Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts.
2026/09/20 07:24:07 parsed 1 programs
2026/09/20 07:24:07 serving rpc on tcp://42743
[ 81.616266][ T5632] cgroup: Unknown subsys name 'net'
[ 81.745652][ T5632] cgroup: Unknown subsys name 'cpuset'
[ 81.748945][ T5632] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.538849][ T5632] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 87.025022][ T989] cfg80211: failed to load regulatory.db
[ 87.124415][ T5650] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 87.132044][ T5650] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.166257][ T5650] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.169435][ T5650] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 87.177012][ T5650] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 88.328734][ T5674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.330418][ T5674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.330896][ T5674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.332591][ T5674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.333496][ T5674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.298355][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.298380][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.347491][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.347516][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.991752][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.992402][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.992501][ T5712] bridge_slave_0: entered allmulticast mode
[ 90.993759][ T5712] bridge_slave_0: entered promiscuous mode
[ 90.998526][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.998703][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.998835][ T5712] bridge_slave_1: entered allmulticast mode
[ 91.000748][ T5712] bridge_slave_1: entered promiscuous mode
[ 91.044165][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.047756][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.079459][ T5712] team0: Port device team_slave_0 added
[ 91.082406][ T5712] team0: Port device team_slave_1 added
[ 91.107059][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.107074][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.107089][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.108918][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.108933][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.108956][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.207071][ T5712] hsr_slave_0: entered promiscuous mode
[ 91.207897][ T5712] hsr_slave_1: entered promiscuous mode
[ 91.362114][ T5712] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.368658][ T5712] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 91.370222][ T5712] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.375428][ T5712] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 91.376878][ T5712] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.383944][ T5712] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 91.385709][ T5712] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 91.397156][ T5712] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 91.492040][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.514780][ T5712] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.520453][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.520575][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.555421][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.555510][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.896488][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.944967][ T5712] veth0_vlan: entered promiscuous mode
[ 91.952432][ T5712] veth1_vlan: entered promiscuous mode
[ 91.985423][ T5712] veth0_macvtap: entered promiscuous mode
[ 91.989802][ T5712] veth1_macvtap: entered promiscuous mode
[ 92.015253][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.030197][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.102093][ T1442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.102875][ T1442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.103335][ T1442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.104957][ T1442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.240939][ T1442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.323868][ T1442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.416461][ T1442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.508100][ T1442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/20 07:24:21 executed programs: 0
[ 92.921408][ T5674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.922935][ T5674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.924488][ T5674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.926428][ T5674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.926999][ T5674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.410719][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.410875][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.411160][ T5756] bridge_slave_0: entered allmulticast mode
[ 93.412998][ T5756] bridge_slave_0: entered promiscuous mode
[ 93.416810][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.416971][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.417086][ T5756] bridge_slave_1: entered allmulticast mode
[ 93.418928][ T5756] bridge_slave_1: entered promiscuous mode
[ 93.470424][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.483682][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.508809][ T5756] team0: Port device team_slave_0 added
[ 93.510772][ T5756] team0: Port device team_slave_1 added
[ 93.536397][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.536417][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.536439][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.537920][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.537934][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.537957][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.608887][ T5756] hsr_slave_0: entered promiscuous mode
[ 93.610218][ T5756] hsr_slave_1: entered promiscuous mode
[ 93.611354][ T5756] debugfs: 'hsr0' already exists in 'hsr'
[ 93.611440][ T5756] Cannot create hsr debugfs directory
[ 94.676555][ T1442] bridge_slave_1: left allmulticast mode
[ 94.676587][ T1442] bridge_slave_1: left promiscuous mode
[ 94.677564][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.690662][ T1442] bridge_slave_0: left allmulticast mode
[ 94.690689][ T1442] bridge_slave_0: left promiscuous mode
[ 94.691622][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.828815][ T1442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 94.831296][ T1442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 94.837986][ T1442] bond0 (unregistering): Released all slaves
[ 94.932551][ T1442] hsr_slave_0: left promiscuous mode
[ 94.933753][ T1442] hsr_slave_1: left promiscuous mode
[ 94.934768][ T1442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 94.934798][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 94.936149][ T1442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 94.936169][ T1442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 94.942357][ T52] Bluetooth: hci0: command tx timeout
[ 94.954157][ T1442] veth1_macvtap: left promiscuous mode
[ 94.954295][ T1442] veth0_macvtap: left promiscuous mode
[ 94.954411][ T1442] veth1_vlan: left promiscuous mode
[ 94.954494][ T1442] veth0_vlan: left promiscuous mode
[ 95.350946][ T1442] team0 (unregistering): Port device team_slave_1 removed
[ 95.378818][ T1442] team0 (unregistering): Port device team_slave_0 removed
[ 95.558265][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[ 95.909393][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.924446][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 95.927444][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.937762][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 95.938951][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.957859][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 95.960338][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.965510][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 96.388792][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.428018][ T5756] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.449136][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.449256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.483137][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.483285][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.023110][ T52] Bluetooth: hci0: command tx timeout
[ 97.202340][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.268612][ T5756] veth0_vlan: entered promiscuous mode
[ 97.280114][ T5756] veth1_vlan: entered promiscuous mode
[ 97.324489][ T5756] veth0_macvtap: entered promiscuous mode
[ 97.333134][ T5756] veth1_macvtap: entered promiscuous mode
[ 97.350398][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.373514][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.423352][ T1442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.432104][ T1442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.432146][ T1442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.432446][ T1442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.530659][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.530683][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.581118][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.581143][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.992240][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 98.145514][ T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 98.147947][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 98.147980][ T44] usb 1-1: config 0 has no interface number 0
[ 98.150196][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 98.150224][ T44] usb 1-1: Product: syz
[ 98.150238][ T44] usb 1-1: Manufacturer: syz
[ 98.150273][ T44] usb 1-1: SerialNumber: syz
[ 98.160074][ T44] usb 1-1: config 0 descriptor??
[ 98.387768][ T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 98.395049][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 98.395940][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 98.395990][ T44] usb 1-1: media controller created
[ 98.410388][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 99.101603][ T52] Bluetooth: hci0: command tx timeout
[ 99.503533][ T44] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 99.505186][ T5846] ==================================================================
[ 99.505197][ T5846] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630
[ 99.505219][ T5846] Read of size 1 at addr ffff88807c7ce4c1 by task syz.0.17/5846
[ 99.505229][ T5846]
[ 99.505236][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 99.505249][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 99.505256][ T5846] Call Trace:
[ 99.505261][ T5846]
[ 99.505267][ T5846] dump_stack_lvl+0xe8/0x150
[ 99.505283][ T5846] print_address_description+0x55/0x1e0
[ 99.505299][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 99.505321][ T5846] print_report+0x58/0x70
[ 99.505334][ T5846] kasan_report+0x117/0x150
[ 99.505348][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 99.505364][ T5846] ec168_i2c_xfer+0x4d4/0x630
[ 99.505380][ T5846] __i2c_transfer+0x7bf/0x1fe0
[ 99.505393][ T5846] ? rt_mutex_lock_nested+0x167/0x1c0
[ 99.505407][ T5846] ? i2c_transfer+0xc7/0x2d0
[ 99.505418][ T5846] i2c_transfer+0x1cb/0x2d0
[ 99.505429][ T5846] i2cdev_ioctl_rdwr+0x460/0x740
[ 99.505442][ T5846] compat_i2cdev_ioctl+0x59f/0x5c0
[ 99.505455][ T5846] ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 99.505468][ T5846] ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 99.505485][ T5846] __ia32_compat_sys_ioctl+0x5ea/0x950
[ 99.505498][ T5846] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 99.505510][ T5846] ? kmem_cache_free+0x182/0x650
[ 99.505522][ T5846] ? __se_sys_futex_time32+0x3ab/0x440
[ 99.505539][ T5846] ? __pfx_do_sys_openat2+0x10/0x10
[ 99.505553][ T5846] ? __pfx___se_sys_futex_time32+0x10/0x10
[ 99.505570][ T5846] __do_fast_syscall_32+0x27a/0x6a0
[ 99.505584][ T5846] ? do_fast_syscall_32+0x33/0x70
[ 99.505596][ T5846] ? asm_int80_emulation+0x1a/0x20
[ 99.505606][ T5846] ? do_int80_emulation+0x299/0x500
[ 99.505619][ T5846] do_fast_syscall_32+0x33/0x70
[ 99.505632][ T5846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 99.505646][ T5846] RIP: 0023:0xf7f090ec
[ 99.505656][ T5846] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 99.505666][ T5846] RSP: 002b:00000000ffa5dfbc EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 99.505680][ T5846] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 99.505689][ T5846] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[ 99.505696][ T5846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 99.505703][ T5846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 99.505710][ T5846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 99.505720][ T5846]
[ 99.505725][ T5846]
[ 99.505727][ T5846] Allocated by task 5846:
[ 99.505733][ T5846] kasan_save_track+0x3e/0x80
[ 99.505745][ T5846] __kasan_kmalloc+0x93/0xb0
[ 99.505755][ T5846] __kmalloc_node_track_caller_noprof+0x4b4/0x720
[ 99.505765][ T5846] memdup_user+0x2b/0xd0
[ 99.505775][ T5846] i2cdev_ioctl_rdwr+0x1c6/0x740
[ 99.505785][ T5846] compat_i2cdev_ioctl+0x59f/0x5c0
[ 99.505794][ T5846] __ia32_compat_sys_ioctl+0x5ea/0x950
[ 99.505804][ T5846] __do_fast_syscall_32+0x27a/0x6a0
[ 99.505815][ T5846] do_fast_syscall_32+0x33/0x70
[ 99.505826][ T5846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 99.505838][ T5846]
[ 99.505841][ T5846] The buggy address belongs to the object at ffff88807c7ce4c0
[ 99.505841][ T5846] which belongs to the cache kmalloc-8 of size 8
[ 99.505850][ T5846] The buggy address is located 0 bytes to the right of
[ 99.505850][ T5846] allocated 1-byte region [ffff88807c7ce4c0, ffff88807c7ce4c1)
[ 99.505861][ T5846]
[ 99.505865][ T5846] The buggy address belongs to the physical page:
[ 99.505872][ T5846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c7ceea0 pfn:0x7c7ce
[ 99.505884][ T5846] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 99.505894][ T5846] page_type: f5(slab)
[ 99.505906][ T5846] raw: 00fff00000000200 ffff88801b041500 ffff88801b040348 ffff88801b040348
[ 99.505915][ T5846] raw: ffff88807c7ceea0 0000000000800075 00000000f5000000 0000000000000000
[ 99.505921][ T5846] page dumped because: kasan: bad access detected
[ 99.505926][ T5846] page_owner tracks the page as allocated
[ 99.505931][ T5846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5756, tgid 5756 (syz-executor), ts 97687900367
[ 99.505956][ T5846] post_alloc_hook+0x1f9/0x250
[ 99.505970][ T5846] get_page_from_freelist+0x2209/0x2280
[ 99.505981][ T5846] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 99.505991][ T5846] allocate_slab+0x7d/0x620
[ 99.506004][ T5846] refill_objects+0x2d5/0x350
[ 99.506016][ T5846] __pcs_replace_empty_main+0x2c8/0x6c0
[ 99.506028][ T5846] __kmalloc_node_noprof+0x54d/0x720
[ 99.506037][ T5846] __vmalloc_node_range_noprof+0x5b4/0x1540
[ 99.506052][ T5846] vzalloc_noprof+0xb2/0xe0
[ 99.506066][ T5846] alloc_counters+0x63/0x5c0
[ 99.506076][ T5846] compat_copy_entries_to_user+0xba/0x4c0
[ 99.506088][ T5846] do_ipt_get_ctl+0xc46/0x1300
[ 99.506098][ T5846] nf_getsockopt+0x26e/0x290
[ 99.506109][ T5846] ip_getsockopt+0x19e/0x230
[ 99.506120][ T5846] do_sock_getsockopt+0x51d/0x7e0
[ 99.506132][ T5846] __sys_getsockopt+0x127/0x1c0
[ 99.506143][ T5846] page last free pid 5756 tgid 5756 ts 97687875520 stack trace:
[ 99.506151][ T5846] __free_frozen_pages+0xc93/0xd90
[ 99.506165][ T5846] __kasan_populate_vmalloc+0x1a8/0x1c0
[ 99.506175][ T5846] alloc_vmap_area+0xd1a/0x1420
[ 99.506187][ T5846] __get_vm_area_node+0x200/0x2f0
[ 99.506200][ T5846] __vmalloc_node_range_noprof+0x343/0x1540
[ 99.506215][ T5846] vzalloc_noprof+0xb2/0xe0
[ 99.506228][ T5846] alloc_counters+0x63/0x5c0
[ 99.506238][ T5846] compat_copy_entries_to_user+0xba/0x4c0
[ 99.506249][ T5846] do_ipt_get_ctl+0xc46/0x1300
[ 99.506259][ T5846] nf_getsockopt+0x26e/0x290
[ 99.506270][ T5846] ip_getsockopt+0x19e/0x230
[ 99.506280][ T5846] do_sock_getsockopt+0x51d/0x7e0
[ 99.506295][ T5846] __sys_getsockopt+0x127/0x1c0
[ 99.506306][ T5846] __ia32_compat_sys_socketcall+0x8a7/0xa50
[ 99.506327][ T5846] __do_fast_syscall_32+0x27a/0x6a0
[ 99.506338][ T5846] do_fast_syscall_32+0x33/0x70
[ 99.506349][ T5846]
[ 99.506352][ T5846] Memory state around the buggy address:
[ 99.506358][ T5846] ffff88807c7ce380: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 99.506365][ T5846] ffff88807c7ce400: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 99.506372][ T5846] >ffff88807c7ce480: fa fc fc fc fa fc fc fc 01 fc fc fc 00 fc fc fc
[ 99.506378][ T5846] ^
[ 99.506384][ T5846] ffff88807c7ce500: fa fc fc fc fa fc fc fc 07 fc fc fc 07 fc fc fc
[ 99.506391][ T5846] ffff88807c7ce580: fa fc fc fc 05 fc fc fc 06 fc fc fc 06 fc fc fc
[ 99.506396][ T5846] ==================================================================
[ 99.507042][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.183964][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 100.193076][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 100.203130][ T5846] Call Trace:
[ 100.206414][ T5846]
[ 100.209345][ T5846] vpanic+0x56d/0xa60
[ 100.213340][ T5846] ? rcu_is_watching+0x16/0xb0
[ 100.218136][ T5846] ? __pfx_vpanic+0x10/0x10
[ 100.222649][ T5846] ? __pfx___schedule+0x10/0x10
[ 100.227514][ T5846] panic+0xc5/0xd0
[ 100.231239][ T5846] ? __pfx_panic+0x10/0x10
[ 100.235667][ T5846] ? preempt_schedule_common+0x7f/0xd0
[ 100.241126][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 100.245996][ T5846] check_panic_on_warn+0x89/0xb0
[ 100.250940][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 100.255795][ T5846] end_report+0x73/0x170
[ 100.260038][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 100.264894][ T5846] kasan_report+0x128/0x150
[ 100.269490][ T5846] ? ec168_i2c_xfer+0x4d4/0x630
[ 100.274347][ T5846] ec168_i2c_xfer+0x4d4/0x630
[ 100.279030][ T5846] __i2c_transfer+0x7bf/0x1fe0
[ 100.283806][ T5846] ? rt_mutex_lock_nested+0x167/0x1c0
[ 100.289185][ T5846] ? i2c_transfer+0xc7/0x2d0
[ 100.293774][ T5846] i2c_transfer+0x1cb/0x2d0
[ 100.298278][ T5846] i2cdev_ioctl_rdwr+0x460/0x740
[ 100.303223][ T5846] compat_i2cdev_ioctl+0x59f/0x5c0
[ 100.308347][ T5846] ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 100.313987][ T5846] ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 100.319550][ T5846] __ia32_compat_sys_ioctl+0x5ea/0x950
[ 100.325017][ T5846] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 100.330999][ T5846] ? kmem_cache_free+0x182/0x650
[ 100.335949][ T5846] ? __se_sys_futex_time32+0x3ab/0x440
[ 100.341418][ T5846] ? __pfx_do_sys_openat2+0x10/0x10
[ 100.346627][ T5846] ? __pfx___se_sys_futex_time32+0x10/0x10
[ 100.352442][ T5846] __do_fast_syscall_32+0x27a/0x6a0
[ 100.357654][ T5846] ? do_fast_syscall_32+0x33/0x70
[ 100.362679][ T5846] ? asm_int80_emulation+0x1a/0x20
[ 100.367793][ T5846] ? do_int80_emulation+0x299/0x500
[ 100.373023][ T5846] do_fast_syscall_32+0x33/0x70
[ 100.377879][ T5846] entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 100.384222][ T5846] RIP: 0023:0xf7f090ec
[ 100.388299][ T5846] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 100.407902][ T5846] RSP: 002b:00000000ffa5dfbc EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 100.416320][ T5846] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 100.424466][ T5846] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[ 100.432441][ T5846] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 100.440414][ T5846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 100.448471][ T5846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 100.456448][ T5846]
[ 100.459611][ T5846] Kernel Offset: disabled
[ 100.463933][ T5846] Rebooting in 86400 seconds..