Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts.
2026/08/24 12:03:50 parsed 1 programs
2026/08/24 12:03:50 serving rpc on tcp://39161
[ 84.791770][ T5623] cgroup: Unknown subsys name 'net'
[ 84.892030][ T5623] cgroup: Unknown subsys name 'cpuset'
[ 84.900879][ T5623] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.473372][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.462615][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 89.482519][ T5636] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 89.496701][ T5636] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 89.510641][ T5636] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 89.527877][ T5636] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 90.325880][ T5659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.334466][ T5659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.343462][ T5659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.352522][ T5659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.360751][ T5659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.731124][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.740528][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.794500][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.803104][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.013548][ T9] cfg80211: failed to load regulatory.db
[ 92.028269][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.036454][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.043628][ T5680] bridge_slave_0: entered allmulticast mode
[ 92.050992][ T5680] bridge_slave_0: entered promiscuous mode
[ 92.060588][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.068356][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.075521][ T5680] bridge_slave_1: entered allmulticast mode
[ 92.082950][ T5680] bridge_slave_1: entered promiscuous mode
[ 92.112488][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.124081][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.153202][ T5680] team0: Port device team_slave_0 added
[ 92.160970][ T5680] team0: Port device team_slave_1 added
[ 92.187290][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.194271][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.220211][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.232866][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.239878][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.265844][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.309334][ T5680] hsr_slave_0: entered promiscuous mode
[ 92.315826][ T5680] hsr_slave_1: entered promiscuous mode
[ 92.472570][ T5680] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.485175][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 92.494322][ T5680] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.504011][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 92.512004][ T5680] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.523805][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 92.532331][ T5680] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.545576][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 92.632830][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.655177][ T5680] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.670292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.677820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.693743][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.700921][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.036478][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.091552][ T5680] veth0_vlan: entered promiscuous mode
[ 93.104618][ T5680] veth1_vlan: entered promiscuous mode
[ 93.138479][ T5680] veth0_macvtap: entered promiscuous mode
[ 93.148242][ T5680] veth1_macvtap: entered promiscuous mode
[ 93.170919][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.188022][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.228126][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.266080][ T1029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.277387][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.286635][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.422482][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.483036][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.610055][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.695644][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/24 12:04:04 executed programs: 0
[ 95.092393][ T5659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.101604][ T5659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.110847][ T5659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.119286][ T5659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.128327][ T5659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.575668][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.582883][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.590205][ T5748] bridge_slave_0: entered allmulticast mode
[ 95.597629][ T5748] bridge_slave_0: entered promiscuous mode
[ 95.606395][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.613535][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.621199][ T5748] bridge_slave_1: entered allmulticast mode
[ 95.628496][ T5748] bridge_slave_1: entered promiscuous mode
[ 95.657327][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.669055][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.701300][ T5748] team0: Port device team_slave_0 added
[ 95.709560][ T5748] team0: Port device team_slave_1 added
[ 95.735709][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.742866][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.769358][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.782182][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.789529][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.815703][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.860662][ T5748] hsr_slave_0: entered promiscuous mode
[ 95.867192][ T5748] hsr_slave_1: entered promiscuous mode
[ 95.873286][ T5748] debugfs: 'hsr0' already exists in 'hsr'
[ 95.879162][ T5748] Cannot create hsr debugfs directory
[ 96.033067][ T13] bridge_slave_1: left allmulticast mode
[ 96.039270][ T13] bridge_slave_1: left promiscuous mode
[ 96.045883][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.059031][ T13] bridge_slave_0: left allmulticast mode
[ 96.064781][ T13] bridge_slave_0: left promiscuous mode
[ 96.071057][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.250107][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 96.262062][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 96.272690][ T13] bond0 (unregistering): Released all slaves
[ 96.409935][ T13] hsr_slave_0: left promiscuous mode
[ 96.429479][ T13] hsr_slave_1: left promiscuous mode
[ 96.435863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 96.456074][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 96.467859][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 96.486030][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 96.514972][ T13] veth1_macvtap: left promiscuous mode
[ 96.520929][ T13] veth0_macvtap: left promiscuous mode
[ 96.536247][ T13] veth1_vlan: left promiscuous mode
[ 96.546766][ T13] veth0_vlan: left promiscuous mode
[ 96.843157][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 96.874916][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 97.016344][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[ 97.206841][ T5659] Bluetooth: hci0: command tx timeout
[ 97.425057][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.448714][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.714007][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.724181][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.732158][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.751091][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.760598][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.772362][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.981820][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.023654][ T5748] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.058072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.065258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.109294][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.116519][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.629773][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.692180][ T5748] veth0_vlan: entered promiscuous mode
[ 98.707424][ T5748] veth1_vlan: entered promiscuous mode
[ 98.751050][ T5748] veth0_macvtap: entered promiscuous mode
[ 98.762014][ T5748] veth1_macvtap: entered promiscuous mode
[ 98.785562][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.805064][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.836094][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.932439][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.952522][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.995779][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.004869][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.012891][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.023396][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.032869][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.286324][ T5659] Bluetooth: hci0: command tx timeout
[ 99.327015][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 99.488532][ T29] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[ 99.500456][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 99.511763][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 99.524834][ T29] usb 1-1: config 0 descriptor??
[ 99.950444][ T29] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0
[ 100.140386][ C1] ==================================================================
[ 100.148491][ C1] BUG: KASAN: slab-out-of-bounds in aqc_raw_event+0x3a6/0x2930
[ 100.156061][ C1] Read of size 2 at addr ffff888072d26d57 by task swapper/1/0
[ 100.163517][ C1]
[ 100.165883][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 100.165901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 100.165917][ C1] Call Trace:
[ 100.165947][ C1]
[ 100.165956][ C1] dump_stack_lvl+0xe8/0x150
[ 100.165996][ C1] print_address_description+0x55/0x1e0
[ 100.166019][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 100.166035][ C1] print_report+0x58/0x70
[ 100.166054][ C1] kasan_report+0x117/0x150
[ 100.166080][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 100.166099][ C1] aqc_raw_event+0x3a6/0x2930
[ 100.166116][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 100.166136][ C1] ? down_trylock+0x50/0xb0
[ 100.166159][ C1] __hid_input_report+0x41c/0x580
[ 100.166177][ C1] ? __pfx_aqc_raw_event+0x10/0x10
[ 100.166193][ C1] hid_irq_in+0x492/0x710
[ 100.166212][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 100.166232][ C1] dummy_timer+0xa91/0x4cf0
[ 100.166274][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 100.166295][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 100.166314][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 100.166332][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 100.166358][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 100.166379][ C1] handle_softirqs+0x226/0x860
[ 100.166399][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 100.166429][ C1] __irq_exit_rcu+0xcb/0x220
[ 100.166447][ C1] irq_exit_rcu+0x9/0x30
[ 100.166463][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 100.166484][ C1]
[ 100.166489][ C1]
[ 100.166495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 100.166512][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 100.166534][ C1] Code: 9c 93 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 30 29 00 fb f4 4c 0b 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 100.166547][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[ 100.166566][ C1] RAX: 0000000000051d51 RBX: ffffffff819b2c50 RCX: 8000000000000001
[ 100.166578][ C1] RDX: 0000000000000001 RSI: ffffffff8e46c6fd RDI: ffffffff8c6d4780
[ 100.166589][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713
[ 100.166601][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000
[ 100.166612][ C1] R13: 1ffff11003c5a000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 100.166625][ C1] ? do_idle+0x2e0/0x540
[ 100.166651][ C1] default_idle+0x9/0x20
[ 100.166673][ C1] default_idle_call+0x72/0xb0
[ 100.166696][ C1] do_idle+0x2e0/0x540
[ 100.166718][ C1] ? __pfx_do_idle+0x10/0x10
[ 100.166740][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 100.166761][ C1] cpu_startup_entry+0x43/0x60
[ 100.166782][ C1] start_secondary+0x101/0x110
[ 100.166804][ C1] common_startup_64+0x13e/0x157
[ 100.166828][ C1]
[ 100.166833][ C1]
[ 100.440888][ C1] Allocated by task 29:
[ 100.445063][ C1] kasan_save_track+0x3e/0x80
[ 100.449781][ C1] __kasan_kmalloc+0x93/0xb0
[ 100.454401][ C1] __kmalloc_noprof+0x379/0x720
[ 100.459281][ C1] usbhid_start+0x7ab/0x20a0
[ 100.463896][ C1] hid_hw_start+0x65/0x120
[ 100.468326][ C1] aqc_probe+0x109/0x27f0
[ 100.472688][ C1] hid_device_probe+0x46a/0x870
[ 100.477556][ C1] really_probe+0x254/0xae0
[ 100.482068][ C1] __driver_probe_device+0x1e8/0x360
[ 100.487394][ C1] driver_probe_device+0x4f/0x240
[ 100.492480][ C1] __device_attach_driver+0x270/0x410
[ 100.497888][ C1] bus_for_each_drv+0x258/0x2f0
[ 100.502765][ C1] __device_attach+0x2c4/0x450
[ 100.507562][ C1] device_initial_probe+0xa1/0xd0
[ 100.512627][ C1] bus_probe_device+0x12a/0x220
[ 100.517500][ C1] device_add+0x7d7/0xb80
[ 100.521858][ C1] hid_add_device+0x272/0x3e0
[ 100.526555][ C1] usbhid_probe+0x9d4/0xde0
[ 100.531080][ C1] usb_probe_interface+0x653/0xc60
[ 100.536222][ C1] really_probe+0x254/0xae0
[ 100.540773][ C1] __driver_probe_device+0x1e8/0x360
[ 100.546101][ C1] driver_probe_device+0x4f/0x240
[ 100.551160][ C1] __device_attach_driver+0x270/0x410
[ 100.556546][ C1] bus_for_each_drv+0x258/0x2f0
[ 100.561407][ C1] __device_attach+0x2c4/0x450
[ 100.566196][ C1] device_initial_probe+0xa1/0xd0
[ 100.571253][ C1] bus_probe_device+0x12a/0x220
[ 100.576122][ C1] device_add+0x7d7/0xb80
[ 100.580481][ C1] usb_set_configuration+0x1ad8/0x2180
[ 100.585958][ C1] usb_generic_driver_probe+0x8d/0x150
[ 100.591470][ C1] usb_probe_device+0x1c3/0x3b0
[ 100.596345][ C1] really_probe+0x254/0xae0
[ 100.600860][ C1] __driver_probe_device+0x1e8/0x360
[ 100.606185][ C1] driver_probe_device+0x4f/0x240
[ 100.611222][ C1] __device_attach_driver+0x270/0x410
[ 100.616607][ C1] bus_for_each_drv+0x258/0x2f0
[ 100.621470][ C1] __device_attach+0x2c4/0x450
[ 100.626250][ C1] device_initial_probe+0xa1/0xd0
[ 100.631299][ C1] bus_probe_device+0x12a/0x220
[ 100.636173][ C1] device_add+0x7d7/0xb80
[ 100.640549][ C1] usb_new_device+0x9aa/0x1690
[ 100.645336][ C1] hub_event+0x28e8/0x4d30
[ 100.649768][ C1] process_scheduled_works+0xc3d/0x1630
[ 100.655324][ C1] worker_thread+0xa47/0xfb0
[ 100.659930][ C1] kthread+0x38b/0x480
[ 100.664016][ C1] ret_from_fork+0x514/0xb70
[ 100.668625][ C1] ret_from_fork_asm+0x1a/0x30
[ 100.673412][ C1]
[ 100.675743][ C1] The buggy address belongs to the object at ffff888072d26d00
[ 100.675743][ C1] which belongs to the cache kmalloc-96 of size 96
[ 100.689636][ C1] The buggy address is located 22 bytes to the right of
[ 100.689636][ C1] allocated 65-byte region [ffff888072d26d00, ffff888072d26d41)
[ 100.704165][ C1]
[ 100.706507][ C1] The buggy address belongs to the physical page:
[ 100.712939][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72d26
[ 100.721709][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 100.728839][ C1] page_type: f5(slab)
[ 100.732838][ C1] raw: 00fff00000000000 ffff88801b041280 dead000000000100 dead000000000122
[ 100.741437][ C1] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[ 100.750032][ C1] page dumped because: kasan: bad access detected
[ 100.756463][ C1] page_owner tracks the page as allocated
[ 100.762189][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 984, tgid 984 (kworker/0:2), ts 99436291518
[ 100.780871][ C1] post_alloc_hook+0x1f9/0x250
[ 100.785665][ C1] get_page_from_freelist+0x2209/0x2280
[ 100.791235][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 100.797063][ C1] allocate_slab+0x7c/0x5e0
[ 100.801585][ C1] refill_objects+0x2d5/0x350
[ 100.806287][ C1] __pcs_replace_empty_main+0x2c3/0x6b0
[ 100.811859][ C1] __kmalloc_cache_noprof+0x3ab/0x660
[ 100.817273][ C1] nsim_fib_event+0x4c8/0xa3a0
[ 100.822082][ C1] nsim_fib_event_work+0x244/0x3b0
[ 100.827211][ C1] process_scheduled_works+0xc3d/0x1630
[ 100.832765][ C1] worker_thread+0xa47/0xfb0
[ 100.837380][ C1] kthread+0x38b/0x480
[ 100.841491][ C1] ret_from_fork+0x514/0xb70
[ 100.846142][ C1] ret_from_fork_asm+0x1a/0x30
[ 100.850949][ C1] page last free pid 10 tgid 10 ts 99156939299 stack trace:
[ 100.858242][ C1] __free_frozen_pages+0xc93/0xd90
[ 100.863391][ C1] rcu_core+0x794/0x10b0
[ 100.867685][ C1] handle_softirqs+0x226/0x860
[ 100.872471][ C1] do_softirq+0x77/0xd0
[ 100.876641][ C1] __local_bh_enable_ip+0x100/0x140
[ 100.881866][ C1] __alloc_skb+0x1b1/0x7a0
[ 100.886313][ C1] mld_newpack+0x165/0xcb0
[ 100.890757][ C1] add_grec+0x119f/0x19d0
[ 100.895120][ C1] mld_send_initial_cr+0x288/0x550
[ 100.900256][ C1] mld_dad_work+0x3d/0x480
[ 100.904696][ C1] process_scheduled_works+0xc3d/0x1630
[ 100.910261][ C1] worker_thread+0xa47/0xfb0
[ 100.914918][ C1] kthread+0x38b/0x480
[ 100.919021][ C1] ret_from_fork+0x514/0xb70
[ 100.923630][ C1] ret_from_fork_asm+0x1a/0x30
[ 100.928420][ C1]
[ 100.930756][ C1] Memory state around the buggy address:
[ 100.936393][ C1] ffff888072d26c00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 100.944466][ C1] ffff888072d26c80: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc
[ 100.952543][ C1] >ffff888072d26d00: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc
[ 100.960617][ C1] ^
[ 100.967306][ C1] ffff888072d26d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 100.975386][ C1] ffff888072d26e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 100.983458][ C1] ==================================================================
[ 100.991542][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.998767][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 101.007720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 101.017786][ C1] Call Trace:
[ 101.021089][ C1]
[ 101.023954][ C1] vpanic+0x56d/0xa60
[ 101.027979][ C1] ? __pfx_vpanic+0x10/0x10
[ 101.032546][ C1] panic+0xc5/0xd0
[ 101.036388][ C1] ? __pfx_panic+0x10/0x10
[ 101.040914][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.045799][ C1] ? rcu_is_watching+0x16/0xb0
[ 101.050596][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.055468][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.060359][ C1] check_panic_on_warn+0x89/0xb0
[ 101.065326][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.070201][ C1] end_report+0x73/0x170
[ 101.074468][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.079338][ C1] kasan_report+0x128/0x150
[ 101.083883][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 101.088757][ C1] aqc_raw_event+0x3a6/0x2930
[ 101.093479][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 101.099308][ C1] ? down_trylock+0x50/0xb0
[ 101.103852][ C1] __hid_input_report+0x41c/0x580
[ 101.108892][ C1] ? __pfx_aqc_raw_event+0x10/0x10
[ 101.114025][ C1] hid_irq_in+0x492/0x710
[ 101.118383][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 101.123870][ C1] dummy_timer+0xa91/0x4cf0
[ 101.128425][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 101.133391][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 101.139225][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 101.144191][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 101.149423][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 101.154552][ C1] handle_softirqs+0x226/0x860
[ 101.159346][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 101.164127][ C1] __irq_exit_rcu+0xcb/0x220
[ 101.168750][ C1] irq_exit_rcu+0x9/0x30
[ 101.173014][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 101.178668][ C1]
[ 101.181638][ C1]
[ 101.184589][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 101.190596][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 101.196257][ C1] Code: 9c 93 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 30 29 00 fb f4 4c 0b 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 101.215891][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[ 101.221983][ C1] RAX: 0000000000051d51 RBX: ffffffff819b2c50 RCX: 8000000000000001
[ 101.229979][ C1] RDX: 0000000000000001 RSI: ffffffff8e46c6fd RDI: ffffffff8c6d4780
[ 101.237969][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713
[ 101.245964][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000
[ 101.253966][ C1] R13: 1ffff11003c5a000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 101.261959][ C1] ? do_idle+0x2e0/0x540
[ 101.266253][ C1] default_idle+0x9/0x20
[ 101.270528][ C1] default_idle_call+0x72/0xb0
[ 101.275327][ C1] do_idle+0x2e0/0x540
[ 101.279425][ C1] ? __pfx_do_idle+0x10/0x10
[ 101.284032][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 101.289878][ C1] cpu_startup_entry+0x43/0x60
[ 101.294686][ C1] start_secondary+0x101/0x110
[ 101.299473][ C1] common_startup_64+0x13e/0x157
[ 101.304434][ C1]
[ 101.307623][ C1] Kernel Offset: disabled
[ 101.311959][ C1] Rebooting in 86400 seconds..