[ 92.020151][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2026/07/08 11:54:16 parsed 1 programs 2026/07/08 11:54:16 serving rpc on tcp://46487 [ 101.034696][ T5610] cgroup: Unknown subsys name 'net' [ 101.256842][ T5610] cgroup: Unknown subsys name 'cpuset' [ 101.309635][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.373368][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.206233][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.207443][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.207564][ T5658] bridge_slave_0: entered allmulticast mode [ 110.215453][ T5658] bridge_slave_0: entered promiscuous mode [ 110.249132][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.249219][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.249336][ T5658] bridge_slave_1: entered allmulticast mode [ 110.254369][ T5658] bridge_slave_1: entered promiscuous mode [ 110.315763][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.328631][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.381873][ T5658] team0: Port device team_slave_0 added [ 110.385246][ T5658] team0: Port device team_slave_1 added [ 110.436501][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.436514][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.436534][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.447689][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.447732][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.447805][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.762578][ T5658] hsr_slave_0: entered promiscuous mode [ 110.763689][ T5658] hsr_slave_1: entered promiscuous mode [ 111.045274][ T5658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.095534][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.101201][ T5658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.133266][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.136195][ T5658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.177683][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.189240][ T5658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.220632][ T5658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.374083][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.474386][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.492107][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.492276][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.543045][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.543163][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.045481][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.146541][ T5658] veth0_vlan: entered promiscuous mode [ 112.175356][ T5658] veth1_vlan: entered promiscuous mode [ 112.258429][ T5658] veth0_macvtap: entered promiscuous mode [ 112.318596][ T5658] veth1_macvtap: entered promiscuous mode [ 112.397977][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.457745][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.546556][ T1486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.576748][ T1486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.595282][ T1486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.596381][ T1486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.346378][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.357256][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.358232][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.374207][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.377263][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.617677][ T1486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.171557][ T1486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.654819][ T1486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.084795][ T1486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.859967][ T1486] bridge_slave_1: left allmulticast mode [ 115.860267][ T1486] bridge_slave_1: left promiscuous mode [ 115.868714][ T1486] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.050905][ T1486] bridge_slave_0: left allmulticast mode [ 116.050945][ T1486] bridge_slave_0: left promiscuous mode [ 116.051217][ T1486] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.859662][ T1486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.919889][ T1486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.941321][ T1486] bond0 (unregistering): Released all slaves [ 117.000026][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.409070][ T1486] hsr_slave_0: left promiscuous mode [ 117.449390][ T1486] hsr_slave_1: left promiscuous mode [ 117.450748][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.453026][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.492608][ T1486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.492636][ T1486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.586040][ T1486] veth1_macvtap: left promiscuous mode [ 117.586309][ T1486] veth0_macvtap: left promiscuous mode [ 117.586870][ T1486] veth1_vlan: left promiscuous mode [ 117.587202][ T1486] veth0_vlan: left promiscuous mode [ 118.389729][ T1486] team0 (unregistering): Port device team_slave_1 removed [ 118.429670][ T1486] team0 (unregistering): Port device team_slave_0 removed [ 118.645511][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.453942][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.778008][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.778036][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.965649][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.965671][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.807938][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 2026/07/08 11:54:41 executed programs: 0 [ 121.532264][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.570972][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.573723][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.578304][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.593278][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.385791][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.385950][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.386766][ T5803] bridge_slave_0: entered allmulticast mode [ 122.388593][ T5803] bridge_slave_0: entered promiscuous mode [ 122.418052][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.418200][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.418373][ T5803] bridge_slave_1: entered allmulticast mode [ 122.423649][ T5803] bridge_slave_1: entered promiscuous mode [ 122.484309][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.498240][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.548541][ T5803] team0: Port device team_slave_0 added [ 122.563807][ T5803] team0: Port device team_slave_1 added [ 122.863714][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.863735][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.863766][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.918519][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.918539][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.918571][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.125992][ T5803] hsr_slave_0: entered promiscuous mode [ 123.126986][ T5803] hsr_slave_1: entered promiscuous mode [ 123.681216][ T4914] Bluetooth: hci0: command tx timeout [ 125.760422][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.769064][ T4914] Bluetooth: hci0: command tx timeout [ 125.808432][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.879103][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.924229][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.926835][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.977078][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.980558][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.023168][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.184786][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.246710][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.267449][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.268311][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.300687][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.300897][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.033173][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.161929][ T5803] veth0_vlan: entered promiscuous mode [ 127.183789][ T5803] veth1_vlan: entered promiscuous mode [ 127.243466][ T5803] veth0_macvtap: entered promiscuous mode [ 127.258368][ T5803] veth1_macvtap: entered promiscuous mode [ 127.335060][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.380649][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.417529][ T1188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.418565][ T1188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.418610][ T1188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.418651][ T1188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.839331][ T4914] Bluetooth: hci0: command tx timeout [ 127.912698][ T5792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.912721][ T5792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.025308][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.025331][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/08 11:54:47 executed programs: 2 [ 128.657279][ T5931] loop0: detected capacity change from 0 to 32768 [ 129.764886][ T5955] loop0: detected capacity change from 0 to 32768 [ 129.919020][ T4914] Bluetooth: hci0: command tx timeout [ 130.281813][ T5961] loop0: detected capacity change from 0 to 32768 [ 130.748305][ T5963] loop0: detected capacity change from 0 to 32768 [ 131.212710][ T5964] loop0: detected capacity change from 0 to 32768 [ 131.694424][ T5966] loop0: detected capacity change from 0 to 32768 [ 132.195789][ T5970] loop0: detected capacity change from 0 to 32768 [ 132.600661][ T5971] loop0: detected capacity change from 0 to 32768 [ 132.967212][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967336][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011840][ T5972] loop0: detected capacity change from 0 to 32768 [ 133.438719][ T5973] loop0: detected capacity change from 0 to 32768 2026/07/08 11:54:53 executed programs: 12 [ 133.873759][ T5974] loop0: detected capacity change from 0 to 32768 [ 134.274322][ T5975] loop0: detected capacity change from 0 to 32768 [ 134.758643][ T5976] loop0: detected capacity change from 0 to 32768 [ 135.227215][ T5977] loop0: detected capacity change from 0 to 32768 [ 135.641249][ T5978] loop0: detected capacity change from 0 to 32768 [ 136.044038][ T5979] loop0: detected capacity change from 0 to 32768 [ 136.123755][ C1] ================================================================== [ 136.123773][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 136.123828][ C1] Read of size 4 at addr ffff888034855a08 by task rcuc/1/28 [ 136.123848][ C1] [ 136.123873][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.123908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.123930][ C1] Call Trace: [ 136.123939][ C1] [ 136.123949][ C1] dump_stack_lvl+0xe8/0x150 [ 136.123987][ C1] print_address_description+0x55/0x1e0 [ 136.124022][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.124053][ C1] print_report+0x58/0x70 [ 136.124084][ C1] kasan_report+0x117/0x150 [ 136.124110][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.124146][ C1] lbmIODone+0x130e/0x16b0 [ 136.124177][ C1] ? blkg_put+0x22/0x240 [ 136.124207][ C1] ? blkg_put+0x22/0x240 [ 136.124238][ C1] ? blkg_put+0x18d/0x240 [ 136.124269][ C1] ? bio_endio+0x980/0x9d0 [ 136.124293][ C1] blk_update_request+0x57b/0xe50 [ 136.124323][ C1] blk_mq_end_request+0x3e/0x70 [ 136.124346][ C1] blk_done_softirq+0x10a/0x160 [ 136.124382][ C1] handle_softirqs+0x1d9/0x6c0 [ 136.124414][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 136.124440][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 136.124470][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 136.124493][ C1] rcu_cpu_kthread+0x99f/0x1480 [ 136.124522][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 136.124550][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 136.124574][ C1] ? schedule+0x90/0x2b0 [ 136.124607][ C1] smpboot_thread_fn+0x57c/0xa80 [ 136.124637][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 136.124670][ C1] kthread+0x388/0x470 [ 136.124701][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.124729][ C1] ? __pfx_kthread+0x10/0x10 [ 136.124761][ C1] ret_from_fork+0x514/0xb70 [ 136.124796][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.124829][ C1] ? __switch_to+0xc89/0x1420 [ 136.124858][ C1] ? __pfx_kthread+0x10/0x10 [ 136.124890][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.124928][ C1] [ 136.124936][ C1] [ 136.124941][ C1] Allocated by task 5979: [ 136.124952][ C1] kasan_save_track+0x3e/0x80 [ 136.124971][ C1] __kasan_kmalloc+0x93/0xb0 [ 136.124990][ C1] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 136.125011][ C1] lmLogInit+0x3e5/0x1a20 [ 136.125038][ C1] lmLogOpen+0x4e3/0xf90 [ 136.125064][ C1] jfs_mount_rw+0xf3/0x670 [ 136.125090][ C1] jfs_fill_super+0x769/0xda0 [ 136.125110][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 136.125138][ C1] vfs_get_tree+0x92/0x2a0 [ 136.125162][ C1] do_new_mount+0x319/0xdc0 [ 136.125194][ C1] __se_sys_mount+0x31d/0x420 [ 136.125212][ C1] do_syscall_64+0x174/0x580 [ 136.125239][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.125260][ C1] [ 136.125265][ C1] Freed by task 5803: [ 136.125275][ C1] kasan_save_track+0x3e/0x80 [ 136.125293][ C1] kasan_save_free_info+0x40/0x50 [ 136.125319][ C1] __kasan_slab_free+0x5c/0x80 [ 136.125338][ C1] kfree+0x1c5/0x6c0 [ 136.125367][ C1] lmLogShutdown+0x456/0x850 [ 136.125395][ C1] lmLogClose+0x28c/0x530 [ 136.125423][ C1] jfs_umount+0x2da/0x3b0 [ 136.125449][ C1] jfs_put_super+0x8c/0x190 [ 136.125468][ C1] generic_shutdown_super+0x13d/0x2d0 [ 136.125489][ C1] kill_block_super+0x44/0x90 [ 136.125513][ C1] deactivate_locked_super+0xbc/0x130 [ 136.125532][ C1] cleanup_mnt+0x3d3/0x460 [ 136.125555][ C1] task_work_run+0x1d9/0x270 [ 136.125586][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 136.125606][ C1] do_syscall_64+0x353/0x580 [ 136.125634][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.125655][ C1] [ 136.125660][ C1] The buggy address belongs to the object at ffff888034855a00 [ 136.125660][ C1] which belongs to the cache kmalloc-256 of size 256 [ 136.125680][ C1] The buggy address is located 8 bytes inside of [ 136.125680][ C1] freed 256-byte region [ffff888034855a00, ffff888034855b00) [ 136.125704][ C1] [ 136.125709][ C1] The buggy address belongs to the physical page: [ 136.125733][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34854 [ 136.125754][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 136.125773][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 136.125796][ C1] page_type: f5(slab) [ 136.125817][ C1] raw: 0080000000000040 ffff88813ffb4b40 dead000000000100 dead000000000122 [ 136.125837][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 136.125858][ C1] head: 0080000000000040 ffff88813ffb4b40 dead000000000100 dead000000000122 [ 136.125878][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 136.125898][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 136.125923][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 136.125934][ C1] page dumped because: kasan: bad access detected [ 136.125950][ C1] page_owner tracks the page as allocated [ 136.125958][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27926388443, free_ts 0 [ 136.125996][ C1] post_alloc_hook+0x1f9/0x250 [ 136.126029][ C1] get_page_from_freelist+0x262a/0x26a0 [ 136.126052][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 136.126074][ C1] allocate_slab+0x79/0x5e0 [ 136.126116][ C1] refill_objects+0x2d8/0x350 [ 136.126143][ C1] __pcs_replace_empty_main+0x330/0x690 [ 136.126169][ C1] __kmalloc_node_track_caller_noprof+0x62d/0x7c0 [ 136.126191][ C1] krealloc_node_align_noprof+0x19a/0x390 [ 136.126214][ C1] add_sysfs_param+0xd4/0xb80 [ 136.126236][ C1] kernel_add_sysfs_param+0x7f/0xe0 [ 136.126259][ C1] param_sysfs_builtin+0x199/0x250 [ 136.126281][ C1] param_sysfs_builtin_init+0x23/0x30 [ 136.126302][ C1] do_one_initcall+0x250/0x870 [ 136.126319][ C1] do_initcall_level+0x10a/0x1a0 [ 136.126344][ C1] do_initcalls+0x59/0xa0 [ 136.126367][ C1] kernel_init_freeable+0x29d/0x3e0 [ 136.126391][ C1] page_owner free stack trace missing [ 136.126404][ C1] [ 136.126409][ C1] Memory state around the buggy address: [ 136.126421][ C1] ffff888034855900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.126437][ C1] ffff888034855980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.126452][ C1] >ffff888034855a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.126463][ C1] ^ [ 136.126474][ C1] ffff888034855a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.126489][ C1] ffff888034855b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.126500][ C1] ================================================================== [ 136.126537][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.126554][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 136.126580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.126593][ C1] Call Trace: [ 136.126601][ C1] [ 136.126610][ C1] vpanic+0x56c/0xa60 [ 136.126635][ C1] ? __pfx_vpanic+0x10/0x10 [ 136.126657][ C1] ? __pfx___schedule+0x10/0x10 [ 136.126689][ C1] panic+0xc5/0xd0 [ 136.126709][ C1] ? __pfx_panic+0x10/0x10 [ 136.126730][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 136.126763][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.126794][ C1] check_panic_on_warn+0x89/0xb0 [ 136.126829][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.126859][ C1] end_report+0x73/0x170 [ 136.126883][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.126922][ C1] kasan_report+0x128/0x150 [ 136.126947][ C1] ? lbmIODone+0x130e/0x16b0 [ 136.126983][ C1] lbmIODone+0x130e/0x16b0 [ 136.127015][ C1] ? blkg_put+0x22/0x240 [ 136.127046][ C1] ? blkg_put+0x22/0x240 [ 136.127077][ C1] ? blkg_put+0x18d/0x240 [ 136.127108][ C1] ? bio_endio+0x980/0x9d0 [ 136.127132][ C1] blk_update_request+0x57b/0xe50 [ 136.127162][ C1] blk_mq_end_request+0x3e/0x70 [ 136.127185][ C1] blk_done_softirq+0x10a/0x160 [ 136.127221][ C1] handle_softirqs+0x1d9/0x6c0 [ 136.127254][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 136.127280][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 136.127309][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 136.127332][ C1] rcu_cpu_kthread+0x99f/0x1480 [ 136.127361][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 136.127390][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 136.127415][ C1] ? schedule+0x90/0x2b0 [ 136.127447][ C1] smpboot_thread_fn+0x57c/0xa80 [ 136.127477][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 136.127509][ C1] kthread+0x388/0x470 [ 136.127541][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.127569][ C1] ? __pfx_kthread+0x10/0x10 [ 136.127601][ C1] ret_from_fork+0x514/0xb70 [ 136.127635][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 136.127667][ C1] ? __switch_to+0xc89/0x1420 [ 136.127697][ C1] ? __pfx_kthread+0x10/0x10 [ 136.127729][ C1] ret_from_fork_asm+0x1a/0x30 [ 136.127760][ C1] [ 136.128363][ C1] Kernel Offset: disabled