Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts.
2026/08/13 02:04:37 parsed 1 programs
2026/08/13 02:04:37 serving rpc on tcp://38553
[ 84.897040][ T5623] cgroup: Unknown subsys name 'net'
[ 85.009855][ T5623] cgroup: Unknown subsys name 'cpuset'
[ 85.019171][ T5623] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.647760][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.169512][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 90.191174][ T5642] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 90.208647][ T5642] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 90.221718][ T5642] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 90.240752][ T5642] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 91.400158][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.408179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.449586][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.457516][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.003101][ T5679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.011760][ T5679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.020413][ T5679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.034396][ T5679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.044691][ T5679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.053317][ T9] cfg80211: failed to load regulatory.db
[ 94.152056][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.160139][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.167420][ T5707] bridge_slave_0: entered allmulticast mode
[ 94.174713][ T5707] bridge_slave_0: entered promiscuous mode
[ 94.185294][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.192705][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.199980][ T5707] bridge_slave_1: entered allmulticast mode
[ 94.207383][ T5707] bridge_slave_1: entered promiscuous mode
[ 94.239215][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.250977][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.283526][ T5707] team0: Port device team_slave_0 added
[ 94.291529][ T5707] team0: Port device team_slave_1 added
[ 94.319606][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.326605][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.352568][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.365517][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.372543][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.399076][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.447365][ T5707] hsr_slave_0: entered promiscuous mode
[ 94.453769][ T5707] hsr_slave_1: entered promiscuous mode
[ 94.617162][ T5707] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.630242][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 94.638539][ T5707] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.648997][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 94.657205][ T5707] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.668076][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 94.675926][ T5707] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.688732][ T5707] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 94.719866][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.727326][ T5707] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.735037][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.742244][ T5707] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.808717][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.826763][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.837816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.854926][ T5707] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.870468][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.877612][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.891174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.898362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.246712][ T5707] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.294083][ T5707] veth0_vlan: entered promiscuous mode
[ 95.314173][ T5707] veth1_vlan: entered promiscuous mode
[ 95.346925][ T5707] veth0_macvtap: entered promiscuous mode
[ 95.357105][ T5707] veth1_macvtap: entered promiscuous mode
[ 95.379090][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.395577][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.427742][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.456780][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.467143][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.480010][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.623372][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.723692][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.813756][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.921382][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/13 02:04:52 executed programs: 0
[ 96.142348][ T5679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.151243][ T5679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.162194][ T5679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.171172][ T5679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.182538][ T5679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.798604][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.806317][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.813537][ T5747] bridge_slave_0: entered allmulticast mode
[ 96.821063][ T5747] bridge_slave_0: entered promiscuous mode
[ 96.829773][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.837168][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.844306][ T5747] bridge_slave_1: entered allmulticast mode
[ 96.851907][ T5747] bridge_slave_1: entered promiscuous mode
[ 96.886951][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.899315][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.935724][ T5747] team0: Port device team_slave_0 added
[ 96.944186][ T5747] team0: Port device team_slave_1 added
[ 96.973752][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.981652][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.008537][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.024098][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.031400][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 97.058115][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.109816][ T5747] hsr_slave_0: entered promiscuous mode
[ 97.116487][ T5747] hsr_slave_1: entered promiscuous mode
[ 97.123210][ T5747] debugfs: 'hsr0' already exists in 'hsr'
[ 97.129121][ T5747] Cannot create hsr debugfs directory
[ 98.139687][ T13] bridge_slave_1: left allmulticast mode
[ 98.155980][ T13] bridge_slave_1: left promiscuous mode
[ 98.162972][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.177736][ T13] bridge_slave_0: left allmulticast mode
[ 98.183421][ T13] bridge_slave_0: left promiscuous mode
[ 98.189592][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.262526][ T50] Bluetooth: hci0: command tx timeout
[ 98.395389][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.409471][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.427653][ T13] bond0 (unregistering): Released all slaves
[ 98.548253][ T13] hsr_slave_0: left promiscuous mode
[ 98.556698][ T13] hsr_slave_1: left promiscuous mode
[ 98.562800][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 98.570983][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 98.580106][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 98.587850][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 98.607534][ T13] veth1_macvtap: left promiscuous mode
[ 98.613457][ T13] veth0_macvtap: left promiscuous mode
[ 98.619288][ T13] veth1_vlan: left promiscuous mode
[ 98.624631][ T13] veth0_vlan: left promiscuous mode
[ 98.863763][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 98.906377][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 99.014619][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[ 99.344492][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.365203][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 99.377613][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.389119][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 99.397636][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.409147][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 99.463792][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.475206][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 99.609007][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.646241][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.674941][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.682177][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.694281][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.701518][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.228965][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.273880][ T5747] veth0_vlan: entered promiscuous mode
[ 100.286766][ T5747] veth1_vlan: entered promiscuous mode
[ 100.318323][ T5747] veth0_macvtap: entered promiscuous mode
[ 100.328784][ T5747] veth1_macvtap: entered promiscuous mode
[ 100.336180][ T50] Bluetooth: hci0: command tx timeout
[ 100.356405][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.370017][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.418033][ T1034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.427933][ T1034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.438047][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.469352][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.477554][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.510040][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.518747][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.545892][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.826314][ T5822] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 100.986662][ T5822] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 100.998798][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 101.489774][ T5822] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/input/input5
[ 101.575960][ T5822] rc_core: IR keymap rc-rc6-mce not found
[ 101.581868][ T5822] Registered IR keymap rc-empty
[ 101.590076][ T5822] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0
[ 101.603868][ T5822] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0/input6
[ 101.687567][ T29] hid-picolcd 0003:04D8:C002.0001: offset (1) exceeds report_count (1)
[ 101.687636][ T29] ==================================================================
[ 101.687647][ T29] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xcb/0xd0
[ 101.687688][ T29] Read of size 4 at addr ffff888031509cc0 by task kworker/1:1/29
[ 101.687706][ T29]
[ 101.687726][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 101.687764][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 101.687785][ T29] Workqueue: events fb_deferred_io_work
[ 101.687836][ T29] Call Trace:
[ 101.687844][ T29]
[ 101.687852][ T29] dump_stack_lvl+0xe8/0x150
[ 101.687881][ T29] print_address_description+0x55/0x1e0
[ 101.687907][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.687927][ T29] print_report+0x58/0x70
[ 101.687950][ T29] kasan_report+0x117/0x150
[ 101.687979][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.688004][ T29] hid_dump_input+0xcb/0xd0
[ 101.688025][ T29] hid_set_field+0xd3/0x440
[ 101.688053][ T29] picolcd_fb_deferred_io+0x6d5/0x1880
[ 101.688091][ T29] ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[ 101.688119][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.688142][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.688172][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.688194][ T29] fb_deferred_io_work+0x1cf/0x310
[ 101.688222][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.688243][ T29] process_scheduled_works+0xa8e/0x14e0
[ 101.688279][ T29] ? __pfx_process_scheduled_works+0x10/0x10
[ 101.688303][ T29] ? assign_work+0x3cf/0x5d0
[ 101.688326][ T29] worker_thread+0xa47/0xfb0
[ 101.688361][ T29] kthread+0x388/0x470
[ 101.688388][ T29] ? __pfx_worker_thread+0x10/0x10
[ 101.688408][ T29] ? __pfx_kthread+0x10/0x10
[ 101.688435][ T29] ret_from_fork+0x514/0xb70
[ 101.688467][ T29] ? __pfx_ret_from_fork+0x10/0x10
[ 101.688494][ T29] ? __switch_to+0xc89/0x1420
[ 101.688518][ T29] ? __pfx_kthread+0x10/0x10
[ 101.688545][ T29] ret_from_fork_asm+0x1a/0x30
[ 101.688580][ T29]
[ 101.688587][ T29]
[ 101.688598][ T29] Allocated by task 5822:
[ 101.688609][ T29] kasan_save_track+0x3e/0x80
[ 101.688632][ T29] __kasan_kmalloc+0x93/0xb0
[ 101.688656][ T29] __kvmalloc_node_noprof+0x53f/0x860
[ 101.688681][ T29] hid_add_field+0x70a/0x1840
[ 101.688708][ T29] hid_parser_main+0x2e1/0xd50
[ 101.688735][ T29] hid_open_report+0x884/0xf00
[ 101.688757][ T29] picolcd_probe+0x177/0x16c0
[ 101.688778][ T29] hid_device_probe+0x42c/0x7c0
[ 101.688804][ T29] really_probe+0x254/0xae0
[ 101.688825][ T29] __driver_probe_device+0x1e8/0x360
[ 101.688846][ T29] driver_probe_device+0x4f/0x240
[ 101.688868][ T29] __device_attach_driver+0x270/0x410
[ 101.688890][ T29] bus_for_each_drv+0x258/0x2f0
[ 101.688925][ T29] __device_attach+0x2c4/0x450
[ 101.688944][ T29] device_initial_probe+0xa1/0xd0
[ 101.688964][ T29] bus_probe_device+0x12a/0x220
[ 101.688989][ T29] device_add+0x7d7/0xb80
[ 101.689006][ T29] hid_add_device+0x272/0x3e0
[ 101.689032][ T29] usbhid_probe+0x9d4/0xde0
[ 101.689055][ T29] usb_probe_interface+0x653/0xc60
[ 101.689073][ T29] really_probe+0x254/0xae0
[ 101.689094][ T29] __driver_probe_device+0x1e8/0x360
[ 101.689115][ T29] driver_probe_device+0x4f/0x240
[ 101.689137][ T29] __device_attach_driver+0x270/0x410
[ 101.689166][ T29] bus_for_each_drv+0x258/0x2f0
[ 101.689192][ T29] __device_attach+0x2c4/0x450
[ 101.689212][ T29] device_initial_probe+0xa1/0xd0
[ 101.689231][ T29] bus_probe_device+0x12a/0x220
[ 101.689257][ T29] device_add+0x7d7/0xb80
[ 101.689273][ T29] usb_set_configuration+0x1ad8/0x2180
[ 101.689301][ T29] usb_generic_driver_probe+0x8d/0x150
[ 101.689328][ T29] usb_probe_device+0x1c3/0x3b0
[ 101.689346][ T29] really_probe+0x254/0xae0
[ 101.689366][ T29] __driver_probe_device+0x1e8/0x360
[ 101.689387][ T29] driver_probe_device+0x4f/0x240
[ 101.689409][ T29] __device_attach_driver+0x270/0x410
[ 101.689431][ T29] bus_for_each_drv+0x258/0x2f0
[ 101.689457][ T29] __device_attach+0x2c4/0x450
[ 101.689476][ T29] device_initial_probe+0xa1/0xd0
[ 101.689502][ T29] bus_probe_device+0x12a/0x220
[ 101.689528][ T29] device_add+0x7d7/0xb80
[ 101.689544][ T29] usb_new_device+0x9aa/0x1690
[ 101.689567][ T29] hub_event+0x28e8/0x4d30
[ 101.689592][ T29] process_scheduled_works+0xa8e/0x14e0
[ 101.689618][ T29] worker_thread+0xa47/0xfb0
[ 101.689638][ T29] kthread+0x388/0x470
[ 101.689661][ T29] ret_from_fork+0x514/0xb70
[ 101.689685][ T29] ret_from_fork_asm+0x1a/0x30
[ 101.689712][ T29]
[ 101.689717][ T29] The buggy address belongs to the object at ffff888031509c00
[ 101.689717][ T29] which belongs to the cache kmalloc-192 of size 192
[ 101.689735][ T29] The buggy address is located 16 bytes to the right of
[ 101.689735][ T29] allocated 176-byte region [ffff888031509c00, ffff888031509cb0)
[ 101.689756][ T29]
[ 101.689761][ T29] The buggy address belongs to the physical page:
[ 101.689778][ T29] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31509
[ 101.689797][ T29] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 101.689828][ T29] page_type: f5(slab)
[ 101.689847][ T29] raw: 00fff00000000000 ffff88801b0043c0 dead000000000100 dead000000000122
[ 101.689860][ T29] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 101.689868][ T29] page dumped because: kasan: bad access detected
[ 101.689881][ T29] page_owner tracks the page as allocated
[ 101.689890][ T29] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5747, tgid 5747 (syz-executor), ts 100542642473, free_ts 100527528442
[ 101.689915][ T29] post_alloc_hook+0x1f9/0x250
[ 101.689930][ T29] get_page_from_freelist+0x21fa/0x2270
[ 101.689948][ T29] __alloc_frozen_pages_noprof+0x18d/0x380
[ 101.689966][ T29] allocate_slab+0x79/0x5e0
[ 101.689977][ T29] refill_objects+0x2d5/0x350
[ 101.689988][ T29] __pcs_replace_empty_main+0x2bf/0x6b0
[ 101.690008][ T29] __kmalloc_flags_noprof+0x5be/0x800
[ 101.690024][ T29] alloc_slab_obj_exts+0x4d/0x170
[ 101.690072][ T29] __memcg_slab_post_alloc_hook+0x5d3/0xf10
[ 101.690116][ T29] kmem_cache_alloc_noprof+0x350/0x5f0
[ 101.690135][ T29] alloc_empty_file+0x5b/0x1d0
[ 101.690174][ T29] path_openat+0x8f/0x3830
[ 101.690200][ T29] do_file_open+0x23e/0x4a0
[ 101.690259][ T29] do_sys_openat2+0x115/0x200
[ 101.690283][ T29] __ia32_compat_sys_openat+0x131/0x160
[ 101.690308][ T29] do_int80_emulation+0x19a/0x550
[ 101.690328][ T29] page last free pid 15 tgid 15 stack trace:
[ 101.690336][ T29] __free_frozen_pages+0xc1e/0xd10
[ 101.690351][ T29] rcu_core+0x78b/0x10a0
[ 101.690374][ T29] handle_softirqs+0x225/0x840
[ 101.690388][ T29] run_ksoftirqd+0x36/0x60
[ 101.690404][ T29] smpboot_thread_fn+0x57c/0xa80
[ 101.690419][ T29] kthread+0x388/0x470
[ 101.690437][ T29] ret_from_fork+0x514/0xb70
[ 101.690454][ T29] ret_from_fork_asm+0x1a/0x30
[ 101.690474][ T29]
[ 101.690477][ T29] Memory state around the buggy address:
[ 101.690485][ T29] ffff888031509b80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 101.690495][ T29] ffff888031509c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 101.690513][ T29] >ffff888031509c80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 101.690521][ T29] ^
[ 101.690529][ T29] ffff888031509d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 101.690538][ T29] ffff888031509d80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 101.690546][ T29] ==================================================================
[ 101.690559][ T29] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.690574][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full)
[ 101.690590][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 101.690599][ T29] Workqueue: events fb_deferred_io_work
[ 101.690620][ T29] Call Trace:
[ 101.690626][ T29]
[ 101.690632][ T29] vpanic+0x56c/0xa60
[ 101.690656][ T29] ? __pfx_vpanic+0x10/0x10
[ 101.690680][ T29] panic+0xc5/0xd0
[ 101.690699][ T29] ? __pfx_panic+0x10/0x10
[ 101.690719][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690735][ T29] ? rcu_is_watching+0x15/0xb0
[ 101.690757][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690772][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690787][ T29] check_panic_on_warn+0x89/0xb0
[ 101.690807][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690822][ T29] end_report+0x73/0x170
[ 101.690841][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690855][ T29] kasan_report+0x128/0x150
[ 101.690876][ T29] ? hid_dump_input+0xcb/0xd0
[ 101.690894][ T29] hid_dump_input+0xcb/0xd0
[ 101.690909][ T29] hid_set_field+0xd3/0x440
[ 101.690929][ T29] picolcd_fb_deferred_io+0x6d5/0x1880
[ 101.690957][ T29] ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[ 101.690976][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.690992][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.691008][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.691024][ T29] fb_deferred_io_work+0x1cf/0x310
[ 101.691044][ T29] ? process_scheduled_works+0xa20/0x14e0
[ 101.691059][ T29] process_scheduled_works+0xa8e/0x14e0
[ 101.691084][ T29] ? __pfx_process_scheduled_works+0x10/0x10
[ 101.691101][ T29] ? assign_work+0x3cf/0x5d0
[ 101.691117][ T29] worker_thread+0xa47/0xfb0
[ 101.691142][ T29] kthread+0x388/0x470
[ 101.691166][ T29] ? __pfx_worker_thread+0x10/0x10
[ 101.691181][ T29] ? __pfx_kthread+0x10/0x10
[ 101.691200][ T29] ret_from_fork+0x514/0xb70
[ 101.691221][ T29] ? __pfx_ret_from_fork+0x10/0x10
[ 101.691240][ T29] ? __switch_to+0xc89/0x1420
[ 101.691258][ T29] ? __pfx_kthread+0x10/0x10
[ 101.691310][ T29] ret_from_fork_asm+0x1a/0x30
[ 101.691342][ T29]
[ 101.691509][ T29] Kernel Offset: disabled