Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts.
2026/08/16 11:41:39 parsed 1 programs
2026/08/16 11:41:39 serving rpc on tcp://42845
[ 81.556122][ T10] cfg80211: failed to load regulatory.db
[ 84.081681][ T5597] cgroup: Unknown subsys name 'net'
[ 84.304093][ T5597] cgroup: Unknown subsys name 'cpuset'
[ 84.378238][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.067866][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.021786][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.040304][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.041989][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.046420][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.047365][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.266806][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.266824][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.342564][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.342579][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.112402][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.113390][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.113496][ T5682] bridge_slave_0: entered allmulticast mode
[ 95.115123][ T5682] bridge_slave_0: entered promiscuous mode
[ 95.133442][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.133554][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.134028][ T5682] bridge_slave_1: entered allmulticast mode
[ 95.143615][ T5682] bridge_slave_1: entered promiscuous mode
[ 95.183695][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.186830][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.299768][ T5682] team0: Port device team_slave_0 added
[ 95.305082][ T5682] team0: Port device team_slave_1 added
[ 95.336796][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.336807][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.336818][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.348128][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.348141][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.348161][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.441139][ T5682] hsr_slave_0: entered promiscuous mode
[ 95.442052][ T5682] hsr_slave_1: entered promiscuous mode
[ 95.935570][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.993374][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 95.995076][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.040813][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 96.042685][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.082396][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 96.083277][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.127700][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 96.247317][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.352302][ T5682] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.372706][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.372822][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.435343][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.435416][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.873605][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.933107][ T5682] veth0_vlan: entered promiscuous mode
[ 96.948752][ T5682] veth1_vlan: entered promiscuous mode
[ 96.993452][ T5682] veth0_macvtap: entered promiscuous mode
[ 97.006070][ T5682] veth1_macvtap: entered promiscuous mode
[ 97.029961][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.038641][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.276713][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.478231][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.478277][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.478308][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.792416][ T4175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.200693][ T4175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/16 11:41:56 executed programs: 0
[ 98.590941][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.606675][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.622053][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.629455][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.646341][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.031160][ T4175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.396499][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.396597][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.396681][ T5723] bridge_slave_0: entered allmulticast mode
[ 99.408828][ T5723] bridge_slave_0: entered promiscuous mode
[ 99.423681][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.423829][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.423927][ T5723] bridge_slave_1: entered allmulticast mode
[ 99.425322][ T5723] bridge_slave_1: entered promiscuous mode
[ 99.467005][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.470975][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.507191][ T5723] team0: Port device team_slave_0 added
[ 99.510915][ T5723] team0: Port device team_slave_1 added
[ 99.540385][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.540400][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.540418][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.542754][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.542763][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.542781][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.673825][ T5723] hsr_slave_0: entered promiscuous mode
[ 99.674750][ T5723] hsr_slave_1: entered promiscuous mode
[ 99.675332][ T5723] debugfs: 'hsr0' already exists in 'hsr'
[ 99.675393][ T5723] Cannot create hsr debugfs directory
[ 99.964113][ T4175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.431412][ T4175] bridge_slave_1: left allmulticast mode
[ 100.431509][ T4175] bridge_slave_1: left promiscuous mode
[ 100.444120][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.619425][ T4175] bridge_slave_0: left allmulticast mode
[ 100.619457][ T4175] bridge_slave_0: left promiscuous mode
[ 100.619689][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.669515][ T59] Bluetooth: hci0: command tx timeout
[ 101.388338][ T4175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.468132][ T4175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.509320][ T4175] bond0 (unregistering): Released all slaves
[ 101.913181][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1
[ 102.027665][ T4175] hsr_slave_0: left promiscuous mode
[ 102.067704][ T4175] hsr_slave_1: left promiscuous mode
[ 102.068501][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.068554][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.089503][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.089527][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.150549][ T4175] veth1_macvtap: left promiscuous mode
[ 102.150722][ T4175] veth0_macvtap: left promiscuous mode
[ 102.150882][ T4175] veth1_vlan: left promiscuous mode
[ 102.151060][ T4175] veth0_vlan: left promiscuous mode
[ 102.737893][ T59] Bluetooth: hci0: command tx timeout
[ 102.838074][ T4175] team0 (unregistering): Port device team_slave_1 removed
[ 102.879782][ T4175] team0 (unregistering): Port device team_slave_0 removed
[ 104.211887][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.245920][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 104.247304][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.286455][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 104.290303][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.330540][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 104.333186][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.375454][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 104.623028][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.647462][ T5723] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.655693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.655820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.696857][ T184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.696935][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.817995][ T59] Bluetooth: hci0: command tx timeout
[ 105.103249][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.167333][ T5723] veth0_vlan: entered promiscuous mode
[ 105.180187][ T5723] veth1_vlan: entered promiscuous mode
[ 105.209372][ T5723] veth0_macvtap: entered promiscuous mode
[ 105.212594][ T5723] veth1_macvtap: entered promiscuous mode
[ 105.246191][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.265587][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.438130][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.438169][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.438194][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.438221][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.588558][ T4175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.588576][ T4175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.645277][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.645295][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/16 11:42:03 executed programs: 2
[ 105.982844][ T5814] loop0: detected capacity change from 0 to 32768
[ 106.635195][ T5815] loop0: detected capacity change from 0 to 32768
[ 106.898968][ T59] Bluetooth: hci0: command tx timeout
[ 107.284781][ T5816] loop0: detected capacity change from 0 to 32768
[ 107.936241][ T5817] loop0: detected capacity change from 0 to 32768
[ 108.340279][ T5818] loop0: detected capacity change from 0 to 32768
[ 108.950803][ T5819] loop0: detected capacity change from 0 to 32768
[ 109.595169][ T5820] loop0: detected capacity change from 0 to 32768
[ 110.208392][ T5821] loop0: detected capacity change from 0 to 32768
[ 111.093546][ T5822] loop0: detected capacity change from 0 to 32768
2026/08/16 11:42:09 executed programs: 11
[ 111.456544][ T5823] loop0: detected capacity change from 0 to 32768
[ 111.836007][ T5824] loop0: detected capacity change from 0 to 32768
[ 112.234803][ T5825] loop0: detected capacity change from 0 to 32768
[ 112.837328][ T5826] loop0: detected capacity change from 0 to 32768
[ 113.228214][ T5828] loop0: detected capacity change from 0 to 32768
[ 113.621647][ T5829] loop0: detected capacity change from 0 to 32768
[ 113.984536][ T5832] loop0: detected capacity change from 0 to 32768
[ 114.375467][ T5834] loop0: detected capacity change from 0 to 32768
[ 114.770432][ T5836] loop0: detected capacity change from 0 to 32768
[ 116.148110][ C1] ==================================================================
[ 116.148126][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 116.148164][ C1] Read of size 4 at addr ffff888024e66c08 by task ksoftirqd/1/30
[ 116.148179][ C1]
[ 116.148199][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 116.148226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.148244][ C1] Call Trace:
[ 116.148252][ C1]
[ 116.148260][ C1] dump_stack_lvl+0xe8/0x150
[ 116.148286][ C1] print_address_description+0x55/0x1e0
[ 116.148309][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.148329][ C1] print_report+0x58/0x70
[ 116.148350][ C1] kasan_report+0x117/0x150
[ 116.148370][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.148393][ C1] lbmIODone+0x130e/0x16b0
[ 116.148415][ C1] ? blkg_put+0x22/0x240
[ 116.148438][ C1] ? blkg_put+0x22/0x240
[ 116.148462][ C1] ? blkg_put+0x18d/0x240
[ 116.148486][ C1] ? bio_endio+0x980/0x9d0
[ 116.148503][ C1] blk_update_request+0x57b/0xe50
[ 116.148536][ C1] blk_mq_end_request+0x3e/0x70
[ 116.148555][ C1] blk_done_softirq+0x10a/0x160
[ 116.148573][ C1] handle_softirqs+0x1d9/0x6c0
[ 116.148598][ C1] run_ksoftirqd+0x52/0x180
[ 116.148620][ C1] smpboot_thread_fn+0x57c/0xa80
[ 116.148643][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 116.148666][ C1] kthread+0x388/0x470
[ 116.148689][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 116.148708][ C1] ? __pfx_kthread+0x10/0x10
[ 116.148731][ C1] ret_from_fork+0x514/0xb70
[ 116.148760][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 116.148783][ C1] ? __switch_to+0xc89/0x1420
[ 116.148805][ C1] ? __pfx_kthread+0x10/0x10
[ 116.148828][ C1] ret_from_fork_asm+0x1a/0x30
[ 116.148858][ C1]
[ 116.148865][ C1]
[ 116.148869][ C1] Allocated by task 5840:
[ 116.148878][ C1] kasan_save_track+0x3e/0x80
[ 116.148901][ C1] __kasan_kmalloc+0x93/0xb0
[ 116.148914][ C1] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 116.148930][ C1] lmLogInit+0x3e5/0x1a20
[ 116.148948][ C1] lmLogOpen+0x4e3/0xf90
[ 116.148965][ C1] jfs_mount_rw+0xf3/0x670
[ 116.148983][ C1] jfs_fill_super+0x769/0xda0
[ 116.149006][ C1] get_tree_bdev_flags+0x430/0x4f0
[ 116.149024][ C1] vfs_get_tree+0x92/0x2a0
[ 116.149041][ C1] do_new_mount+0x319/0xdc0
[ 116.149063][ C1] __se_sys_mount+0x31d/0x420
[ 116.149077][ C1] do_syscall_64+0x174/0x580
[ 116.149096][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.149112][ C1]
[ 116.149116][ C1] Freed by task 5723:
[ 116.149125][ C1] kasan_save_track+0x3e/0x80
[ 116.149147][ C1] kasan_save_free_info+0x40/0x50
[ 116.149166][ C1] __kasan_slab_free+0x5c/0x80
[ 116.149181][ C1] kfree+0x1c5/0x6c0
[ 116.149201][ C1] lmLogShutdown+0x456/0x850
[ 116.149220][ C1] lmLogClose+0x28c/0x530
[ 116.149238][ C1] jfs_umount+0x2da/0x3b0
[ 116.149254][ C1] jfs_put_super+0x8c/0x190
[ 116.149275][ C1] generic_shutdown_super+0x13d/0x2d0
[ 116.149291][ C1] kill_block_super+0x44/0x90
[ 116.149307][ C1] deactivate_locked_super+0xbc/0x130
[ 116.149321][ C1] cleanup_mnt+0x3d3/0x460
[ 116.149338][ C1] task_work_run+0x1d9/0x270
[ 116.149360][ C1] exit_to_user_mode_loop+0x1fa/0x730
[ 116.149384][ C1] do_syscall_64+0x353/0x580
[ 116.149403][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.149419][ C1]
[ 116.149423][ C1] The buggy address belongs to the object at ffff888024e66c00
[ 116.149423][ C1] which belongs to the cache kmalloc-256 of size 256
[ 116.149438][ C1] The buggy address is located 8 bytes inside of
[ 116.149438][ C1] freed 256-byte region [ffff888024e66c00, ffff888024e66d00)
[ 116.149456][ C1]
[ 116.149460][ C1] The buggy address belongs to the physical page:
[ 116.149487][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24e66
[ 116.149504][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 116.149525][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 116.149539][ C1] page_type: f5(slab)
[ 116.149556][ C1] raw: 0080000000000040 ffff88813ffb2b40 dead000000000100 dead000000000122
[ 116.149571][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 116.149588][ C1] head: 0080000000000040 ffff88813ffb2b40 dead000000000100 dead000000000122
[ 116.149603][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 116.149618][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 116.149632][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 116.149640][ C1] page dumped because: kasan: bad access detected
[ 116.149653][ C1] page_owner tracks the page as allocated
[ 116.149659][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14996167131, free_ts 5300130280
[ 116.149689][ C1] post_alloc_hook+0x1f9/0x250
[ 116.149714][ C1] get_page_from_freelist+0x262a/0x26a0
[ 116.149732][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 116.149749][ C1] allocate_slab+0x79/0x5e0
[ 116.149768][ C1] refill_objects+0x2d8/0x350
[ 116.149788][ C1] __pcs_replace_empty_main+0x330/0x690
[ 116.149807][ C1] __kvmalloc_node_noprof+0x703/0x8a0
[ 116.149823][ C1] v4l2_ctrl_new+0xa5a/0x1820
[ 116.149842][ C1] v4l2_ctrl_new_custom+0x5b4/0x7f0
[ 116.149861][ C1] vivid_create_controls+0x1ce2/0x3c40
[ 116.149877][ C1] vivid_probe+0x4112/0x70d0
[ 116.149896][ C1] platform_probe+0xf9/0x190
[ 116.149914][ C1] really_probe+0x254/0xae0
[ 116.149934][ C1] __driver_probe_device+0x1e8/0x360
[ 116.149954][ C1] driver_probe_device+0x4f/0x240
[ 116.149974][ C1] __driver_attach+0x339/0x600
[ 116.149993][ C1] page last free pid 10 tgid 10 stack trace:
[ 116.150003][ C1] free_pages_prepare+0x946/0xa40
[ 116.150024][ C1] __free_contig_range_common+0x174/0x340
[ 116.150043][ C1] free_pages_bulk+0x48/0x120
[ 116.150059][ C1] vfree+0x26f/0x510
[ 116.150080][ C1] delayed_vfree_work+0x55/0x80
[ 116.150095][ C1] process_scheduled_works+0xa8e/0x14e0
[ 116.150112][ C1] worker_thread+0xa47/0xfb0
[ 116.150130][ C1] kthread+0x388/0x470
[ 116.150150][ C1] ret_from_fork+0x514/0xb70
[ 116.150172][ C1] ret_from_fork_asm+0x1a/0x30
[ 116.150195][ C1]
[ 116.150199][ C1] Memory state around the buggy address:
[ 116.150209][ C1] ffff888024e66b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.150220][ C1] ffff888024e66b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.150232][ C1] >ffff888024e66c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 116.150240][ C1] ^
[ 116.150250][ C1] ffff888024e66c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 116.150261][ C1] ffff888024e66d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.150269][ C1] ==================================================================
[ 116.151186][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 116.151205][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 116.151227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 116.151237][ C1] Call Trace:
[ 116.151244][ C1]
[ 116.151251][ C1] vpanic+0x56c/0xa60
[ 116.151280][ C1] ? __pfx_vpanic+0x10/0x10
[ 116.151305][ C1] ? __pfx___schedule+0x10/0x10
[ 116.151327][ C1] panic+0xc5/0xd0
[ 116.151351][ C1] ? __pfx_panic+0x10/0x10
[ 116.151374][ C1] ? preempt_schedule_thunk+0x16/0x40
[ 116.151398][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.151419][ C1] check_panic_on_warn+0x89/0xb0
[ 116.151443][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.151463][ C1] end_report+0x73/0x170
[ 116.151482][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.151502][ C1] kasan_report+0x128/0x150
[ 116.151532][ C1] ? lbmIODone+0x130e/0x16b0
[ 116.151556][ C1] lbmIODone+0x130e/0x16b0
[ 116.151578][ C1] ? blkg_put+0x22/0x240
[ 116.151601][ C1] ? blkg_put+0x22/0x240
[ 116.151623][ C1] ? blkg_put+0x18d/0x240
[ 116.151647][ C1] ? bio_endio+0x980/0x9d0
[ 116.151665][ C1] blk_update_request+0x57b/0xe50
[ 116.151688][ C1] blk_mq_end_request+0x3e/0x70
[ 116.151708][ C1] blk_done_softirq+0x10a/0x160
[ 116.151726][ C1] handle_softirqs+0x1d9/0x6c0
[ 116.151754][ C1] run_ksoftirqd+0x52/0x180
[ 116.151775][ C1] smpboot_thread_fn+0x57c/0xa80
[ 116.151797][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 116.151820][ C1] kthread+0x388/0x470
[ 116.151843][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 116.151864][ C1] ? __pfx_kthread+0x10/0x10
[ 116.151886][ C1] ret_from_fork+0x514/0xb70
[ 116.151911][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 116.151934][ C1] ? __switch_to+0xc89/0x1420
[ 116.151956][ C1] ? __pfx_kthread+0x10/0x10
[ 116.151978][ C1] ret_from_fork_asm+0x1a/0x30
[ 116.152008][ C1]
[ 116.152285][ C1] Kernel Offset: disabled