][ T6724] page_owner tracks the page as allocated
[ 157.423386][ T6724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11857180255, free_ts 11833832579
[ 157.423414][ T6724] post_alloc_hook+0x22d/0x280
[ 157.423434][ T6724] get_page_from_freelist+0x27d6/0x2850
[ 157.423449][ T6724] __alloc_frozen_pages_noprof+0x18d/0x380
[ 157.423472][ T6724] allocate_slab+0x77/0x660
[ 157.423489][ T6724] refill_objects+0x33c/0x3d0
[ 157.423504][ T6724] __pcs_replace_empty_main+0x373/0x720
[ 157.423522][ T6724] __kmalloc_cache_noprof+0x44e/0x690
[ 157.423543][ T6724] usb_control_msg+0x73/0x3e0
[ 157.423566][ T6724] hub_power_on+0x1b6/0x460
[ 157.423581][ T6724] hub_activate+0x345/0x1a80
[ 157.423596][ T6724] hub_probe+0x2938/0x3c30
[ 157.423619][ T6724] usb_probe_interface+0x659/0xc70
[ 157.423636][ T6724] really_probe+0x267/0xaf0
[ 157.423654][ T6724] __driver_probe_device+0x1ef/0x380
[ 157.423671][ T6724] driver_probe_device+0x4f/0x240
[ 157.423689][ T6724] __device_attach_driver+0x279/0x430
[ 157.423705][ T6724] page last free pid 821 tgid 821 stack trace:
[ 157.423713][ T6724] __free_frozen_pages+0xf9b/0x10f0
[ 157.423731][ T6724] vfree+0x251/0x3b0
[ 157.423749][ T6724] delayed_vfree_work+0x55/0x80
[ 157.423770][ T6724] process_one_work+0x9a3/0x1710
[ 157.423783][ T6724] worker_thread+0xba8/0x11e0
[ 157.423798][ T6724] kthread+0x388/0x470
[ 157.423816][ T6724] ret_from_fork+0x514/0xb70
[ 157.423831][ T6724] ret_from_fork_asm+0x1a/0x30
[ 157.423849][ T6724]
[ 157.423853][ T6724] Memory state around the buggy address:
[ 157.423862][ T6724] ffff88802c445380: 00 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 157.423873][ T6724] ffff88802c445400: 00 fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc
[ 157.423883][ T6724] >ffff88802c445480: 01 fc fc fc fa fc fc fc 06 fc fc fc 07 fc fc fc
[ 157.423891][ T6724] ^
[ 157.423900][ T6724] ffff88802c445500: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 157.423910][ T6724] ffff88802c445580: 06 fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc
[ 157.423917][ T6724] ==================================================================
[ 157.473929][ T6724] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 157.473949][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 157.473971][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 157.473983][ T6724] Call Trace:
[ 157.473989][ T6724]
[ 157.473997][ T6724] vpanic+0x56c/0xa60
[ 157.474025][ T6724] ? __pfx_vpanic+0x10/0x10
[ 157.474045][ T6724] ? __pfx___schedule+0x10/0x10
[ 157.474070][ T6724] panic+0xc5/0xd0
[ 157.474089][ T6724] ? __pfx_panic+0x10/0x10
[ 157.474110][ T6724] ? preempt_schedule_common+0x82/0xd0
[ 157.474133][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.474151][ T6724] check_panic_on_warn+0x89/0xb0
[ 157.474174][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.474190][ T6724] end_report+0x73/0x170
[ 157.474215][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.474230][ T6724] kasan_report+0x128/0x150
[ 157.474255][ T6724] ? ec168_i2c_xfer+0x4cd/0x640
[ 157.474274][ T6724] ec168_i2c_xfer+0x4cd/0x640
[ 157.474296][ T6724] __i2c_transfer+0x79a/0x1f70
[ 157.474323][ T6724] ? i2c_transfer+0xc8/0x2d0
[ 157.474353][ T6724] i2c_transfer+0x1cc/0x2d0
[ 157.474376][ T6724] i2cdev_ioctl_rdwr+0x460/0x740
[ 157.474403][ T6724] i2cdev_ioctl+0x6a8/0x890
[ 157.474424][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 157.474446][ T6724] ? __fget_files+0x3a6/0x420
[ 157.474467][ T6724] ? __fget_files+0x2a/0x420
[ 157.474488][ T6724] ? bpf_lsm_file_ioctl+0x9/0x20
[ 157.474508][ T6724] ? __pfx_i2cdev_ioctl+0x10/0x10
[ 157.474529][ T6724] __se_sys_ioctl+0xff/0x170
[ 157.474553][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.474572][ T6724] do_syscall_64+0x15f/0xf80
[ 157.474595][ T6724] ? trace_irq_disable+0x3b/0x140
[ 157.474615][ T6724] ? clear_bhb_loop+0x40/0x90
[ 157.474634][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 157.474651][ T6724] RIP: 0033:0x7f0f6a60c799
[ 157.474668][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 157.474683][ T6724] RSP: 002b:00007f0f69c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 157.474702][ T6724] RAX: ffffffffffffffda RBX: 00007f0f6a885fa0 RCX: 00007f0f6a60c799
[ 157.474716][ T6724] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004
[ 157.474728][ T6724] RBP: 00007f0f6a6a2c99 R08: 0000000000000000 R09: 0000000000000000
[ 157.474739][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 157.474750][ T6724] R13: 00007f0f6a886038 R14: 00007f0f6a885fa0 R15: 00007ffc1a6ca5a8
[ 157.474770][ T6724]
[ 157.475198][ T6724] Kernel Offset: disabled