[ 71.846624][ T144] device veth1_macvtap left promiscuous mode [ 71.852996][ T144] device veth0_macvtap left promiscuous mode [ 71.859607][ T144] device veth1_vlan left promiscuous mode [ 71.865468][ T144] device veth0_vlan left promiscuous mode [ 72.013420][ T144] team0 (unregistering): Port device team_slave_1 removed [ 72.025264][ T144] team0 (unregistering): Port device team_slave_0 removed [ 72.037283][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.054093][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.099952][ T144] bond0 (unregistering): Released all slaves [ 76.491569][ T1110] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2026/05/11 18:07:48 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 90.855886][ T4647] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.477698][ T4668] chnl_net:caif_netlink_parms(): no params data found [ 92.521659][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.528888][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.536736][ T4668] device bridge_slave_0 entered promiscuous mode [ 92.544511][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.551734][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.559675][ T4668] device bridge_slave_1 entered promiscuous mode [ 92.581927][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.592629][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.615782][ T4668] team0: Port device team_slave_0 added [ 92.623458][ T4668] team0: Port device team_slave_1 added [ 92.639602][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.646559][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.672794][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.686873][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.694274][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.720466][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.746485][ T4668] device hsr_slave_0 entered promiscuous mode [ 92.753626][ T4668] device hsr_slave_1 entered promiscuous mode [ 93.215676][ T4668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.242782][ T4668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.258337][ T4668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.277745][ T4668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.325325][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.332463][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.339951][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.347333][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.413692][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.428124][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.438964][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.447317][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.471147][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.496254][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.521176][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.550800][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.570806][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.577903][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.611981][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.630388][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.653058][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.660329][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.689626][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.700088][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.716522][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.730309][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.739911][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.762645][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.780200][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.802410][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.818859][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.835641][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.844762][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.872044][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.070705][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.078379][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.105701][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.143957][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.171200][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.190042][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.209586][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.222432][ T4668] device veth0_vlan entered promiscuous mode [ 94.241464][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.259889][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.273112][ T4668] device veth1_vlan entered promiscuous mode [ 94.304023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.316502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.327732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.337226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.349034][ T4668] device veth0_macvtap entered promiscuous mode [ 94.372430][ T4668] device veth1_macvtap entered promiscuous mode [ 94.415101][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.429875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.438675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.461296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.479985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.503340][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.512941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.529997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.551698][ T4668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566800][ T4668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.579629][ T4668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.588533][ T4668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.720447][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.728477][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.750472][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.776233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.794157][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.820444][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.108561][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/11 18:07:57 executed programs: 0 [ 97.481840][ T4878] chnl_net:caif_netlink_parms(): no params data found [ 97.544766][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.552186][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.560244][ T4878] device bridge_slave_0 entered promiscuous mode [ 97.569515][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.576720][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.584867][ T4878] device bridge_slave_1 entered promiscuous mode [ 97.611812][ T4878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.626485][ T4878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.658904][ T4878] team0: Port device team_slave_0 added [ 97.667777][ T4878] team0: Port device team_slave_1 added [ 97.696816][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.706522][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.735407][ T4878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.748654][ T4878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.758170][ T4878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.790309][ T4878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.837666][ T4878] device hsr_slave_0 entered promiscuous mode [ 97.844663][ T4878] device hsr_slave_1 entered promiscuous mode [ 97.852830][ T4878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.861715][ T4878] Cannot create hsr debugfs directory [ 99.370091][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 99.634882][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.676979][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.729958][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.610461][ T4878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.620074][ T4878] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.629995][ T4878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.656585][ T4878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.722043][ T4878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.734673][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.743090][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.771604][ T4878] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.781580][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.790639][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.799965][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.807140][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.818545][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.827075][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.836486][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.845529][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.852825][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.862712][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.881664][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.892882][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.902586][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.912162][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.938129][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.946738][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.957870][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.967289][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.980664][ T4878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.991972][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.000568][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.008997][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.097769][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.106221][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.141168][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.157342][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.167149][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.205845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.214281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.223823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.232272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.241848][ T4878] device veth0_vlan entered promiscuous mode [ 101.268132][ T4878] device veth1_vlan entered promiscuous mode [ 101.285297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.293769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.302731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.313221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.324309][ T4878] device veth0_macvtap entered promiscuous mode [ 101.335184][ T4878] device veth1_macvtap entered promiscuous mode [ 101.356010][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.366676][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.377797][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.387818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.396170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.404313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.413070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.423685][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.434458][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.445430][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.449986][ T5077] Bluetooth: hci0: command 0x041b tx timeout [ 101.458857][ T4878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.468501][ T4878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.477272][ T4878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486267][ T4878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.499378][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.509559][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.563409][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.579127][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.592492][ T144] device hsr_slave_0 left promiscuous mode [ 101.598847][ T144] device hsr_slave_1 left promiscuous mode [ 101.605688][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.613926][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.622556][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.630580][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.638089][ T144] device bridge_slave_1 left promiscuous mode [ 101.646176][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.655336][ T144] device bridge_slave_0 left promiscuous mode [ 101.661722][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.673730][ T144] device veth1_macvtap left promiscuous mode [ 101.679873][ T144] device veth0_macvtap left promiscuous mode [ 101.686250][ T144] device veth1_vlan left promiscuous mode [ 101.692653][ T144] device veth0_vlan left promiscuous mode [ 101.824499][ T144] team0 (unregistering): Port device team_slave_1 removed [ 101.839533][ T144] team0 (unregistering): Port device team_slave_0 removed [ 101.853918][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.868118][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.916761][ T144] bond0 (unregistering): Released all slaves [ 101.956671][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.979099][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.987350][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.998082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.340959][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.740260][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.752907][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.763506][ T21] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 102.774439][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.793558][ T21] usb 1-1: config 0 descriptor?? [ 103.292811][ T21] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.302812][ T21] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 103.509889][ T21] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 103.529679][ T5076] Bluetooth: hci0: command 0x040f tx timeout [ 104.170155][ T5113] ================================================================== [ 104.178521][ T5113] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x89d/0xe30 [ 104.185899][ T5113] Read of size 42 at addr ffffc900031cfd41 by task syz.0.17/5113 [ 104.193822][ T5113] [ 104.196144][ T5113] CPU: 0 PID: 5113 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.203324][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.213475][ T5113] Call Trace: [ 104.216750][ T5113] [ 104.219752][ T5113] dump_stack_lvl+0x188/0x250 [ 104.224826][ T5113] ? show_regs_print_info+0x20/0x20 [ 104.230016][ T5113] ? _printk+0xda/0x130 [ 104.234314][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.239082][ T5113] ? load_image+0x400/0x400 [ 104.243770][ T5113] print_address_description+0x60/0x2d0 [ 104.249360][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.254061][ T5113] kasan_report+0xdf/0x130 [ 104.258962][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.263721][ T5113] kasan_check_range+0x235/0x290 [ 104.268651][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.273353][ T5113] memcpy+0x25/0x60 [ 104.277203][ T5113] cp2112_xfer+0x89d/0xe30 [ 104.281712][ T5113] ? mark_lock+0x94/0x320 [ 104.286038][ T5113] ? cp2112_i2c_xfer+0xf40/0xf40 [ 104.291143][ T5113] ? lock_chain_count+0x20/0x20 [ 104.296168][ T5113] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 104.301103][ T5113] ? cp2112_i2c_xfer+0xf40/0xf40 [ 104.306047][ T5113] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 104.312629][ T5113] ? rt_mutex_lock_nested+0x1a4/0x210 [ 104.317998][ T5113] ? i2c_smbus_xfer+0x120/0x3b0 [ 104.322828][ T5113] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 104.328728][ T5113] ? __might_fault+0xb7/0x110 [ 104.333448][ T5113] i2c_smbus_xfer+0x272/0x3b0 [ 104.338225][ T5113] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 104.343525][ T5113] ? __might_fault+0xb3/0x110 [ 104.348366][ T5113] i2cdev_ioctl_smbus+0x432/0x680 [ 104.353529][ T5113] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 104.358730][ T5113] ? __might_fault+0xb3/0x110 [ 104.363496][ T5113] ? _copy_from_user+0x111/0x170 [ 104.368439][ T5113] i2cdev_ioctl+0x583/0x7b0 [ 104.372935][ T5113] ? i2cdev_write+0x120/0x120 [ 104.377609][ T5113] ? bpf_lsm_file_ioctl+0x5/0x10 [ 104.382546][ T5113] ? security_file_ioctl+0x7c/0xa0 [ 104.387763][ T5113] ? i2cdev_write+0x120/0x120 [ 104.392443][ T5113] __se_sys_ioctl+0xfa/0x170 [ 104.397041][ T5113] do_syscall_64+0x4c/0xa0 [ 104.401577][ T5113] ? clear_bhb_loop+0x30/0x80 [ 104.406262][ T5113] ? clear_bhb_loop+0x30/0x80 [ 104.411167][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.417265][ T5113] RIP: 0033:0x7fd07254fe79 [ 104.422223][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.442357][ T5113] RSP: 002b:00007fd071bb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.451010][ T5113] RAX: ffffffffffffffda RBX: 00007fd0727bafa0 RCX: 00007fd07254fe79 [ 104.459113][ T5113] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 104.467201][ T5113] RBP: 00007fd0725e2ee0 R08: 0000000000000000 R09: 0000000000000000 [ 104.475165][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.483278][ T5113] R13: 00007fd0727bb038 R14: 00007fd0727bafa0 R15: 00007ffca0b65608 [ 104.491419][ T5113] [ 104.494442][ T5113] [ 104.496752][ T5113] [ 104.499058][ T5113] addr ffffc900031cfd41 is located in stack of task syz.0.17/5113 at offset 33 in frame: [ 104.509032][ T5113] i2cdev_ioctl_smbus+0x0/0x680 [ 104.514154][ T5113] [ 104.516476][ T5113] this frame has 1 object: [ 104.520868][ T5113] [32, 66) 'temp' [ 104.520878][ T5113] [ 104.526873][ T5113] Memory state around the buggy address: [ 104.532490][ T5113] ffffc900031cfc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f3 f3 f3 [ 104.540539][ T5113] ffffc900031cfc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.548628][ T5113] >ffffc900031cfd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 104.556769][ T5113] ^ [ 104.564159][ T5113] ffffc900031cfd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.572225][ T5113] ffffc900031cfe00: f1 f1 f1 f1 f8 f2 f8 f8 f2 f2 00 00 f3 f3 f3 f3 [ 104.580276][ T5113] ================================================================== [ 104.588437][ T5113] Disabling lock debugging due to kernel taint [ 104.596668][ T5113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.603870][ T5113] CPU: 0 PID: 5113 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 104.612622][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.622971][ T5113] Call Trace: [ 104.626245][ T5113] [ 104.629177][ T5113] dump_stack_lvl+0x188/0x250 [ 104.633857][ T5113] ? show_regs_print_info+0x20/0x20 [ 104.639131][ T5113] ? load_image+0x400/0x400 [ 104.643914][ T5113] panic+0x2e5/0x810 [ 104.647809][ T5113] ? bpf_jit_dump+0xd0/0xd0 [ 104.652317][ T5113] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 104.658383][ T5113] ? _raw_spin_unlock+0x40/0x40 [ 104.663425][ T5113] ? print_memory_metadata+0x314/0x400 [ 104.669068][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.673650][ T5113] check_panic_on_warn+0x80/0xa0 [ 104.678631][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.683314][ T5113] end_report+0x6d/0xf0 [ 104.687489][ T5113] kasan_report+0x102/0x130 [ 104.692005][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.696681][ T5113] kasan_check_range+0x235/0x290 [ 104.701777][ T5113] ? cp2112_xfer+0x89d/0xe30 [ 104.706540][ T5113] memcpy+0x25/0x60 [ 104.710462][ T5113] cp2112_xfer+0x89d/0xe30 [ 104.714874][ T5113] ? mark_lock+0x94/0x320 [ 104.719280][ T5113] ? cp2112_i2c_xfer+0xf40/0xf40 [ 104.724480][ T5113] ? lock_chain_count+0x20/0x20 [ 104.729327][ T5113] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 104.734309][ T5113] ? cp2112_i2c_xfer+0xf40/0xf40 [ 104.739244][ T5113] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 104.745470][ T5113] ? rt_mutex_lock_nested+0x1a4/0x210 [ 104.750868][ T5113] ? i2c_smbus_xfer+0x120/0x3b0 [ 104.756726][ T5113] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 104.762539][ T5113] ? __might_fault+0xb7/0x110 [ 104.767347][ T5113] i2c_smbus_xfer+0x272/0x3b0 [ 104.772016][ T5113] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 104.777407][ T5113] ? __might_fault+0xb3/0x110 [ 104.782077][ T5113] i2cdev_ioctl_smbus+0x432/0x680 [ 104.787097][ T5113] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 104.792407][ T5113] ? __might_fault+0xb3/0x110 [ 104.797169][ T5113] ? _copy_from_user+0x111/0x170 [ 104.802191][ T5113] i2cdev_ioctl+0x583/0x7b0 [ 104.806686][ T5113] ? i2cdev_write+0x120/0x120 [ 104.811388][ T5113] ? bpf_lsm_file_ioctl+0x5/0x10 [ 104.816349][ T5113] ? security_file_ioctl+0x7c/0xa0 [ 104.821464][ T5113] ? i2cdev_write+0x120/0x120 [ 104.826126][ T5113] __se_sys_ioctl+0xfa/0x170 [ 104.830801][ T5113] do_syscall_64+0x4c/0xa0 [ 104.835212][ T5113] ? clear_bhb_loop+0x30/0x80 [ 104.839875][ T5113] ? clear_bhb_loop+0x30/0x80 [ 104.844545][ T5113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.850435][ T5113] RIP: 0033:0x7fd07254fe79 [ 104.854842][ T5113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.874602][ T5113] RSP: 002b:00007fd071bb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.883064][ T5113] RAX: ffffffffffffffda RBX: 00007fd0727bafa0 RCX: 00007fd07254fe79 [ 104.891106][ T5113] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 104.899158][ T5113] RBP: 00007fd0725e2ee0 R08: 0000000000000000 R09: 0000000000000000 [ 104.907160][ T5113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.915419][ T5113] R13: 00007fd0727bb038 R14: 00007fd0727bafa0 R15: 00007ffca0b65608 [ 104.923598][ T5113] [ 104.926943][ T5113] Kernel Offset: disabled [ 104.931351][ T5113] Rebooting in 86400 seconds..