[ 91.991117][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. 2026/04/17 13:07:21 parsed 1 programs [ 98.779219][ T5806] cgroup: Unknown subsys name 'net' [ 99.042415][ T5806] cgroup: Unknown subsys name 'cpuset' [ 99.114273][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.064979][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.910203][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 105.134449][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.136186][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.136328][ T5826] bridge_slave_0: entered allmulticast mode [ 105.138626][ T5826] bridge_slave_0: entered promiscuous mode [ 105.176061][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.176180][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.176394][ T5826] bridge_slave_1: entered allmulticast mode [ 105.187892][ T5826] bridge_slave_1: entered promiscuous mode [ 105.246839][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.251855][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.302900][ T5826] team0: Port device team_slave_0 added [ 105.315203][ T5826] team0: Port device team_slave_1 added [ 105.350511][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.350525][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.350544][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.353351][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.353362][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.353380][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.487903][ T5826] hsr_slave_0: entered promiscuous mode [ 105.489901][ T5826] hsr_slave_1: entered promiscuous mode [ 105.747117][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.787295][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.788103][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.810673][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.811577][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.858811][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.859753][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.888419][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.191795][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.225524][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.241398][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.251871][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.293208][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.293354][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.564550][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.627342][ T5826] veth0_vlan: entered promiscuous mode [ 106.640636][ T5826] veth1_vlan: entered promiscuous mode [ 106.696257][ T5826] veth0_macvtap: entered promiscuous mode [ 106.700249][ T5826] veth1_macvtap: entered promiscuous mode [ 106.738098][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.758896][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.785711][ T1565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.788072][ T1565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.791056][ T1565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.793284][ T1565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.501257][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.796666][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.409879][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.172294][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.190428][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.206978][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.208498][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.209634][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.399839][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.919968][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.919996][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.188843][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.188865][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.654022][ T68] bridge_slave_1: left allmulticast mode [ 110.654221][ T68] bridge_slave_1: left promiscuous mode [ 110.658955][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.767680][ T68] bridge_slave_0: left allmulticast mode [ 110.767711][ T68] bridge_slave_0: left promiscuous mode [ 110.767973][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.534390][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.624766][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.650845][ T68] bond0 (unregistering): Released all slaves [ 111.696077][ T5465] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.076421][ T68] hsr_slave_0: left promiscuous mode [ 112.116935][ T68] hsr_slave_1: left promiscuous mode [ 112.130996][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.131086][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.179270][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.179301][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.297621][ T68] veth1_macvtap: left promiscuous mode [ 112.297849][ T68] veth0_macvtap: left promiscuous mode [ 112.298136][ T68] veth1_vlan: left promiscuous mode [ 112.298434][ T68] veth0_vlan: left promiscuous mode [ 113.144416][ T68] team0 (unregistering): Port device team_slave_1 removed [ 113.204532][ T68] team0 (unregistering): Port device team_slave_0 removed [ 113.419166][ T5465] 8021q: adding VLAN 0 to HW filter on device eth2 [ 114.212145][ T5465] 8021q: adding VLAN 0 to HW filter on device eth3 [ 115.055036][ T5465] 8021q: adding VLAN 0 to HW filter on device eth4 2026/04/17 13:07:44 executed programs: 0 [ 118.516530][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.534700][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.555704][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.557057][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.557969][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.879845][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 118.980066][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.980217][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.980335][ T5981] bridge_slave_0: entered allmulticast mode [ 118.982286][ T5981] bridge_slave_0: entered promiscuous mode [ 118.997457][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.998055][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.998630][ T5981] bridge_slave_1: entered allmulticast mode [ 119.006551][ T5981] bridge_slave_1: entered promiscuous mode [ 119.069200][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.072152][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.116017][ T5981] team0: Port device team_slave_0 added [ 119.119614][ T5981] team0: Port device team_slave_1 added [ 119.192199][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.192213][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.192231][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.211954][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.211989][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.212059][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.323343][ T5981] hsr_slave_0: entered promiscuous mode [ 119.330011][ T5981] hsr_slave_1: entered promiscuous mode [ 120.619163][ T59] Bluetooth: hci0: command tx timeout [ 121.715640][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.764605][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.766949][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.816894][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.923973][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.968588][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.004055][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.078465][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.422156][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.456687][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.477187][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.477395][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.500120][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.500339][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.686458][ T59] Bluetooth: hci0: command tx timeout [ 122.990056][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.069507][ T5981] veth0_vlan: entered promiscuous mode [ 123.090296][ T5981] veth1_vlan: entered promiscuous mode [ 123.176372][ T5981] veth0_macvtap: entered promiscuous mode [ 123.183420][ T5981] veth1_macvtap: entered promiscuous mode [ 123.215170][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.237947][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.257951][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.260735][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.263068][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.263801][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.723304][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.723339][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.907237][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.907259][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/17 13:07:50 executed programs: 2 [ 124.590265][ T6097] loop0: detected capacity change from 0 to 32768 [ 124.765072][ T59] Bluetooth: hci0: command tx timeout [ 125.168713][ C0] ================================================================== [ 125.168730][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 125.168776][ C0] Read of size 4 at addr ffff88802af4ba08 by task kworker/u8:5/68 [ 125.168794][ C0] [ 125.168814][ C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.168838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.168852][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 125.168887][ C0] Call Trace: [ 125.168900][ C0] [ 125.168909][ C0] dump_stack_lvl+0xe8/0x150 [ 125.168946][ C0] print_address_description+0x55/0x1e0 [ 125.168981][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.169008][ C0] print_report+0x58/0x70 [ 125.169038][ C0] kasan_report+0x117/0x150 [ 125.169072][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.169111][ C0] lbmIODone+0x1312/0x16c0 [ 125.169139][ C0] ? blkg_put+0x22/0x240 [ 125.169171][ C0] ? blkg_put+0x22/0x240 [ 125.169203][ C0] ? blkg_put+0x18d/0x240 [ 125.169235][ C0] ? bio_endio+0x989/0x9d0 [ 125.169259][ C0] blk_update_request+0x57e/0xe60 [ 125.169289][ C0] blk_mq_end_request+0x3e/0x70 [ 125.169312][ C0] blk_done_softirq+0x10a/0x160 [ 125.169333][ C0] handle_softirqs+0x1de/0x6d0 [ 125.169371][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 125.169405][ C0] addrconf_dad_work+0x3ca/0x1680 [ 125.169428][ C0] ? addrconf_dad_work+0x137/0x1680 [ 125.169451][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.169487][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 125.169526][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.169563][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.169595][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.169628][ C0] process_scheduled_works+0xb5d/0x1860 [ 125.169687][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.169722][ C0] ? assign_work+0x3d5/0x5e0 [ 125.169755][ C0] worker_thread+0xa53/0xfc0 [ 125.169800][ C0] kthread+0x388/0x470 [ 125.169824][ C0] ? __pfx_worker_thread+0x10/0x10 [ 125.169859][ C0] ? __pfx_kthread+0x10/0x10 [ 125.169882][ C0] ret_from_fork+0x514/0xb70 [ 125.169935][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 125.169970][ C0] ? __switch_to+0xc79/0x1410 [ 125.170000][ C0] ? __pfx_kthread+0x10/0x10 [ 125.170024][ C0] ret_from_fork_asm+0x1a/0x30 [ 125.170056][ C0] [ 125.170064][ C0] [ 125.170075][ C0] Allocated by task 6097: [ 125.170085][ C0] kasan_save_track+0x3e/0x80 [ 125.170119][ C0] __kasan_kmalloc+0x93/0xb0 [ 125.170146][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 125.170176][ C0] lmLogInit+0x3e5/0x1a00 [ 125.170200][ C0] lmLogOpen+0x4e1/0xfa0 [ 125.170224][ C0] jfs_mount_rw+0xee/0x670 [ 125.170247][ C0] jfs_fill_super+0x754/0xd80 [ 125.170279][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 125.170309][ C0] vfs_get_tree+0x92/0x2a0 [ 125.170349][ C0] do_new_mount+0x341/0xd30 [ 125.170368][ C0] __se_sys_mount+0x31d/0x420 [ 125.170388][ C0] do_syscall_64+0x15f/0xf80 [ 125.170417][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.170438][ C0] [ 125.170443][ C0] Freed by task 5981: [ 125.170452][ C0] kasan_save_track+0x3e/0x80 [ 125.170476][ C0] kasan_save_free_info+0x46/0x50 [ 125.170496][ C0] __kasan_slab_free+0x5c/0x80 [ 125.170522][ C0] kfree+0x1c5/0x6c0 [ 125.170545][ C0] lmLogShutdown+0x456/0x850 [ 125.170570][ C0] lmLogClose+0x28a/0x520 [ 125.170594][ C0] jfs_umount+0x2fb/0x3d0 [ 125.170616][ C0] jfs_put_super+0x8c/0x190 [ 125.170646][ C0] generic_shutdown_super+0x13d/0x2d0 [ 125.170670][ C0] kill_block_super+0x44/0x90 [ 125.170697][ C0] deactivate_locked_super+0xbc/0x130 [ 125.170720][ C0] cleanup_mnt+0x437/0x4d0 [ 125.170745][ C0] task_work_run+0x1d9/0x270 [ 125.170768][ C0] exit_to_user_mode_loop+0xed/0x480 [ 125.170786][ C0] do_syscall_64+0x33e/0xf80 [ 125.170815][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.170835][ C0] [ 125.170839][ C0] The buggy address belongs to the object at ffff88802af4ba00 [ 125.170839][ C0] which belongs to the cache kmalloc-256 of size 256 [ 125.170857][ C0] The buggy address is located 8 bytes inside of [ 125.170857][ C0] freed 256-byte region [ffff88802af4ba00, ffff88802af4bb00) [ 125.170879][ C0] [ 125.170884][ C0] The buggy address belongs to the physical page: [ 125.170899][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2af4a [ 125.170919][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.170936][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 125.170959][ C0] page_type: f5(slab) [ 125.170979][ C0] raw: 0080000000000040 ffff88801a01db40 dead000000000100 dead000000000122 [ 125.170997][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 125.171018][ C0] head: 0080000000000040 ffff88801a01db40 dead000000000100 dead000000000122 [ 125.171036][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 125.171056][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 125.171074][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 125.171085][ C0] page dumped because: kasan: bad access detected [ 125.171105][ C0] page_owner tracks the page as allocated [ 125.171113][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15590939729, free_ts 0 [ 125.171148][ C0] post_alloc_hook+0x231/0x280 [ 125.171176][ C0] get_page_from_freelist+0x27c8/0x2840 [ 125.171209][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 125.171243][ C0] allocate_slab+0x77/0x660 [ 125.171263][ C0] refill_objects+0x33c/0x3d0 [ 125.171281][ C0] __pcs_replace_empty_main+0x373/0x720 [ 125.171303][ C0] __kmalloc_cache_noprof+0x44e/0x690 [ 125.171332][ C0] usb_string+0x111/0x7d0 [ 125.171351][ C0] usb_cache_string+0x80/0x140 [ 125.171370][ C0] usb_new_device+0x289/0x16e0 [ 125.171401][ C0] register_root_hub+0x270/0x5f0 [ 125.171429][ C0] usb_add_hcd+0xba1/0x10b0 [ 125.171457][ C0] dummy_hcd_probe+0x134/0x270 [ 125.171481][ C0] platform_probe+0xf9/0x190 [ 125.171511][ C0] really_probe+0x267/0xaf0 [ 125.171530][ C0] __driver_probe_device+0x18c/0x320 [ 125.171548][ C0] page_owner free stack trace missing [ 125.171555][ C0] [ 125.171560][ C0] Memory state around the buggy address: [ 125.171571][ C0] ffff88802af4b900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.171585][ C0] ffff88802af4b980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.171600][ C0] >ffff88802af4ba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.171611][ C0] ^ [ 125.171621][ C0] ffff88802af4ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.171635][ C0] ffff88802af4bb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.171646][ C0] ================================================================== [ 125.171700][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.171716][ C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.171741][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.171755][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 125.171778][ C0] Call Trace: [ 125.171786][ C0] [ 125.171794][ C0] vpanic+0x56c/0xa60 [ 125.171817][ C0] ? __pfx_vpanic+0x10/0x10 [ 125.171837][ C0] ? __pfx___schedule+0x10/0x10 [ 125.171870][ C0] panic+0xc5/0xd0 [ 125.171889][ C0] ? __pfx_panic+0x10/0x10 [ 125.171909][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 125.171942][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.171969][ C0] check_panic_on_warn+0x89/0xb0 [ 125.171995][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.172022][ C0] end_report+0x73/0x170 [ 125.172053][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.172080][ C0] kasan_report+0x128/0x150 [ 125.172119][ C0] ? lbmIODone+0x1312/0x16c0 [ 125.172151][ C0] lbmIODone+0x1312/0x16c0 [ 125.172179][ C0] ? blkg_put+0x22/0x240 [ 125.172210][ C0] ? blkg_put+0x22/0x240 [ 125.172243][ C0] ? blkg_put+0x18d/0x240 [ 125.172275][ C0] ? bio_endio+0x989/0x9d0 [ 125.172299][ C0] blk_update_request+0x57e/0xe60 [ 125.172328][ C0] blk_mq_end_request+0x3e/0x70 [ 125.172352][ C0] blk_done_softirq+0x10a/0x160 [ 125.172374][ C0] handle_softirqs+0x1de/0x6d0 [ 125.172409][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 125.172441][ C0] addrconf_dad_work+0x3ca/0x1680 [ 125.172464][ C0] ? addrconf_dad_work+0x137/0x1680 [ 125.172484][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.172518][ C0] ? __pfx_addrconf_dad_work+0x10/0x10 [ 125.172538][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.172577][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.172607][ C0] ? process_scheduled_works+0xa70/0x1860 [ 125.172639][ C0] process_scheduled_works+0xb5d/0x1860 [ 125.172685][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.172718][ C0] ? assign_work+0x3d5/0x5e0 [ 125.172751][ C0] worker_thread+0xa53/0xfc0 [ 125.172796][ C0] kthread+0x388/0x470 [ 125.172819][ C0] ? __pfx_worker_thread+0x10/0x10 [ 125.172848][ C0] ? __pfx_kthread+0x10/0x10 [ 125.172871][ C0] ret_from_fork+0x514/0xb70 [ 125.172906][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 125.172939][ C0] ? __switch_to+0xc79/0x1410 [ 125.172968][ C0] ? __pfx_kthread+0x10/0x10 [ 125.172992][ C0] ret_from_fork_asm+0x1a/0x30 [ 125.173022][ C0] [ 125.173636][ C0] Kernel Offset: disabled