Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts.
2025/11/13 08:14:27 parsed 1 programs
[ 53.120890][ T4188] cgroup: Unknown subsys name 'net'
[ 53.256474][ T4188] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 54.527143][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 55.731809][ T4195] chnl_net:caif_netlink_parms(): no params data found
[ 55.769391][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.776900][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.785012][ T4195] device bridge_slave_0 entered promiscuous mode
[ 55.793980][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.801322][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.808901][ T4195] device bridge_slave_1 entered promiscuous mode
[ 55.828368][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 55.839074][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 55.859218][ T4195] team0: Port device team_slave_0 added
[ 55.866351][ T4195] team0: Port device team_slave_1 added
[ 55.882602][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 55.889545][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 55.915502][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 55.927754][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 55.934767][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 55.960827][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 55.987731][ T4195] device hsr_slave_0 entered promiscuous mode
[ 55.994784][ T4195] device hsr_slave_1 entered promiscuous mode
[ 56.069632][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 56.079797][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 56.088357][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 56.098161][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 56.120566][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.127706][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.135487][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.142558][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.179266][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[ 56.190169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 56.202267][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.209971][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.218455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 56.230772][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[ 56.241589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 56.250171][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.257388][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.268351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 56.277328][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.284398][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.303898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 56.312959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 56.321408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 56.332702][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 56.344628][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 56.355408][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 56.425176][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 56.433061][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 56.446273][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 56.461694][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 56.478618][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 56.486892][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 56.496844][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 56.506457][ T4195] device veth0_vlan entered promiscuous mode
[ 56.517005][ T4195] device veth1_vlan entered promiscuous mode
[ 56.533949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 56.542007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 56.549951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 56.562554][ T4195] device veth0_macvtap entered promiscuous mode
[ 56.571184][ T4195] device veth1_macvtap entered promiscuous mode
[ 56.586388][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 56.594176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 56.604181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 56.615035][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 56.622749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 56.633920][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.643065][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.652120][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.660797][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 56.763113][ T4195] syz-executor (4195) used greatest stack depth: 21120 bytes left
[ 56.780713][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 60.006150][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.335851][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.397681][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.065220][ T1494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.077087][ T1494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.094122][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 63.108595][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.125802][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.135253][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 63.237496][ T9] device hsr_slave_0 left promiscuous mode
[ 63.273922][ T9] device hsr_slave_1 left promiscuous mode
[ 63.281870][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 63.289302][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 63.298014][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 63.307512][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 63.315508][ T9] device bridge_slave_1 left promiscuous mode
[ 63.322816][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.338873][ T9] device bridge_slave_0 left promiscuous mode
[ 63.346452][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.368007][ T9] device veth1_macvtap left promiscuous mode
[ 63.374489][ T9] device veth0_macvtap left promiscuous mode
[ 63.380559][ T9] device veth1_vlan left promiscuous mode
[ 63.386899][ T9] device veth0_vlan left promiscuous mode
[ 63.510622][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 63.523850][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 63.537962][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 63.551427][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 63.594927][ T9] bond0 (unregistering): Released all slaves
2025/11/13 08:14:41 executed programs: 0
[ 65.638170][ T9] ODEBUG: Out of memory. ODEBUG disabled
[ 65.683270][ T4361] chnl_net:caif_netlink_parms(): no params data found
[ 65.954093][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.971214][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.978802][ T4361] device bridge_slave_0 entered promiscuous mode
[ 65.987300][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.994664][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.003504][ T4361] device bridge_slave_1 entered promiscuous mode
[ 66.027196][ T4361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 66.038320][ T4361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 66.065978][ T4361] team0: Port device team_slave_0 added
[ 66.074061][ T4361] team0: Port device team_slave_1 added
[ 66.094939][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 66.102084][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.129189][ T4361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 66.145844][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 66.153102][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.179471][ T4361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.214686][ T4361] device hsr_slave_0 entered promiscuous mode
[ 66.221652][ T4361] device hsr_slave_1 entered promiscuous mode
[ 66.740349][ T4361] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.781909][ T4361] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.791383][ T4361] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.800689][ T4361] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.892896][ T4361] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.939517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 66.948689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 66.959772][ T4361] 8021q: adding VLAN 0 to HW filter on device team0
[ 66.972879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 66.982664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 66.991454][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.998513][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.052792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 67.062658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 67.071563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 67.079947][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.087050][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.097197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 67.106728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 67.115741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 67.125442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 67.134854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 67.145557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.154313][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 67.164053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.172694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 67.182430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.195365][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 67.206662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.380575][ T4361] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.389919][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 67.398351][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 67.416833][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 67.426648][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 67.455526][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 67.467049][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 67.480822][ T4361] device veth0_vlan entered promiscuous mode
[ 67.497769][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 67.505637][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.518095][ T4361] device veth1_vlan entered promiscuous mode
[ 67.539758][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 67.548425][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.558022][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 67.566791][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.579046][ T4361] device veth0_macvtap entered promiscuous mode
[ 67.591968][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 67.599884][ T4361] device veth1_macvtap entered promiscuous mode
[ 67.651885][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.659431][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.668158][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 67.677663][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 67.687775][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.706489][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.723726][ T4361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.733030][ T4361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.746122][ T4361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.758286][ T4361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.769060][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 67.778859][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.856773][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.877091][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.886011][ T1494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.902303][ T1494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.911362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 67.920795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 68.251184][ T4398] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 68.611419][ T4398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 68.629782][ T4398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 68.648192][ T4398] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 68.658415][ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 68.670527][ T4398] usb 1-1: config 0 descriptor??
[ 69.166929][ T4398] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[ 69.183131][ T4398] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 69.381696][ T4398] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[ 69.681760][ T4391] Bluetooth: hci0: command 0x041b tx timeout
[ 70.022053][ T4510] ==================================================================
[ 70.030354][ T4510] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x87c/0xe00
[ 70.037719][ T4510] Read of size 42 at addr ffffc9000328fd41 by task syz.0.17/4510
[ 70.045411][ T4510]
[ 70.047714][ T4510] CPU: 0 PID: 4510 Comm: syz.0.17 Not tainted syzkaller #0
[ 70.054884][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 70.064925][ T4510] Call Trace:
[ 70.068188][ T4510]
[ 70.071102][ T4510] dump_stack_lvl+0x168/0x230
[ 70.075778][ T4510] ? show_regs_print_info+0x20/0x20
[ 70.080989][ T4510] ? _printk+0xcc/0x110
[ 70.085124][ T4510] ? load_image+0x3b0/0x3b0
[ 70.089613][ T4510] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 70.094967][ T4510] print_address_description+0x60/0x2d0
[ 70.100488][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.105143][ T4510] kasan_report+0xdf/0x130
[ 70.109899][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.114711][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.119280][ T4510] kasan_check_range+0x27b/0x290
[ 70.124719][ T4510] memcpy+0x25/0x60
[ 70.128505][ T4510] cp2112_xfer+0x87c/0xe00
[ 70.133203][ T4510] ? cp2112_i2c_xfer+0xf20/0xf20
[ 70.138334][ T4510] ? lock_chain_count+0x20/0x20
[ 70.143253][ T4510] __i2c_smbus_xfer+0x733/0x1d50
[ 70.148557][ T4510] ? cp2112_i2c_xfer+0xf20/0xf20
[ 70.153841][ T4510] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0
[ 70.160958][ T4510] ? rt_mutex_lock_nested+0x15a/0x1c0
[ 70.166407][ T4510] ? i2c_smbus_xfer+0x11d/0x3a0
[ 70.171244][ T4510] ? rwsem_down_read_slowpath+0x990/0x990
[ 70.176962][ T4510] ? __might_fault+0xb7/0x110
[ 70.181638][ T4510] i2c_smbus_xfer+0x263/0x3a0
[ 70.186330][ T4510] ? i2c_smbus_read_byte+0x1b0/0x1b0
[ 70.191593][ T4510] ? __might_fault+0xb3/0x110
[ 70.196254][ T4510] i2cdev_ioctl_smbus+0x3e3/0x650
[ 70.201271][ T4510] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0
[ 70.206378][ T4510] ? __might_fault+0xb3/0x110
[ 70.211032][ T4510] ? _copy_from_user+0x111/0x170
[ 70.215978][ T4510] i2cdev_ioctl+0x545/0x750
[ 70.220458][ T4510] ? i2cdev_write+0x120/0x120
[ 70.225109][ T4510] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 70.231074][ T4510] ? lock_chain_count+0x20/0x20
[ 70.235937][ T4510] ? bpf_lsm_file_ioctl+0x5/0x10
[ 70.240864][ T4510] ? security_file_ioctl+0x7c/0xa0
[ 70.245970][ T4510] ? i2cdev_write+0x120/0x120
[ 70.250836][ T4510] __se_sys_ioctl+0xfa/0x170
[ 70.255571][ T4510] do_syscall_64+0x4c/0xa0
[ 70.260158][ T4510] ? clear_bhb_loop+0x30/0x80
[ 70.264818][ T4510] ? clear_bhb_loop+0x30/0x80
[ 70.269476][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.275393][ T4510] RIP: 0033:0x7f9f353746c9
[ 70.279789][ T4510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.299376][ T4510] RSP: 002b:00007fff15c5a6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.307768][ T4510] RAX: ffffffffffffffda RBX: 00007f9f355cafa0 RCX: 00007f9f353746c9
[ 70.315721][ T4510] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 70.323675][ T4510] RBP: 00007f9f353f6f91 R08: 0000000000000000 R09: 0000000000000000
[ 70.331639][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 70.339856][ T4510] R13: 00007f9f355cafa0 R14: 00007f9f355cafa0 R15: 0000000000000003
[ 70.347823][ T4510]
[ 70.350828][ T4510]
[ 70.353130][ T4510]
[ 70.355433][ T4510] addr ffffc9000328fd41 is located in stack of task syz.0.17/4510 at offset 33 in frame:
[ 70.365204][ T4510] i2cdev_ioctl_smbus+0x0/0x650
[ 70.370037][ T4510]
[ 70.372338][ T4510] this frame has 1 object:
[ 70.376816][ T4510] [32, 66) 'temp'
[ 70.376824][ T4510]
[ 70.382800][ T4510] Memory state around the buggy address:
[ 70.388401][ T4510] ffffc9000328fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3
[ 70.396435][ T4510] ffffc9000328fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.404470][ T4510] >ffffc9000328fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3
[ 70.412501][ T4510] ^
[ 70.419667][ T4510] ffffc9000328fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.427701][ T4510] ffffc9000328fe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3
[ 70.435820][ T4510] ==================================================================
[ 70.443850][ T4510] Disabling lock debugging due to kernel taint
[ 70.453820][ T4510] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 70.461024][ T4510] CPU: 0 PID: 4510 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 70.469613][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 70.479648][ T4510] Call Trace:
[ 70.482906][ T4510]
[ 70.485814][ T4510] dump_stack_lvl+0x168/0x230
[ 70.490473][ T4510] ? show_regs_print_info+0x20/0x20
[ 70.495660][ T4510] ? load_image+0x3b0/0x3b0
[ 70.500138][ T4510] panic+0x2c9/0x7f0
[ 70.504003][ T4510] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 70.510131][ T4510] ? bpf_jit_dump+0xd0/0xd0
[ 70.514606][ T4510] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 70.520475][ T4510] ? _raw_spin_unlock+0x40/0x40
[ 70.525294][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.529856][ T4510] check_panic_on_warn+0x80/0xa0
[ 70.534768][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.539332][ T4510] end_report+0x6d/0xf0
[ 70.543459][ T4510] kasan_report+0x102/0x130
[ 70.547933][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.552494][ T4510] ? cp2112_xfer+0x87c/0xe00
[ 70.557054][ T4510] kasan_check_range+0x27b/0x290
[ 70.561961][ T4510] memcpy+0x25/0x60
[ 70.565745][ T4510] cp2112_xfer+0x87c/0xe00
[ 70.570135][ T4510] ? cp2112_i2c_xfer+0xf20/0xf20
[ 70.575043][ T4510] ? lock_chain_count+0x20/0x20
[ 70.579869][ T4510] __i2c_smbus_xfer+0x733/0x1d50
[ 70.584778][ T4510] ? cp2112_i2c_xfer+0xf20/0xf20
[ 70.589691][ T4510] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0
[ 70.595909][ T4510] ? rt_mutex_lock_nested+0x15a/0x1c0
[ 70.601259][ T4510] ? i2c_smbus_xfer+0x11d/0x3a0
[ 70.606098][ T4510] ? rwsem_down_read_slowpath+0x990/0x990
[ 70.611803][ T4510] ? __might_fault+0xb7/0x110
[ 70.616455][ T4510] i2c_smbus_xfer+0x263/0x3a0
[ 70.621107][ T4510] ? i2c_smbus_read_byte+0x1b0/0x1b0
[ 70.626378][ T4510] ? __might_fault+0xb3/0x110
[ 70.631288][ T4510] i2cdev_ioctl_smbus+0x3e3/0x650
[ 70.636288][ T4510] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0
[ 70.641379][ T4510] ? __might_fault+0xb3/0x110
[ 70.646041][ T4510] ? _copy_from_user+0x111/0x170
[ 70.650952][ T4510] i2cdev_ioctl+0x545/0x750
[ 70.655432][ T4510] ? i2cdev_write+0x120/0x120
[ 70.660080][ T4510] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 70.666036][ T4510] ? lock_chain_count+0x20/0x20
[ 70.670861][ T4510] ? bpf_lsm_file_ioctl+0x5/0x10
[ 70.675771][ T4510] ? security_file_ioctl+0x7c/0xa0
[ 70.680855][ T4510] ? i2cdev_write+0x120/0x120
[ 70.685504][ T4510] __se_sys_ioctl+0xfa/0x170
[ 70.690071][ T4510] do_syscall_64+0x4c/0xa0
[ 70.694468][ T4510] ? clear_bhb_loop+0x30/0x80
[ 70.699128][ T4510] ? clear_bhb_loop+0x30/0x80
[ 70.703787][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 70.709663][ T4510] RIP: 0033:0x7f9f353746c9
[ 70.714058][ T4510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 70.733639][ T4510] RSP: 002b:00007fff15c5a6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 70.742026][ T4510] RAX: ffffffffffffffda RBX: 00007f9f355cafa0 RCX: 00007f9f353746c9
[ 70.749971][ T4510] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 70.757915][ T4510] RBP: 00007f9f353f6f91 R08: 0000000000000000 R09: 0000000000000000
[ 70.765859][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 70.773802][ T4510] R13: 00007f9f355cafa0 R14: 00007f9f355cafa0 R15: 0000000000000003
[ 70.781751][ T4510]
[ 70.784958][ T4510] Kernel Offset: disabled
[ 70.789363][ T4510] Rebooting in 86400 seconds..