syzkaller login: [ 87.127217][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts.
2026/08/09 12:32:05 parsed 1 programs
2026/08/09 12:32:05 serving rpc on tcp://44363
[ 96.221265][ T5608] cgroup: Unknown subsys name 'net'
[ 96.446131][ T5608] cgroup: Unknown subsys name 'cpuset'
[ 96.517489][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 98.461054][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 104.359613][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.359637][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.412453][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.412474][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.875751][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.883682][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.904882][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.911261][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.912087][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 107.135713][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.136869][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.137047][ T5672] bridge_slave_0: entered allmulticast mode
[ 107.141841][ T5672] bridge_slave_0: entered promiscuous mode
[ 107.166725][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.166845][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.167039][ T5672] bridge_slave_1: entered allmulticast mode
[ 107.170465][ T5672] bridge_slave_1: entered promiscuous mode
[ 107.221563][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.224260][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.282184][ T5672] team0: Port device team_slave_0 added
[ 107.284460][ T5672] team0: Port device team_slave_1 added
[ 107.345515][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.345534][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.345562][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.350744][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.350760][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.350784][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.429616][ T5672] hsr_slave_0: entered promiscuous mode
[ 107.431430][ T5672] hsr_slave_1: entered promiscuous mode
[ 108.000681][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 108.052030][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 108.054811][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 108.101634][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 108.322216][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.343417][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 108.346166][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.380992][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 108.567291][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.612053][ T5672] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.631558][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.632822][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.653704][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.653812][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.161860][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.254498][ T5672] veth0_vlan: entered promiscuous mode
[ 109.272591][ T5672] veth1_vlan: entered promiscuous mode
[ 109.329108][ T5672] veth0_macvtap: entered promiscuous mode
[ 109.333878][ T5672] veth1_macvtap: entered promiscuous mode
[ 109.360310][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.389639][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.651784][ T3007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.652576][ T3007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.652622][ T3007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.652660][ T3007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.053154][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.411321][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.389035][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/09 12:32:24 executed programs: 0
[ 112.162549][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 112.176464][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 112.181528][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 112.190967][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 112.192508][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.804648][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.390774][ T13] bridge_slave_1: left allmulticast mode
[ 113.390870][ T13] bridge_slave_1: left promiscuous mode
[ 113.419003][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.599593][ T13] bridge_slave_0: left allmulticast mode
[ 113.599632][ T13] bridge_slave_0: left promiscuous mode
[ 113.599912][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.308616][ T59] Bluetooth: hci0: command tx timeout
[ 114.388136][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 114.467475][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 114.489020][ T13] bond0 (unregistering): Released all slaves
[ 114.541872][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1
[ 114.695211][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.695445][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.695630][ T5729] bridge_slave_0: entered allmulticast mode
[ 114.711345][ T5729] bridge_slave_0: entered promiscuous mode
[ 114.718656][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.718868][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.719058][ T5729] bridge_slave_1: entered allmulticast mode
[ 114.723968][ T5729] bridge_slave_1: entered promiscuous mode
[ 114.791086][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 114.795927][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.006754][ T13] hsr_slave_0: left promiscuous mode
[ 115.047629][ T13] hsr_slave_1: left promiscuous mode
[ 115.048919][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 115.048998][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 115.108713][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 115.108744][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 115.223408][ T13] veth1_macvtap: left promiscuous mode
[ 115.223661][ T13] veth0_macvtap: left promiscuous mode
[ 115.224593][ T13] veth1_vlan: left promiscuous mode
[ 115.224969][ T13] veth0_vlan: left promiscuous mode
[ 115.998971][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 116.037419][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 116.220964][ T5729] team0: Port device team_slave_0 added
[ 116.223985][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2
[ 116.331513][ T5729] team0: Port device team_slave_1 added
[ 116.386757][ T59] Bluetooth: hci0: command tx timeout
[ 116.394551][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.394566][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.394588][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.399920][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.399935][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.399960][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.506669][ T5729] hsr_slave_0: entered promiscuous mode
[ 116.507609][ T5729] hsr_slave_1: entered promiscuous mode
[ 117.122828][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3
[ 118.469719][ T59] Bluetooth: hci0: command tx timeout
[ 119.191037][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.233285][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 119.235964][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.274060][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 119.275009][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.314333][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 119.315348][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.368493][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 119.476171][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.509678][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.526244][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.526378][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.554936][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.555055][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.054305][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.133928][ T5729] veth0_vlan: entered promiscuous mode
[ 120.150395][ T5729] veth1_vlan: entered promiscuous mode
[ 120.188777][ T5729] veth0_macvtap: entered promiscuous mode
[ 120.192786][ T5729] veth1_macvtap: entered promiscuous mode
[ 120.221733][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.239988][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.551420][ T59] Bluetooth: hci0: command tx timeout
[ 120.588007][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.588545][ T3275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.664993][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.665016][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.774959][ T786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 120.774982][ T786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.796758][ T786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.796805][ T786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/09 12:32:32 executed programs: 2
[ 121.184841][ T5849] loop0: detected capacity change from 0 to 32768
[ 121.880503][ T5850] loop0: detected capacity change from 0 to 32768
[ 122.433749][ T5851] loop0: detected capacity change from 0 to 32768
[ 122.867707][ T5852] loop0: detected capacity change from 0 to 32768
[ 123.347414][ T5853] loop0: detected capacity change from 0 to 32768
[ 123.835598][ T5856] loop0: detected capacity change from 0 to 32768
[ 124.300692][ T5857] loop0: detected capacity change from 0 to 32768
[ 124.773520][ T5860] loop0: detected capacity change from 0 to 32768
[ 125.194560][ T5862] loop0: detected capacity change from 0 to 32768
[ 125.639245][ T5863] loop0: detected capacity change from 0 to 32768
2026/08/09 12:32:38 executed programs: 13
[ 126.493581][ T5866] set_capacity_and_notify: 1 callbacks suppressed
[ 126.493595][ T5866] loop0: detected capacity change from 0 to 32768
[ 126.938436][ T5867] loop0: detected capacity change from 0 to 32768
[ 127.336261][ T5868] loop0: detected capacity change from 0 to 32768
[ 127.773256][ T5869] loop0: detected capacity change from 0 to 32768
[ 128.176104][ T5870] loop0: detected capacity change from 0 to 32768
[ 128.629210][ T5871] loop0: detected capacity change from 0 to 32768
[ 129.042498][ T5872] loop0: detected capacity change from 0 to 32768
[ 129.435531][ T5873] loop0: detected capacity change from 0 to 32768
[ 129.853454][ T5874] loop0: detected capacity change from 0 to 32768
[ 130.301697][ T5875] loop0: detected capacity change from 0 to 32768
2026/08/09 12:32:43 executed programs: 25
[ 131.555454][ T5878] set_capacity_and_notify: 2 callbacks suppressed
[ 131.555468][ T5878] loop0: detected capacity change from 0 to 32768
[ 131.950280][ T5879] loop0: detected capacity change from 0 to 32768
[ 132.357925][ T5880] loop0: detected capacity change from 0 to 32768
[ 132.772464][ T5881] loop0: detected capacity change from 0 to 32768
[ 133.202754][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.202816][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.257636][ T5882] loop0: detected capacity change from 0 to 32768
[ 133.686439][ T5883] loop0: detected capacity change from 0 to 32768
[ 134.117068][ T5884] loop0: detected capacity change from 0 to 32768
[ 134.512344][ T5885] loop0: detected capacity change from 0 to 32768
[ 134.923482][ T5886] loop0: detected capacity change from 0 to 32768
[ 135.358088][ T5887] loop0: detected capacity change from 0 to 32768
2026/08/09 12:32:48 executed programs: 37
[ 136.926158][ T5891] set_capacity_and_notify: 3 callbacks suppressed
[ 136.926173][ T5891] loop0: detected capacity change from 0 to 32768
[ 137.338757][ T5892] loop0: detected capacity change from 0 to 32768
[ 137.811289][ T5893] loop0: detected capacity change from 0 to 32768
[ 138.248612][ T5894] loop0: detected capacity change from 0 to 32768
[ 138.692357][ T5895] loop0: detected capacity change from 0 to 32768
[ 139.111820][ T5896] loop0: detected capacity change from 0 to 32768
[ 139.498876][ T5897] loop0: detected capacity change from 0 to 32768
[ 139.897341][ T5898] loop0: detected capacity change from 0 to 32768
[ 140.299426][ T5899] loop0: detected capacity change from 0 to 32768
[ 140.382858][ C0] ==================================================================
[ 140.382876][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 140.382911][ C0] Read of size 4 at addr ffff888025d0ac08 by task ksoftirqd/0/15
[ 140.382911][ C0] Read of size 4 at addr ffff888025d0ac08 by task ksoftirqd/0/15
[ 140.382929][ C0]
[ 140.382941][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.382966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 140.382980][ C0] Call Trace:
[ 140.382988][ C0]
[ 140.382998][ C0] dump_stack_lvl+0xe8/0x150
[ 140.383030][ C0] print_address_description+0x55/0x1e0
[ 140.383058][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.383084][ C0] print_report+0x58/0x70
[ 140.383110][ C0] kasan_report+0x117/0x150
[ 140.383134][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.383164][ C0] lbmIODone+0x130e/0x16b0
[ 140.383191][ C0] ? blkg_put+0x22/0x240
[ 140.383219][ C0] ? blkg_put+0x22/0x240
[ 140.383249][ C0] ? blkg_put+0x18d/0x240
[ 140.383278][ C0] ? bio_endio+0x980/0x9d0
[ 140.383298][ C0] blk_update_request+0x57b/0xe50
[ 140.383324][ C0] blk_mq_end_request+0x3e/0x70
[ 140.383345][ C0] blk_done_softirq+0x10a/0x160
[ 140.383379][ C0] handle_softirqs+0x1d9/0x6c0
[ 140.383406][ C0] run_ksoftirqd+0x52/0x180
[ 140.383431][ C0] smpboot_thread_fn+0x57c/0xa80
[ 140.383458][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 140.383487][ C0] kthread+0x388/0x470
[ 140.383515][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 140.383539][ C0] ? __pfx_kthread+0x10/0x10
[ 140.383578][ C0] ret_from_fork+0x514/0xb70
[ 140.383607][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 140.383635][ C0] ? __switch_to+0xc89/0x1420
[ 140.383662][ C0] ? __pfx_kthread+0x10/0x10
[ 140.383692][ C0] ret_from_fork_asm+0x1a/0x30
[ 140.383729][ C0]
[ 140.383737][ C0]
[ 140.383742][ C0] Allocated by task 5899:
[ 140.383753][ C0] kasan_save_track+0x3e/0x80
[ 140.383782][ C0] __kasan_kmalloc+0x93/0xb0
[ 140.383800][ C0] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 140.383818][ C0] lmLogInit+0x3e5/0x1a20
[ 140.383840][ C0] lmLogOpen+0x4e3/0xf90
[ 140.383861][ C0] jfs_mount_rw+0xf3/0x670
[ 140.383880][ C0] jfs_fill_super+0x769/0xda0
[ 140.383910][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 140.383933][ C0] vfs_get_tree+0x92/0x2a0
[ 140.383955][ C0] do_new_mount+0x319/0xdc0
[ 140.383983][ C0] __se_sys_mount+0x31d/0x420
[ 140.384000][ C0] do_syscall_64+0x174/0x580
[ 140.384028][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.384048][ C0]
[ 140.384052][ C0] Freed by task 5729:
[ 140.384059][ C0] kasan_save_track+0x3e/0x80
[ 140.384088][ C0] kasan_save_free_info+0x40/0x50
[ 140.384113][ C0] __kasan_slab_free+0x5c/0x80
[ 140.384130][ C0] kfree+0x1c5/0x6c0
[ 140.384157][ C0] lmLogShutdown+0x456/0x850
[ 140.384179][ C0] lmLogClose+0x28c/0x530
[ 140.384200][ C0] jfs_umount+0x2da/0x3b0
[ 140.384225][ C0] jfs_put_super+0x8c/0x190
[ 140.384253][ C0] generic_shutdown_super+0x13d/0x2d0
[ 140.384273][ C0] kill_block_super+0x44/0x90
[ 140.384293][ C0] deactivate_locked_super+0xbc/0x130
[ 140.384310][ C0] cleanup_mnt+0x3d3/0x460
[ 140.384331][ C0] task_work_run+0x1d9/0x270
[ 140.384360][ C0] exit_to_user_mode_loop+0x1fa/0x730
[ 140.384390][ C0] do_syscall_64+0x353/0x580
[ 140.384418][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.384436][ C0]
[ 140.384441][ C0] The buggy address belongs to the object at ffff888025d0ac00
[ 140.384441][ C0] which belongs to the cache kmalloc-256 of size 256
[ 140.384460][ C0] The buggy address is located 8 bytes inside of
[ 140.384460][ C0] freed 256-byte region [ffff888025d0ac00, ffff888025d0ad00)
[ 140.384480][ C0]
[ 140.384486][ C0] The buggy address belongs to the physical page:
[ 140.384496][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25d0a
[ 140.384516][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 140.384533][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 140.384558][ C0] page_type: f5(slab)
[ 140.384579][ C0] raw: 0080000000000040 ffff88813ffb1b40 dead000000000100 dead000000000122
[ 140.384598][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 140.384618][ C0] head: 0080000000000040 ffff88813ffb1b40 dead000000000100 dead000000000122
[ 140.384635][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 140.384654][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 140.384671][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 140.384682][ C0] page dumped because: kasan: bad access detected
[ 140.384692][ C0] page_owner tracks the page as allocated
[ 140.384699][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 33, tgid 33 (kdevtmpfs), ts 6725013616, free_ts 0
[ 140.384735][ C0] post_alloc_hook+0x1f9/0x250
[ 140.384765][ C0] get_page_from_freelist+0x262a/0x26a0
[ 140.384786][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 140.384807][ C0] allocate_slab+0x79/0x5e0
[ 140.384832][ C0] refill_objects+0x2d8/0x350
[ 140.384855][ C0] __pcs_replace_empty_main+0x330/0x690
[ 140.384880][ C0] __kmalloc_noprof+0x544/0x780
[ 140.384897][ C0] security_inode_init_security+0x102/0x3e0
[ 140.384923][ C0] shmem_mknod+0x1ea/0x340
[ 140.384945][ C0] vfs_mknod+0x443/0x610
[ 140.384967][ C0] devtmpfs_work_loop+0x861/0xdf0
[ 140.384990][ C0] devtmpfsd+0x4d/0x50
[ 140.385011][ C0] kthread+0x388/0x470
[ 140.385037][ C0] ret_from_fork+0x514/0xb70
[ 140.385062][ C0] ret_from_fork_asm+0x1a/0x30
[ 140.385089][ C0] page_owner free stack trace missing
[ 140.385096][ C0]
[ 140.385101][ C0] Memory state around the buggy address:
[ 140.385112][ C0] ffff888025d0ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.385126][ C0] ffff888025d0ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.385141][ C0] >ffff888025d0ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.385152][ C0] ^
[ 140.385162][ C0] ffff888025d0ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.385175][ C0] ffff888025d0ad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.385186][ C0] ==================================================================
[ 140.412262][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.412284][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.412310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 140.412323][ C0] Call Trace:
[ 140.412332][ C0]
[ 140.412340][ C0] vpanic+0x56c/0xa60
[ 140.412376][ C0] ? __pfx_vpanic+0x10/0x10
[ 140.412407][ C0] ? __pfx___schedule+0x10/0x10
[ 140.412438][ C0] panic+0xc5/0xd0
[ 140.412468][ C0] ? __pfx_panic+0x10/0x10
[ 140.412498][ C0] ? preempt_schedule_thunk+0x16/0x40
[ 140.412527][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.412563][ C0] check_panic_on_warn+0x89/0xb0
[ 140.412595][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.412621][ C0] end_report+0x73/0x170
[ 140.412644][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.412669][ C0] kasan_report+0x128/0x150
[ 140.412693][ C0] ? lbmIODone+0x130e/0x16b0
[ 140.412722][ C0] lbmIODone+0x130e/0x16b0
[ 140.412750][ C0] ? blkg_put+0x22/0x240
[ 140.412778][ C0] ? blkg_put+0x22/0x240
[ 140.412807][ C0] ? blkg_put+0x18d/0x240
[ 140.412837][ C0] ? bio_endio+0x980/0x9d0
[ 140.412858][ C0] blk_update_request+0x57b/0xe50
[ 140.412885][ C0] blk_mq_end_request+0x3e/0x70
[ 140.412908][ C0] blk_done_softirq+0x10a/0x160
[ 140.412941][ C0] handle_softirqs+0x1d9/0x6c0
[ 140.412970][ C0] run_ksoftirqd+0x52/0x180
[ 140.412998][ C0] smpboot_thread_fn+0x57c/0xa80
[ 140.413025][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 140.413053][ C0] kthread+0x388/0x470
[ 140.413081][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 140.413106][ C0] ? __pfx_kthread+0x10/0x10
[ 140.413132][ C0] ret_from_fork+0x514/0xb70
[ 140.413163][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 140.413192][ C0] ? __switch_to+0xc89/0x1420
[ 140.413219][ C0] ? __pfx_kthread+0x10/0x10
[ 140.413246][ C0] ret_from_fork_asm+0x1a/0x30
[ 140.413284][ C0]
[ 140.413449][ C0] Kernel Offset: disabled