[ 92.047035][ T31] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts.
2026/07/08 11:20:40 parsed 1 programs
2026/07/08 11:20:40 serving rpc on tcp://36181
[ 101.207066][ T5612] cgroup: Unknown subsys name 'net'
[ 101.448785][ T5612] cgroup: Unknown subsys name 'cpuset'
[ 101.521765][ T5612] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 103.628677][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.004515][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.004543][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.070802][ T1544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.070824][ T1544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.880738][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.881699][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.881884][ T5645] bridge_slave_0: entered allmulticast mode
[ 109.891911][ T5645] bridge_slave_0: entered promiscuous mode
[ 109.924990][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.925145][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.925272][ T5645] bridge_slave_1: entered allmulticast mode
[ 109.928187][ T5645] bridge_slave_1: entered promiscuous mode
[ 109.992893][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.996204][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.048546][ T5645] team0: Port device team_slave_0 added
[ 110.056993][ T5645] team0: Port device team_slave_1 added
[ 110.106550][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.106565][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.106586][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.110038][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.110058][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.110079][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.320117][ T5645] hsr_slave_0: entered promiscuous mode
[ 110.323345][ T5645] hsr_slave_1: entered promiscuous mode
[ 110.605194][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.656498][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 110.662488][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.695718][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 110.699649][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.745197][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 110.750255][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.788128][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 111.145178][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.223855][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.245431][ T2395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.245995][ T2395] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.308194][ T2395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.308303][ T2395] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.810726][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.902778][ T5645] veth0_vlan: entered promiscuous mode
[ 111.954976][ T5645] veth1_vlan: entered promiscuous mode
[ 112.005366][ T5645] veth0_macvtap: entered promiscuous mode
[ 112.014361][ T5645] veth1_macvtap: entered promiscuous mode
[ 112.062825][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.082046][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.103954][ T2395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.108049][ T2395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.108098][ T2395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.108137][ T2395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.919258][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.266656][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.761738][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.770428][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.784506][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.798752][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.799491][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.935699][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.648246][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.452199][ T14] bridge_slave_1: left allmulticast mode
[ 115.452431][ T14] bridge_slave_1: left promiscuous mode
[ 115.459775][ T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.644343][ T14] bridge_slave_0: left allmulticast mode
[ 115.644383][ T14] bridge_slave_0: left promiscuous mode
[ 115.644809][ T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.442024][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 116.521990][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 116.563621][ T14] bond0 (unregistering): Released all slaves
[ 116.592477][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1
[ 117.087441][ T14] hsr_slave_0: left promiscuous mode
[ 117.121207][ T14] hsr_slave_1: left promiscuous mode
[ 117.122352][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 117.122419][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 117.184363][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 117.184394][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 117.565172][ T14] veth1_macvtap: left promiscuous mode
[ 117.565405][ T14] veth0_macvtap: left promiscuous mode
[ 117.565685][ T14] veth1_vlan: left promiscuous mode
[ 117.565972][ T14] veth0_vlan: left promiscuous mode
[ 118.331887][ T14] team0 (unregistering): Port device team_slave_1 removed
[ 118.391826][ T14] team0 (unregistering): Port device team_slave_0 removed
[ 118.573246][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2
[ 119.528315][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3
[ 121.056073][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4
2026/07/08 11:21:05 executed programs: 0
[ 122.509924][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.525124][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.526055][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 122.530968][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 122.556075][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 123.395220][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.395375][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.395530][ T5808] bridge_slave_0: entered allmulticast mode
[ 123.397413][ T5808] bridge_slave_0: entered promiscuous mode
[ 123.399633][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.399779][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.399886][ T5808] bridge_slave_1: entered allmulticast mode
[ 123.402265][ T5808] bridge_slave_1: entered promiscuous mode
[ 123.479688][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.489842][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.534522][ T5808] team0: Port device team_slave_0 added
[ 123.537051][ T5808] team0: Port device team_slave_1 added
[ 123.575957][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.575970][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.575990][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.577576][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.577586][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.577605][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.710224][ T5808] hsr_slave_0: entered promiscuous mode
[ 123.720780][ T5808] hsr_slave_1: entered promiscuous mode
[ 124.674122][ T4914] Bluetooth: hci0: command tx timeout
[ 126.116682][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.184362][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 126.186056][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.255421][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 126.256993][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.306052][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 126.307602][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.358502][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 126.564937][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.613281][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.640809][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.652543][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.680074][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.680292][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.753022][ T4914] Bluetooth: hci0: command tx timeout
[ 127.426122][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.578175][ T5808] veth0_vlan: entered promiscuous mode
[ 127.613184][ T5808] veth1_vlan: entered promiscuous mode
[ 127.727412][ T5808] veth0_macvtap: entered promiscuous mode
[ 127.739343][ T5808] veth1_macvtap: entered promiscuous mode
[ 127.778454][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.800692][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.839850][ T1544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.840133][ T1544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.840176][ T1544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.840216][ T1544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.384657][ T1544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.384677][ T1544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.479147][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.479170][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/08 11:21:11 executed programs: 2
[ 128.831182][ T4914] Bluetooth: hci0: command tx timeout
[ 129.166516][ T5945] loop0: detected capacity change from 0 to 32768
[ 130.134332][ T5963] loop0: detected capacity change from 0 to 32768
[ 130.644638][ T5965] loop0: detected capacity change from 0 to 32768
[ 130.911388][ T4914] Bluetooth: hci0: command tx timeout
[ 131.162758][ T5968] loop0: detected capacity change from 0 to 32768
[ 131.610774][ T5972] loop0: detected capacity change from 0 to 32768
[ 132.093949][ T5973] loop0: detected capacity change from 0 to 32768
[ 132.525571][ T5974] loop0: detected capacity change from 0 to 32768
[ 132.957111][ T5975] loop0: detected capacity change from 0 to 32768
[ 132.997609][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.997678][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.378388][ T5976] loop0: detected capacity change from 0 to 32768
[ 133.875046][ T5977] loop0: detected capacity change from 0 to 32768
2026/07/08 11:21:17 executed programs: 12
[ 134.361549][ T5978] loop0: detected capacity change from 0 to 32768
[ 134.756859][ T5979] loop0: detected capacity change from 0 to 32768
[ 135.184912][ T5980] loop0: detected capacity change from 0 to 32768
[ 135.605896][ T5981] loop0: detected capacity change from 0 to 32768
[ 136.013843][ T5982] loop0: detected capacity change from 0 to 32768
[ 136.436453][ T5983] loop0: detected capacity change from 0 to 32768
[ 136.827174][ T5984] loop0: detected capacity change from 0 to 32768
[ 137.227644][ T5985] loop0: detected capacity change from 0 to 32768
[ 137.625847][ T5986] loop0: detected capacity change from 0 to 32768
[ 138.015382][ T5987] loop0: detected capacity change from 0 to 32768
2026/07/08 11:21:22 executed programs: 25
[ 139.706741][ T5991] set_capacity_and_notify: 3 callbacks suppressed
[ 139.706755][ T5991] loop0: detected capacity change from 0 to 32768
[ 140.116584][ T5992] loop0: detected capacity change from 0 to 32768
[ 140.529879][ T5993] loop0: detected capacity change from 0 to 32768
[ 140.928017][ T5994] loop0: detected capacity change from 0 to 32768
[ 141.000269][ C1] ==================================================================
[ 141.000287][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 141.000348][ C1] Read of size 4 at addr ffff8880352b8c08 by task ksoftirqd/1/30
[ 141.000370][ C1]
[ 141.000396][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 141.000428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 141.000450][ C1] Call Trace:
[ 141.000459][ C1]
[ 141.000469][ C1] dump_stack_lvl+0xe8/0x150
[ 141.000506][ C1] print_address_description+0x55/0x1e0
[ 141.000541][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.000571][ C1] print_report+0x58/0x70
[ 141.000602][ C1] kasan_report+0x117/0x150
[ 141.000629][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.000665][ C1] lbmIODone+0x130e/0x16b0
[ 141.000697][ C1] ? blkg_put+0x22/0x240
[ 141.000730][ C1] ? blkg_put+0x22/0x240
[ 141.000761][ C1] ? blkg_put+0x18d/0x240
[ 141.000793][ C1] ? bio_endio+0x980/0x9d0
[ 141.000816][ C1] blk_update_request+0x57b/0xe50
[ 141.000847][ C1] blk_mq_end_request+0x3e/0x70
[ 141.000870][ C1] blk_done_softirq+0x10a/0x160
[ 141.000906][ C1] handle_softirqs+0x1d9/0x6c0
[ 141.000938][ C1] run_ksoftirqd+0x52/0x180
[ 141.000968][ C1] smpboot_thread_fn+0x57c/0xa80
[ 141.001002][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 141.001032][ C1] kthread+0x388/0x470
[ 141.001062][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 141.001089][ C1] ? __pfx_kthread+0x10/0x10
[ 141.001120][ C1] ret_from_fork+0x514/0xb70
[ 141.001155][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 141.001216][ C1] ? __switch_to+0xc89/0x1420
[ 141.001245][ C1] ? __pfx_kthread+0x10/0x10
[ 141.001276][ C1] ret_from_fork_asm+0x1a/0x30
[ 141.001305][ C1]
[ 141.001312][ C1]
[ 141.001317][ C1] Allocated by task 5994:
[ 141.001328][ C1] kasan_save_track+0x3e/0x80
[ 141.001347][ C1] __kasan_kmalloc+0x93/0xb0
[ 141.001366][ C1] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 141.001386][ C1] lmLogInit+0x3e5/0x1a20
[ 141.001413][ C1] lmLogOpen+0x4e3/0xf90
[ 141.001439][ C1] jfs_mount_rw+0xf3/0x670
[ 141.001465][ C1] jfs_fill_super+0x769/0xda0
[ 141.001485][ C1] get_tree_bdev_flags+0x430/0x4f0
[ 141.001510][ C1] vfs_get_tree+0x92/0x2a0
[ 141.001533][ C1] do_new_mount+0x319/0xdc0
[ 141.001565][ C1] __se_sys_mount+0x31d/0x420
[ 141.001583][ C1] do_syscall_64+0x174/0x580
[ 141.001613][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.001634][ C1]
[ 141.001639][ C1] Freed by task 5808:
[ 141.001648][ C1] kasan_save_track+0x3e/0x80
[ 141.001666][ C1] kasan_save_free_info+0x40/0x50
[ 141.001693][ C1] __kasan_slab_free+0x5c/0x80
[ 141.001712][ C1] kfree+0x1c5/0x6c0
[ 141.001741][ C1] lmLogShutdown+0x456/0x850
[ 141.001769][ C1] lmLogClose+0x28c/0x530
[ 141.001796][ C1] jfs_umount+0x2da/0x3b0
[ 141.001821][ C1] jfs_put_super+0x8c/0x190
[ 141.001840][ C1] generic_shutdown_super+0x13d/0x2d0
[ 141.001860][ C1] kill_block_super+0x44/0x90
[ 141.001884][ C1] deactivate_locked_super+0xbc/0x130
[ 141.001904][ C1] cleanup_mnt+0x3d3/0x460
[ 141.001926][ C1] task_work_run+0x1d9/0x270
[ 141.001957][ C1] exit_to_user_mode_loop+0x1fa/0x730
[ 141.001977][ C1] do_syscall_64+0x353/0x580
[ 141.002005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.002025][ C1]
[ 141.002030][ C1] The buggy address belongs to the object at ffff8880352b8c00
[ 141.002030][ C1] which belongs to the cache kmalloc-256 of size 256
[ 141.002050][ C1] The buggy address is located 8 bytes inside of
[ 141.002050][ C1] freed 256-byte region [ffff8880352b8c00, ffff8880352b8d00)
[ 141.002073][ C1]
[ 141.002079][ C1] The buggy address belongs to the physical page:
[ 141.002101][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x352b8
[ 141.002122][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 141.002141][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 141.002164][ C1] page_type: f5(slab)
[ 141.002190][ C1] raw: 0080000000000040 ffff88813ffb4b40 dead000000000122 0000000000000000
[ 141.002209][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 141.002229][ C1] head: 0080000000000040 ffff88813ffb4b40 dead000000000122 0000000000000000
[ 141.002248][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 141.002267][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 141.002285][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 141.002296][ C1] page dumped because: kasan: bad access detected
[ 141.002311][ C1] page_owner tracks the page as allocated
[ 141.002319][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5994, tgid 5994 (syz.0.43), ts 140928628854, free_ts 140528650968
[ 141.002357][ C1] post_alloc_hook+0x1f9/0x250
[ 141.002389][ C1] get_page_from_freelist+0x262a/0x26a0
[ 141.002413][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 141.002435][ C1] allocate_slab+0x79/0x5e0
[ 141.002460][ C1] refill_objects+0x2d8/0x350
[ 141.002487][ C1] __pcs_replace_empty_main+0x330/0x690
[ 141.002513][ C1] __kmalloc_noprof+0x544/0x780
[ 141.002537][ C1] security_inode_init_security+0x102/0x3e0
[ 141.002566][ C1] shmem_mknod+0x1ea/0x340
[ 141.002590][ C1] shmem_mkdir+0x33/0x70
[ 141.002613][ C1] vfs_mkdir+0x402/0x620
[ 141.002638][ C1] filename_mkdirat+0x289/0x520
[ 141.002664][ C1] __se_sys_mkdirat+0x35/0x150
[ 141.002689][ C1] do_syscall_64+0x174/0x580
[ 141.002717][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.002745][ C1] page last free pid 5993 tgid 5993 stack trace:
[ 141.002758][ C1] __free_frozen_pages+0x10e7/0x11c0
[ 141.002777][ C1] __slab_free+0x252/0x2a0
[ 141.002796][ C1] qlist_free_all+0x99/0x100
[ 141.002826][ C1] kasan_quarantine_reduce+0x148/0x160
[ 141.002857][ C1] __kasan_slab_alloc+0x22/0x80
[ 141.002876][ C1] kmem_cache_alloc_noprof+0x355/0x650
[ 141.002908][ C1] do_getname+0x2e/0x250
[ 141.002936][ C1] do_sys_openat2+0xcc/0x200
[ 141.002954][ C1] __x64_sys_openat+0x138/0x170
[ 141.002972][ C1] do_syscall_64+0x174/0x580
[ 141.003000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.003021][ C1]
[ 141.003026][ C1] Memory state around the buggy address:
[ 141.003038][ C1] ffff8880352b8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.003053][ C1] ffff8880352b8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.003068][ C1] >ffff8880352b8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.003079][ C1] ^
[ 141.003090][ C1] ffff8880352b8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.003105][ C1] ffff8880352b8d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.003116][ C1] ==================================================================
[ 141.009487][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 141.009549][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 141.009636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 141.009689][ C1] Call Trace:
[ 141.009717][ C1]
[ 141.009746][ C1] vpanic+0x56c/0xa60
[ 141.009820][ C1] ? __pfx_vpanic+0x10/0x10
[ 141.009882][ C1] ? __pfx___schedule+0x10/0x10
[ 141.009967][ C1] panic+0xc5/0xd0
[ 141.010020][ C1] ? __pfx_panic+0x10/0x10
[ 141.010073][ C1] ? preempt_schedule_thunk+0x16/0x40
[ 141.010157][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.010250][ C1] check_panic_on_warn+0x89/0xb0
[ 141.010336][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.010411][ C1] end_report+0x73/0x170
[ 141.010474][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.010551][ C1] kasan_report+0x128/0x150
[ 141.010626][ C1] ? lbmIODone+0x130e/0x16b0
[ 141.010706][ C1] lbmIODone+0x130e/0x16b0
[ 141.010784][ C1] ? blkg_put+0x22/0x240
[ 141.010871][ C1] ? blkg_put+0x22/0x240
[ 141.010947][ C1] ? blkg_put+0x18d/0x240
[ 141.011024][ C1] ? bio_endio+0x980/0x9d0
[ 141.011047][ C1] blk_update_request+0x57b/0xe50
[ 141.011112][ C1] blk_mq_end_request+0x3e/0x70
[ 141.011191][ C1] blk_done_softirq+0x10a/0x160
[ 141.011281][ C1] handle_softirqs+0x1d9/0x6c0
[ 141.011365][ C1] run_ksoftirqd+0x52/0x180
[ 141.011439][ C1] smpboot_thread_fn+0x57c/0xa80
[ 141.011522][ C1] ? smpboot_thread_fn+0x4e/0xa80
[ 141.011600][ C1] kthread+0x388/0x470
[ 141.011676][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 141.011744][ C1] ? __pfx_kthread+0x10/0x10
[ 141.011826][ C1] ret_from_fork+0x514/0xb70
[ 141.011911][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 141.011993][ C1] ? __switch_to+0xc89/0x1420
[ 141.012033][ C1] ? __pfx_kthread+0x10/0x10
[ 141.012063][ C1] ret_from_fork_asm+0x1a/0x30
[ 141.012093][ C1]
[ 141.012265][ C1] Kernel Offset: disabled