Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts.
2026/09/06 19:32:51 parsed 1 programs
2026/09/06 19:32:51 serving rpc on tcp://37637
[ 75.940995][ T5630] cgroup: Unknown subsys name 'net'
[ 76.060162][ T5630] cgroup: Unknown subsys name 'cpuset'
[ 76.068145][ T5630] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 77.592294][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 80.233955][ T5642] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 80.239385][ T5642] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 80.265027][ T5642] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 80.267087][ T5642] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 80.290863][ T5642] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 81.066433][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.073017][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.073448][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.074348][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.074983][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.867177][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.868856][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.971425][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.971906][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.214118][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.214583][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.214707][ T5697] bridge_slave_0: entered allmulticast mode
[ 83.216483][ T5697] bridge_slave_0: entered promiscuous mode
[ 83.222319][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.222427][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.222794][ T5697] bridge_slave_1: entered allmulticast mode
[ 83.224515][ T5697] bridge_slave_1: entered promiscuous mode
[ 83.256720][ T5697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.260481][ T5697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.288554][ T5697] team0: Port device team_slave_0 added
[ 83.291323][ T5697] team0: Port device team_slave_1 added
[ 83.312246][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.312266][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.312309][ T5697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.314934][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.314946][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 83.314967][ T5697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.365490][ T5697] hsr_slave_0: entered promiscuous mode
[ 83.366437][ T5697] hsr_slave_1: entered promiscuous mode
[ 83.506986][ T5697] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.519586][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 83.520512][ T5697] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.531672][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 83.534117][ T5697] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.544495][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 83.546111][ T5697] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.550849][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 83.577922][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.578051][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.578976][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.579099][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.639551][ T5697] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.653864][ T667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.661294][ T667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.675368][ T5697] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.684971][ T42] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.685179][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.697110][ T667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.697700][ T667] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.980040][ T5697] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.020335][ T5697] veth0_vlan: entered promiscuous mode
[ 84.027915][ T5697] veth1_vlan: entered promiscuous mode
[ 84.053878][ T5697] veth0_macvtap: entered promiscuous mode
[ 84.058849][ T5697] veth1_macvtap: entered promiscuous mode
[ 84.073835][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.078872][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.148019][ T124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.148378][ T124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.150508][ T124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.150543][ T124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.259624][ T667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.335744][ T667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.386300][ T667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.481451][ T667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/06 19:33:03 executed programs: 0
[ 85.224727][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.226565][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.227797][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.229499][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.230306][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.614876][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.615063][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.615179][ T5755] bridge_slave_0: entered allmulticast mode
[ 85.616862][ T5755] bridge_slave_0: entered promiscuous mode
[ 85.619528][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.619619][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.619726][ T5755] bridge_slave_1: entered allmulticast mode
[ 85.621250][ T5755] bridge_slave_1: entered promiscuous mode
[ 85.668883][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.672021][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.697938][ T5755] team0: Port device team_slave_0 added
[ 85.700769][ T5755] team0: Port device team_slave_1 added
[ 85.720628][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.720663][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.720684][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.722690][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.722702][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.722723][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.766261][ T5755] hsr_slave_0: entered promiscuous mode
[ 85.767309][ T5755] hsr_slave_1: entered promiscuous mode
[ 85.768032][ T5755] debugfs: 'hsr0' already exists in 'hsr'
[ 85.768114][ T5755] Cannot create hsr debugfs directory
[ 86.628808][ T990] cfg80211: failed to load regulatory.db
[ 86.864533][ T667] bridge_slave_1: left allmulticast mode
[ 86.871495][ T667] bridge_slave_1: left promiscuous mode
[ 86.878105][ T667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.886810][ T667] bridge_slave_0: left allmulticast mode
[ 86.886834][ T667] bridge_slave_0: left promiscuous mode
[ 86.888015][ T667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.997151][ T667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.012535][ T667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 87.022330][ T667] bond0 (unregistering): Released all slaves
[ 87.093006][ T667] hsr_slave_0: left promiscuous mode
[ 87.098778][ T667] hsr_slave_1: left promiscuous mode
[ 87.099725][ T667] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.099751][ T667] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.110844][ T667] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.110861][ T667] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.140138][ T667] veth1_macvtap: left promiscuous mode
[ 87.140198][ T667] veth0_macvtap: left promiscuous mode
[ 87.140295][ T667] veth1_vlan: left promiscuous mode
[ 87.140378][ T667] veth0_vlan: left promiscuous mode
[ 87.271123][ T4937] Bluetooth: hci0: command tx timeout
[ 87.440211][ T667] team0 (unregistering): Port device team_slave_1 removed
[ 87.468211][ T667] team0 (unregistering): Port device team_slave_0 removed
[ 87.615072][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[ 87.930951][ T5755] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.950426][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 88.194014][ T5755] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.205069][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 88.213448][ T5755] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.227827][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 88.233175][ T5755] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.252536][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 88.408239][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.435940][ T5755] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.451843][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.451951][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.466201][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.466292][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.975393][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.029800][ T5755] veth0_vlan: entered promiscuous mode
[ 89.038009][ T5755] veth1_vlan: entered promiscuous mode
[ 89.072990][ T5755] veth0_macvtap: entered promiscuous mode
[ 89.077733][ T5755] veth1_macvtap: entered promiscuous mode
[ 89.093436][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.105465][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.167937][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.167997][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.168026][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.168050][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.207716][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.207771][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.249150][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.249188][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.347279][ T4937] Bluetooth: hci0: command tx timeout
[ 89.577583][ T990] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 89.738798][ T990] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[ 89.741709][ T990] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 89.741731][ T990] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 89.745004][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 89.745024][ T990] usb 1-1: Product: syz
[ 89.745035][ T990] usb 1-1: Manufacturer: syz
[ 89.745046][ T990] usb 1-1: SerialNumber: syz
[ 90.767136][ C1] ==================================================================
[ 90.767152][ C1] BUG: KASAN: slab-out-of-bounds in gb_operation_message_alloc+0x242/0x280
[ 90.767196][ C1] Write of size 2 at addr ffff888021aa5722 by task swapper/1/0
[ 90.767214][ C1]
[ 90.767231][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 90.767254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 90.767273][ C1] Call Trace:
[ 90.767284][ C1]
[ 90.767293][ C1] dump_stack_lvl+0xe8/0x150
[ 90.767324][ C1] print_address_description+0x55/0x1e0
[ 90.767354][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 90.767385][ C1] print_report+0x58/0x70
[ 90.767411][ C1] kasan_report+0x117/0x150
[ 90.767438][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 90.767480][ C1] gb_operation_message_alloc+0x242/0x280
[ 90.767514][ C1] gb_operation_create_common+0xa9/0x650
[ 90.767546][ C1] gb_connection_recv+0x284/0x1280
[ 90.767577][ C1] ? __pfx_gb_connection_recv+0x10/0x10
[ 90.767607][ C1] ? do_raw_spin_unlock+0xf5/0x200
[ 90.767635][ C1] greybus_data_rcvd+0x22c/0x550
[ 90.767656][ C1] cport_in_callback+0x1bd/0x3b0
[ 90.767670][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 90.767686][ C1] dummy_timer+0xa91/0x4cf0
[ 90.767712][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 90.767726][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 90.767742][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 90.767755][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 90.767774][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 90.767790][ C1] handle_softirqs+0x226/0x860
[ 90.767804][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 90.767819][ C1] __irq_exit_rcu+0xcb/0x220
[ 90.767833][ C1] irq_exit_rcu+0x9/0x30
[ 90.767845][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 90.767861][ C1]
[ 90.767865][ C1]
[ 90.767869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 90.767881][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 90.767896][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 0d 51 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 90.767905][ C1] RSP: 0000:ffffc900001a7be0 EFLAGS: 00000202
[ 90.767921][ C1] RAX: 000000000005f045 RBX: ffff8880b873c8e0 RCX: 8000000000000001
[ 90.767930][ C1] RDX: 0000000000000000 RSI: ffffffff8e474d42 RDI: ffffffff8c6d9480
[ 90.767937][ C1] RBP: ffffc900001a7c30 R08: ffffffff907a187f R09: 1ffffffff20f430f
[ 90.767946][ C1] R10: dffffc0000000000 R11: fffffbfff20f4310 R12: ffff88801e695dc0
[ 90.767954][ C1] R13: ffff88801e695dc0 R14: dffffc0000000000 R15: 1ffff110170e791c
[ 90.767968][ C1] __schedule+0x17e3/0x58f0
[ 90.767986][ C1] ? ct_kernel_exit_state+0x2b/0x80
[ 90.767997][ C1] ? ct_nmi_exit+0xf1/0x1d0
[ 90.768006][ C1] ? trace_irq_disable+0x3b/0x140
[ 90.768017][ C1] ? __pfx___schedule+0x10/0x10
[ 90.768031][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 90.768048][ C1] ? tick_nohz_idle_exit+0x2a6/0x370
[ 90.768061][ C1] schedule_idle+0x51/0x90
[ 90.768075][ C1] do_idle+0x4ad/0x540
[ 90.768092][ C1] ? __pfx_do_idle+0x10/0x10
[ 90.768108][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 90.768123][ C1] cpu_startup_entry+0x43/0x60
[ 90.768139][ C1] start_secondary+0x101/0x110
[ 90.768155][ C1] common_startup_64+0x13e/0x157
[ 90.768172][ C1]
[ 90.768176][ C1]
[ 90.768179][ C1] Allocated by task 0:
[ 90.768184][ C1] kasan_save_track+0x3e/0x80
[ 90.768194][ C1] __kasan_kmalloc+0x93/0xb0
[ 90.768204][ C1] __kmalloc_noprof+0x36b/0x720
[ 90.768219][ C1] gb_operation_message_alloc+0x8c/0x280
[ 90.768234][ C1] gb_operation_create_common+0xa9/0x650
[ 90.768248][ C1] gb_connection_recv+0x284/0x1280
[ 90.768263][ C1] greybus_data_rcvd+0x22c/0x550
[ 90.768272][ C1] cport_in_callback+0x1bd/0x3b0
[ 90.768280][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 90.768292][ C1] dummy_timer+0xa91/0x4cf0
[ 90.768304][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 90.768317][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 90.768330][ C1] handle_softirqs+0x226/0x860
[ 90.768343][ C1] __irq_exit_rcu+0xcb/0x220
[ 90.768355][ C1] irq_exit_rcu+0x9/0x30
[ 90.768366][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 90.768381][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 90.768391][ C1]
[ 90.768393][ C1] The buggy address belongs to the object at ffff888021aa5720
[ 90.768393][ C1] which belongs to the cache kmalloc-8 of size 8
[ 90.768402][ C1] The buggy address is located 2 bytes inside of
[ 90.768402][ C1] allocated 3-byte region [ffff888021aa5720, ffff888021aa5723)
[ 90.768413][ C1]
[ 90.768416][ C1] The buggy address belongs to the physical page:
[ 90.768424][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021aa5800 pfn:0x21aa5
[ 90.768435][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 90.768449][ C1] page_type: f5(slab)
[ 90.768459][ C1] raw: 00fff00000000200 ffff88801b041500 ffff88801b040348 ffffea0000cf02d0
[ 90.768469][ C1] raw: ffff888021aa5800 0000000000800063 00000000f5000000 0000000000000000
[ 90.768479][ C1] page dumped because: kasan: bad access detected
[ 90.768487][ C1] page_owner tracks the page as allocated
[ 90.768491][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3030840806
[ 90.768508][ C1] post_alloc_hook+0x1f9/0x250
[ 90.768523][ C1] get_page_from_freelist+0x2209/0x2280
[ 90.768532][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 90.768542][ C1] allocate_slab+0x7d/0x620
[ 90.768554][ C1] refill_objects+0x2d5/0x350
[ 90.768566][ C1] __pcs_replace_empty_main+0x2c8/0x6c0
[ 90.768577][ C1] __kmalloc_noprof+0x47b/0x720
[ 90.768592][ C1] acpi_ns_internalize_name+0x2da/0x3f0
[ 90.768606][ C1] acpi_ns_get_node_unlocked+0x186/0x480
[ 90.768619][ C1] acpi_ns_get_node+0x76/0xc0
[ 90.768631][ C1] acpi_get_handle+0x18c/0x290
[ 90.768645][ C1] acpi_has_method+0x8c/0xe0
[ 90.768656][ C1] acpi_dev_get_resources+0x11f/0x220
[ 90.768668][ C1] acpi_init_device_object+0x1a69/0x2b50
[ 90.768678][ C1] acpi_add_single_object+0x107/0x1b60
[ 90.768688][ C1] acpi_bus_check_add+0x2b7/0x8a0
[ 90.768698][ C1] page last free pid 1 tgid 1 ts 2825805371 stack trace:
[ 90.768705][ C1] __free_frozen_pages+0xc93/0xd90
[ 90.768719][ C1] __slab_free+0x274/0x2c0
[ 90.768727][ C1] qlist_free_all+0x99/0x100
[ 90.768735][ C1] kasan_quarantine_remove_cache+0x1cc/0x380
[ 90.768744][ C1] kmem_cache_shrink+0xd/0x20
[ 90.768757][ C1] acpi_os_purge_cache+0x15/0x20
[ 90.768767][ C1] acpi_purge_cached_objects+0xac/0x100
[ 90.768783][ C1] acpi_initialize_objects+0x2e/0xb0
[ 90.768797][ C1] acpi_bus_init+0xa8/0x360
[ 90.768806][ C1] acpi_init+0xa1/0x1f0
[ 90.768814][ C1] do_one_initcall+0x250/0x870
[ 90.768828][ C1] do_initcall_level+0x10a/0x1a0
[ 90.768841][ C1] do_initcalls+0x59/0xa0
[ 90.768853][ C1] kernel_init_freeable+0x29d/0x3e0
[ 90.768865][ C1] kernel_init+0x22/0x1d0
[ 90.768876][ C1] ret_from_fork+0x514/0xb70
[ 90.768884][ C1]
[ 90.768887][ C1] Memory state around the buggy address:
[ 90.768892][ C1] ffff888021aa5600: 05 fc fc fc 05 fc fc fc 05 fc fc fc fa fc fc fc
[ 90.768899][ C1] ffff888021aa5680: fa fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc
[ 90.768906][ C1] >ffff888021aa5700: fa fc fc fc 03 fc fc fc fa fc fc fc 00 fc fc fc
[ 90.768911][ C1] ^
[ 90.768917][ C1] ffff888021aa5780: fa fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
[ 90.768924][ C1] ffff888021aa5800: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[ 90.768929][ C1] ==================================================================
[ 90.768935][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 91.533737][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 91.542651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 91.552684][ C1] Call Trace:
[ 91.555947][ C1]
[ 91.558772][ C1] vpanic+0x56d/0xa60
[ 91.562747][ C1] ? __pfx_vpanic+0x10/0x10
[ 91.567246][ C1] panic+0xc5/0xd0
[ 91.570951][ C1] ? __pfx_panic+0x10/0x10
[ 91.575353][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.581236][ C1] ? rcu_is_watching+0x16/0xb0
[ 91.585981][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.591856][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.597731][ C1] check_panic_on_warn+0x89/0xb0
[ 91.602651][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.608524][ C1] end_report+0x73/0x170
[ 91.612748][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.618623][ C1] kasan_report+0x128/0x150
[ 91.623105][ C1] ? gb_operation_message_alloc+0x242/0x280
[ 91.629000][ C1] gb_operation_message_alloc+0x242/0x280
[ 91.634704][ C1] gb_operation_create_common+0xa9/0x650
[ 91.640318][ C1] gb_connection_recv+0x284/0x1280
[ 91.645412][ C1] ? __pfx_gb_connection_recv+0x10/0x10
[ 91.650938][ C1] ? do_raw_spin_unlock+0xf5/0x200
[ 91.656041][ C1] greybus_data_rcvd+0x22c/0x550
[ 91.660975][ C1] cport_in_callback+0x1bd/0x3b0
[ 91.665898][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 91.671258][ C1] dummy_timer+0xa91/0x4cf0
[ 91.675773][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 91.680721][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 91.686522][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 91.691449][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 91.696640][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 91.701738][ C1] handle_softirqs+0x226/0x860
[ 91.706514][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 91.711274][ C1] __irq_exit_rcu+0xcb/0x220
[ 91.715871][ C1] irq_exit_rcu+0x9/0x30
[ 91.720096][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 91.725719][ C1]
[ 91.728648][ C1]
[ 91.731559][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 91.737518][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 91.743311][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f7 0d 51 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 91.762899][ C1] RSP: 0000:ffffc900001a7be0 EFLAGS: 00000202
[ 91.768951][ C1] RAX: 000000000005f045 RBX: ffff8880b873c8e0 RCX: 8000000000000001
[ 91.776908][ C1] RDX: 0000000000000000 RSI: ffffffff8e474d42 RDI: ffffffff8c6d9480
[ 91.784862][ C1] RBP: ffffc900001a7c30 R08: ffffffff907a187f R09: 1ffffffff20f430f
[ 91.792819][ C1] R10: dffffc0000000000 R11: fffffbfff20f4310 R12: ffff88801e695dc0
[ 91.800774][ C1] R13: ffff88801e695dc0 R14: dffffc0000000000 R15: 1ffff110170e791c
[ 91.808741][ C1] __schedule+0x17e3/0x58f0
[ 91.813245][ C1] ? ct_kernel_exit_state+0x2b/0x80
[ 91.818423][ C1] ? ct_nmi_exit+0xf1/0x1d0
[ 91.822923][ C1] ? trace_irq_disable+0x3b/0x140
[ 91.827929][ C1] ? __pfx___schedule+0x10/0x10
[ 91.832763][ C1] ? lockdep_hardirqs_on+0x7b/0x110
[ 91.837947][ C1] ? tick_nohz_idle_exit+0x2a6/0x370
[ 91.843215][ C1] schedule_idle+0x51/0x90
[ 91.847617][ C1] do_idle+0x4ad/0x540
[ 91.851671][ C1] ? __pfx_do_idle+0x10/0x10
[ 91.856244][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 91.862033][ C1] cpu_startup_entry+0x43/0x60
[ 91.866786][ C1] start_secondary+0x101/0x110
[ 91.871533][ C1] common_startup_64+0x13e/0x157
[ 91.876454][ C1]
[ 91.879705][ C1] Kernel Offset: disabled
[ 91.884039][ C1] Rebooting in 86400 seconds..