Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2026/09/23 19:10:36 parsed 1 programs 2026/09/23 19:10:36 serving rpc on tcp://45833 Setting up swapspace version 1, size = 127995904 bytes [ 57.337691][ T2606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.999758][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.007858][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.105209][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.114065][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.123900][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.132643][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.146410][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.154634][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.164358][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.173122][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.889392][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.898422][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.912095][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.920267][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.928651][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.936817][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.944591][ T2634] device veth0_vlan entered promiscuous mode [ 61.325105][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.333854][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.528238][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.536997][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.548924][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.557562][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.952694][ T934] device veth0_vlan left promiscuous mode 2026/09/23 19:10:42 executed programs: 0 [ 64.782995][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.790680][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.887982][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.896654][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.906354][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.915065][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.928757][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.937313][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.947792][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.956803][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.687278][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.697285][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.710681][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.718880][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.728407][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.736490][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.746450][ T2927] device veth0_vlan entered promiscuous mode [ 66.147551][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.156454][ T262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.360538][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.370557][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.380753][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.389293][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.710080][ T3154] ================================================================== [ 66.718449][ T3154] BUG: KASAN: slab-out-of-bounds in reg_fixed_voltage_probe+0x987/0xc20 [ 66.726881][ T3154] Read of size 4 at addr ffff88810bad8fdc by task syz.2.17/3154 [ 66.734703][ T3154] [ 66.737028][ T3154] CPU: 1 PID: 3154 Comm: syz.2.17 Not tainted syzkaller #0 [ 66.744288][ T3154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.754338][ T3154] Call Trace: [ 66.757684][ T3154] [ 66.760867][ T3154] dump_stack_lvl+0x126/0x1ab [ 66.765602][ T3154] ? read_lock_is_recursive+0x10/0x10 [ 66.771062][ T3154] ? show_regs_print_info+0x5/0x5 [ 66.776251][ T3154] ? load_image+0x590/0x590 [ 66.780766][ T3154] ? _raw_spin_lock_irqsave+0xae/0xf0 [ 66.786135][ T3154] ? __virt_addr_valid+0x133/0x270 [ 66.791246][ T3154] ? __virt_addr_valid+0x133/0x270 [ 66.796427][ T3154] ? reg_fixed_voltage_probe+0x987/0xc20 [ 66.802088][ T3154] print_report+0xa8/0x210 [ 66.806589][ T3154] kasan_report+0x10b/0x140 [ 66.811081][ T3154] ? reg_fixed_voltage_probe+0x987/0xc20 [ 66.816694][ T3154] reg_fixed_voltage_probe+0x987/0xc20 [ 66.822140][ T3154] ? of_regulator_bulk_get_all+0x440/0x440 [ 66.827972][ T3154] ? kernfs_add_one+0x337/0x490 [ 66.832832][ T3154] ? acpi_dev_pm_attach+0x42/0x230 [ 66.838100][ T3154] platform_probe+0xfa/0x140 [ 66.842699][ T3154] really_probe+0x2f0/0xa50 [ 66.847552][ T3154] ? pm_runtime_barrier+0xb4/0x140 [ 66.852836][ T3154] __driver_probe_device+0x187/0x310 [ 66.858417][ T3154] device_driver_attach+0xc1/0x180 [ 66.863617][ T3154] bind_store+0x20d/0x2c0 [ 66.867946][ T3154] ? unbind_store+0x2b0/0x2b0 [ 66.872608][ T3154] ? sysfs_kf_read+0x2a0/0x2a0 [ 66.877472][ T3154] kernfs_fop_write_iter+0x301/0x460 [ 66.882746][ T3154] vfs_write+0x489/0xa10 [ 66.887239][ T3154] ? file_end_write+0x170/0x170 [ 66.892157][ T3154] ? __fget_files+0x2e/0x2b0 [ 66.897192][ T3154] ? __fdget_pos+0x20d/0x2d0 [ 66.902133][ T3154] ksys_write+0x104/0x1d0 [ 66.906461][ T3154] ? __ia32_sys_read+0x80/0x80 [ 66.911312][ T3154] ? switch_fpu_return+0xc7/0x130 [ 66.916638][ T3154] do_syscall_64+0x4c/0xa0 [ 66.922405][ T3154] ? clear_bhb_loop+0x60/0xb0 [ 66.927156][ T3154] ? clear_bhb_loop+0x60/0xb0 [ 66.931843][ T3154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.938113][ T3154] RIP: 0033:0x7fc38d3ae0d9 [ 66.942615][ T3154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.962644][ T3154] RSP: 002b:00007fc38d20f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.971129][ T3154] RAX: ffffffffffffffda RBX: 00007fc38d635fa0 RCX: 00007fc38d3ae0d9 [ 66.979269][ T3154] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000005 [ 66.987247][ T3154] RBP: 00007fc38d445024 R08: 0000000000000000 R09: 0000000000000000 [ 66.995643][ T3154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.003596][ T3154] R13: 00007fc38d636038 R14: 00007fc38d635fa0 R15: 00007fff0b2c90b8 [ 67.011647][ T3154] [ 67.014648][ T3154] [ 67.016959][ T3154] Allocated by task 1: [ 67.021043][ T3154] kasan_set_track+0x4b/0x70 [ 67.025882][ T3154] __kasan_kmalloc+0x8e/0xa0 [ 67.030459][ T3154] __kmalloc_node_track_caller+0xa1/0x1c0 [ 67.036489][ T3154] kmemdup+0x1d/0x40 [ 67.040382][ T3154] platform_device_add_data+0x1f/0x80 [ 67.045912][ T3154] dummy_hcd_init+0x335/0x911 [ 67.050671][ T3154] do_one_initcall+0x1d9/0x460 [ 67.055510][ T3154] do_initcall_level+0x117/0x1c2 [ 67.060467][ T3154] do_initcalls+0x46/0x74 [ 67.064883][ T3154] kernel_init_freeable+0x331/0x490 [ 67.070194][ T3154] kernel_init+0x13/0x120 [ 67.074605][ T3154] ret_from_fork+0x1f/0x30 [ 67.079353][ T3154] [ 67.081832][ T3154] The buggy address belongs to the object at ffff88810bad8fc8 [ 67.081832][ T3154] which belongs to the cache kmalloc-8 of size 8 [ 67.096463][ T3154] The buggy address is located 12 bytes to the right of [ 67.096463][ T3154] 8-byte region [ffff88810bad8fc8, ffff88810bad8fd0) [ 67.110705][ T3154] [ 67.113374][ T3154] The buggy address belongs to the physical page: [ 67.120352][ T3154] page:ffffea00042eb600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810bad8398 pfn:0x10bad8 [ 67.132841][ T3154] flags: 0x200000000000200(slab|node=0|zone=2) [ 67.139330][ T3154] raw: 0200000000000200 ffffea0004429c88 ffff8881000401c8 ffff888100041280 [ 67.148769][ T3154] raw: ffff88810bad8398 000000000066005d 00000001ffffffff 0000000000000000 [ 67.157420][ T3154] page dumped because: kasan: bad access detected [ 67.163834][ T3154] page_owner tracks the page as allocated [ 67.169538][ T3154] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 3778164986, free_ts 0 [ 67.187535][ T3154] post_alloc_hook+0x260/0x290 [ 67.192305][ T3154] get_page_from_freelist+0x2c24/0x2d60 [ 67.198109][ T3154] __alloc_pages+0x1ec/0x430 [ 67.202779][ T3154] alloc_page_interleave+0x11/0x130 [ 67.208125][ T3154] alloc_slab_page+0x5d/0x180 [ 67.213072][ T3154] new_slab+0x70/0x250 [ 67.217232][ T3154] ___slab_alloc+0x9d2/0xe40 [ 67.222421][ T3154] __kmem_cache_alloc_node+0x11c/0x250 [ 67.227949][ T3154] __kmalloc_node_track_caller+0x91/0x1c0 [ 67.234203][ T3154] kstrdup_const+0x4b/0x70 [ 67.238933][ T3154] __kernfs_new_node+0x9c/0x630 [ 67.244038][ T3154] kernfs_new_node+0x101/0x1d0 [ 67.249505][ T3154] __kernfs_create_file+0x24/0x270 [ 67.255663][ T3154] sysfs_add_file_to_group+0x2d8/0x3c0 [ 67.261112][ T3154] __msi_domain_alloc_irqs+0xa2e/0x10a0 [ 67.267021][ T3154] msi_domain_alloc_irqs_descs_locked+0x122/0x2b0 [ 67.274616][ T3154] page_owner free stack trace missing [ 67.280318][ T3154] [ 67.282725][ T3154] Memory state around the buggy address: [ 67.288555][ T3154] ffff88810bad8e80: fc 00 fc fc fc fc 00 fc fc fc fc fb fc fc fc fc [ 67.296697][ T3154] ffff88810bad8f00: 00 fc fc fc fc 07 fc fc fc fc 00 fc fc fc fc 00 [ 67.304928][ T3154] >ffff88810bad8f80: fc fc fc fc 00 fc fc fc fc 00 fc fc fc fc fc fc [ 67.313718][ T3154] ^ [ 67.320822][ T3154] ffff88810bad9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.329681][ T3154] ffff88810bad9080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 67.338249][ T3154] ================================================================== [ 67.346865][ T3154] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.354722][ T3154] Kernel Offset: disabled [ 67.359135][ T3154] Rebooting in 86400 seconds..