Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts.
2026/06/21 02:14:01 parsed 1 programs
2026/06/21 02:14:01 serving rpc on tcp://43099
[ 61.285988][ T5612] cgroup: Unknown subsys name 'net'
[ 61.537249][ T5612] cgroup: Unknown subsys name 'cpuset'
[ 61.615306][ T5612] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 62.768463][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 65.413268][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 65.413540][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 65.413781][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 65.414416][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 65.415047][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 66.736916][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.736944][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.756144][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.756170][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.041888][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.042001][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.042088][ T5693] bridge_slave_0: entered allmulticast mode
[ 68.042994][ T5693] bridge_slave_0: entered promiscuous mode
[ 68.044428][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.044511][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.044580][ T5693] bridge_slave_1: entered allmulticast mode
[ 68.047508][ T5693] bridge_slave_1: entered promiscuous mode
[ 68.075365][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 68.078027][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 68.100357][ T5693] team0: Port device team_slave_0 added
[ 68.103390][ T5693] team0: Port device team_slave_1 added
[ 68.126469][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 68.126487][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 68.126507][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 68.128115][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 68.128131][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 68.128153][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 68.162415][ T5693] hsr_slave_0: entered promiscuous mode
[ 68.163547][ T5693] hsr_slave_1: entered promiscuous mode
[ 68.280141][ T5693] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 68.317112][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 68.318325][ T5693] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 68.366842][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 68.367470][ T5693] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 68.396992][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 68.397647][ T5693] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 68.446937][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 68.462502][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.462648][ T5693] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.462834][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.462919][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 68.521765][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0
[ 68.530641][ T5693] 8021q: adding VLAN 0 to HW filter on device team0
[ 68.919283][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 69.268792][ T5693] veth0_vlan: entered promiscuous mode
[ 69.311601][ T5693] veth1_vlan: entered promiscuous mode
[ 69.340152][ T5693] veth0_macvtap: entered promiscuous mode
[ 69.342523][ T5693] veth1_macvtap: entered promiscuous mode
[ 69.353021][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.358644][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.368334][ T1045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.368472][ T1045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.368503][ T1045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.368532][ T1045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/06/21 02:14:13 executed programs: 0
[ 70.386541][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 70.386801][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 70.387014][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 70.387597][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 70.388100][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 70.691411][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.691508][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.691582][ T5737] bridge_slave_0: entered allmulticast mode
[ 70.692347][ T5737] bridge_slave_0: entered promiscuous mode
[ 70.693745][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.693820][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.693888][ T5737] bridge_slave_1: entered allmulticast mode
[ 70.694612][ T5737] bridge_slave_1: entered promiscuous mode
[ 70.720428][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.722999][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.747104][ T5737] team0: Port device team_slave_0 added
[ 70.752685][ T5737] team0: Port device team_slave_1 added
[ 70.787811][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.787827][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.787841][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.790029][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.790042][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 70.790062][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.831335][ T5737] hsr_slave_0: entered promiscuous mode
[ 70.832060][ T5737] hsr_slave_1: entered promiscuous mode
[ 70.832556][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[ 70.832590][ T5737] Cannot create hsr debugfs directory
[ 71.266115][ T3861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 71.645919][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.645959][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.975942][ T3861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.186021][ T3861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.416326][ T3861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.444983][ T4920] Bluetooth: hci0: command tx timeout
[ 72.775246][ T3861] bridge_slave_1: left allmulticast mode
[ 72.775272][ T3861] bridge_slave_1: left promiscuous mode
[ 72.775444][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.935456][ T3861] bridge_slave_0: left allmulticast mode
[ 72.935474][ T3861] bridge_slave_0: left promiscuous mode
[ 72.935598][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.535365][ T3861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 73.615342][ T3861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 73.636089][ T3861] bond0 (unregistering): Released all slaves
[ 73.756036][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1
[ 73.977654][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2
[ 74.525832][ T4920] Bluetooth: hci0: command tx timeout
[ 74.815013][ T3861] hsr_slave_0: left promiscuous mode
[ 74.854997][ T3861] hsr_slave_1: left promiscuous mode
[ 74.856058][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.856074][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.895486][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.895508][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.955239][ T3861] veth1_macvtap: left promiscuous mode
[ 74.955280][ T3861] veth0_macvtap: left promiscuous mode
[ 74.955349][ T3861] veth1_vlan: left promiscuous mode
[ 74.955399][ T3861] veth0_vlan: left promiscuous mode
[ 75.435318][ T3861] team0 (unregistering): Port device team_slave_1 removed
[ 75.455381][ T3861] team0 (unregistering): Port device team_slave_0 removed
[ 75.555794][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.597140][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 75.597744][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.636498][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 75.637094][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.676976][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 75.677545][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.717012][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 75.761037][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.770435][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.776041][ T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.776122][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.781642][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.781807][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.997731][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.023658][ T5737] veth0_vlan: entered promiscuous mode
[ 76.030617][ T5737] veth1_vlan: entered promiscuous mode
[ 76.048688][ T5737] veth0_macvtap: entered promiscuous mode
[ 76.050891][ T5737] veth1_macvtap: entered promiscuous mode
[ 76.070505][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.075920][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.093866][ T1184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.093993][ T1184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.094068][ T1184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.094105][ T1184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.253728][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.253748][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.275871][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.275891][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/21 02:14:19 executed programs: 2
[ 76.463938][ T5839] loop0: detected capacity change from 0 to 32768
[ 76.464653][ T5839] =======================================================
[ 76.464653][ T5839] WARNING: The mand mount option has been deprecated and
[ 76.464653][ T5839] and is ignored by this kernel. Remove the mand
[ 76.464653][ T5839] option from the mount to silence this warning.
[ 76.464653][ T5839] =======================================================
[ 76.605124][ T4920] Bluetooth: hci0: command tx timeout
[ 76.706806][ T5840] loop0: detected capacity change from 0 to 32768
[ 76.767138][ T1010] cfg80211: failed to load regulatory.db
[ 77.031825][ T5841] loop0: detected capacity change from 0 to 32768
[ 77.241757][ T5842] loop0: detected capacity change from 0 to 32768
[ 77.466475][ T5843] loop0: detected capacity change from 0 to 32768
[ 77.680472][ T5844] loop0: detected capacity change from 0 to 32768
[ 77.895731][ T5845] loop0: detected capacity change from 0 to 32768
[ 78.119865][ T5846] loop0: detected capacity change from 0 to 32768
[ 78.440247][ T5847] loop0: detected capacity change from 0 to 32768
[ 78.657845][ T5848] loop0: detected capacity change from 0 to 32768
[ 78.685746][ T4920] Bluetooth: hci0: command tx timeout
2026/06/21 02:14:24 executed programs: 25
[ 81.588596][ T5862] set_capacity_and_notify: 13 callbacks suppressed
[ 81.588677][ T5862] loop0: detected capacity change from 0 to 32768
[ 81.805149][ T5863] loop0: detected capacity change from 0 to 32768
[ 82.013038][ T5864] loop0: detected capacity change from 0 to 32768
[ 82.225099][ T5865] loop0: detected capacity change from 0 to 32768
[ 82.431085][ T5866] loop0: detected capacity change from 0 to 32768
[ 82.650559][ T5867] loop0: detected capacity change from 0 to 32768
[ 82.867495][ T5868] loop0: detected capacity change from 0 to 32768
[ 83.094631][ T5869] loop0: detected capacity change from 0 to 32768
[ 83.310572][ T5870] loop0: detected capacity change from 0 to 32768
[ 83.532691][ T5871] loop0: detected capacity change from 0 to 32768
[ 86.141340][ C1] =========================[ 86.141340][ C1] ==================================================================
[ 86.141357][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 86.141391][ C1] Read of size 4 at addr ffff88802fe17608 by task ksoftirqd/1/30
[ 86.141406][ C1]
[ 86.141424][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 86.141445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.141466][ C1] Call Trace:
[ 86.141472][ C1]
[ 86.141481][ C1] dump_stack_lvl+0xe8/0x150
[ 86.141504][ C1] print_address_description+0x55/0x1e0
[ 86.141524][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.141539][ C1] print_report+0x58/0x70
[ 86.141558][ C1] kasan_report+0x117/0x150
[ 86.141582][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.141600][ C1] lbmIODone+0x130e/0x16b0
[ 86.141616][ C1] ? sbitmap_queue_wake_up+0x1a3/0xa20
[ 86.141639][ C1] ? blkg_put+0x22/0x240
[ 86.141669][ C1] ? blkg_put+0x18d/0x240
[ 86.141697][ C1] ? bio_endio+0x980/0x9d0
[ 86.141718][ C1] blk_update_request+0x57b/0xe50
[ 86.141742][ C1] blk_mq_end_request+0x3e/0x70
[ 86.141764][ C1] blk_done_softirq+0x10a/0x160
[ 86.141786][ C1] handle_softirqs+0x1d9/0x6c0
[ 86.141821][ C1] run_ksoftirqd+0x52/0x180
[ 86.141840][ C1] smpboot_thread_fn+0x57c/0xa80
[ 86.141872][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 86.141906][ C1] kthread+0x388/0x470
[ 86.141927][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 86.141957][ C1] ? __pfx_kthread+0x10/0x10
[ 86.141988][ C1] ret_from_fork+0x514/0xb70
[ 86.142013][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 86.142036][ C1] ? __switch_to+0xc89/0x1420
[ 86.142066][ C1] ? __pfx_kthread+0x10/0x10
[ 86.142094][ C1] ret_from_fork_asm+0x1a/0x30
[ 86.142125][ C1]
[ 86.142132][ C1]
[ 86.142137][ C1] Allocated by task 5883:
[ 86.142148][ C1] kasan_save_track+0x3e/0x80
[ 86.142171][ C1] __kasan_kmalloc+0x93/0xb0
[ 86.142198][ C1] __kmalloc_cache_noprof+0x3a2/0x690
[ 86.142223][ C1] lmLogInit+0x3e5/0x1a20
[ 86.142252][ C1] lmLogOpen+0x4e3/0xf90
[ 86.142279][ C1] jfs_mount_rw+0xf3/0x670
[ 86.142306][ C1] jfs_fill_super+0x769/0xda0
[ 86.142326][ C1] get_tree_bdev_flags+0x430/0x4f0
[ 86.142352][ C1] vfs_get_tree+0x92/0x2a0
[ 86.142379][ C1] do_new_mount+0x319/0xdc0
[ 86.142415][ C1] __se_sys_mount+0x31d/0x420
[ 86.142433][ C1] do_syscall_64+0x174/0x580
[ 86.142449][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.142466][ C1]
[ 86.142470][ C1] Freed by task 5737:
[ 86.142483][ C1] kasan_save_track+0x3e/0x80
[ 86.142502][ C1] kasan_save_free_info+0x40/0x50
[ 86.142531][ C1] __kasan_slab_free+0x5c/0x80
[ 86.142555][ C1] kfree+0x1c5/0x6c0
[ 86.142575][ C1] lmLogShutdown+0x456/0x850
[ 86.142591][ C1] lmLogClose+0x28c/0x530
[ 86.142605][ C1] jfs_umount+0x2da/0x3b0
[ 86.142631][ C1] jfs_put_super+0x8c/0x190
[ 86.142658][ C1] generic_shutdown_super+0x13d/0x2d0
[ 86.142683][ C1] kill_block_super+0x44/0x90
[ 86.142708][ C1] deactivate_locked_super+0xbc/0x130
[ 86.142731][ C1] cleanup_mnt+0x3d3/0x460
[ 86.142754][ C1] task_work_run+0x1d9/0x270
[ 86.142773][ C1] exit_to_user_mode_loop+0x1fa/0x730
[ 86.142795][ C1] do_syscall_64+0x353/0x580
[ 86.142812][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.142830][ C1]
[ 86.142836][ C1] The buggy address belongs to the object at ffff88802fe17600
[ 86.142836][ C1] which belongs to the cache kmalloc-256 of size 256
[ 86.142851][ C1] The buggy address is located 8 bytes inside of
[ 86.142851][ C1] freed 256-byte region [ffff88802fe17600, ffff88802fe17700)
[ 86.142869][ C1]
[ 86.142873][ C1] The buggy address belongs to the physical page:
[ 86.142896][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fe16
[ 86.142912][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 86.142925][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 86.142943][ C1] page_type: f5(slab)
[ 86.142959][ C1] raw: 0080000000000040 ffff88801a011b40 dead000000000100 dead000000000122
[ 86.142982][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 86.142997][ C1] head: 0080000000000040 ffff88801a011b40 dead000000000100 dead000000000122
[ 86.143012][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 86.143027][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 86.143041][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 86.143049][ C1] page dumped because: kasan: bad access detected
[ 86.143061][ C1] page_owner tracks the page as allocated
[ 86.143067][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11370251836, free_ts 0
[ 86.143094][ C1] post_alloc_hook+0x1f9/0x250
[ 86.143113][ C1] get_page_from_freelist+0x262a/0x26a0
[ 86.143134][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 86.143155][ C1] allocate_slab+0x74/0x5d0
[ 86.143177][ C1] refill_objects+0x32b/0x3c0
[ 86.143199][ C1] __pcs_replace_empty_main+0x335/0x6a0
[ 86.143223][ C1] __kvmalloc_node_noprof+0x708/0x900
[ 86.143243][ C1] v4l2_ctrl_new+0xa5a/0x1820
[ 86.143269][ C1] v4l2_ctrl_new_std+0x24e/0x300
[ 86.143289][ C1] handler_new_ref+0x153/0x930
[ 86.143309][ C1] v4l2_ctrl_add_handler+0x19f/0x290
[ 86.143330][ C1] vivid_create_controls+0x3296/0x3c40
[ 86.143346][ C1] vivid_probe+0x4112/0x70e0
[ 86.143368][ C1] platform_probe+0xf9/0x190
[ 86.143385][ C1] really_probe+0x254/0xae0
[ 86.143404][ C1] __driver_probe_device+0x1e8/0x360
[ 86.143422][ C1] page_owner free stack trace missing
[ 86.143428][ C1]
[ 86.143432][ C1] Memory state around the buggy address:
[ 86.143440][ C1] ffff88802fe17500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.143455][ C1] ffff88802fe17580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.143466][ C1] >ffff88802fe17600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.143475][ C1] ^
[ 86.143483][ C1] ffff88802fe17680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.143494][ C1] ffff88802fe17700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.143502][ C1] ==================================================================
[ 86.148048][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.148070][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 86.148094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.148107][ C1] Call Trace:
[ 86.148115][ C1]
[ 86.148123][ C1] vpanic+0x56c/0xa60
[ 86.148154][ C1] ? __pfx_vpanic+0x10/0x10
[ 86.148180][ C1] ? __pfx___schedule+0x10/0x10
[ 86.148213][ C1] panic+0xc5/0xd0
[ 86.148237][ C1] ? __pfx_panic+0x10/0x10
[ 86.148278][ C1] ? preempt_schedule_thunk+0x16/0x40
[ 86.148313][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.148332][ C1] check_panic_on_warn+0x89/0xb0
[ 86.148356][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.148373][ C1] end_report+0x73/0x170
[ 86.148401][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.148418][ C1] kasan_report+0x128/0x150
[ 86.148448][ C1] ? lbmIODone+0x130e/0x16b0
[ 86.148468][ C1] lbmIODone+0x130e/0x16b0
[ 86.148486][ C1] ? sbitmap_queue_wake_up+0x1a3/0xa20
[ 86.148513][ C1] ? blkg_put+0x22/0x240
[ 86.148544][ C1] ? blkg_put+0x18d/0x240
[ 86.148574][ C1] ? bio_endio+0x980/0x9d0
[ 86.148597][ C1] blk_update_request+0x57b/0xe50
[ 86.148625][ C1] blk_mq_end_request+0x3e/0x70
[ 86.148648][ C1] blk_done_softirq+0x10a/0x160
[ 86.148669][ C1] handle_softirqs+0x1d9/0x6c0
[ 86.148703][ C1] run_ksoftirqd+0x52/0x180
[ 86.148723][ C1] smpboot_thread_fn+0x57c/0xa80
[ 86.148756][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 86.148789][ C1] kthread+0x388/0x470
[ 86.148811][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 86.148846][ C1] ? __pfx_kthread+0x10/0x10
[ 86.148868][ C1] ret_from_fork+0x514/0xb70
[ 86.148891][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 86.148914][ C1] ? __switch_to+0xc89/0x1420
[ 86.148946][ C1] ? __pfx_kthread+0x10/0x10
[ 86.148975][ C1] ret_from_fork_asm+0x1a/0x30
[ 86.149007][ C1]
[ 86.149389][ C1] Kernel Offset: disabled