Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
2026/05/31 15:56:43 parsed 1 programs
[ 117.501045][ T5625] cgroup: Unknown subsys name 'net'
[ 117.761719][ T5625] cgroup: Unknown subsys name 'cpuset'
[ 117.835249][ T5625] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 119.628833][ T5625] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 123.672242][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 123.680828][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 123.699078][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 123.700859][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 123.701565][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 124.417991][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.418011][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 124.526915][ T3190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.526932][ T3190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.697827][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.699083][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.699199][ T5711] bridge_slave_0: entered allmulticast mode
[ 128.701285][ T5711] bridge_slave_0: entered promiscuous mode
[ 128.721844][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.722247][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.722663][ T5711] bridge_slave_1: entered allmulticast mode
[ 128.729460][ T5711] bridge_slave_1: entered promiscuous mode
[ 128.818556][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.821843][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.871177][ T5711] team0: Port device team_slave_0 added
[ 128.873407][ T5711] team0: Port device team_slave_1 added
[ 129.271148][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 129.271160][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 129.271177][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 129.280199][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 129.280242][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 129.280304][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 129.432812][ T5711] hsr_slave_0: entered promiscuous mode
[ 129.433643][ T5711] hsr_slave_1: entered promiscuous mode
[ 129.706719][ T5711] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 129.738718][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 130.010423][ T5711] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 130.053179][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 130.056904][ T5711] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 130.092860][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 130.094390][ T5711] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 130.154159][ T5711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 130.421786][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0
[ 130.621241][ T5711] 8021q: adding VLAN 0 to HW filter on device team0
[ 130.641668][ T92] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.641813][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 130.700816][ T92] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.702033][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 131.132998][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.202190][ T5711] veth0_vlan: entered promiscuous mode
[ 131.217292][ T5711] veth1_vlan: entered promiscuous mode
[ 131.269558][ T5711] veth0_macvtap: entered promiscuous mode
[ 131.273833][ T5711] veth1_macvtap: entered promiscuous mode
[ 131.299546][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 131.317819][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 131.348885][ T181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.373844][ T181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.374093][ T181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.374129][ T181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.400266][ T1181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/31 15:57:01 executed programs: 0
[ 132.630287][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 132.632690][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 132.633494][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 132.634469][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 132.657785][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.860208][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.860295][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.997612][ T1181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 133.258453][ T1181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 133.571152][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 133.571290][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state
[ 133.571385][ T5753] bridge_slave_0: entered allmulticast mode
[ 133.573045][ T5753] bridge_slave_0: entered promiscuous mode
[ 133.582971][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 133.583063][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state
[ 133.583188][ T5753] bridge_slave_1: entered allmulticast mode
[ 133.598107][ T5753] bridge_slave_1: entered promiscuous mode
[ 133.652618][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 133.670093][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 133.712148][ T5753] team0: Port device team_slave_0 added
[ 133.719010][ T5753] team0: Port device team_slave_1 added
[ 133.750041][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 133.750052][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 133.750070][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 133.751487][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 133.751495][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 133.751513][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 134.033482][ T5753] hsr_slave_0: entered promiscuous mode
[ 134.034300][ T5753] hsr_slave_1: entered promiscuous mode
[ 134.036399][ T5753] debugfs: 'hsr0' already exists in 'hsr'
[ 134.036615][ T5753] Cannot create hsr debugfs directory
[ 134.184038][ T1181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.696454][ T4915] Bluetooth: hci0: command tx timeout
[ 134.925164][ T1181] bridge_slave_1: left allmulticast mode
[ 134.925369][ T1181] bridge_slave_1: left promiscuous mode
[ 134.931303][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.095992][ T1181] bridge_slave_0: left allmulticast mode
[ 135.096016][ T1181] bridge_slave_0: left promiscuous mode
[ 135.096179][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 135.955300][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.035339][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 136.061122][ T1181] bond0 (unregistering): Released all slaves
[ 136.232591][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1
[ 136.584858][ T1181] hsr_slave_0: left promiscuous mode
[ 136.625038][ T1181] hsr_slave_1: left promiscuous mode
[ 136.626076][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 136.626159][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 136.667714][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 136.667742][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 136.745874][ T1181] veth1_macvtap: left promiscuous mode
[ 136.746036][ T1181] veth0_macvtap: left promiscuous mode
[ 136.749376][ T1181] veth1_vlan: left promiscuous mode
[ 136.749570][ T1181] veth0_vlan: left promiscuous mode
[ 136.775356][ T4915] Bluetooth: hci0: command tx timeout
[ 137.475330][ T1181] team0 (unregistering): Port device team_slave_1 removed
[ 137.515399][ T1181] team0 (unregistering): Port device team_slave_0 removed
[ 137.710087][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2
[ 138.768412][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 138.821029][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 138.832123][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 138.854846][ T4915] Bluetooth: hci0: command tx timeout
[ 138.884359][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 138.896265][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 138.930270][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 138.931685][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 138.983937][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 139.115682][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0
[ 139.150911][ T5753] 8021q: adding VLAN 0 to HW filter on device team0
[ 139.163893][ T92] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.164007][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 139.189894][ T181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.190082][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 139.769203][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 139.861020][ T5753] veth0_vlan: entered promiscuous mode
[ 139.873405][ T5753] veth1_vlan: entered promiscuous mode
[ 139.910878][ T5753] veth0_macvtap: entered promiscuous mode
[ 139.919317][ T5753] veth1_macvtap: entered promiscuous mode
[ 139.954463][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 139.974471][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 139.993598][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 139.993837][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 139.993877][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 139.993914][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.359454][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.359474][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 140.420382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 140.420403][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/31 15:57:09 executed programs: 2
[ 140.848391][ T5841] loop0: detected capacity change from 0 to 32768
[ 140.935876][ T4915] Bluetooth: hci0: command tx timeout
[ 140.981778][ T5841]
[ 140.981778][ T5841] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 140.981778][ T5841]
[ 141.051552][ T5753]
[ 141.051552][ T5753] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 141.051552][ T5753]
[ 141.054309][ T5753]
[ 141.054309][ T5753] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 141.054309][ T5753]
[ 141.113787][ C0] ==================================================================
[ 141.113803][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 141.113865][ C0] Read of size 4 at addr ffff8880351ab408 by task ksoftirqd/0/15
[ 141.113884][ C0]
[ 141.113913][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 141.113938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 141.113961][ C0] Call Trace:
[ 141.113969][ C0]
[ 141.113978][ C0] dump_stack_lvl+0xe8/0x150
[ 141.114004][ C0] print_address_description+0x55/0x1e0
[ 141.114030][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.114061][ C0] print_report+0x58/0x70
[ 141.114082][ C0] kasan_report+0x117/0x150
[ 141.114106][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.114142][ C0] lbmIODone+0x1312/0x16c0
[ 141.114175][ C0] ? blkg_put+0x22/0x240
[ 141.114205][ C0] ? blkg_put+0x22/0x240
[ 141.114234][ C0] ? blkg_put+0x18d/0x240
[ 141.114275][ C0] ? bio_endio+0x989/0x9d0
[ 141.114295][ C0] blk_update_request+0x57e/0xe60
[ 141.114322][ C0] blk_mq_end_request+0x3e/0x70
[ 141.114343][ C0] blk_done_softirq+0x10a/0x160
[ 141.114374][ C0] handle_softirqs+0x1de/0x6d0
[ 141.114396][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 141.114417][ C0] run_ksoftirqd+0x52/0x180
[ 141.114438][ C0] smpboot_thread_fn+0x541/0xa50
[ 141.114463][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 141.114486][ C0] kthread+0x388/0x470
[ 141.114511][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 141.114532][ C0] ? __pfx_kthread+0x10/0x10
[ 141.114554][ C0] ret_from_fork+0x514/0xb70
[ 141.114576][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 141.114607][ C0] ? __switch_to+0xc79/0x1410
[ 141.114642][ C0] ? __pfx_kthread+0x10/0x10
[ 141.114668][ C0] ret_from_fork_asm+0x1a/0x30
[ 141.114698][ C0]
[ 141.114705][ C0]
[ 141.114710][ C0] Allocated by task 5841:
[ 141.114720][ C0] kasan_save_track+0x3e/0x80
[ 141.114740][ C0] __kasan_kmalloc+0x93/0xb0
[ 141.114756][ C0] __kmalloc_cache_noprof+0x3a6/0x690
[ 141.114772][ C0] lmLogInit+0x3e5/0x1a00
[ 141.114792][ C0] lmLogOpen+0x4e1/0xfa0
[ 141.114811][ C0] jfs_mount_rw+0xee/0x670
[ 141.114830][ C0] jfs_fill_super+0x754/0xd80
[ 141.114845][ C0] get_tree_bdev_flags+0x431/0x4f0
[ 141.114862][ C0] vfs_get_tree+0x92/0x2a0
[ 141.114879][ C0] do_new_mount+0x341/0xd30
[ 141.114902][ C0] __se_sys_mount+0x31d/0x420
[ 141.114913][ C0] do_syscall_64+0x174/0x580
[ 141.114934][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.114949][ C0]
[ 141.114953][ C0] Freed by task 5753:
[ 141.114961][ C0] kasan_save_track+0x3e/0x80
[ 141.114976][ C0] kasan_save_free_info+0x46/0x50
[ 141.114999][ C0] __kasan_slab_free+0x5c/0x80
[ 141.115016][ C0] kfree+0x[ 141.115016][ C0] kfree+0x1c5/0x6c0
[ 141.115030][ C0] lmLogShutdown+0x456/0x850
[ 141.115052][ C0] lmLogClose+0x28a/0x520
[ 141.115075][ C0] jfs_umount+0x2fb/0x3d0
[ 141.115099][ C0] jfs_put_super+0x8c/0x190
[ 141.115115][ C0] generic_shutdown_super+0x13d/0x2d0
[ 141.115132][ C0] kill_block_super+0x44/0x90
[ 141.115151][ C0] deactivate_locked_super+0xbc/0x130
[ 141.115165][ C0] cleanup_mnt+0x437/0x4d0
[ 141.115182][ C0] task_work_run+0x1d9/0x270
[ 141.115209][ C0] exit_to_user_mode_loop+0x193/0x680
[ 141.115233][ C0] do_syscall_64+0x353/0x580
[ 141.115260][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.115277][ C0]
[ 141.115282][ C0] The buggy address belongs to the object at ffff8880351ab400
[ 141.115282][ C0] which belongs to the cache kmalloc-256 of size 256
[ 141.115297][ C0] The buggy address is located 8 bytes inside of
[ 141.115297][ C0] freed 256-byte region [ffff8880351ab400, ffff8880351ab500)
[ 141.115317][ C0]
[ 141.115321][ C0] The buggy address belongs to the physical page:
[ 141.115343][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x351aa
[ 141.115362][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 141.115378][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 141.115399][ C0] page_type: f5(slab)
[ 141.115417][ C0] raw: 0080000000000040 ffff88801a009b40 dead000000000100 dead000000000122
[ 141.115434][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 141.115453][ C0] head: 0080000000000040 ffff88801a009b40 dead000000000100 dead000000000122
[ 141.115470][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 141.115487][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 141.115504][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 141.115515][ C0] page dumped because: kasan: bad access detected
[ 141.115528][ C0] page_owner tracks the page as allocated
[ 141.115535][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4966, tgid 4966 (udevd), ts 140282284272, free_ts 140259510699
[ 141.115568][ C0] post_alloc_hook+0x22d/0x280
[ 141.115596][ C0] get_page_from_freelist+0x28b2/0x2930
[ 141.115621][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 141.115644][ C0] allocate_slab+0x77/0x660
[ 141.115669][ C0] refill_objects+0x33c/0x3d0
[ 141.115695][ C0] __pcs_replace_empty_main+0x373/0x720
[ 141.115723][ C0] __kmalloc_cache_noprof+0x44e/0x690
[ 141.115745][ C0] smk_fetch+0x95/0x140
[ 141.115765][ C0] smack_d_instantiate+0x83f/0x990
[ 141.115783][ C0] security_d_instantiate+0x106/0x1d0
[ 141.115805][ C0] d_splice_alias_ops+0x71/0x3e0
[ 141.115840][ C0] __lookup_slow+0x2d2/0x440
[ 141.115856][ C0] lookup_slow+0x53/0x70
[ 141.115871][ C0] link_path_walk+0xd1e/0x18d0
[ 141.115887][ C0] path_openat+0x2d5/0x38a0
[ 141.115905][ C0] do_file_open+0x23e/0x4a0
[ 141.115924][ C0] page last free pid 5753 tgid 5753 stack trace:
[ 141.115935][ C0] __free_frozen_pages+0xfe5/0x10d0
[ 141.115955][ C0] __slab_free+0x252/0x2a0
[ 141.115974][ C0] qlist_free_all+0x99/0x100
[ 141.115990][ C0] kasan_quarantine_reduce+0x148/0x160
[ 141.116008][ C0] __kasan_slab_alloc+0x22/0x80
[ 141.116026][ C0] kmem_cache_alloc_noprof+0x33b/0x680
[ 141.116044][ C0] security_inode_alloc+0x39/0x310
[ 141.116065][ C0] inode_init_always_gfp+0x99a/0xd50
[ 141.116090][ C0] alloc_inode+0x82/0x1b0
[ 141.116115][ C0] new_inode+0x22/0x170
[ 141.116129][ C0] debugfs_create_dir+0x68/0x350
[ 141.116154][ C0] debugfs_hw_add+0x2d4/0x380
[ 141.116173][ C0] ieee80211_register_hw+0x3d9d/0x4a70
[ 141.116218][ C0] mac80211_hwsim_new_radio+0x3051/0x54f0
[ 141.116245][ C0] hwsim_new_radio_nl+0xf6a/0x1c00
[ 141.116272][ C0] genl_family_rcv_msg_doit+0x22a/0x330
[ 141.116294][ C0]
[ 141.116299][ C0] Memory state around the buggy address:
[ 141.116309][ C0] ffff8880351ab300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.116322][ C0] ffff8880351ab380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.116335][ C0] >ffff8880351ab400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.116345][ C0] ^
[ 141.116355][ C0] ffff8880351ab480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 141.116367][ C0] ffff8880351ab500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 141.116385][ C0] ==================================================================
[ 141.398950][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 141.398966][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 141.398983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 141.398991][ C0] Call Trace:
[ 141.398997][ C0]
[ 141.399003][ C0] vpanic+0x56c/0xa60
[ 141.399024][ C0] ? __pfx_vpanic+0x10/0x10
[ 141.399041][ C0] ? __pfx___schedule+0x10/0x10
[ 141.399061][ C0] panic+0xc5/0xd0
[ 141.399080][ C0] ? __pfx_panic+0x10/0x10
[ 141.399096][ C0] ? preempt_schedule_thunk+0x16/0x30
[ 141.399120][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.399140][ C0] check_panic_on_warn+0x89/0xb0
[ 141.399160][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.399180][ C0] end_report+0x73/0x170
[ 141.399197][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.399216][ C0] kasan_report+0x128/0x150
[ 141.399232][ C0] ? lbmIODone+0x1312/0x16c0
[ 141.399254][ C0] lbmIODone+0x1312/0x16c0
[ 141.399275][ C0] ? blkg_put+0x22/0x240
[ 141.399293][ C0] ? blkg_put+0x22/0x240
[ 141.399311][ C0] ? blkg_put+0x18d/0x240
[ 141.399330][ C0] ? bio_endio+0x989/0x9d0
[ 141.399343][ C0] blk_update_request+0x57e/0xe60
[ 141.399361][ C0] blk_mq_end_request+0x3e/0x70
[ 141.399374][ C0] blk_done_softirq+0x10a/0x160
[ 141.399395][ C0] handle_softirqs+0x1de/0x6d0
[ 141.399413][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 141.399429][ C0] run_ksoftirqd+0x52/0x180
[ 141.399445][ C0] smpboot_thread_fn+0x541/0xa50
[ 141.399461][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 141.399479][ C0] kthread+0x388/0x470
[ 141.399496][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 141.399511][ C0] ? __pfx_kthread+0x10/0x10
[ 141.399529][ C0] ret_from_fork+0x514/0xb70
[ 141.399545][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 141.399559][ C0] ? __switch_to+0xc79/0x1410
[ 141.399580][ C0] ? __pfx_kthread+0x10/0x10
[ 141.399598][ C0] ret_from_fork_asm+0x1a/0x30
[ 141.399619][ C0]
[ 141.400269][ C0] Kernel Offset: disabled