Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. 2026/06/21 09:32:52 parsed 1 programs 2026/06/21 09:32:52 serving rpc on tcp://40583 [ 56.130072][ T5602] cgroup: Unknown subsys name 'net' [ 56.350965][ T5602] cgroup: Unknown subsys name 'cpuset' [ 56.399099][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.548471][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.980132][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.980232][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.980310][ T5620] bridge_slave_0: entered allmulticast mode [ 59.980967][ T5620] bridge_slave_0: entered promiscuous mode [ 59.982130][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.982205][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.982260][ T5620] bridge_slave_1: entered allmulticast mode [ 59.982897][ T5620] bridge_slave_1: entered promiscuous mode [ 59.999474][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.001609][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.021280][ T5620] team0: Port device team_slave_0 added [ 60.023050][ T5620] team0: Port device team_slave_1 added [ 60.041029][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.041042][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.041065][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.042246][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.042258][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.042280][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.072561][ T5620] hsr_slave_0: entered promiscuous mode [ 60.073324][ T5620] hsr_slave_1: entered promiscuous mode [ 60.227119][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.250907][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.251439][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.290497][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.291320][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.331715][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.333428][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.370572][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.384232][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.384792][ T5620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.384963][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.385039][ T5620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.423146][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.449611][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.489185][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.710764][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.749645][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.749766][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.753559][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.753606][ T518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.947508][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.975103][ T5620] veth0_vlan: entered promiscuous mode [ 60.978163][ T5620] veth1_vlan: entered promiscuous mode [ 61.067351][ T5620] veth0_macvtap: entered promiscuous mode [ 61.069828][ T5620] veth1_macvtap: entered promiscuous mode [ 61.078368][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.081352][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.113665][ T518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.114198][ T518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.114317][ T518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.114347][ T518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.540938][ T1210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.810624][ T1210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.272040][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.272299][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.272480][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.273079][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.273451][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.281519][ T1210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.579864][ T1210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.667124][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.667151][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.686572][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.686589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/21 09:33:02 executed programs: 0 [ 63.964652][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.964927][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.965160][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.966024][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.966492][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.369314][ T1210] bridge_slave_1: left allmulticast mode [ 64.369331][ T1210] bridge_slave_1: left promiscuous mode [ 64.369455][ T1210] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.529365][ T1210] bridge_slave_0: left allmulticast mode [ 64.529383][ T1210] bridge_slave_0: left promiscuous mode [ 64.529484][ T1210] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.119385][ T1210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.199165][ T1210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.219855][ T1210] bond0 (unregistering): Released all slaves [ 65.264648][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.275710][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.275810][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.275914][ T5723] bridge_slave_0: entered allmulticast mode [ 65.277536][ T5723] bridge_slave_0: entered promiscuous mode [ 65.283148][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.283278][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.283396][ T5723] bridge_slave_1: entered allmulticast mode [ 65.285238][ T5723] bridge_slave_1: entered promiscuous mode [ 65.324719][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.334381][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.361330][ T5723] team0: Port device team_slave_0 added [ 65.363497][ T5723] team0: Port device team_slave_1 added [ 65.394935][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.394951][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.394974][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.396313][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.396325][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.396349][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.465397][ T5723] hsr_slave_0: entered promiscuous mode [ 65.468051][ T5723] hsr_slave_1: entered promiscuous mode [ 65.469909][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 65.469942][ T5723] Cannot create hsr debugfs directory [ 65.689750][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.848974][ T1210] hsr_slave_0: left promiscuous mode [ 65.868905][ T1210] hsr_slave_1: left promiscuous mode [ 65.869340][ T1210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.869352][ T1210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.909384][ T1210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.909404][ T1210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.979148][ T1210] veth1_macvtap: left promiscuous mode [ 65.979185][ T1210] veth0_macvtap: left promiscuous mode [ 65.979253][ T1210] veth1_vlan: left promiscuous mode [ 65.979298][ T1210] veth0_vlan: left promiscuous mode [ 65.988937][ T59] Bluetooth: hci0: command tx timeout [ 66.229712][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.229760][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.449193][ T1210] team0 (unregistering): Port device team_slave_1 removed [ 66.489200][ T1210] team0 (unregistering): Port device team_slave_0 removed [ 67.622207][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.662161][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.663041][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.713967][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.714791][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.760636][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.761334][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.811833][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.849048][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.855387][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.858354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.858417][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.867499][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.867573][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.068877][ T59] Bluetooth: hci0: command tx timeout [ 68.338166][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.363513][ T5723] veth0_vlan: entered promiscuous mode [ 68.366728][ T5723] veth1_vlan: entered promiscuous mode [ 68.383465][ T5723] veth0_macvtap: entered promiscuous mode [ 68.386089][ T5723] veth1_macvtap: entered promiscuous mode [ 68.396061][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.399444][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.442613][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.442928][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443062][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.443092][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.537430][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.537448][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.558431][ T5837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.558449][ T5837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.742913][ T5850] loop0: detected capacity change from 0 to 32768 2026/06/21 09:33:07 executed programs: 4 [ 68.926726][ T5851] loop0: detected capacity change from 0 to 32768 [ 69.134640][ T5852] loop0: detected capacity change from 0 to 32768 [ 69.331347][ T5853] loop0: detected capacity change from 0 to 32768 [ 69.534515][ T5854] loop0: detected capacity change from 0 to 32768 [ 69.732566][ T5855] loop0: detected capacity change from 0 to 32768 [ 69.951231][ T5856] loop0: detected capacity change from 0 to 32768 [ 70.148925][ T59] Bluetooth: hci0: command tx timeout [ 70.152666][ T5857] loop0: detected capacity change from 0 to 32768 [ 70.360972][ T5858] loop0: detected capacity change from 0 to 32768 [ 70.574309][ T5859] loop0: detected capacity change from 0 to 32768 [ 70.603083][ C1] ================================================================== [ 70.603099][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 70.603138][ C1] Read of size 4 at addr ffff8880449e8408 by task ksoftirqd/1/30 [ 70.603158][ C1] [ 70.603177][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 70.603202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.603224][ C1] Call Trace: [ 70.603231][ C1] [ 70.603240][ C1] dump_stack_lvl+0xe8/0x150 [ 70.603266][ C1] print_address_description+0x55/0x1e0 [ 70.603290][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.603309][ C1] print_report+0x58/0x70 [ 70.603331][ C1] kasan_report+0x117/0x150 [ 70.603361][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.603383][ C1] lbmIODone+0x130e/0x16b0 [ 70.603401][ C1] ? __schedule+0x16f2/0x5500 [ 70.603431][ C1] ? blkg_put+0x22/0x240 [ 70.603464][ C1] ? blkg_put+0x18d/0x240 [ 70.603496][ C1] ? bio_endio+0x980/0x9d0 [ 70.603519][ C1] blk_update_request+0x57b/0xe50 [ 70.603547][ C1] blk_mq_end_request+0x3e/0x70 [ 70.603570][ C1] blk_done_softirq+0x10a/0x160 [ 70.603592][ C1] handle_softirqs+0x1d9/0x6c0 [ 70.603627][ C1] run_ksoftirqd+0x52/0x180 [ 70.603647][ C1] smpboot_thread_fn+0x57c/0xa80 [ 70.603680][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 70.603715][ C1] kthread+0x388/0x470 [ 70.603737][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 70.603769][ C1] ? __pfx_kthread+0x10/0x10 [ 70.603791][ C1] ret_from_fork+0x514/0xb70 [ 70.603814][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 70.603837][ C1] ? __switch_to+0xc89/0x1420 [ 70.603871][ C1] ? __pfx_kthread+0x10/0x10 [ 70.603893][ C1] ret_from_fork_asm+0x1a/0x30 [ 70.603932][ C1] [ 70.603940][ C1] [ 70.603944][ C1] Allocated by task 5859: [ 70.603954][ C1] kasan_save_track+0x3e/0x80 [ 70.603978][ C1] __kasan_kmalloc+0x93/0xb0 [ 70.604001][ C1] __kmalloc_cache_noprof+0x3a2/0x690 [ 70.604026][ C1] lmLogInit+0x3e5/0x1a20 [ 70.604055][ C1] lmLogOpen+0x4e3/0xf90 [ 70.604082][ C1] jfs_mount_rw+0xf3/0x670 [ 70.604109][ C1] jfs_fill_super+0x769/0xda0 [ 70.604130][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 70.604159][ C1] vfs_get_tree+0x92/0x2a0 [ 70.604186][ C1] do_new_mount+0x319/0xdc0 [ 70.604206][ C1] __se_sys_mount+0x31d/0x420 [ 70.604228][ C1] do_syscall_64+0x174/0x580 [ 70.604246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.604266][ C1] [ 70.604270][ C1] Freed by task 5723: [ 70.604280][ C1] kasan_save_track+0x3e/0x80 [ 70.604301][ C1] kasan_save_free_info+0x40/0x50 [ 70.604332][ C1] __kasan_slab_free+0x5c/0x80 [ 70.604355][ C1] kfree+0x1c5/0x6c0 [ 70.604373][ C1] lmLogShutdown+0x456/0x850 [ 70.604390][ C1] lmLogClose+0x28c/0x530 [ 70.604405][ C1] jfs_umount+0x2da/0x3b0 [ 70.604433][ C1] jfs_put_super+0x8c/0x190 [ 70.604457][ C1] generic_shutdown_super+0x13d/0x2d0 [ 70.604482][ C1] kill_block_super+0x44/0x90 [ 70.604509][ C1] deactivate_locked_super+0xbc/0x130 [ 70.604532][ C1] cleanup_mnt+0x3d3/0x460 [ 70.604558][ C1] task_work_run+0x1d9/0x270 [ 70.604580][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 70.604604][ C1] do_syscall_64+0x353/0x580 [ 70.604621][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.604640][ C1] [ 70.604644][ C1] The buggy address belongs to the object at ffff8880449e8400 [ 70.604644][ C1] which belongs to the cache kmalloc-256 of size 256 [ 70.604662][ C1] The buggy address is located 8 bytes inside of [ 70.604662][ C1] freed 256-byte region [ffff8880449e8400, ffff8880449e8500) [ 70.604684][ C1] [ 70.604689][ C1] The buggy address belongs to the physical page: [ 70.604712][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x449e8 [ 70.604732][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 70.604748][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 70.604768][ C1] page_type: f5(slab) [ 70.604787][ C1] raw: 0080000000000040 ffff88801a011b40 dead000000000122 0000000000000000 [ 70.604806][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 70.604825][ C1] head: 0080000000000040 ffff88801a011b40 dead000000000122 0000000000000000 [ 70.604844][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 70.604863][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 70.604881][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 70.604892][ C1] page dumped because: kasan: bad access detected [ 70.604911][ C1] page_owner tracks the page as allocated [ 70.604918][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4959, tgid 4959 (udevd), ts 70367718473, free_ts 70209655968 [ 70.604953][ C1] post_alloc_hook+0x1f9/0x250 [ 70.604975][ C1] get_page_from_freelist+0x262a/0x26a0 [ 70.605003][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 70.605030][ C1] allocate_slab+0x74/0x5d0 [ 70.605059][ C1] refill_objects+0x32b/0x3c0 [ 70.605087][ C1] __pcs_replace_empty_main+0x335/0x6a0 [ 70.605118][ C1] __kmalloc_cache_noprof+0x44a/0x690 [ 70.605143][ C1] smk_fetch+0x95/0x140 [ 70.605168][ C1] smack_d_instantiate+0x83f/0x990 [ 70.605189][ C1] security_d_instantiate+0x106/0x1d0 [ 70.605215][ C1] d_splice_alias_ops+0x72/0x440 [ 70.605245][ C1] __lookup_slow+0x1fb/0x2f0 [ 70.605268][ C1] lookup_slow+0x53/0x70 [ 70.605290][ C1] path_lookupat+0x3f5/0x8c0 [ 70.605311][ C1] filename_lookup+0x265/0x5d0 [ 70.605332][ C1] do_readlinkat+0xe3/0x510 [ 70.605354][ C1] page last free pid 28 tgid 28 stack trace: [ 70.605364][ C1] __free_frozen_pages+0x10e7/0x11c0 [ 70.605387][ C1] rcu_cpu_kthread+0x950/0x1480 [ 70.605412][ C1] smpboot_thread_fn+0x57c/0xa80 [ 70.605441][ C1] kthread+0x388/0x470 [ 70.605460][ C1] ret_from_fork+0x514/0xb70 [ 70.605480][ C1] ret_from_fork_asm+0x1a/0x30 [ 70.605503][ C1] [ 70.605508][ C1] Memory state around the buggy address: [ 70.605519][ C1] ffff8880449e8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.605533][ C1] ffff8880449e8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.605547][ C1] >ffff8880449e8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.605558][ C1] ^ [ 70.605568][ C1] ffff8880449e8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.605582][ C1] ffff8880449e8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.605593][ C1] ================================================================== [ 70.607089][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.607108][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 70.607133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.607146][ C1] Call Trace: [ 70.607153][ C1] [ 70.607162][ C1] vpanic+0x56c/0xa60 [ 70.607193][ C1] ? __pfx_vpanic+0x10/0x10 [ 70.607220][ C1] ? __pfx___schedule+0x10/0x10 [ 70.607254][ C1] panic+0xc5/0xd0 [ 70.607279][ C1] ? __pfx_panic+0x10/0x10 [ 70.607305][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 70.607340][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.607358][ C1] check_panic_on_warn+0x89/0xb0 [ 70.607383][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.607402][ C1] end_report+0x73/0x170 [ 70.607428][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.607446][ C1] kasan_report+0x128/0x150 [ 70.607474][ C1] ? lbmIODone+0x130e/0x16b0 [ 70.607495][ C1] lbmIODone+0x130e/0x16b0 [ 70.607513][ C1] ? __schedule+0x16f2/0x5500 [ 70.607554][ C1] ? blkg_put+0x22/0x240 [ 70.607585][ C1] ? blkg_put+0x18d/0x240 [ 70.607616][ C1] ? bio_endio+0x980/0x9d0 [ 70.607639][ C1] blk_update_request+0x57b/0xe50 [ 70.607666][ C1] blk_mq_end_request+0x3e/0x70 [ 70.607690][ C1] blk_done_softirq+0x10a/0x160 [ 70.607712][ C1] handle_softirqs+0x1d9/0x6c0 [ 70.607745][ C1] run_ksoftirqd+0x52/0x180 [ 70.607762][ C1] smpboot_thread_fn+0x57c/0xa80 [ 70.607794][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 70.607827][ C1] kthread+0x388/0x470 [ 70.607847][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 70.607875][ C1] ? __pfx_kthread+0x10/0x10 [ 70.607896][ C1] ret_from_fork+0x514/0xb70 [ 70.607928][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 70.607949][ C1] ? __switch_to+0xc89/0x1420 [ 70.607981][ C1] ? __pfx_kthread+0x10/0x10 [ 70.608002][ C1] ret_from_fork_asm+0x1a/0x30 [ 70.608032][ C1] [ 70.608296][ C1] Kernel Offset: disabled