Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts.
2026/09/12 16:51:23 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 106.607282][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 109.577187][ T4864] chnl_net:caif_netlink_parms(): no params data found
[ 109.643707][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.650985][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.659386][ T4864] device bridge_slave_0 entered promiscuous mode
[ 109.667943][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.675163][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.683453][ T4864] device bridge_slave_1 entered promiscuous mode
[ 109.712241][ T4864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.723844][ T4864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.754689][ T4864] team0: Port device team_slave_0 added
[ 109.762706][ T4864] team0: Port device team_slave_1 added
[ 109.788126][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.795174][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.821507][ T4864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.833923][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.840982][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.867347][ T4864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.907833][ T4864] device hsr_slave_0 entered promiscuous mode
[ 109.915049][ T4864] device hsr_slave_1 entered promiscuous mode
[ 110.637860][ T4864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.649096][ T4864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.659368][ T4864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.670823][ T4864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.768381][ T4864] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.785684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 110.794099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 110.807175][ T4864] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.858712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 110.869247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 110.880495][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.887648][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.897140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 110.906039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 110.915024][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.922108][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.932160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 110.942092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 110.966584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 110.975096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 110.985236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 110.993851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 111.003535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 111.012935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 111.021752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 111.030537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 111.039437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 111.048203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 111.057452][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 111.236347][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 111.243875][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 111.259034][ T4864] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.281879][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 111.294583][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 111.318060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 111.328516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 111.341217][ T4864] device veth0_vlan entered promiscuous mode
[ 111.349014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 111.357021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 111.372518][ T4864] device veth1_vlan entered promiscuous mode
[ 111.417137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 111.428188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 111.437160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 111.446173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 111.458731][ T4864] device veth0_macvtap entered promiscuous mode
[ 111.473211][ T4864] device veth1_macvtap entered promiscuous mode
[ 111.516222][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.526457][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 111.534987][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 111.543087][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 111.552631][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 111.564262][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.591965][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 111.601511][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 111.615453][ T4864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.626644][ T4864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.636705][ T4864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.647464][ T4864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.380092][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.393356][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.431832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 112.457400][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.466509][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.479952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 114.069532][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/12 16:51:35 executed programs: 0
[ 114.590460][ T5032] chnl_net:caif_netlink_parms(): no params data found
[ 114.655156][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.662364][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.671593][ T5032] device bridge_slave_0 entered promiscuous mode
[ 114.681113][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.688612][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.697946][ T5032] device bridge_slave_1 entered promiscuous mode
[ 114.726615][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 114.738568][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 114.772973][ T5032] team0: Port device team_slave_0 added
[ 114.781234][ T5032] team0: Port device team_slave_1 added
[ 114.806468][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 114.813475][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 114.839969][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 114.855315][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 114.862308][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 114.888320][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 114.929318][ T5032] device hsr_slave_0 entered promiscuous mode
[ 114.937286][ T5032] device hsr_slave_1 entered promiscuous mode
[ 114.944041][ T5032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 114.952655][ T5032] Cannot create hsr debugfs directory
[ 116.466579][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[ 117.211929][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.291576][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.372489][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.208485][ T5032] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.223417][ T5032] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.235261][ T5032] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.247749][ T5032] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.352790][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.370828][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 118.379559][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 118.390717][ T5032] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.418450][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 118.427844][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 118.436491][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.443551][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.451876][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 118.461118][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 118.470382][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 118.479142][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.486264][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.519215][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 118.532035][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 118.540587][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[ 118.556783][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 118.566788][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 118.575705][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 118.584923][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 118.615338][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 118.623334][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 118.632725][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 118.645157][ T5032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 118.657226][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 118.666604][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 118.675495][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 118.789130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 118.796854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 118.819652][ T5032] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.840039][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 118.849347][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 118.881663][ T5032] device veth0_vlan entered promiscuous mode
[ 118.890250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 118.898864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 118.909276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 118.917622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 118.942739][ T5032] device veth1_vlan entered promiscuous mode
[ 118.967344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 118.976688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 118.985529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 118.994085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 119.005956][ T5032] device veth0_macvtap entered promiscuous mode
[ 119.030885][ T155] device hsr_slave_0 left promiscuous mode
[ 119.037913][ T155] device hsr_slave_1 left promiscuous mode
[ 119.045779][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.053201][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.061869][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.069560][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.077712][ T155] device bridge_slave_1 left promiscuous mode
[ 119.083949][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.093424][ T155] device bridge_slave_0 left promiscuous mode
[ 119.100277][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.113361][ T155] device veth1_macvtap left promiscuous mode
[ 119.119620][ T155] device veth0_macvtap left promiscuous mode
[ 119.126042][ T155] device veth1_vlan left promiscuous mode
[ 119.131854][ T155] device veth0_vlan left promiscuous mode
[ 119.293395][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 119.307669][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 119.320634][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.337878][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.396139][ T155] bond0 (unregistering): Released all slaves
[ 119.441112][ T5032] device veth1_macvtap entered promiscuous mode
[ 119.451103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 119.460084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 119.477686][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.487778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 119.496743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 119.512225][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.522812][ T5032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.531842][ T5032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.540977][ T5032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.550640][ T5032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.567567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 119.578702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 119.637134][ T4964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.652780][ T4964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.670789][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 119.690776][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.699457][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.707415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/12 16:51:41 executed programs: 2
[ 120.034552][ T4199] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 120.394549][ T4199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 120.407276][ T4199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 120.417567][ T4199] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 120.428238][ T4199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 120.443044][ T4199] usb 1-1: config 0 descriptor??
[ 120.614963][ T4417] Bluetooth: hci0: command 0x040f tx timeout
[ 120.928521][ T4199] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[ 120.938932][ T4199] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 121.144617][ T4199] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[ 121.789478][ T5254] ==================================================================
[ 121.797802][ T5254] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x8c5/0xe60
[ 121.805228][ T5254] Read of size 42 at addr ffffc90002d4fd41 by task syz.0.17/5254
[ 121.813147][ T5254]
[ 121.815506][ T5254] CPU: 0 PID: 5254 Comm: syz.0.17 Not tainted syzkaller #0
[ 121.822833][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 121.832935][ T5254] Call Trace:
[ 121.836239][ T5254]
[ 121.839206][ T5254] dump_stack_lvl+0x188/0x250
[ 121.843922][ T5254] ? show_regs_print_info+0x20/0x20
[ 121.849158][ T5254] ? _printk+0xda/0x130
[ 121.853346][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 121.858007][ T5254] ? load_image+0x410/0x410
[ 121.862900][ T5254] print_address_description+0x60/0x2d0
[ 121.868476][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 121.873093][ T5254] kasan_report+0xdf/0x130
[ 121.877715][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 121.882373][ T5254] kasan_check_range+0x235/0x290
[ 121.887456][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 121.892073][ T5254] memcpy+0x25/0x60
[ 121.895912][ T5254] cp2112_xfer+0x8c5/0xe60
[ 121.900373][ T5254] ? cp2112_i2c_xfer+0xf50/0xf50
[ 121.905348][ T5254] ? lock_chain_count+0x20/0x20
[ 121.910240][ T5254] __i2c_smbus_xfer+0x5df/0x2600
[ 121.915219][ T5254] ? cp2112_i2c_xfer+0xf50/0xf50
[ 121.920202][ T5254] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 121.926479][ T5254] ? rt_mutex_lock_nested+0x1a4/0x210
[ 121.931879][ T5254] ? i2c_smbus_xfer+0x120/0x3b0
[ 121.936786][ T5254] ? rwsem_down_read_slowpath+0x9b0/0x9b0
[ 121.942549][ T5254] ? __might_fault+0xb7/0x110
[ 121.947265][ T5254] i2c_smbus_xfer+0x272/0x3b0
[ 121.951976][ T5254] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 121.957380][ T5254] ? __might_fault+0xb3/0x110
[ 121.962096][ T5254] i2cdev_ioctl_smbus+0x40c/0x660
[ 121.967150][ T5254] ? __lock_acquire+0x7b50/0x7b50
[ 121.972204][ T5254] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0
[ 121.977358][ T5254] ? __might_fault+0xb3/0x110
[ 121.982066][ T5254] ? _copy_from_user+0x111/0x170
[ 121.987039][ T5254] i2cdev_ioctl+0x583/0x7b0
[ 121.991581][ T5254] ? i2cdev_write+0x120/0x120
[ 121.996306][ T5254] ? bpf_lsm_file_ioctl+0x5/0x10
[ 122.001291][ T5254] ? security_file_ioctl+0x7c/0xa0
[ 122.006434][ T5254] ? i2cdev_write+0x120/0x120
[ 122.011143][ T5254] __se_sys_ioctl+0xfa/0x170
[ 122.015768][ T5254] do_syscall_64+0x4c/0xa0
[ 122.020215][ T5254] ? clear_bhb_loop+0x30/0x80
[ 122.024915][ T5254] ? clear_bhb_loop+0x30/0x80
[ 122.029623][ T5254] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.035560][ T5254] RIP: 0033:0x7f10e340fe79
[ 122.040008][ T5254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.059644][ T5254] RSP: 002b:00007f10e2a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 122.068104][ T5254] RAX: ffffffffffffffda RBX: 00007f10e367afa0 RCX: 00007f10e340fe79
[ 122.076114][ T5254] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 122.084120][ T5254] RBP: 00007f10e34a2ee0 R08: 0000000000000000 R09: 0000000000000000
[ 122.092213][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.100218][ T5254] R13: 00007f10e367b038 R14: 00007f10e367afa0 R15: 00007ffdbe302bb8
[ 122.108247][ T5254]
[ 122.111296][ T5254]
[ 122.113647][ T5254]
[ 122.115990][ T5254] addr ffffc90002d4fd41 is located in stack of task syz.0.17/5254 at offset 33 in frame:
[ 122.125812][ T5254] i2cdev_ioctl_smbus+0x0/0x660
[ 122.130695][ T5254]
[ 122.133042][ T5254] this frame has 1 object:
[ 122.137479][ T5254] [32, 66) 'temp'
[ 122.137495][ T5254]
[ 122.143563][ T5254] Memory state around the buggy address:
[ 122.149237][ T5254] ffffc90002d4fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f3 f3 f3
[ 122.157338][ T5254] ffffc90002d4fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.165425][ T5254] >ffffc90002d4fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3
[ 122.173542][ T5254] ^
[ 122.180763][ T5254] ffffc90002d4fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.188859][ T5254] ffffc90002d4fe00: f1 f1 f1 f1 f8 f2 f8 f8 f2 f2 00 00 f3 f3 f3 f3
[ 122.196945][ T5254] ==================================================================
[ 122.205033][ T5254] Disabling lock debugging due to kernel taint
[ 122.221196][ T5254] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.228447][ T5254] CPU: 0 PID: 5254 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 122.237060][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.247252][ T5254] Call Trace:
[ 122.250643][ T5254]
[ 122.253594][ T5254] dump_stack_lvl+0x188/0x250
[ 122.258311][ T5254] ? show_regs_print_info+0x20/0x20
[ 122.263538][ T5254] ? load_image+0x410/0x410
[ 122.268073][ T5254] panic+0x2f8/0x850
[ 122.271998][ T5254] ? bpf_jit_dump+0xd0/0xd0
[ 122.276552][ T5254] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 122.282584][ T5254] ? _raw_spin_unlock+0x40/0x40
[ 122.287456][ T5254] ? print_memory_metadata+0x314/0x400
[ 122.292943][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 122.297569][ T5254] check_panic_on_warn+0x80/0xa0
[ 122.302546][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 122.307157][ T5254] end_report+0x6d/0xf0
[ 122.311334][ T5254] kasan_report+0x102/0x130
[ 122.315881][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 122.320595][ T5254] kasan_check_range+0x235/0x290
[ 122.325550][ T5254] ? cp2112_xfer+0x8c5/0xe60
[ 122.330156][ T5254] memcpy+0x25/0x60
[ 122.333980][ T5254] cp2112_xfer+0x8c5/0xe60
[ 122.338414][ T5254] ? cp2112_i2c_xfer+0xf50/0xf50
[ 122.343364][ T5254] ? lock_chain_count+0x20/0x20
[ 122.348231][ T5254] __i2c_smbus_xfer+0x5df/0x2600
[ 122.353186][ T5254] ? cp2112_i2c_xfer+0xf50/0xf50
[ 122.358140][ T5254] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 122.364401][ T5254] ? rt_mutex_lock_nested+0x1a4/0x210
[ 122.369791][ T5254] ? i2c_smbus_xfer+0x120/0x3b0
[ 122.374662][ T5254] ? rwsem_down_read_slowpath+0x9b0/0x9b0
[ 122.380437][ T5254] ? __might_fault+0xb7/0x110
[ 122.385184][ T5254] i2c_smbus_xfer+0x272/0x3b0
[ 122.389886][ T5254] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 122.395195][ T5254] ? __might_fault+0xb3/0x110
[ 122.399921][ T5254] i2cdev_ioctl_smbus+0x40c/0x660
[ 122.404989][ T5254] ? __lock_acquire+0x7b50/0x7b50
[ 122.410036][ T5254] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0
[ 122.415167][ T5254] ? __might_fault+0xb3/0x110
[ 122.419865][ T5254] ? _copy_from_user+0x111/0x170
[ 122.424819][ T5254] i2cdev_ioctl+0x583/0x7b0
[ 122.429345][ T5254] ? i2cdev_write+0x120/0x120
[ 122.434043][ T5254] ? bpf_lsm_file_ioctl+0x5/0x10
[ 122.439109][ T5254] ? security_file_ioctl+0x7c/0xa0
[ 122.444262][ T5254] ? i2cdev_write+0x120/0x120
[ 122.448972][ T5254] __se_sys_ioctl+0xfa/0x170
[ 122.453588][ T5254] do_syscall_64+0x4c/0xa0
[ 122.458026][ T5254] ? clear_bhb_loop+0x30/0x80
[ 122.462720][ T5254] ? clear_bhb_loop+0x30/0x80
[ 122.467412][ T5254] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.473321][ T5254] RIP: 0033:0x7f10e340fe79
[ 122.477749][ T5254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.497389][ T5254] RSP: 002b:00007f10e2a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 122.505817][ T5254] RAX: ffffffffffffffda RBX: 00007f10e367afa0 RCX: 00007f10e340fe79
[ 122.513809][ T5254] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 122.521796][ T5254] RBP: 00007f10e34a2ee0 R08: 0000000000000000 R09: 0000000000000000
[ 122.529781][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.537762][ T5254] R13: 00007f10e367b038 R14: 00007f10e367afa0 R15: 00007ffdbe302bb8
[ 122.545753][ T5254]
[ 122.549009][ T5254] Kernel Offset: disabled
[ 122.553356][ T5254] Rebooting in 86400 seconds..