Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts.
2026/02/15 18:40:16 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 92.625872][ T4631] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 93.891412][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.908660][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.928565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 93.943115][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.951746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.960360][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 95.920813][ T4692] chnl_net:caif_netlink_parms(): no params data found
[ 95.986864][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.994280][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.003103][ T4692] device bridge_slave_0 entered promiscuous mode
[ 96.013318][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.020609][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.029367][ T4692] device bridge_slave_1 entered promiscuous mode
[ 96.060040][ T4692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.073964][ T4692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.109108][ T4692] team0: Port device team_slave_0 added
[ 96.118251][ T4692] team0: Port device team_slave_1 added
[ 96.140682][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.148196][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.176120][ T4692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.189620][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.197214][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.224328][ T4692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.266414][ T4692] device hsr_slave_0 entered promiscuous mode
[ 96.273760][ T4692] device hsr_slave_1 entered promiscuous mode
[ 96.424792][ T153] ODEBUG: Out of memory. ODEBUG disabled
[ 97.054207][ T4692] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.065548][ T4692] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.076120][ T4692] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.087617][ T4692] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.158940][ T4692] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.176070][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 97.186403][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 97.197670][ T4692] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.209197][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 97.218959][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 97.228974][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.236580][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.246597][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 97.263164][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 97.272820][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 97.283214][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.290491][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.299262][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 97.312432][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 97.361124][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 97.373295][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 97.382988][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 97.394763][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 97.404138][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 97.420912][ T4692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 97.432252][ T4692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 97.446229][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 97.456217][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 97.466265][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 97.477239][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 97.486340][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 97.659944][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 97.670666][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 97.686341][ T4692] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.738663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 97.748428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 97.769969][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 97.779988][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 97.791053][ T4692] device veth0_vlan entered promiscuous mode
[ 97.821545][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 97.832230][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 97.843503][ T4692] device veth1_vlan entered promiscuous mode
[ 97.868487][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 97.877870][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 97.888678][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 97.898246][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 97.913119][ T4692] device veth0_macvtap entered promiscuous mode
[ 97.925122][ T4692] device veth1_macvtap entered promiscuous mode
[ 97.965645][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 97.975356][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 97.997694][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.007143][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 98.019064][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 98.033711][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.043752][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 98.053805][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 98.064720][ T4692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.074326][ T4692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.084080][ T4692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.095414][ T4692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/15 18:40:25 executed programs: 0
[ 99.734933][ T4835] chnl_net:caif_netlink_parms(): no params data found
[ 99.825133][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.842666][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.851797][ T4835] device bridge_slave_0 entered promiscuous mode
[ 99.872648][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.891059][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.899481][ T4835] device bridge_slave_1 entered promiscuous mode
[ 99.955429][ T4835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.980642][ T4835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.022820][ T4835] team0: Port device team_slave_0 added
[ 100.037640][ T4835] team0: Port device team_slave_1 added
[ 100.061102][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.068656][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.095595][ T4835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.109851][ T4835] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.118920][ T4835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.155866][ T4835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.234610][ T4835] device hsr_slave_0 entered promiscuous mode
[ 100.244083][ T4835] device hsr_slave_1 entered promiscuous mode
[ 100.261155][ T4835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 100.269232][ T4835] Cannot create hsr debugfs directory
[ 100.404578][ T4835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.581230][ T1110] Bluetooth: hci0: command 0x0409 tx timeout
[ 102.718460][ T4835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.777369][ T4835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.839923][ T4835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.975762][ T4835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.984593][ T4835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.003014][ T4835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.012374][ T4835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.050263][ T4835] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.074786][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 103.083403][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 103.094191][ T4835] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.111343][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 103.120192][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 103.129603][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.137211][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.145001][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 103.156615][ T153] device hsr_slave_0 left promiscuous mode
[ 103.163378][ T153] device hsr_slave_1 left promiscuous mode
[ 103.170302][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.178151][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.186698][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.194478][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.202543][ T153] device bridge_slave_1 left promiscuous mode
[ 103.209099][ T153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.218785][ T153] device bridge_slave_0 left promiscuous mode
[ 103.225415][ T153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.237015][ T153] device veth1_macvtap left promiscuous mode
[ 103.243561][ T153] device veth0_macvtap left promiscuous mode
[ 103.249595][ T153] device veth1_vlan left promiscuous mode
[ 103.255845][ T153] device veth0_vlan left promiscuous mode
[ 103.358434][ T153] team0 (unregistering): Port device team_slave_1 removed
[ 103.370123][ T153] team0 (unregistering): Port device team_slave_0 removed
[ 103.381298][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 103.396450][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 103.436187][ T153] bond0 (unregistering): Released all slaves
[ 103.473984][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 103.482750][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 103.492297][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.499375][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.507425][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 103.516610][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 103.525328][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 103.534118][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 103.543083][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 103.555467][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 103.565428][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 103.587505][ T4835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 103.598490][ T4835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 103.610341][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 103.619462][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 103.628677][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 103.637423][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 103.648183][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 103.671103][ T4242] Bluetooth: hci0: command 0x041b tx timeout
[ 103.738649][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 103.746860][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 103.759625][ T4835] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.774786][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 103.784018][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 103.798750][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 103.807258][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 103.816419][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 103.824544][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 103.836199][ T4835] device veth0_vlan entered promiscuous mode
[ 103.846943][ T4835] device veth1_vlan entered promiscuous mode
[ 103.862062][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 103.870428][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 103.879382][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 103.888683][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 103.899301][ T4835] device veth0_macvtap entered promiscuous mode
[ 103.915281][ T4835] device veth1_macvtap entered promiscuous mode
[ 103.934518][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.943465][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 103.952543][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 103.960751][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 103.972649][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 103.985076][ T4835] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.994621][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 104.004141][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 104.017067][ T4835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.026943][ T4835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.036696][ T4835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.045604][ T4835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.100563][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.112897][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.131896][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 104.148900][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.158794][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.171062][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 104.501086][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 104.902010][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 104.913545][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 104.923799][ T4234] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 104.932968][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 104.946342][ T4234] usb 1-1: config 0 descriptor??
[ 105.414920][ T4234] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[ 105.426428][ T4234] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 105.621256][ T4234] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[ 105.741829][ T4242] Bluetooth: hci0: command 0x040f tx timeout
[ 106.261870][ T5083] ==================================================================
[ 106.270448][ T5083] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x89d/0xe30
[ 106.277992][ T5083] Read of size 42 at addr ffffc900030efd41 by task syz.0.17/5083
[ 106.285783][ T5083]
[ 106.288475][ T5083] CPU: 1 PID: 5083 Comm: syz.0.17 Not tainted syzkaller #0
[ 106.296027][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 106.306588][ T5083] Call Trace:
[ 106.309950][ T5083]
[ 106.323873][ T5083] dump_stack_lvl+0x188/0x250
[ 106.328626][ T5083] ? show_regs_print_info+0x20/0x20
[ 106.334005][ T5083] ? _printk+0xda/0x130
[ 106.338335][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.343363][ T5083] ? load_image+0x400/0x400
[ 106.348094][ T5083] print_address_description+0x60/0x2d0
[ 106.353834][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.358520][ T5083] kasan_report+0xdf/0x130
[ 106.363135][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.367914][ T5083] kasan_check_range+0x235/0x290
[ 106.373201][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.378359][ T5083] memcpy+0x25/0x60
[ 106.382381][ T5083] cp2112_xfer+0x89d/0xe30
[ 106.387138][ T5083] ? mark_lock+0x94/0x320
[ 106.391463][ T5083] ? cp2112_i2c_xfer+0xf40/0xf40
[ 106.396584][ T5083] ? lock_chain_count+0x20/0x20
[ 106.401603][ T5083] __i2c_smbus_xfer+0x7b4/0x1dc0
[ 106.406792][ T5083] ? cp2112_i2c_xfer+0xf40/0xf40
[ 106.411896][ T5083] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 106.418328][ T5083] ? rt_mutex_lock_nested+0x1a4/0x210
[ 106.423711][ T5083] ? i2c_smbus_xfer+0x120/0x3b0
[ 106.428915][ T5083] ? rwsem_down_read_slowpath+0x9d0/0x9d0
[ 106.434714][ T5083] ? __might_fault+0xb7/0x110
[ 106.439754][ T5083] i2c_smbus_xfer+0x272/0x3b0
[ 106.444418][ T5083] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 106.449881][ T5083] ? __might_fault+0xb3/0x110
[ 106.454632][ T5083] i2cdev_ioctl_smbus+0x432/0x680
[ 106.459756][ T5083] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0
[ 106.464946][ T5083] ? __might_fault+0xb3/0x110
[ 106.470083][ T5083] ? _copy_from_user+0x111/0x170
[ 106.475320][ T5083] i2cdev_ioctl+0x583/0x7b0
[ 106.480116][ T5083] ? i2cdev_write+0x120/0x120
[ 106.484803][ T5083] ? bpf_lsm_file_ioctl+0x5/0x10
[ 106.489723][ T5083] ? security_file_ioctl+0x7c/0xa0
[ 106.495093][ T5083] ? i2cdev_write+0x120/0x120
[ 106.499941][ T5083] __se_sys_ioctl+0xfa/0x170
[ 106.504718][ T5083] do_syscall_64+0x4c/0xa0
[ 106.509228][ T5083] ? clear_bhb_loop+0x30/0x80
[ 106.514058][ T5083] ? clear_bhb_loop+0x30/0x80
[ 106.518805][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 106.525085][ T5083] RIP: 0033:0x7fd8c9b82e79
[ 106.529518][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.549411][ T5083] RSP: 002b:00007fd8c91e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 106.558011][ T5083] RAX: ffffffffffffffda RBX: 00007fd8c9dedfa0 RCX: 00007fd8c9b82e79
[ 106.566262][ T5083] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 106.574330][ T5083] RBP: 00007fd8c9c15ee0 R08: 0000000000000000 R09: 0000000000000000
[ 106.582310][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.590454][ T5083] R13: 00007fd8c9dee038 R14: 00007fd8c9dedfa0 R15: 00007ffe86560768
[ 106.598592][ T5083]
[ 106.601794][ T5083]
[ 106.604288][ T5083]
[ 106.606792][ T5083] addr ffffc900030efd41 is located in stack of task syz.0.17/5083 at offset 33 in frame:
[ 106.616951][ T5083] i2cdev_ioctl_smbus+0x0/0x680
[ 106.621819][ T5083]
[ 106.624138][ T5083] this frame has 1 object:
[ 106.628722][ T5083] [32, 66) 'temp'
[ 106.628736][ T5083]
[ 106.634956][ T5083] Memory state around the buggy address:
[ 106.640829][ T5083] ffffc900030efc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f3 f3 f3
[ 106.649291][ T5083] ffffc900030efc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 106.657497][ T5083] >ffffc900030efd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3
[ 106.665716][ T5083] ^
[ 106.672980][ T5083] ffffc900030efd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 106.681226][ T5083] ffffc900030efe00: f1 f1 f1 f1 f8 f2 f8 f8 f2 f2 00 00 f3 f3 f3 f3
[ 106.689818][ T5083] ==================================================================
[ 106.698159][ T5083] Disabling lock debugging due to kernel taint
[ 106.707162][ T5083] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.714855][ T5083] CPU: 1 PID: 5083 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 106.723798][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 106.734603][ T5083] Call Trace:
[ 106.738192][ T5083]
[ 106.741305][ T5083] dump_stack_lvl+0x188/0x250
[ 106.746491][ T5083] ? show_regs_print_info+0x20/0x20
[ 106.751951][ T5083] ? load_image+0x400/0x400
[ 106.756625][ T5083] panic+0x2e5/0x810
[ 106.760517][ T5083] ? bpf_jit_dump+0xd0/0xd0
[ 106.765029][ T5083] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 106.771002][ T5083] ? _raw_spin_unlock+0x40/0x40
[ 106.776130][ T5083] ? print_memory_metadata+0x314/0x400
[ 106.781854][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.786735][ T5083] check_panic_on_warn+0x80/0xa0
[ 106.791862][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.796525][ T5083] end_report+0x6d/0xf0
[ 106.800665][ T5083] kasan_report+0x102/0x130
[ 106.805240][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.809898][ T5083] kasan_check_range+0x235/0x290
[ 106.814905][ T5083] ? cp2112_xfer+0x89d/0xe30
[ 106.819476][ T5083] memcpy+0x25/0x60
[ 106.823790][ T5083] cp2112_xfer+0x89d/0xe30
[ 106.828547][ T5083] ? mark_lock+0x94/0x320
[ 106.832970][ T5083] ? cp2112_i2c_xfer+0xf40/0xf40
[ 106.838131][ T5083] ? lock_chain_count+0x20/0x20
[ 106.843154][ T5083] __i2c_smbus_xfer+0x7b4/0x1dc0
[ 106.848185][ T5083] ? cp2112_i2c_xfer+0xf40/0xf40
[ 106.853212][ T5083] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 106.859518][ T5083] ? rt_mutex_lock_nested+0x1a4/0x210
[ 106.865185][ T5083] ? i2c_smbus_xfer+0x120/0x3b0
[ 106.870114][ T5083] ? rwsem_down_read_slowpath+0x9d0/0x9d0
[ 106.876513][ T5083] ? __might_fault+0xb7/0x110
[ 106.881177][ T5083] i2c_smbus_xfer+0x272/0x3b0
[ 106.885868][ T5083] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 106.891291][ T5083] ? __might_fault+0xb3/0x110
[ 106.896168][ T5083] i2cdev_ioctl_smbus+0x432/0x680
[ 106.901781][ T5083] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0
[ 106.907201][ T5083] ? __might_fault+0xb3/0x110
[ 106.912074][ T5083] ? _copy_from_user+0x111/0x170
[ 106.917799][ T5083] i2cdev_ioctl+0x583/0x7b0
[ 106.922800][ T5083] ? i2cdev_write+0x120/0x120
[ 106.927677][ T5083] ? bpf_lsm_file_ioctl+0x5/0x10
[ 106.932783][ T5083] ? security_file_ioctl+0x7c/0xa0
[ 106.938152][ T5083] ? i2cdev_write+0x120/0x120
[ 106.943112][ T5083] __se_sys_ioctl+0xfa/0x170
[ 106.947845][ T5083] do_syscall_64+0x4c/0xa0
[ 106.952250][ T5083] ? clear_bhb_loop+0x30/0x80
[ 106.956906][ T5083] ? clear_bhb_loop+0x30/0x80
[ 106.961845][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 106.967816][ T5083] RIP: 0033:0x7fd8c9b82e79
[ 106.972409][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.992377][ T5083] RSP: 002b:00007fd8c91e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 107.001162][ T5083] RAX: ffffffffffffffda RBX: 00007fd8c9dedfa0 RCX: 00007fd8c9b82e79
[ 107.009743][ T5083] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 107.017887][ T5083] RBP: 00007fd8c9c15ee0 R08: 0000000000000000 R09: 0000000000000000
[ 107.025944][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.034373][ T5083] R13: 00007fd8c9dee038 R14: 00007fd8c9dedfa0 R15: 00007ffe86560768
[ 107.042919][ T5083]
[ 107.046822][ T5083] Kernel Offset: disabled
[ 107.051446][ T5083] Rebooting in 86400 seconds..