Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
2026/08/13 10:15:29 parsed 1 programs
2026/08/13 10:15:29 serving rpc on tcp://45563
[ 80.101629][ T5619] cgroup: Unknown subsys name 'net'
[ 80.216122][ T5619] cgroup: Unknown subsys name 'cpuset'
[ 80.226179][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 81.607756][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 84.220954][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 84.239592][ T5633] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 84.254306][ T5633] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 84.268527][ T5633] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 84.285126][ T5633] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[ 85.847132][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.855058][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.862661][ T5659] bridge_slave_0: entered allmulticast mode
[ 85.869975][ T5659] bridge_slave_0: entered promiscuous mode
[ 85.879300][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.886509][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.893934][ T5659] bridge_slave_1: entered allmulticast mode
[ 85.901099][ T5659] bridge_slave_1: entered promiscuous mode
[ 85.927540][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.938811][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.965621][ T5659] team0: Port device team_slave_0 added
[ 85.974089][ T5659] team0: Port device team_slave_1 added
[ 85.996712][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.003944][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.029860][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.042171][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.049201][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.075234][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.112008][ T5659] hsr_slave_0: entered promiscuous mode
[ 86.119057][ T5659] hsr_slave_1: entered promiscuous mode
[ 86.253197][ T5659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.266725][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 86.275041][ T5659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.284767][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 86.292551][ T5659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.304090][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 86.311878][ T5659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.322460][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 86.353843][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.361082][ T5659] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.369062][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.376235][ T5659] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.433993][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.453603][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.463860][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.480814][ T5659] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.494738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.501998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.516842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.524072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 86.786709][ T9] cfg80211: failed to load regulatory.db
[ 86.822047][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.888113][ T5659] veth0_vlan: entered promiscuous mode
[ 86.905882][ T5659] veth1_vlan: entered promiscuous mode
[ 86.955133][ T5659] veth0_macvtap: entered promiscuous mode
[ 86.969997][ T5659] veth1_macvtap: entered promiscuous mode
[ 86.995038][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.019987][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.064955][ T3289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.078004][ T3289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.113494][ T3289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.124696][ T3289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.208934][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.219817][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.232968][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.239280][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.240917][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.261786][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 87.352017][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.455059][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.534037][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.867599][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.877724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.911116][ T3289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.920089][ T3289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/13 10:15:40 executed programs: 0
[ 89.232210][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.241940][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.252523][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.263214][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.271951][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.358383][ T12] bridge_slave_1: left allmulticast mode
[ 89.366337][ T12] bridge_slave_1: left promiscuous mode
[ 89.375810][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.388921][ T12] bridge_slave_0: left allmulticast mode
[ 89.395954][ T12] bridge_slave_0: left promiscuous mode
[ 89.402343][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.518970][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 89.530279][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 89.540221][ T12] bond0 (unregistering): Released all slaves
[ 89.665985][ T12] hsr_slave_0: left promiscuous mode
[ 89.686188][ T12] hsr_slave_1: left promiscuous mode
[ 89.693378][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 89.700896][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 89.720855][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 89.728671][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 89.748525][ T12] veth1_macvtap: left promiscuous mode
[ 89.754988][ T12] veth0_macvtap: left promiscuous mode
[ 89.760616][ T12] veth1_vlan: left promiscuous mode
[ 89.766729][ T12] veth0_vlan: left promiscuous mode
[ 90.069752][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 90.089220][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 90.188079][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[ 91.012918][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.020243][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.027500][ T5745] bridge_slave_0: entered allmulticast mode
[ 91.035317][ T5745] bridge_slave_0: entered promiscuous mode
[ 91.045904][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[ 91.053270][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.063531][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.071377][ T5745] bridge_slave_1: entered allmulticast mode
[ 91.080170][ T5745] bridge_slave_1: entered promiscuous mode
[ 91.170201][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.184396][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.256384][ T5745] team0: Port device team_slave_0 added
[ 91.336344][ T50] Bluetooth: hci0: command tx timeout
[ 91.336919][ T5745] team0: Port device team_slave_1 added
[ 91.479024][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.488149][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.516902][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.544946][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.551926][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.585593][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.713675][ T5745] hsr_slave_0: entered promiscuous mode
[ 91.720526][ T5745] hsr_slave_1: entered promiscuous mode
[ 91.817303][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[ 92.335105][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.345390][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 92.353996][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.374641][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 92.383184][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.394028][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 92.402254][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.416168][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 92.522290][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.549242][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.564983][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.572187][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.594711][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.601908][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.080986][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.145333][ T5745] veth0_vlan: entered promiscuous mode
[ 93.161394][ T5745] veth1_vlan: entered promiscuous mode
[ 93.201246][ T5745] veth0_macvtap: entered promiscuous mode
[ 93.215335][ T5745] veth1_macvtap: entered promiscuous mode
[ 93.246422][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.266386][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.314560][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.343362][ T3289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.372046][ T3289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.411324][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.413488][ T50] Bluetooth: hci0: command tx timeout
[ 93.438009][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.483136][ T200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.497447][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.507521][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.912520][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 94.101418][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[ 94.124956][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.627769][ T24] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/input/input5
[ 94.722819][ T24] rc_core: IR keymap rc-rc6-mce not found
[ 94.728642][ T24] Registered IR keymap rc-empty
[ 94.735373][ T24] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0
[ 94.747974][ T24] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0001/rc/rc0/input6
[ 94.808356][ T5793] hid-picolcd 0003:04D8:C002.0001: offset (1) exceeds report_count (1)
[ 94.808417][ T5793] ==================================================================
[ 94.808426][ T5793] BUG: KASAN: slab-out-of-bounds in hid_dump_input+0xcb/0xd0
[ 94.808462][ T5793] Read of size 4 at addr ffff88807546e0c0 by task kworker/1:3/5793
[ 94.808476][ T5793]
[ 94.808492][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full)
[ 94.808510][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 94.808519][ T5793] Workqueue: events fb_deferred_io_work
[ 94.808552][ T5793] Call Trace:
[ 94.808558][ T5793]
[ 94.808564][ T5793] dump_stack_lvl+0xe8/0x150
[ 94.808585][ T5793] print_address_description+0x55/0x1e0
[ 94.808605][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.808620][ T5793] print_report+0x58/0x70
[ 94.808637][ T5793] kasan_report+0x117/0x150
[ 94.808659][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.808678][ T5793] hid_dump_input+0xcb/0xd0
[ 94.808694][ T5793] hid_set_field+0xd3/0x440
[ 94.808713][ T5793] picolcd_fb_deferred_io+0x6d5/0x1880
[ 94.808739][ T5793] ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[ 94.808758][ T5793] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.808775][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.808792][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.808809][ T5793] fb_deferred_io_work+0x1cf/0x310
[ 94.808828][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.808843][ T5793] process_scheduled_works+0xa8e/0x14e0
[ 94.808869][ T5793] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.808885][ T5793] ? assign_work+0x3cf/0x5d0
[ 94.808902][ T5793] worker_thread+0xa47/0xfb0
[ 94.808922][ T5793] ? __kthread_parkme+0x71/0x1f0
[ 94.808942][ T5793] kthread+0x388/0x470
[ 94.808961][ T5793] ? __pfx_worker_thread+0x10/0x10
[ 94.808976][ T5793] ? __pfx_kthread+0x10/0x10
[ 94.808994][ T5793] ret_from_fork+0x514/0xb70
[ 94.809013][ T5793] ? __pfx_ret_from_fork+0x10/0x10
[ 94.809031][ T5793] ? __switch_to+0xc89/0x1420
[ 94.809048][ T5793] ? __pfx_kthread+0x10/0x10
[ 94.809066][ T5793] ret_from_fork_asm+0x1a/0x30
[ 94.809092][ T5793]
[ 94.809098][ T5793]
[ 94.809108][ T5793] Allocated by task 24:
[ 94.809116][ T5793] kasan_save_track+0x3e/0x80
[ 94.809132][ T5793] __kasan_kmalloc+0x93/0xb0
[ 94.809148][ T5793] __kvmalloc_node_noprof+0x53f/0x860
[ 94.809166][ T5793] hid_add_field+0x70a/0x1840
[ 94.809185][ T5793] hid_parser_main+0x2e1/0xd50
[ 94.809203][ T5793] hid_open_report+0x884/0xf00
[ 94.809218][ T5793] picolcd_probe+0x177/0x16c0
[ 94.809233][ T5793] hid_device_probe+0x42c/0x7c0
[ 94.809249][ T5793] really_probe+0x254/0xae0
[ 94.809264][ T5793] __driver_probe_device+0x1e8/0x360
[ 94.809277][ T5793] driver_probe_device+0x4f/0x240
[ 94.809291][ T5793] __device_attach_driver+0x270/0x410
[ 94.809305][ T5793] bus_for_each_drv+0x258/0x2f0
[ 94.809323][ T5793] __device_attach+0x2c4/0x450
[ 94.809346][ T5793] device_initial_probe+0xa1/0xd0
[ 94.809361][ T5793] bus_probe_device+0x12a/0x220
[ 94.809379][ T5793] device_add+0x7d7/0xb80
[ 94.809392][ T5793] hid_add_device+0x272/0x3e0
[ 94.809409][ T5793] usbhid_probe+0x9d4/0xde0
[ 94.809426][ T5793] usb_probe_interface+0x653/0xc60
[ 94.809440][ T5793] really_probe+0x254/0xae0
[ 94.809455][ T5793] __driver_probe_device+0x1e8/0x360
[ 94.809470][ T5793] driver_probe_device+0x4f/0x240
[ 94.809485][ T5793] __device_attach_driver+0x270/0x410
[ 94.809499][ T5793] bus_for_each_drv+0x258/0x2f0
[ 94.809517][ T5793] __device_attach+0x2c4/0x450
[ 94.809531][ T5793] device_initial_probe+0xa1/0xd0
[ 94.809546][ T5793] bus_probe_device+0x12a/0x220
[ 94.809563][ T5793] device_add+0x7d7/0xb80
[ 94.809576][ T5793] usb_set_configuration+0x1ad8/0x2180
[ 94.809596][ T5793] usb_generic_driver_probe+0x8d/0x150
[ 94.809615][ T5793] usb_probe_device+0x1c3/0x3b0
[ 94.809627][ T5793] really_probe+0x254/0xae0
[ 94.809642][ T5793] __driver_probe_device+0x1e8/0x360
[ 94.809657][ T5793] driver_probe_device+0x4f/0x240
[ 94.809672][ T5793] __device_attach_driver+0x270/0x410
[ 94.809688][ T5793] bus_for_each_drv+0x258/0x2f0
[ 94.809705][ T5793] __device_attach+0x2c4/0x450
[ 94.809720][ T5793] device_initial_probe+0xa1/0xd0
[ 94.809735][ T5793] bus_probe_device+0x12a/0x220
[ 94.809752][ T5793] device_add+0x7d7/0xb80
[ 94.809765][ T5793] usb_new_device+0x9aa/0x1690
[ 94.809781][ T5793] hub_event+0x28e8/0x4d30
[ 94.809799][ T5793] process_scheduled_works+0xa8e/0x14e0
[ 94.809813][ T5793] worker_thread+0xa47/0xfb0
[ 94.809827][ T5793] kthread+0x388/0x470
[ 94.809843][ T5793] ret_from_fork+0x514/0xb70
[ 94.809860][ T5793] ret_from_fork_asm+0x1a/0x30
[ 94.809879][ T5793]
[ 94.809883][ T5793] The buggy address belongs to the object at ffff88807546e000
[ 94.809883][ T5793] which belongs to the cache kmalloc-192 of size 192
[ 94.809897][ T5793] The buggy address is located 16 bytes to the right of
[ 94.809897][ T5793] allocated 176-byte region [ffff88807546e000, ffff88807546e0b0)
[ 94.809913][ T5793]
[ 94.809918][ T5793] The buggy address belongs to the physical page:
[ 94.809932][ T5793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807546e400 pfn:0x7546e
[ 94.809949][ T5793] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 94.809975][ T5793] page_type: f5(slab)
[ 94.809995][ T5793] raw: 00fff00000000200 ffff88801b0043c0 ffffea00007da7d0 ffff88813fe3f288
[ 94.810008][ T5793] raw: ffff88807546e400 0000000800100004 00000000f5000000 0000000000000000
[ 94.810016][ T5793] page dumped because: kasan: bad access detected
[ 94.810032][ T5793] page_owner tracks the page as allocated
[ 94.810038][ T5793] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24, tgid 24 (kworker/1:0), ts 94566666617, free_ts 94566286152
[ 94.810064][ T5793] post_alloc_hook+0x1f9/0x250
[ 94.810080][ T5793] get_page_from_freelist+0x21fa/0x2270
[ 94.810098][ T5793] __alloc_frozen_pages_noprof+0x18d/0x380
[ 94.810116][ T5793] allocate_slab+0x79/0x5e0
[ 94.810128][ T5793] refill_objects+0x2d5/0x350
[ 94.810141][ T5793] __pcs_replace_empty_main+0x2bf/0x6b0
[ 94.810160][ T5793] __kvmalloc_node_noprof+0x66b/0x860
[ 94.810176][ T5793] hid_add_field+0x70a/0x1840
[ 94.810195][ T5793] hid_parser_main+0x2e1/0xd50
[ 94.810213][ T5793] hid_open_report+0x884/0xf00
[ 94.810229][ T5793] picolcd_probe+0x177/0x16c0
[ 94.810245][ T5793] hid_device_probe+0x42c/0x7c0
[ 94.810262][ T5793] really_probe+0x254/0xae0
[ 94.810275][ T5793] __driver_probe_device+0x1e8/0x360
[ 94.810290][ T5793] driver_probe_device+0x4f/0x240
[ 94.810306][ T5793] __device_attach_driver+0x270/0x410
[ 94.810322][ T5793] page last free pid 24 tgid 24 stack trace:
[ 94.810339][ T5793] __free_frozen_pages+0xc1e/0xd10
[ 94.810355][ T5793] __kasan_populate_vmalloc+0x1a8/0x1c0
[ 94.810371][ T5793] alloc_vmap_area+0xd1a/0x1420
[ 94.810385][ T5793] __get_vm_area_node+0x1f2/0x300
[ 94.810399][ T5793] __vmalloc_node_range_noprof+0x358/0x1730
[ 94.810415][ T5793] vzalloc_noprof+0xb2/0xe0
[ 94.810430][ T5793] hid_open_report+0x2c4/0xf00
[ 94.810445][ T5793] picolcd_probe+0x177/0x16c0
[ 94.810460][ T5793] hid_device_probe+0x42c/0x7c0
[ 94.810478][ T5793] really_probe+0x254/0xae0
[ 94.810493][ T5793] __driver_probe_device+0x1e8/0x360
[ 94.810508][ T5793] driver_probe_device+0x4f/0x240
[ 94.810524][ T5793] __device_attach_driver+0x270/0x410
[ 94.810539][ T5793] bus_for_each_drv+0x258/0x2f0
[ 94.810557][ T5793] __device_attach+0x2c4/0x450
[ 94.810571][ T5793] device_initial_probe+0xa1/0xd0
[ 94.810586][ T5793]
[ 94.810590][ T5793] Memory state around the buggy address:
[ 94.810599][ T5793] ffff88807546df80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 94.810610][ T5793] ffff88807546e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 94.810620][ T5793] >ffff88807546e080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 94.810627][ T5793] ^
[ 94.810636][ T5793] ffff88807546e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 94.810645][ T5793] ffff88807546e180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 94.810653][ T5793] ==================================================================
[ 94.810663][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 94.810679][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full)
[ 94.810697][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 94.810706][ T5793] Workqueue: events fb_deferred_io_work
[ 94.810727][ T5793] Call Trace:
[ 94.810734][ T5793]
[ 94.810740][ T5793] vpanic+0x56c/0xa60
[ 94.810761][ T5793] ? __pfx_vpanic+0x10/0x10
[ 94.810783][ T5793] panic+0xc5/0xd0
[ 94.810801][ T5793] ? __pfx_panic+0x10/0x10
[ 94.810819][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810834][ T5793] ? rcu_is_watching+0x15/0xb0
[ 94.810856][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810872][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810887][ T5793] check_panic_on_warn+0x89/0xb0
[ 94.810908][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810923][ T5793] end_report+0x73/0x170
[ 94.810942][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810958][ T5793] kasan_report+0x128/0x150
[ 94.810978][ T5793] ? hid_dump_input+0xcb/0xd0
[ 94.810997][ T5793] hid_dump_input+0xcb/0xd0
[ 94.811012][ T5793] hid_set_field+0xd3/0x440
[ 94.811032][ T5793] picolcd_fb_deferred_io+0x6d5/0x1880
[ 94.811060][ T5793] ? __pfx_picolcd_fb_deferred_io+0x10/0x10
[ 94.811080][ T5793] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 94.811097][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.811114][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.811131][ T5793] fb_deferred_io_work+0x1cf/0x310
[ 94.811153][ T5793] ? process_scheduled_works+0xa20/0x14e0
[ 94.811169][ T5793] process_scheduled_works+0xa8e/0x14e0
[ 94.811194][ T5793] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.811212][ T5793] ? assign_work+0x3cf/0x5d0
[ 94.811230][ T5793] worker_thread+0xa47/0xfb0
[ 94.811250][ T5793] ? __kthread_parkme+0x71/0x1f0
[ 94.811270][ T5793] kthread+0x388/0x470
[ 94.811289][ T5793] ? __pfx_worker_thread+0x10/0x10
[ 94.811304][ T5793] ? __pfx_kthread+0x10/0x10
[ 94.811323][ T5793] ret_from_fork+0x514/0xb70
[ 94.811351][ T5793] ? __pfx_ret_from_fork+0x10/0x10
[ 94.811370][ T5793] ? __switch_to+0xc89/0x1420
[ 94.811388][ T5793] ? __pfx_kthread+0x10/0x10
[ 94.811407][ T5793] ret_from_fork_asm+0x1a/0x30
[ 94.811433][ T5793]
[ 94.811696][ T5793] Kernel Offset: disabled