Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts.
2026/10/07 21:45:36 parsed 1 programs
2026/10/07 21:45:36 serving rpc on tcp://37693
Setting up swapspace version 1, size = 127995904 bytes
[ 111.697653][ T6028] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 114.480198][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.481861][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.482620][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.484074][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.484646][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.411280][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.411391][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.411471][ T6115] bridge_slave_0: entered allmulticast mode
[ 115.412377][ T6115] bridge_slave_0: entered promiscuous mode
[ 115.415706][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.415800][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.415907][ T6115] bridge_slave_1: entered allmulticast mode
[ 115.417560][ T6115] bridge_slave_1: entered promiscuous mode
[ 115.449213][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.452135][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.480157][ T6115] team0: Port device team_slave_0 added
[ 115.482771][ T6115] team0: Port device team_slave_1 added
[ 115.503758][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.503773][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.503793][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.504920][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.504932][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.504952][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.544080][ T6115] hsr_slave_0: entered promiscuous mode
[ 115.545028][ T6115] hsr_slave_1: entered promiscuous mode
[ 116.110826][ T6115] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.115362][ T6115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.116200][ T6115] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.119787][ T6115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.135945][ T6115] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.148643][ T6115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.151271][ T6115] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.166073][ T6115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.212437][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.212554][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.212793][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.212914][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.287731][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.301360][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.301993][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.335187][ T6115] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.348022][ T140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.348125][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.365805][ T140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.365914][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.860654][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.916175][ T6115] veth0_vlan: entered promiscuous mode
[ 116.927035][ T6115] veth1_vlan: entered promiscuous mode
[ 116.966190][ T6115] veth0_macvtap: entered promiscuous mode
[ 116.973276][ T6115] veth1_macvtap: entered promiscuous mode
[ 116.991931][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.001121][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.030357][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.030399][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.030430][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.030460][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.300340][ T3374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.414241][ T3374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.218477][ T3374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.952338][ T3374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.093746][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.093769][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.146105][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.146126][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.214777][ T3374] bridge_slave_1: left allmulticast mode
[ 120.214803][ T3374] bridge_slave_1: left promiscuous mode
[ 120.215005][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.241072][ T3374] bridge_slave_0: left allmulticast mode
[ 120.241097][ T3374] bridge_slave_0: left promiscuous mode
[ 120.241338][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.440838][ T3374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.443821][ T3374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.445451][ T3374] bond0 (unregistering): Released all slaves
[ 120.566662][ T3374] hsr_slave_0: left promiscuous mode
[ 120.567847][ T3374] hsr_slave_1: left promiscuous mode
[ 120.571070][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.571090][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.576396][ T3374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.576414][ T3374] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.591840][ T3374] veth1_macvtap: left promiscuous mode
[ 120.591877][ T3374] veth0_macvtap: left promiscuous mode
[ 120.592625][ T3374] veth1_vlan: left promiscuous mode
[ 120.592692][ T3374] veth0_vlan: left promiscuous mode
[ 120.914730][ T3374] team0 (unregistering): Port device team_slave_1 removed
[ 120.934293][ T3374] team0 (unregistering): Port device team_slave_0 removed
2026/10/07 21:45:53 executed programs: 0
[ 123.662510][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 123.664506][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 123.665419][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 123.666322][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 123.667251][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 123.882705][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[ 124.387671][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[ 124.423682][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.423814][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.423898][ T6387] bridge_slave_0: entered allmulticast mode
[ 124.424772][ T6387] bridge_slave_0: entered promiscuous mode
[ 124.427886][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.427981][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.428091][ T6387] bridge_slave_1: entered allmulticast mode
[ 124.429624][ T6387] bridge_slave_1: entered promiscuous mode
[ 124.457470][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 124.460416][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 124.505343][ T6387] team0: Port device team_slave_0 added
[ 124.508148][ T6387] team0: Port device team_slave_1 added
[ 124.548197][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 124.548215][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.548237][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 124.594759][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 124.594776][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 124.594797][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 124.697540][ T6387] hsr_slave_0: entered promiscuous mode
[ 124.698602][ T6387] hsr_slave_1: entered promiscuous mode
[ 125.238223][ T6387] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.251065][ T6387] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 125.252218][ T6387] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.255527][ T6387] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 125.256668][ T6387] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.292256][ T6387] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 125.293360][ T6387] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.296575][ T6387] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 125.405115][ T6387] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.426083][ T6387] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.440204][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.440385][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.447740][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.447824][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.760374][ T54] Bluetooth: hci0: command tx timeout
[ 125.979636][ T6387] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 126.039506][ T6387] veth0_vlan: entered promiscuous mode
[ 126.047202][ T6387] veth1_vlan: entered promiscuous mode
[ 126.088084][ T6387] veth0_macvtap: entered promiscuous mode
[ 126.094190][ T6387] veth1_macvtap: entered promiscuous mode
[ 126.111301][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.124271][ T6387] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.148907][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.148949][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.148979][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.149009][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.265658][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.265679][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.325022][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.325042][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.659287][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 126.819908][ T27] usb 1-1: New USB device found: idVendor=0c70, idProduct=f00e, bcdDevice=0.00
[ 126.822612][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 126.822654][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 126.825536][ T27] usb 1-1: config 0 descriptor??
[ 127.239644][ T27] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0
[ 127.430191][ C1] ==================================================================
[ 127.430208][ C1] BUG: KASAN: slab-out-of-bounds in aqc_raw_event+0x3a6/0x2930
[ 127.430255][ C1] Read of size 2 at addr ffff8880260913d7 by task swapper/1/0
[ 127.430264][ C1]
[ 127.430279][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 127.430294][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 127.430307][ C1] Call Trace:
[ 127.430311][ C1]
[ 127.430321][ C1] dump_stack_lvl+0xe8/0x150
[ 127.430336][ C1] print_address_description+0x55/0x1e0
[ 127.430347][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 127.430356][ C1] print_report+0x58/0x70
[ 127.430365][ C1] kasan_report+0x117/0x150
[ 127.430376][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 127.430387][ C1] aqc_raw_event+0x3a6/0x2930
[ 127.430398][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 127.430409][ C1] ? down_trylock+0x50/0xb0
[ 127.430419][ C1] __hid_input_report+0x41c/0x580
[ 127.430430][ C1] ? __pfx_aqc_raw_event+0x10/0x10
[ 127.430440][ C1] hid_irq_in+0x492/0x710
[ 127.430451][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 127.430463][ C1] dummy_timer+0xa91/0x4cc0
[ 127.430472][ C1] ? do_idle+0x2e0/0x540
[ 127.430493][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 127.430503][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 127.430514][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 127.430523][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 127.430536][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 127.430547][ C1] handle_softirqs+0x223/0x840
[ 127.430557][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 127.430567][ C1] __irq_exit_rcu+0xcb/0x220
[ 127.430577][ C1] irq_exit_rcu+0x9/0x30
[ 127.430588][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 127.430605][ C1]
[ 127.430611][ C1]
[ 127.430616][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 127.430632][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 127.430643][ C1] Code: db a4 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 09 2a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 127.430652][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246
[ 127.430666][ C1] RAX: 000000000005962d RBX: ffffffff819c5fb0 RCX: 8000000000000001
[ 127.430675][ C1] RDX: 0000000000000001 RSI: ffffffff8e772168 RDI: ffffffff8c8f4880
[ 127.430682][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8533e5b R09: 1ffff110170a67cb
[ 127.430690][ C1] R10: dffffc0000000000 R11: ffffed10170a67cc R12: 0000000000000000
[ 127.430697][ C1] R13: 1ffff11003c563e8 R14: 1ffff92000038fd0 R15: dffffc0000000000
[ 127.430706][ C1] ? do_idle+0x2e0/0x540
[ 127.430718][ C1] default_idle+0x9/0x20
[ 127.430727][ C1] default_idle_call+0x72/0xb0
[ 127.430736][ C1] do_idle+0x2e0/0x540
[ 127.430746][ C1] ? __pfx_do_idle+0x10/0x10
[ 127.430755][ C1] ? do_idle+0x4d2/0x540
[ 127.430765][ C1] cpu_startup_entry+0x43/0x60
[ 127.430774][ C1] start_secondary+0x101/0x110
[ 127.430784][ C1] common_startup_64+0x13e/0x157
[ 127.430798][ C1]
[ 127.430801][ C1]
[ 127.430804][ C1] Allocated by task 27:
[ 127.430809][ C1] kasan_save_track+0x3e/0x80
[ 127.430819][ C1] __kasan_kmalloc+0x93/0xb0
[ 127.430827][ C1] __kmalloc_noprof+0x366/0x710
[ 127.430836][ C1] usbhid_start+0x7ab/0x20a0
[ 127.430845][ C1] hid_hw_start+0x65/0x120
[ 127.430853][ C1] aqc_probe+0x109/0x27f0
[ 127.430861][ C1] hid_device_probe+0x46a/0x870
[ 127.430869][ C1] really_probe+0x254/0xae0
[ 127.430877][ C1] __driver_probe_device+0x1e8/0x360
[ 127.430886][ C1] driver_probe_device+0x4f/0x240
[ 127.430894][ C1] __device_attach_driver+0x270/0x410
[ 127.430903][ C1] bus_for_each_drv+0x258/0x2f0
[ 127.430912][ C1] __device_attach+0x2c4/0x450
[ 127.430919][ C1] device_initial_probe+0xa1/0xd0
[ 127.430928][ C1] bus_probe_device+0x12a/0x220
[ 127.430936][ C1] device_add+0x7d7/0xb80
[ 127.430944][ C1] hid_add_device+0x272/0x3e0
[ 127.430955][ C1] usbhid_probe+0x9d4/0xde0
[ 127.430963][ C1] usb_probe_interface+0x788/0xe50
[ 127.430972][ C1] really_probe+0x254/0xae0
[ 127.430980][ C1] __driver_probe_device+0x1e8/0x360
[ 127.430988][ C1] driver_probe_device+0x4f/0x240
[ 127.430997][ C1] __device_attach_driver+0x270/0x410
[ 127.431005][ C1] bus_for_each_drv+0x258/0x2f0
[ 127.431014][ C1] __device_attach+0x2c4/0x450
[ 127.431021][ C1] device_initial_probe+0xa1/0xd0
[ 127.431030][ C1] bus_probe_device+0x12a/0x220
[ 127.431038][ C1] device_add+0x7d7/0xb80
[ 127.431045][ C1] usb_set_configuration+0x1bb5/0x2260
[ 127.431054][ C1] usb_generic_driver_probe+0x8d/0x150
[ 127.431064][ C1] usb_probe_device+0x1c3/0x3b0
[ 127.431072][ C1] really_probe+0x254/0xae0
[ 127.431080][ C1] __driver_probe_device+0x1e8/0x360
[ 127.431100][ C1] driver_probe_device+0x4f/0x240
[ 127.431108][ C1] __device_attach_driver+0x270/0x410
[ 127.431116][ C1] bus_for_each_drv+0x258/0x2f0
[ 127.431125][ C1] __device_attach+0x2c4/0x450
[ 127.431133][ C1] device_initial_probe+0xa1/0xd0
[ 127.431141][ C1] bus_probe_device+0x12a/0x220
[ 127.431149][ C1] device_add+0x7d7/0xb80
[ 127.431157][ C1] usb_new_device+0x9aa/0x1690
[ 127.431165][ C1] hub_event+0x28e8/0x4d30
[ 127.431173][ C1] process_scheduled_works+0xc3d/0x1630
[ 127.431183][ C1] worker_thread+0xa47/0xfb0
[ 127.431191][ C1] kthread+0x38b/0x480
[ 127.431199][ C1] ret_from_fork+0x514/0xb70
[ 127.431207][ C1] ret_from_fork_asm+0x1a/0x30
[ 127.431216][ C1]
[ 127.431219][ C1] The buggy address belongs to the object at ffff888026091380
[ 127.431219][ C1] which belongs to the cache kmalloc-96 of size 96
[ 127.431227][ C1] The buggy address is located 22 bytes to the right of
[ 127.431227][ C1] allocated 65-byte region [ffff888026091380, ffff8880260913c1)
[ 127.431238][ C1]
[ 127.431240][ C1] The buggy address belongs to the physical page:
[ 127.431252][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026091080 pfn:0x26091
[ 127.431263][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 127.431276][ C1] page_type: f5(slab)
[ 127.431287][ C1] raw: 00fff00000000200 ffff88813ff24280 ffffea0000d53510 ffffea0000cb6f50
[ 127.431296][ C1] raw: ffff888026091080 0000000000200016 00000000f5000000 0000000000000000
[ 127.431301][ C1] page dumped because: kasan: bad access detected
[ 127.431309][ C1] page_owner tracks the page as allocated
[ 127.431313][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 64, tgid 64 (kworker/u8:4), ts 5426569708
[ 127.431330][ C1] post_alloc_hook+0x1f9/0x250
[ 127.431340][ C1] get_page_from_freelist+0x220f/0x2280
[ 127.431349][ C1] __alloc_frozen_pages_noprof+0x1fc/0x400
[ 127.431358][ C1] allocate_slab+0x7d/0x5e0
[ 127.431366][ C1] refill_objects+0x2d5/0x350
[ 127.431374][ C1] __pcs_replace_empty_main+0x2c8/0x6c0
[ 127.431384][ C1] __kmalloc_cache_node_noprof+0x446/0x620
[ 127.431393][ C1] __get_vm_area_node+0x155/0x2f0
[ 127.431401][ C1] __vmalloc_node_range_noprof+0x36e/0x16f0
[ 127.431410][ C1] __vmalloc_node_noprof+0xc2/0x100
[ 127.431419][ C1] dup_task_struct+0x2c6/0xa00
[ 127.431428][ C1] copy_process+0x7db/0x4430
[ 127.431436][ C1] kernel_clone+0x2d7/0x940
[ 127.431444][ C1] user_mode_thread+0x115/0x180
[ 127.431452][ C1] call_usermodehelper_exec_work+0x5c/0x230
[ 127.431462][ C1] process_scheduled_works+0xc3d/0x1630
[ 127.431471][ C1] page_owner free stack trace missing
[ 127.431474][ C1]
[ 127.431476][ C1] Memory state around the buggy address:
[ 127.431482][ C1] ffff888026091280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 127.431488][ C1] ffff888026091300: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 127.431495][ C1] >ffff888026091380: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc
[ 127.431500][ C1] ^
[ 127.431505][ C1] ffff888026091400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 127.431512][ C1] ffff888026091480: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 127.431517][ C1] ==================================================================
[ 127.431529][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 128.232918][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full)
[ 128.241945][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 128.252086][ C1] Call Trace:
[ 128.255358][ C1]
[ 128.258195][ C1] vpanic+0x26f/0x710
[ 128.262175][ C1] panic+0xc5/0xd0
[ 128.265905][ C1] ? __pfx_panic+0x10/0x10
[ 128.270319][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.275258][ C1] ? rcu_is_watching+0x16/0xb0
[ 128.280014][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.284855][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.289782][ C1] check_panic_on_warn+0x89/0xb0
[ 128.294888][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.299734][ C1] end_report+0x73/0x170
[ 128.304061][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.309163][ C1] kasan_report+0x128/0x150
[ 128.313670][ C1] ? aqc_raw_event+0x3a6/0x2930
[ 128.318513][ C1] aqc_raw_event+0x3a6/0x2930
[ 128.323190][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 128.328999][ C1] ? down_trylock+0x50/0xb0
[ 128.333499][ C1] __hid_input_report+0x41c/0x580
[ 128.338518][ C1] ? __pfx_aqc_raw_event+0x10/0x10
[ 128.343631][ C1] hid_irq_in+0x492/0x710
[ 128.347955][ C1] __usb_hcd_giveback_urb+0x378/0x540
[ 128.353324][ C1] dummy_timer+0xa91/0x4cc0
[ 128.357827][ C1] ? do_idle+0x2e0/0x540
[ 128.362093][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 128.367033][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 128.372855][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 128.377798][ C1] __hrtimer_run_queues+0x3bc/0xa10
[ 128.383001][ C1] hrtimer_run_softirq+0x1e3/0x2e0
[ 128.388105][ C1] handle_softirqs+0x223/0x840
[ 128.392868][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 128.397627][ C1] __irq_exit_rcu+0xcb/0x220
[ 128.402214][ C1] irq_exit_rcu+0x9/0x30
[ 128.406884][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 128.412579][ C1]
[ 128.415498][ C1]
[ 128.418418][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 128.424388][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 128.430014][ C1] Code: db a4 02 e9 03 18 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 09 2a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 128.449787][ C1] RSP: 0018:ffffc900001c7e40 EFLAGS: 00000246
[ 128.455849][ C1] RAX: 000000000005962d RBX: ffffffff819c5fb0 RCX: 8000000000000001
[ 128.463901][ C1] RDX: 0000000000000001 RSI: ffffffff8e772168 RDI: ffffffff8c8f4880
[ 128.471866][ C1] RBP: ffffc900001c7f10 R08: ffff8880b8533e5b R09: 1ffff110170a67cb
[ 128.479828][ C1] R10: dffffc0000000000 R11: ffffed10170a67cc R12: 0000000000000000
[ 128.487796][ C1] R13: 1ffff11003c563e8 R14: 1ffff92000038fd0 R15: dffffc0000000000
[ 128.495791][ C1] ? do_idle+0x2e0/0x540
[ 128.500081][ C1] default_idle+0x9/0x20
[ 128.504326][ C1] default_idle_call+0x72/0xb0
[ 128.509118][ C1] do_idle+0x2e0/0x540
[ 128.513297][ C1] ? __pfx_do_idle+0x10/0x10
[ 128.517911][ C1] ? do_idle+0x4d2/0x540
[ 128.522151][ C1] cpu_startup_entry+0x43/0x60
[ 128.526941][ C1] start_secondary+0x101/0x110
[ 128.531699][ C1] common_startup_64+0x13e/0x157
[ 128.536634][ C1]
[ 128.540014][ C1] Kernel Offset: disabled
[ 128.544525][ C1] Rebooting in 86400 seconds..