[ 92.088683][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. 2026/05/17 14:43:32 parsed 1 programs [ 100.251704][ T5613] cgroup: Unknown subsys name 'net' [ 100.494044][ T5613] cgroup: Unknown subsys name 'cpuset' [ 100.557561][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.610170][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.444873][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.474606][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.499751][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.506239][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.518161][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.092237][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.093685][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.093815][ T5662] bridge_slave_0: entered allmulticast mode [ 110.095960][ T5662] bridge_slave_0: entered promiscuous mode [ 110.124044][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.124134][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.124271][ T5662] bridge_slave_1: entered allmulticast mode [ 110.126529][ T5662] bridge_slave_1: entered promiscuous mode [ 110.190027][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.193618][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.255616][ T5662] team0: Port device team_slave_0 added [ 110.266073][ T5662] team0: Port device team_slave_1 added [ 110.301537][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.301553][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.301577][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.305204][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.305221][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.305250][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.438063][ T5662] hsr_slave_0: entered promiscuous mode [ 110.440376][ T5662] hsr_slave_1: entered promiscuous mode [ 110.722633][ T5662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.755342][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.766697][ T5662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.802665][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.805196][ T5662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.824602][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.825819][ T5662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.864184][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.216503][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.260808][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.278071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.281728][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.360881][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.361007][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.876690][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.956508][ T5662] veth0_vlan: entered promiscuous mode [ 111.974357][ T5662] veth1_vlan: entered promiscuous mode [ 112.028456][ T5662] veth0_macvtap: entered promiscuous mode [ 112.033517][ T5662] veth1_macvtap: entered promiscuous mode [ 112.070281][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.094065][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.114907][ T1435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.132406][ T1435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.133605][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.133652][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.903493][ T1435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.622182][ T1435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.210526][ T1435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.878129][ T1435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.797260][ T1435] bridge_slave_1: left allmulticast mode [ 115.797484][ T1435] bridge_slave_1: left promiscuous mode [ 115.804687][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.908813][ T1435] bridge_slave_0: left allmulticast mode [ 115.908850][ T1435] bridge_slave_0: left promiscuous mode [ 115.909105][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.677757][ T1435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.757894][ T1435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.779474][ T1435] bond0 (unregistering): Released all slaves [ 116.822500][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.127030][ T1435] hsr_slave_0: left promiscuous mode [ 117.166999][ T1435] hsr_slave_1: left promiscuous mode [ 117.171060][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.171137][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.219024][ T1435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.219055][ T1435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.330510][ T1435] veth1_macvtap: left promiscuous mode [ 117.330745][ T1435] veth0_macvtap: left promiscuous mode [ 117.331018][ T1435] veth1_vlan: left promiscuous mode [ 117.331317][ T1435] veth0_vlan: left promiscuous mode [ 118.127761][ T1435] team0 (unregistering): Port device team_slave_1 removed [ 118.167660][ T1435] team0 (unregistering): Port device team_slave_0 removed [ 118.370530][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.509291][ T3704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.524987][ T3704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.640424][ T3704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.640449][ T3704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.444192][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 2026/05/17 14:43:55 executed programs: 0 [ 120.132205][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.168938][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.170113][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.172930][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.173756][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.858210][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 121.746067][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.746226][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.746379][ T5796] bridge_slave_0: entered allmulticast mode [ 121.777001][ T5796] bridge_slave_0: entered promiscuous mode [ 121.783339][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.783486][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.783607][ T5796] bridge_slave_1: entered allmulticast mode [ 121.785480][ T5796] bridge_slave_1: entered promiscuous mode [ 121.853699][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.857867][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.918762][ T5796] team0: Port device team_slave_0 added [ 121.923364][ T5796] team0: Port device team_slave_1 added [ 122.228728][ T5645] Bluetooth: hci0: command tx timeout [ 122.367186][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.367203][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.367228][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.372335][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.372352][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.372382][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.116462][ T5796] hsr_slave_0: entered promiscuous mode [ 123.120628][ T5796] hsr_slave_1: entered promiscuous mode [ 124.296951][ T5645] Bluetooth: hci0: command tx timeout [ 124.995635][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.024173][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.025871][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.065609][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.068588][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.111603][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.113216][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.155879][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.348919][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.384294][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.400016][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.400879][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.442044][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.458667][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.234481][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.334664][ T5796] veth0_vlan: entered promiscuous mode [ 126.356154][ T5796] veth1_vlan: entered promiscuous mode [ 126.377255][ T5645] Bluetooth: hci0: command tx timeout [ 126.428229][ T5796] veth0_macvtap: entered promiscuous mode [ 126.435896][ T5796] veth1_macvtap: entered promiscuous mode [ 126.493536][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.518150][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.574291][ T1435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.593234][ T1435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.594770][ T1435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.615572][ T1435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.199750][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.199774][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.311970][ T3704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.311993][ T3704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/17 14:44:03 executed programs: 2 [ 127.993072][ T5926] loop0: detected capacity change from 0 to 32768 [ 128.458281][ T5645] Bluetooth: hci0: command tx timeout [ 129.212092][ T5951] loop0: detected capacity change from 0 to 32768 [ 129.688410][ T5961] loop0: detected capacity change from 0 to 32768 [ 130.106059][ T5962] loop0: detected capacity change from 0 to 32768 [ 130.578229][ T5963] loop0: detected capacity change from 0 to 32768 [ 131.007792][ T5965] loop0: detected capacity change from 0 to 32768 [ 131.473428][ T5967] loop0: detected capacity change from 0 to 32768 [ 131.892347][ T5968] loop0: detected capacity change from 0 to 32768 [ 132.309500][ T5969] loop0: detected capacity change from 0 to 32768 2026/05/17 14:44:08 executed programs: 11 [ 132.832195][ T5972] loop0: detected capacity change from 0 to 32768 [ 133.034059][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.034155][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301880][ T5973] loop0: detected capacity change from 0 to 32768 [ 133.699271][ T5974] loop0: detected capacity change from 0 to 32768 [ 134.126432][ T5975] loop0: detected capacity change from 0 to 32768 [ 134.525846][ T5976] loop0: detected capacity change from 0 to 32768 [ 134.948959][ T5977] loop0: detected capacity change from 0 to 32768 [ 135.334002][ T5978] loop0: detected capacity change from 0 to 32768 [ 135.740562][ T5979] loop0: detected capacity change from 0 to 32768 [ 136.150858][ T5980] loop0: detected capacity change from 0 to 32768 [ 136.613005][ T5981] loop0: detected capacity change from 0 to 32768 [ 137.049487][ T5982] loop0: detected capacity change from 0 to 32768 2026/05/17 14:44:13 executed programs: 23 [ 138.356457][ T5985] set_capacity_and_notify: 2 callbacks suppressed [ 138.356471][ T5985] loop0: detected capacity change from 0 to 32768 [ 138.796739][ T5986] loop0: detected capacity change from 0 to 32768 [ 139.241985][ T5987] loop0: detected capacity change from 0 to 32768 [ 139.674704][ T5988] loop0: detected capacity change from 0 to 32768 [ 140.063940][ T5989] loop0: detected capacity change from 0 to 32768 [ 140.469885][ T5990] loop0: detected capacity change from 0 to 32768 [ 140.861594][ T5991] loop0: detected capacity change from 0 to 32768 [ 141.267748][ T5992] loop0: detected capacity change from 0 to 32768 [ 141.682089][ T5993] loop0: detected capacity change from 0 to 32768 [ 142.099443][ T5994] loop0: detected capacity change from 0 to 32768 2026/05/17 14:44:18 executed programs: 35 [ 143.719323][ T5998] set_capacity_and_notify: 3 callbacks suppressed [ 143.719337][ T5998] loop0: detected capacity change from 0 to 32768 [ 144.123270][ T5999] loop0: detected capacity change from 0 to 32768 [ 144.553546][ T6000] loop0: detected capacity change from 0 to 32768 [ 144.977769][ T6001] loop0: detected capacity change from 0 to 32768 [ 145.409022][ T6002] loop0: detected capacity change from 0 to 32768 [ 145.810056][ T6003] loop0: detected capacity change from 0 to 32768 [ 145.875561][ C0] ================================================================== [ 145.875578][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 145.875627][ C0] Read of size 4 at addr ffff88802d224808 by task ksoftirqd/0/15 [ 145.875647][ C0] [ 145.875678][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.875706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.875727][ C0] Call Trace: [ 145.875736][ C0] [ 145.875745][ C0] dump_stack_lvl+0xe8/0x150 [ 145.875774][ C0] print_address_description+0x55/0x1e0 [ 145.875801][ C0] ? lbmIODone+0x1312/0x16c0 [ 145.875831][ C0] print_report+0x58/0x70 [ 145.875853][ C0] kasan_report+0x117/0x150 [ 145.875879][ C0] ? lbmIODone+0x1312/0x16c0 [ 145.875914][ C0] lbmIODone+0x1312/0x16c0 [ 145.875944][ C0] ? blkg_put+0x22/0x240 [ 145.875964][ C0] ? blkg_put+0x22/0x240 [ 145.875985][ C0] ? blkg_put+0x18d/0x240 [ 145.876007][ C0] ? bio_endio+0x989/0x9d0 [ 145.876035][ C0] blk_update_request+0x57e/0xe60 [ 145.876069][ C0] blk_mq_end_request+0x3e/0x70 [ 145.876096][ C0] blk_done_softirq+0x10a/0x160 [ 145.876121][ C0] handle_softirqs+0x1de/0x6d0 [ 145.876151][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 145.876178][ [ 145.876178][ C0] run_ksoftirqd+0x52/0x180 [ 145.876205][ C0] smpboot_thread_fn+0x541/0xa50 [ 145.876232][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 145.876263][ C0] kthread+0x388/0x470 [ 145.876293][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 145.876319][ C0] ? __pfx_kthread+0x10/0x10 [ 145.876349][ C0] ret_from_fork+0x514/0xb70 [ 145.876376][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 145.876409][ C0] ? __switch_to+0xc79/0x1410 [ 145.876444][ C0] ? __pfx_kthread+0x10/0x10 [ 145.876474][ C0] ret_from_fork_asm+0x1a/0x30 [ 145.876510][ C0] [ 145.876518][ C0] [ 145.876528][ C0] Allocated by task 6003: [ 145.876539][ C0] kasan_save_track+0x3e/0x80 [ 145.876560][ C0] __kasan_kmalloc+0x93/0xb0 [ 145.876580][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 145.876604][ C0] lmLogInit+0x3e5/0x1a00 [ 145.876629][ C0] lmLogOpen+0x4e1/0xfa0 [ 145.876654][ C0] jfs_mount_rw+0xee/0x670 [ 145.876678][ C0] jfs_fill_super+0x754/0xd80 [ 145.876696][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 145.876725][ C0] vfs_get_tree+0x92/0x2a0 [ 145.876747][ C0] do_new_mount+0x341/0xd30 [ 145.876775][ C0] __se_sys_mount+0x31d/0x420 [ 145.876805][ C0] do_syscall_64+0x15f/0xf80 [ 145.876831][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.876851][ C0] [ 145.876856][ C0] Freed by task 5796: [ 145.876865][ C0] kasan_save_track+0x3e/0x80 [ 145.876883][ C0] kasan_save_free_info+0x46/0x50 [ 145.876912][ C0] __kasan_slab_free+0x5c/0x80 [ 145.876932][ C0] kfree+0x1c5/0x6c0 [ 145.876949][ C0] lmLogShutdown+0x456/0x850 [ 145.876976][ C0] lmLogClose+0x28a/0x520 [ 145.877003][ C0] jfs_umount+0x2fb/0x3d0 [ 145.877027][ C0] jfs_put_super+0x8c/0x190 [ 145.877045][ C0] generic_shutdown_super+0x13d/0x2d0 [ 145.877064][ C0] kill_block_super+0x44/0x90 [ 145.877087][ C0] deactivate_locked_super+0xbc/0x130 [ 145.877106][ C0] cleanup_mnt+0x437/0x4d0 [ 145.877127][ C0] task_work_run+0x1d9/0x270 [ 145.877157][ C0] exit_to_user_mode_loop+0xf3/0x4d0 [ 145.877183][ C0] do_syscall_64+0x33e/0xf80 [ 145.877210][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.877230][ C0] [ 145.877235][ C0] The buggy address belongs to the object at ffff88802d224800 [ 145.877235][ C0] which belongs to the cache kmalloc-256 of size 256 [ 145.877254][ C0] The buggy address is located 8 bytes inside of [ 145.877254][ C0] freed 256-byte region [ffff88802d224800, ffff88802d224900) [ 145.877276][ C0] [ 145.877281][ C0] The buggy address belongs to the physical page: [ 145.877302][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d224 [ 145.877322][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 145.877340][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 145.877361][ C0] page_type: f5(slab) [ 145.877381][ C0] raw: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 145.877405][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 145.877427][ C0] head: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 145.877446][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 145.877466][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 145.877484][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 145.877496][ C0] page dumped because: kasan: bad access detected [ 145.877512][ C0] page_owner tracks the page as allocated [ 145.877520][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21732309458, free_ts 0 [ 145.877558][ C0] post_alloc_hook+0x231/0x280 [ 145.877580][ C0] get_page_from_freelist+0x27c8/0x2840 [ 145.877607][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 145.877634][ C0] allocate_slab+0x77/0x660 [ 145.877664][ C0] refill_objects+0x33c/0x3d0 [ 145.877691][ C0] __pcs_replace_empty_main+0x373/0x720 [ 145.877723][ C0] __kvmalloc_node_noprof+0x6f4/0x8e0 [ 145.877747][ C0] v4l2_ctrl_new+0xa60/0x1860 [ 145.877772][ C0] v4l2_ctrl_new_std+0x24e/0x300 [ 145.877797][ C0] handler_new_ref+0x153/0x9c0 [ 145.877820][ C0] v4l2_ctrl_add_handler+0x19f/0x290 [ 145.877846][ C0] vivid_create_controls+0x2fd6/0x3bd0 [ 145.877880][ C0] vivid_probe+0x425f/0x72c0 [ 145.877907][ C0] platform_probe+0xf9/0x190 [ 145.877928][ C0] really_probe+0x267/0xaf0 [ 145.877954][ C0] __driver_probe_device+0x1ef/0x380 [ 145.877978][ C0] page_owner free stack trace missing [ 145.877985][ C0] [ 145.877990][ C0] Memory state around the buggy address: [ 145.878001][ C0] ffff88802d224700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.878016][ C0] ffff88802d224780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.878030][ C0] >ffff88802d224800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.878042][ C0] ^ [ 145.878053][ C0] ffff88802d224880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.878067][ C0] ffff88802d224900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.878079][ C0] ================================================================== [ 146.014222][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.014242][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.014265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.014277][ C0] Call Trace: [ 146.014286][ C0] [ 146.014293][ C0] vpanic+0x56c/0xa60 [ 146.014326][ C0] ? __pfx_vpanic+0x10/0x10 [ 146.014347][ C0] ? __pfx___schedule+0x10/0x10 [ 146.014372][ C0] panic+0xc5/0xd0 [ 146.014404][ C0] ? __pfx_panic+0x10/0x10 [ 146.014426][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 146.014459][ C0] ? lbmIODone+0x1312/0x16c0 [ 146.014485][ C0] check_panic_on_warn+0x89/0xb0 [ 146.014514][ C0] ? lbmIODone+0x1312/0x16c0 [ 146.014538][ C0] end_report+0x73/0x170 [ 146.014561][ C0] ? lbmIODone+0x1312/0x16c0 [ 146.014585][ C0] kasan_report+0x128/0x150 [ 146.014609][ C0] ? lbmIODone+0x1312/0x16c0 [ 146.014635][ C0] lbmIODone+0x1312/0x16c0 [ 146.014657][ C0] ? blkg_put+0x22/0x240 [ 146.014673][ C0] ? blkg_put+0x22/0x240 [ 146.014688][ C0] ? blkg_put+0x18d/0x240 [ 146.014705][ C0] ? bio_endio+0x989/0x9d0 [ 146.014727][ C0] blk_update_request+0x57e/0xe60 [ 146.014755][ C0] blk_mq_end_request+0x3e/0x70 [ 146.014776][ C0] blk_done_softirq+0x10a/0x160 [ 146.014795][ C0] handle_softirqs+0x1de/0x6d0 [ 146.014818][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 146.014841][ C0] run_ksoftirqd+0x52/0x180 [ 146.014864][ C0] smpboot_thread_fn+0x541/0xa50 [ 146.014887][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 146.014914][ C0] kthread+0x388/0x470 [ 146.014940][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 146.014963][ C0] ? __pfx_kthread+0x10/0x10 [ 146.014990][ C0] ret_from_fork+0x514/0xb70 [ 146.015014][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 146.015035][ C0] ? __switch_to+0xc79/0x1410 [ 146.015065][ C0] ? __pfx_kthread+0x10/0x10 [ 146.015087][ C0] ret_from_fork_asm+0x1a/0x30 [ 146.015116][ C0] [ 146.017408][ C0] Kernel Offset: disabled