[ 92.138684][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts.
2026/08/19 16:42:21 parsed 1 programs
2026/08/19 16:42:21 serving rpc on tcp://38837
[ 101.978752][ T5595] cgroup: Unknown subsys name 'net'
[ 102.231073][ T5595] cgroup: Unknown subsys name 'cpuset'
[ 102.274265][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 104.276221][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 108.378116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.378142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.476807][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.476830][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.018699][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.020129][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.020271][ T5632] bridge_slave_0: entered allmulticast mode
[ 111.022255][ T5632] bridge_slave_0: entered promiscuous mode
[ 111.060553][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.060702][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.060820][ T5632] bridge_slave_1: entered allmulticast mode
[ 111.063202][ T5632] bridge_slave_1: entered promiscuous mode
[ 111.147704][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.150983][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.216136][ T5632] team0: Port device team_slave_0 added
[ 111.219898][ T5632] team0: Port device team_slave_1 added
[ 111.259972][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.259986][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.260005][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.263036][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.263063][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.263083][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.412606][ T5632] hsr_slave_0: entered promiscuous mode
[ 111.416923][ T5632] hsr_slave_1: entered promiscuous mode
[ 111.779291][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.824740][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 111.826387][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.877071][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 112.106687][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.128992][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 112.137864][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.169022][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 112.357838][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.394874][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.411351][ T214] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.411493][ T214] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.457914][ T86] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.458068][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.938021][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.049052][ T5632] veth0_vlan: entered promiscuous mode
[ 113.117421][ T5632] veth1_vlan: entered promiscuous mode
[ 113.206230][ T5632] veth0_macvtap: entered promiscuous mode
[ 113.222885][ T5632] veth1_macvtap: entered promiscuous mode
[ 113.321282][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.345902][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.405079][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.405155][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.405197][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.405235][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.221415][ T86] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.566872][ T86] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.787058][ T86] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.121645][ T86] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.215566][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.223015][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.233049][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.243012][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.255382][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.824326][ T86] bridge_slave_1: left allmulticast mode
[ 117.824508][ T86] bridge_slave_1: left promiscuous mode
[ 117.832439][ T86] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.035597][ T86] bridge_slave_0: left allmulticast mode
[ 118.035633][ T86] bridge_slave_0: left promiscuous mode
[ 118.035913][ T86] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.824471][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 118.884208][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 118.925779][ T86] bond0 (unregistering): Released all slaves
[ 118.970470][ T5241] 8021q: adding VLAN 0 to HW filter on device eth1
[ 119.393430][ T86] hsr_slave_0: left promiscuous mode
[ 119.436319][ T86] hsr_slave_1: left promiscuous mode
[ 119.437570][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.437641][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.475303][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.475335][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.582158][ T86] veth1_macvtap: left promiscuous mode
[ 119.582435][ T86] veth0_macvtap: left promiscuous mode
[ 119.582739][ T86] veth1_vlan: left promiscuous mode
[ 119.583075][ T86] veth0_vlan: left promiscuous mode
[ 120.354188][ T86] team0 (unregistering): Port device team_slave_1 removed
[ 120.404220][ T86] team0 (unregistering): Port device team_slave_0 removed
[ 120.620391][ T5241] 8021q: adding VLAN 0 to HW filter on device eth2
[ 121.358117][ T5241] 8021q: adding VLAN 0 to HW filter on device eth3
2026/08/19 16:42:45 executed programs: 0
[ 121.711140][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 121.737537][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 121.738462][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 121.739614][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 121.740555][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.279731][ T5241] 8021q: adding VLAN 0 to HW filter on device eth4
[ 123.547838][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.548056][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.548170][ T5767] bridge_slave_0: entered allmulticast mode
[ 123.550092][ T5767] bridge_slave_0: entered promiscuous mode
[ 123.554951][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.555478][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.555955][ T5767] bridge_slave_1: entered allmulticast mode
[ 123.604532][ T5767] bridge_slave_1: entered promiscuous mode
[ 123.660083][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.673100][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.725885][ T5767] team0: Port device team_slave_0 added
[ 123.737502][ T5767] team0: Port device team_slave_1 added
[ 123.799516][ T4895] Bluetooth: hci0: command tx timeout
[ 123.811089][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.811109][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.811129][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.813056][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.813067][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.813092][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.959079][ T5767] hsr_slave_0: entered promiscuous mode
[ 123.960089][ T5767] hsr_slave_1: entered promiscuous mode
[ 125.873478][ T4895] Bluetooth: hci0: command tx timeout
[ 126.311910][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.342418][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 126.362006][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.398282][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 126.400084][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.455358][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 126.457569][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.492423][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 126.706278][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.829921][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.867426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.871613][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.962929][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.966754][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.730810][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.864284][ T5767] veth0_vlan: entered promiscuous mode
[ 127.891549][ T5767] veth1_vlan: entered promiscuous mode
[ 127.953362][ T4895] Bluetooth: hci0: command tx timeout
[ 127.987976][ T5767] veth0_macvtap: entered promiscuous mode
[ 128.007991][ T5767] veth1_macvtap: entered promiscuous mode
[ 128.046858][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.079545][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.115106][ T4137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.514570][ T1017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.646419][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.646455][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.676656][ T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.743145][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.747410][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.804573][ T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/19 16:42:52 executed programs: 2
[ 129.424151][ T5922] loop0: detected capacity change from 0 to 32768
[ 130.023422][ T4895] Bluetooth: hci0: command tx timeout
[ 130.437867][ T5943] loop0: detected capacity change from 0 to 32768
[ 130.946466][ T5944] loop0: detected capacity change from 0 to 32768
[ 131.408343][ T5945] loop0: detected capacity change from 0 to 32768
[ 131.880904][ T5947] loop0: detected capacity change from 0 to 32768
[ 132.321646][ T5951] loop0: detected capacity change from 0 to 32768
[ 132.715344][ T5952] loop0: detected capacity change from 0 to 32768
[ 133.070498][ T1327] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.070582][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.176670][ T5953] loop0: detected capacity change from 0 to 32768
[ 133.617669][ T5955] loop0: detected capacity change from 0 to 32768
[ 134.085516][ T5957] loop0: detected capacity change from 0 to 32768
2026/08/19 16:42:57 executed programs: 12
[ 134.167705][ C0] ==================================================================
[ 134.167723][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 134.167769][ C0] Read of size 4 at addr ffff88802b0e3c08 by task ktimers/0/16
[ 134.167791][ C0]
[ 134.167816][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 134.167843][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 134.167866][ C0] Call Trace:
[ 134.167875][ C0]
[ 134.167885][ C0] dump_stack_lvl+0xe8/0x150
[ 134.167922][ C0] print_address_description+0x55/0x1e0
[ 134.167958][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.167980][ C0] print_report+0x58/0x70
[ 134.168012][ C0] kasan_report+0x117/0x150
[ 134.168048][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.168075][ C0] lbmIODone+0x130e/0x16b0
[ 134.168099][ C0] ? blkg_put+0x22/0x240
[ 134.168126][ C0] ? blkg_put+0x22/0x240
[ 134.168153][ C0] ? blkg_put+0x18d/0x240
[ 134.168181][ C0] ? bio_endio+0x980/0x9d0
[ 134.168216][ C0] blk_update_request+0x57b/0xe50
[ 134.168256][ C0] blk_mq_end_request+0x3e/0x70
[ 134.168292][ C0] blk_done_softirq+0x10a/0x160
[ 134.168325][ C0] handle_softirqs+0x1da/0x6d0
[ 134.168492][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 134.168526][ C0] run_ktimerd+0x6a/0x100
[ 134.168562][ C0] smpboot_thread_fn+0x565/0xa70
[ 134.168598][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 134.168639][ C0] kthread+0x38b/0x470
[ 134.168679][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 134.168714][ C0] ? __pfx_kthread+0x10/0x10
[ 134.168754][ C0] ret_from_fork+0x514/0xb70
[ 134.168792][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 134.168827][ C0] ? __switch_to+0xc89/0x1420
[ 134.168870][ C0] ? __pfx_kthread+0x10/0x10
[ 134.168910][ C0] ret_from_fork_asm+0x1a/0x30
[ 134.168962][ C0]
[ 134.168971][ C0]
[ 134.168977][ C0] Allocated by task 5957:
[ 134.168990][ C0] kasan_save_track+0x3e/0x80
[ 134.169017][ C0] __kasan_kmalloc+0x93/0xb0
[ 134.169044][ C0] __kmalloc_cache_noprof+0x3da/0x6b0
[ 134.169072][ C0] lmLogInit+0x3e5/0x1a20
[ 134.169093][ C0] lmLogOpen+0x4e3/0xf90
[ 134.169130][ C0] jfs_mount_rw+0xf3/0x670
[ 134.169167][ C0] jfs_fill_super+0x769/0xda0
[ 134.169197][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 134.169233][ C0] vfs_get_tree+0x92/0x2a0
[ 134.169278][ C0] do_new_mount+0x319/0xdc0
[ 134.169306][ C0] __se_sys_mount+0x31d/0x420
[ 134.169335][ C0] do_syscall_64+0x166/0x520
[ 134.169362][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.169387][ C0]
[ 134.169394][ C0] Freed by task 5767:
[ 134.169406][ C0] kasan_save_track+0x3e/0x80
[ 134.169431][ C0] kasan_save_free_info+0x40/0x50
[ 134.169468][ C0] __kasan_slab_free+0x5c/0x80
[ 134.169494][ C0] kfree+0x1c5/0x6d0
[ 134.169515][ C0] lmLogShutdown+0x456/0x850
[ 134.169538][ C0] lmLogClose+0x28c/0x530
[ 134.169559][ C0] jfs_umount+0x2da/0x3b0
[ 134.169597][ C0] jfs_put_super+0x8c/0x190
[ 134.169626][ C0] generic_shutdown_super+0x13d/0x2d0
[ 134.169656][ C0] kill_block_super+0x44/0xa0
[ 134.169690][ C0] deactivate_locked_super+0xbc/0x110
[ 134.169719][ C0] cleanup_mnt+0x3d3/0x460
[ 134.169753][ C0] task_work_run+0x1d9/0x270
[ 134.169793][ C0] exit_to_user_mode_loop+0x204/0x770
[ 134.169817][ C0] do_syscall_64+0x328/0x520
[ 134.169844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.169869][ C0]
[ 134.169876][ C0] The buggy address belongs to the object at ffff88802b0e3c00
[ 134.169876][ C0] which belongs to the cache kmalloc-256 of size 256
[ 134.169899][ C0] The buggy address is located 8 bytes inside of
[ 134.169899][ C0] freed 256-byte region [ffff88802b0e3c00, ffff88802b0e3d00)
[ 134.169927][ C0]
[ 134.169933][ C0] The buggy address belongs to the physical page:
[ 134.169966][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b0e2
[ 134.169991][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 134.170012][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 134.170032][ C0] page_type: f5(slab)
[ 134.170056][ C0] raw: 0080000000000040 ffff88813ffafb40 dead000000000100 dead000000000122
[ 134.170081][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 134.170107][ C0] head: 0080000000000040 ffff88813ffafb40 dead000000000100 dead000000000122
[ 134.170131][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 134.170156][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 134.170178][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 134.170192][ C0] page dumped because: kasan: bad access detected
[ 134.170210][ C0] page_owner tracks the page as allocated
[ 134.170219][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19197272457, free_ts 0
[ 134.170281][ C0] post_alloc_hook+0x1f9/0x250
[ 134.170308][ C0] get_page_from_freelist+0x2630/0x26a0
[ 134.170340][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 134.170370][ C0] allocate_slab+0x79/0x5e0
[ 134.170406][ C0] refill_objects+0x2d8/0x350
[ 134.170443][ C0] __pcs_replace_empty_main+0x334/0x690
[ 134.170478][ C0] __kmalloc_noprof+0x54c/0x780
[ 134.170503][ C0] usb_hcd_submit_urb+0x885/0x1b40
[ 134.170530][ C0] usb_start_wait_urb+0x13f/0x5b0
[ 134.170564][ C0] usb_control_msg+0x234/0x3e0
[ 134.170598][ C0] usb_get_string+0xa2/0x3e0
[ 134.170618][ C0] usb_string_sub+0x76/0x420
[ 134.170654][ C0] usb_string+0x34f/0x790
[ 134.170689][ C0] usb_cache_string+0x7d/0xf0
[ 134.170725][ C0] usb_new_device+0x27a/0x1680
[ 134.170757][ C0] register_root_hub+0x250/0x5c0
[ 134.170786][ C0] page_owner free stack trace missing
[ 134.170795][ C0]
[ 134.170801][ C0] Memory state around the buggy address:
[ 134.170816][ C0] ffff88802b0e3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 134.170835][ C0] ffff88802b0e3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 134.170854][ C0] >ffff88802b0e3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 134.170867][ C0] ^
[ 134.170881][ C0] ffff88802b0e3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 134.170899][ C0] ffff88802b0e3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 134.170913][ C0] ==================================================================
[ 134.170958][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 134.170980][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 134.171011][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 134.171026][ C0] Call Trace:
[ 134.171036][ C0]
[ 134.171046][ C0] vpanic+0x56d/0xa60
[ 134.171095][ C0] ? rcu_is_watching+0x16/0xb0
[ 134.171130][ C0] ? __pfx_vpanic+0x10/0x10
[ 134.171175][ C0] panic+0xc5/0xd0
[ 134.171217][ C0] ? __pfx_panic+0x10/0x10
[ 134.171258][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.171300][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.171327][ C0] check_panic_on_warn+0x89/0xb0
[ 134.171371][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.171395][ C0] end_report+0x73/0x170
[ 134.171428][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.171452][ C0] kasan_report+0x128/0x150
[ 134.171486][ C0] ? lbmIODone+0x130e/0x16b0
[ 134.171517][ C0] lbmIODone+0x130e/0x16b0
[ 134.171545][ C0] ? blkg_put+0x22/0x240
[ 134.171575][ C0] ? blkg_put+0x22/0x240
[ 134.171606][ C0] ? blkg_put+0x18d/0x240
[ 134.171638][ C0] ? bio_endio+0x980/0x9d0
[ 134.171675][ C0] blk_update_request+0x57b/0xe50
[ 134.171721][ C0] blk_mq_end_request+0x3e/0x70
[ 134.171760][ C0] blk_done_softirq+0x10a/0x160
[ 134.171797][ C0] handle_softirqs+0x1da/0x6d0
[ 134.171836][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 134.171870][ C0] run_ktimerd+0x6a/0x100
[ 134.171904][ C0] smpboot_thread_fn+0x565/0xa70
[ 134.171941][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 134.171981][ C0] kthread+0x38b/0x470
[ 134.172020][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 134.172054][ C0] ? __pfx_kthread+0x10/0x10
[ 134.172093][ C0] ret_from_fork+0x514/0xb70
[ 134.172134][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 134.172173][ C0] ? __switch_to+0xc89/0x1420
[ 134.172208][ C0] ? __pfx_kthread+0x10/0x10
[ 134.172250][ C0] ret_from_fork_asm+0x1a/0x30
[ 134.172312][ C0]
[ 134.172929][ C0] Kernel Offset: disabled