Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts.
2026/05/11 17:58:17 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 91.159522][ T4650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 92.493391][ T4666] chnl_net:caif_netlink_parms(): no params data found
[ 92.541751][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.551579][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.561660][ T4666] device bridge_slave_0 entered promiscuous mode
[ 92.572899][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.581085][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.589435][ T4666] device bridge_slave_1 entered promiscuous mode
[ 92.610274][ T4666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.624865][ T4666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.653303][ T4666] team0: Port device team_slave_0 added
[ 92.666513][ T4666] team0: Port device team_slave_1 added
[ 92.687365][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.696406][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.727688][ T4666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.744016][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.751903][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.780388][ T4666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.810615][ T4666] device hsr_slave_0 entered promiscuous mode
[ 92.817802][ T4666] device hsr_slave_1 entered promiscuous mode
[ 93.368206][ T4666] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.381071][ T4666] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.400217][ T4666] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.421746][ T4666] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.447643][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.454784][ T4666] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.463385][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.471290][ T4666] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.491072][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.510233][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.561319][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.593732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 93.603463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 93.617861][ T4666] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.631707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 93.644243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 93.655867][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.664257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.686905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 93.697759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 93.723121][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.732241][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.757876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 93.778504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 93.800711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 93.815239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 93.827073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 93.839120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 93.864776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 93.874331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 93.895867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 93.908959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 93.921496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.933838][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 94.089281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 94.111275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 94.125314][ T4666] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.155071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 94.167510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 94.196543][ T4666] device veth0_vlan entered promiscuous mode
[ 94.208363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 94.230612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 94.267292][ T4666] device veth1_vlan entered promiscuous mode
[ 94.276226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 94.287789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 94.297522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 94.321990][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 94.331889][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 94.342505][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 94.355865][ T4666] device veth0_macvtap entered promiscuous mode
[ 94.366610][ T4666] device veth1_macvtap entered promiscuous mode
[ 94.386822][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.406217][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 94.431959][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 94.452284][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 94.480580][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.503617][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.521385][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.533524][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.547033][ T4666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.559644][ T4666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.571696][ T4666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.584263][ T4666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.694729][ T3101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.245026][ T3101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.654387][ T3101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.735769][ T3101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.066721][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.084027][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.099382][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 100.123336][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.132297][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.148518][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 100.454497][ T3101] device hsr_slave_0 left promiscuous mode
[ 100.477306][ T3101] device hsr_slave_1 left promiscuous mode
[ 100.490759][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.509151][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.541487][ T3101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.560390][ T3101] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.576189][ T3101] device bridge_slave_1 left promiscuous mode
[ 100.590108][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.611551][ T3101] device bridge_slave_0 left promiscuous mode
[ 100.618239][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.655460][ T3101] device veth1_macvtap left promiscuous mode
[ 100.673206][ T3101] device veth0_macvtap left promiscuous mode
[ 100.681222][ T3101] device veth1_vlan left promiscuous mode
[ 100.688763][ T3101] device veth0_vlan left promiscuous mode
[ 100.807485][ T3101] team0 (unregistering): Port device team_slave_1 removed
[ 100.819498][ T3101] team0 (unregistering): Port device team_slave_0 removed
[ 100.833091][ T3101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.847513][ T3101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.896628][ T3101] bond0 (unregistering): Released all slaves
2026/05/11 17:58:32 executed programs: 0
[ 102.749481][ T3101] ODEBUG: Out of memory. ODEBUG disabled
[ 102.935019][ T5149] chnl_net:caif_netlink_parms(): no params data found
[ 103.156217][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.183024][ T5149] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.201979][ T5149] device bridge_slave_0 entered promiscuous mode
[ 103.230606][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.251823][ T5149] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.261440][ T5149] device bridge_slave_1 entered promiscuous mode
[ 103.287837][ T5149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.300930][ T5149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.329403][ T5149] team0: Port device team_slave_0 added
[ 103.338615][ T5149] team0: Port device team_slave_1 added
[ 103.363364][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.370675][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.400230][ T5149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.414920][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.422710][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.451073][ T5149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.482937][ T5149] device hsr_slave_0 entered promiscuous mode
[ 103.491417][ T5149] device hsr_slave_1 entered promiscuous mode
[ 103.956361][ T5149] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.967548][ T5149] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.979298][ T5149] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.021612][ T5149] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.112548][ T5149] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.169535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 104.179143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 104.191402][ T5149] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.204277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 104.214304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 104.227447][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.236299][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.246805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 104.291607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 104.303582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 104.316482][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.324005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.333723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 104.353216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 104.363549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 104.377282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 104.387147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 104.398943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 104.418979][ T5149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 104.432655][ T5149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 104.447469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 104.460964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 104.476197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 104.486588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 104.497882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 104.557515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 104.663837][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 104.673925][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 104.688152][ T5149] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.733190][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 104.742839][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 104.765227][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 104.775664][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 104.781202][ T4237] Bluetooth: hci0: command 0x0409 tx timeout
[ 104.786725][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 104.801203][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 104.814372][ T5149] device veth0_vlan entered promiscuous mode
[ 104.844993][ T5149] device veth1_vlan entered promiscuous mode
[ 104.875181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 104.884540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 104.894228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 104.903772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 104.915812][ T5149] device veth0_macvtap entered promiscuous mode
[ 104.924910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 104.943158][ T5149] device veth1_macvtap entered promiscuous mode
[ 104.973246][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.983466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 104.995388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 105.006124][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.019016][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 105.032564][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 105.044555][ T5149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.054243][ T5149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.063696][ T5149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.073542][ T5149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.198423][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.229876][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.272572][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 105.292201][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.313271][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.322976][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 105.690950][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 106.120977][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 106.133822][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 106.146169][ T4257] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 106.157270][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 106.181205][ T4257] usb 1-1: config 0 descriptor??
[ 106.653393][ T4257] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[ 106.664155][ T4257] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 106.860274][ T4237] Bluetooth: hci0: command 0x041b tx timeout
[ 106.867754][ T4257] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[ 107.491005][ T5278] ==================================================================
[ 107.499590][ T5278] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x89d/0xe30
[ 107.507916][ T5278] Read of size 42 at addr ffffc9000320fd41 by task syz.0.17/5278
[ 107.516134][ T5278]
[ 107.518592][ T5278] CPU: 1 PID: 5278 Comm: syz.0.17 Not tainted syzkaller #0
[ 107.526494][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 107.538054][ T5278] Call Trace:
[ 107.541343][ T5278]
[ 107.544529][ T5278] dump_stack_lvl+0x188/0x250
[ 107.549311][ T5278] ? show_regs_print_info+0x20/0x20
[ 107.554515][ T5278] ? _printk+0xda/0x130
[ 107.558894][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 107.563535][ T5278] ? load_image+0x400/0x400
[ 107.568629][ T5278] print_address_description+0x60/0x2d0
[ 107.574455][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 107.579219][ T5278] kasan_report+0xdf/0x130
[ 107.583714][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 107.588759][ T5278] kasan_check_range+0x235/0x290
[ 107.593792][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 107.598701][ T5278] memcpy+0x25/0x60
[ 107.602651][ T5278] cp2112_xfer+0x89d/0xe30
[ 107.607446][ T5278] ? mark_lock+0x94/0x320
[ 107.612003][ T5278] ? cp2112_i2c_xfer+0xf40/0xf40
[ 107.617175][ T5278] ? lock_chain_count+0x20/0x20
[ 107.622592][ T5278] __i2c_smbus_xfer+0x7b4/0x1dc0
[ 107.627705][ T5278] ? cp2112_i2c_xfer+0xf40/0xf40
[ 107.632740][ T5278] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 107.640227][ T5278] ? rt_mutex_lock_nested+0x1a4/0x210
[ 107.646102][ T5278] ? i2c_smbus_xfer+0x120/0x3b0
[ 107.651218][ T5278] ? rwsem_down_read_slowpath+0x9d0/0x9d0
[ 107.657667][ T5278] ? __might_fault+0xb7/0x110
[ 107.662806][ T5278] i2c_smbus_xfer+0x272/0x3b0
[ 107.668524][ T5278] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 107.674177][ T5278] ? __might_fault+0xb3/0x110
[ 107.678946][ T5278] i2cdev_ioctl_smbus+0x432/0x680
[ 107.684498][ T5278] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0
[ 107.689956][ T5278] ? __might_fault+0xb3/0x110
[ 107.694648][ T5278] ? _copy_from_user+0x111/0x170
[ 107.699602][ T5278] i2cdev_ioctl+0x583/0x7b0
[ 107.704094][ T5278] ? i2cdev_write+0x120/0x120
[ 107.708760][ T5278] ? bpf_lsm_file_ioctl+0x5/0x10
[ 107.714626][ T5278] ? security_file_ioctl+0x7c/0xa0
[ 107.720270][ T5278] ? i2cdev_write+0x120/0x120
[ 107.725235][ T5278] __se_sys_ioctl+0xfa/0x170
[ 107.730375][ T5278] do_syscall_64+0x4c/0xa0
[ 107.735324][ T5278] ? clear_bhb_loop+0x30/0x80
[ 107.740275][ T5278] ? clear_bhb_loop+0x30/0x80
[ 107.745296][ T5278] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.751714][ T5278] RIP: 0033:0x7f5b80871e79
[ 107.756397][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.777442][ T5278] RSP: 002b:00007f5b7fed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 107.786262][ T5278] RAX: ffffffffffffffda RBX: 00007f5b80adcfa0 RCX: 00007f5b80871e79
[ 107.794515][ T5278] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 107.802477][ T5278] RBP: 00007f5b80904ee0 R08: 0000000000000000 R09: 0000000000000000
[ 107.810566][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.818735][ T5278] R13: 00007f5b80add038 R14: 00007f5b80adcfa0 R15: 00007fffa42511b8
[ 107.827285][ T5278]
[ 107.830425][ T5278]
[ 107.833128][ T5278]
[ 107.835528][ T5278] addr ffffc9000320fd41 is located in stack of task syz.0.17/5278 at offset 33 in frame:
[ 107.845661][ T5278] i2cdev_ioctl_smbus+0x0/0x680
[ 107.850783][ T5278]
[ 107.853398][ T5278] this frame has 1 object:
[ 107.857997][ T5278] [32, 66) 'temp'
[ 107.858011][ T5278]
[ 107.864400][ T5278] Memory state around the buggy address:
[ 107.870114][ T5278] ffffc9000320fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f3 f3 f3
[ 107.878394][ T5278] ffffc9000320fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.887743][ T5278] >ffffc9000320fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3
[ 107.896672][ T5278] ^
[ 107.904507][ T5278] ffffc9000320fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.913626][ T5278] ffffc9000320fe00: f1 f1 f1 f1 f8 f2 f8 f8 f2 f2 00 00 f3 f3 f3 f3
[ 107.922267][ T5278] ==================================================================
[ 107.931104][ T5278] Disabling lock debugging due to kernel taint
[ 107.939122][ T5278] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.947836][ T5278] CPU: 1 PID: 5278 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 107.956793][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 107.967256][ T5278] Call Trace:
[ 107.970526][ T5278]
[ 107.973523][ T5278] dump_stack_lvl+0x188/0x250
[ 107.978565][ T5278] ? show_regs_print_info+0x20/0x20
[ 107.984727][ T5278] ? load_image+0x400/0x400
[ 107.989703][ T5278] panic+0x2e5/0x810
[ 107.993913][ T5278] ? bpf_jit_dump+0xd0/0xd0
[ 107.998825][ T5278] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 108.005365][ T5278] ? _raw_spin_unlock+0x40/0x40
[ 108.010395][ T5278] ? print_memory_metadata+0x314/0x400
[ 108.015944][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 108.020921][ T5278] check_panic_on_warn+0x80/0xa0
[ 108.026662][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 108.031668][ T5278] end_report+0x6d/0xf0
[ 108.036141][ T5278] kasan_report+0x102/0x130
[ 108.041156][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 108.046420][ T5278] kasan_check_range+0x235/0x290
[ 108.051627][ T5278] ? cp2112_xfer+0x89d/0xe30
[ 108.056302][ T5278] memcpy+0x25/0x60
[ 108.060380][ T5278] cp2112_xfer+0x89d/0xe30
[ 108.065120][ T5278] ? mark_lock+0x94/0x320
[ 108.069775][ T5278] ? cp2112_i2c_xfer+0xf40/0xf40
[ 108.075063][ T5278] ? lock_chain_count+0x20/0x20
[ 108.080487][ T5278] __i2c_smbus_xfer+0x7b4/0x1dc0
[ 108.086292][ T5278] ? cp2112_i2c_xfer+0xf40/0xf40
[ 108.092352][ T5278] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[ 108.098943][ T5278] ? rt_mutex_lock_nested+0x1a4/0x210
[ 108.104655][ T5278] ? i2c_smbus_xfer+0x120/0x3b0
[ 108.109761][ T5278] ? rwsem_down_read_slowpath+0x9d0/0x9d0
[ 108.115985][ T5278] ? __might_fault+0xb7/0x110
[ 108.120749][ T5278] i2c_smbus_xfer+0x272/0x3b0
[ 108.126050][ T5278] ? i2c_smbus_read_byte+0x1d0/0x1d0
[ 108.131524][ T5278] ? __might_fault+0xb3/0x110
[ 108.136567][ T5278] i2cdev_ioctl_smbus+0x432/0x680
[ 108.141991][ T5278] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0
[ 108.148172][ T5278] ? __might_fault+0xb3/0x110
[ 108.153536][ T5278] ? _copy_from_user+0x111/0x170
[ 108.159311][ T5278] i2cdev_ioctl+0x583/0x7b0
[ 108.164750][ T5278] ? i2cdev_write+0x120/0x120
[ 108.170374][ T5278] ? bpf_lsm_file_ioctl+0x5/0x10
[ 108.175586][ T5278] ? security_file_ioctl+0x7c/0xa0
[ 108.180968][ T5278] ? i2cdev_write+0x120/0x120
[ 108.186019][ T5278] __se_sys_ioctl+0xfa/0x170
[ 108.190856][ T5278] do_syscall_64+0x4c/0xa0
[ 108.195764][ T5278] ? clear_bhb_loop+0x30/0x80
[ 108.200804][ T5278] ? clear_bhb_loop+0x30/0x80
[ 108.205822][ T5278] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 108.212411][ T5278] RIP: 0033:0x7f5b80871e79
[ 108.217423][ T5278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.239280][ T5278] RSP: 002b:00007f5b7fed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 108.248543][ T5278] RAX: ffffffffffffffda RBX: 00007f5b80adcfa0 RCX: 00007f5b80871e79
[ 108.257912][ T5278] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004
[ 108.268461][ T5278] RBP: 00007f5b80904ee0 R08: 0000000000000000 R09: 0000000000000000
[ 108.278563][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.286868][ T5278] R13: 00007f5b80add038 R14: 00007f5b80adcfa0 R15: 00007fffa42511b8
[ 108.295315][ T5278]
[ 108.301535][ T5278] Kernel Offset: disabled
[ 108.306071][ T5278] Rebooting in 86400 seconds..