no interfaces have a carrier
[ 52.681554][ T5257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 52.707919][ T5257] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
2026/07/17 12:10:10 parsed 1 programs
2026/07/17 12:10:10 serving rpc on tcp://36879
syzkaller login: [ 83.641268][ T5607] cgroup: Unknown subsys name 'net'
[ 83.900675][ T5607] cgroup: Unknown subsys name 'cpuset'
[ 83.977638][ T5607] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 85.660555][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.866059][ T10] cfg80211: failed to load regulatory.db
[ 89.582416][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.601930][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.603171][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.606188][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.614878][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.411253][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.411275][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.503194][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.503212][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.126325][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.128127][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.128389][ T5660] bridge_slave_0: entered allmulticast mode
[ 92.131032][ T5660] bridge_slave_0: entered promiscuous mode
[ 92.145337][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.145450][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.145629][ T5660] bridge_slave_1: entered allmulticast mode
[ 92.150781][ T5660] bridge_slave_1: entered promiscuous mode
[ 92.197802][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.200332][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.236987][ T5660] team0: Port device team_slave_0 added
[ 92.239461][ T5660] team0: Port device team_slave_1 added
[ 92.273189][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.273200][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.273212][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.275373][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.275386][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.275404][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.374944][ T5660] hsr_slave_0: entered promiscuous mode
[ 92.375733][ T5660] hsr_slave_1: entered promiscuous mode
[ 92.894017][ T5660] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.940360][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 93.351200][ T5660] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.370853][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 93.418940][ T5660] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.451792][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 93.455748][ T5660] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.501043][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 93.695633][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.726410][ T5660] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.743028][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.743183][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.756750][ T1519] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.756868][ T1519] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.216539][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.289540][ T5660] veth0_vlan: entered promiscuous mode
[ 94.303214][ T5660] veth1_vlan: entered promiscuous mode
[ 94.359082][ T5660] veth0_macvtap: entered promiscuous mode
[ 94.363264][ T5660] veth1_macvtap: entered promiscuous mode
[ 94.394162][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.412958][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.444788][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.449136][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.451606][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.480813][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.132768][ T159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.192100][ T159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.652230][ T159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/17 12:10:27 executed programs: 0
[ 97.914704][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.934738][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.939071][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.940231][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.941531][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.973438][ T159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.604315][ T159] bridge_slave_1: left allmulticast mode
[ 98.604425][ T159] bridge_slave_1: left promiscuous mode
[ 98.622788][ T159] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.818220][ T159] bridge_slave_0: left allmulticast mode
[ 98.818245][ T159] bridge_slave_0: left promiscuous mode
[ 98.818401][ T159] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.737745][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.817797][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.859162][ T159] bond0 (unregistering): Released all slaves
[ 99.885694][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1
[ 99.969147][ T59] Bluetooth: hci0: command tx timeout
[ 100.307243][ T159] hsr_slave_0: left promiscuous mode
[ 100.347233][ T159] hsr_slave_1: left promiscuous mode
[ 100.348417][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.348507][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.409203][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.409229][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.511788][ T159] veth1_macvtap: left promiscuous mode
[ 100.511972][ T159] veth0_macvtap: left promiscuous mode
[ 100.512135][ T159] veth1_vlan: left promiscuous mode
[ 100.512315][ T159] veth0_vlan: left promiscuous mode
[ 101.197680][ T159] team0 (unregistering): Port device team_slave_1 removed
[ 101.237930][ T159] team0 (unregistering): Port device team_slave_0 removed
[ 101.405917][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2
[ 101.499596][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.499693][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.499856][ T5734] bridge_slave_0: entered allmulticast mode
[ 101.502046][ T5734] bridge_slave_0: entered promiscuous mode
[ 101.506027][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.506157][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.506264][ T5734] bridge_slave_1: entered allmulticast mode
[ 101.509377][ T5734] bridge_slave_1: entered promiscuous mode
[ 101.584129][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.589046][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.639363][ T5734] team0: Port device team_slave_0 added
[ 101.644459][ T5734] team0: Port device team_slave_1 added
[ 101.731516][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.731530][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.731548][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.733811][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.733826][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.733846][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.830623][ T5734] hsr_slave_0: entered promiscuous mode
[ 101.834406][ T5734] hsr_slave_1: entered promiscuous mode
[ 102.047146][ T59] Bluetooth: hci0: command tx timeout
[ 102.402952][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3
[ 104.127231][ T59] Bluetooth: hci0: command tx timeout
[ 104.473647][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.518173][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 104.519425][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.578483][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 104.588657][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.650036][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 104.652439][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.723275][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 104.946294][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.991762][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.013997][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.014170][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.045756][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.045895][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.868785][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.924738][ T5734] veth0_vlan: entered promiscuous mode
[ 105.935294][ T5734] veth1_vlan: entered promiscuous mode
[ 105.973768][ T5734] veth0_macvtap: entered promiscuous mode
[ 105.978328][ T5734] veth1_macvtap: entered promiscuous mode
[ 105.995378][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.014684][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.033039][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.033295][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.033329][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.033356][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.209118][ T59] Bluetooth: hci0: command tx timeout
[ 106.323417][ T5812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.323438][ T5812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.372188][ T5812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.372207][ T5812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/17 12:10:35 executed programs: 2
[ 106.725331][ T5885] loop0: detected capacity change from 0 to 32768
[ 106.732762][ T5885] =======================================================
[ 106.732762][ T5885] WARNING: The mand mount option has been deprecated and
[ 106.732762][ T5885] and is ignored by this kernel. Remove the mand
[ 106.732762][ T5885] option from the mount to silence this warning.
[ 106.732762][ T5885] =======================================================
[ 107.122336][ C0] ==================================================================
[ 107.122351][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 107.122395][ C0] Read of size 4 at addr ffff88801182a608 by task ksoftirqd/0/15
[ 107.122410][ C0]
[ 107.122433][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.122458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 107.122476][ C0] Call Trace:
[ 107.122483][ C0]
[ 107.122491][ C0] dump_stack_lvl+0xe8/0x150
[ 107.122520][ C0] print_address_description+0x55/0x1e0
[ 107.122547][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.122570][ C0] print_report+0x58/0x70
[ 107.122593][ C0] kasan_report+0x117/0x150
[ 107.122620][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.122648][ C0] lbmIODone+0x130e/0x16b0
[ 107.122672][ C0] ? blkg_put+0x22/0x240
[ 107.122696][ C0] ? blkg_put+0x22/0x240
[ 107.122718][ C0] ? blkg_put+0x18d/0x240
[ 107.122741][ C0] ? bio_endio+0x980/0x9d0
[ 107.122760][ C0] blk_update_request+0x57b/0xe50
[ 107.122780][ C0] blk_mq_end_request+0x3e/0x70
[ 107.122796][ C0] blk_done_softirq+0x10a/0x160
[ 107.122812][ C0] handle_softirqs+0x1d9/0x6c0
[ 107.122836][ C0] run_ksoftirqd+0x52/0x180
[ 107.122856][ C0] smpboot_thread_fn+0x57c/0xa80
[ 107.122879][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 107.122899][ C0] kthread+0x388/0x470
[ 107.122916][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 107.122936][ C0] ? __pfx_kthread+0x10/0x10
[ 107.122958][ C0] ret_from_fork+0x514/0xb70
[ 107.122981][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 107.123001][ C0] ? __switch_to+0xc89/0x1420
[ 107.123024][ C0] ? __pfx_kthread+0x10/0x10
[ 107.123047][ C0] ret_from_fork_asm+0x1a/0x30
[ 107.123070][ C0]
[ 107.123077][ C0]
[ 107.123081][ C0] Allocated by task 5885:
[ 107.123090][ C0] kasan_save_track+0x3e/0x80
[ 107.123106][ C0] __kasan_kmalloc+0x93/0xb0
[ 107.123124][ C0] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 107.123140][ C0] lmLogInit+0x3e5/0x1a20
[ 107.123158][ C0] lmLogOpen+0x4e3/0xf90
[ 107.123177][ C0] jfs_mount_rw+0xf3/0x670
[ 107.123196][ C0] jfs_fill_super+0x769/0xda0
[ 107.123211][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 107.123230][ C0] vfs_get_tree+0x92/0x2a0
[ 107.123247][ C0] do_new_mount+0x319/0xdc0
[ 107.123269][ C0] __se_sys_mount+0x31d/0x420
[ 107.123282][ C0] do_syscall_64+0x174/0x580
[ 107.123306][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.123321][ C0]
[ 107.123325][ C0] Freed by task 5734:
[ 107.123333][ C0] kasan_save_track+0x3e/0x80
[ 107.123345][ C0] kasan_save_free_info+0x40/0x50
[ 107.123365][ C0] __kasan_slab_free+0x5c/0x80
[ 107.123380][ C0] kfree+0x1c5/0x6c0
[ 107.123401][ C0] lmLogShutdown+0x456/0x850
[ 107.123422][ C0] lmLogClose+0x28c/0x530
[ 107.123441][ C0] jfs_umount+0x2da/0x3b0
[ 107.123459][ C0] jfs_put_super+0x8c/0x190
[ 107.123473][ C0] generic_shutdown_super+0x13d/0x2d0
[ 107.123485][ C0] kill_block_super+0x44/0x90
[ 107.123499][ C0] deactivate_locked_super+0xbc/0x130
[ 107.123511][ C0] cleanup_mnt+0x3d3/0x460
[ 107.123524][ C0] task_work_run+0x1d9/0x270
[ 107.123542][ C0] exit_to_user_mode_loop+0x1fa/0x730
[ 107.123554][ C0] do_syscall_64+0x353/0x580
[ 107.123571][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.123583][ C0]
[ 107.123586][ C0] The buggy address belongs to the object at ffff88801182a600
[ 107.123586][ C0] which belongs to the cache kmalloc-256 of size 256
[ 107.123598][ C0] The buggy address is located 8 bytes inside of
[ 107.123598][ C0] freed 256-byte region [ffff88801182a600, ffff88801182a700)
[ 107.123612][ C0]
[ 107.123635][ C0] The buggy address belongs to the physical page:
[ 107.123654][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1182a
[ 107.123667][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 107.123678][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 107.123693][ C0] page_type: f5(slab)
[ 107.123705][ C0] raw: 0080000000000040 ffff88813ffb4b40 dead000000000122 0000000000000000
[ 107.123717][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 107.123728][ C0] head: 0080000000000040 ffff88813ffb4b40 dead000000000122 0000000000000000
[ 107.123739][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 107.123751][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 107.123761][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 107.123768][ C0] page dumped because: kasan: bad access detected
[ 107.123777][ C0] page_owner tracks the page as allocated
[ 107.123781][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5611, tgid 5611 (udevd), ts 106520070465, free_ts 106471436981
[ 107.123804][ C0] post_alloc_hook+0x1f9/0x250
[ 107.123823][ C0] get_page_from_freelist+0x262a/0x26a0
[ 107.123837][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 107.123850][ C0] allocate_slab+0x79/0x5e0
[ 107.123864][ C0] refill_objects+0x2d8/0x350
[ 107.123879][ C0] __pcs_replace_empty_main+0x330/0x690
[ 107.123893][ C0] __kmalloc_noprof+0x544/0x780
[ 107.123904][ C0] security_inode_init_security+0x102/0x3e0
[ 107.123922][ C0] shmem_symlink+0xe0/0x460
[ 107.123936][ C0] vfs_symlink+0x18b/0x330
[ 107.123952][ C0] filename_symlinkat+0x1cd/0x420
[ 107.123967][ C0] __se_sys_symlink+0x4d/0x2b0
[ 107.123982][ C0] do_syscall_64+0x174/0x580
[ 107.123999][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.124011][ C0] page last free pid 48 tgid 48 stack trace:
[ 107.124018][ C0] __free_frozen_pages+0x10e7/0x11c0
[ 107.124029][ C0] __slab_free+0x252/0x2a0
[ 107.124040][ C0] qlist_free_all+0x99/0x100
[ 107.124058][ C0] kasan_quarantine_reduce+0x148/0x160
[ 107.124074][ C0] __kasan_slab_alloc+0x22/0x80
[ 107.124085][ C0] kmem_cache_alloc_node_noprof+0x3eb/0x670
[ 107.124103][ C0] __alloc_skb+0x1d7/0x7a0
[ 107.124122][ C0] mld_newpack+0x165/0xcb0
[ 107.124140][ C0] add_grec+0x119f/0x19d0
[ 107.124155][ C0] mld_ifc_work+0x6f1/0xd60
[ 107.124171][ C0] process_scheduled_works+0xa8e/0x14e0
[ 107.124184][ C0] worker_thread+0xa47/0xfb0
[ 107.124197][ C0] kthread+0x388/0x470
[ 107.124212][ C0] ret_from_fork+0x514/0xb70
[ 107.124229][ C0] ret_from_fork_asm+0x1a/0x30
[ 107.124240][ C0]
[ 107.124243][ C0] Memory state around the buggy address:
[ 107.124250][ C0] ffff88801182a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.124259][ C0] ffff88801182a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.124267][ C0] >ffff88801182a600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.124273][ C0] ^
[ 107.124280][ C0] ffff88801182a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 107.124288][ C0] ffff88801182a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.124294][ C0] ==================================================================
[ 107.124354][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.124368][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.124388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 107.124398][ C0] Call Trace:
[ 107.124405][ C0]
[ 107.124412][ C0] vpanic+0x56c/0xa60
[ 107.124433][ C0] ? __pfx_vpanic+0x10/0x10
[ 107.124451][ C0] ? __pfx___schedule+0x10/0x10
[ 107.124484][ C0] panic+0xc5/0xd0
[ 107.124501][ C0] ? __pfx_panic+0x10/0x10
[ 107.124517][ C0] ? preempt_schedule_thunk+0x16/0x40
[ 107.124543][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.124567][ C0] check_panic_on_warn+0x89/0xb0
[ 107.124592][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.124621][ C0] end_report+0x73/0x170
[ 107.124640][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.124663][ C0] kasan_report+0x128/0x150
[ 107.124683][ C0] ? lbmIODone+0x130e/0x16b0
[ 107.124710][ C0] lbmIODone+0x130e/0x16b0
[ 107.124740][ C0] ? blkg_put+0x22/0x240
[ 107.124764][ C0] ? blkg_put+0x22/0x240
[ 107.124788][ C0] ? blkg_put+0x18d/0x240
[ 107.124812][ C0] ? bio_endio+0x980/0x9d0
[ 107.124831][ C0] blk_update_request+0x57b/0xe50
[ 107.124856][ C0] blk_mq_end_request+0x3e/0x70
[ 107.124874][ C0] blk_done_softirq+0x10a/0x160
[ 107.124892][ C0] handle_softirqs+0x1d9/0x6c0
[ 107.124917][ C0] run_ksoftirqd+0x52/0x180
[ 107.124940][ C0] smpboot_thread_fn+0x57c/0xa80
[ 107.124963][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 107.124988][ C0] kthread+0x388/0x470
[ 107.125011][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 107.125032][ C0] ? __pfx_kthread+0x10/0x10
[ 107.125056][ C0] ret_from_fork+0x514/0xb70
[ 107.125082][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 107.125107][ C0] ? __switch_to+0xc89/0x1420
[ 107.125130][ C0] ? __pfx_kthread+0x10/0x10
[ 107.125154][ C0] ret_from_fork_asm+0x1a/0x30
[ 107.125179][ C0]
[ 107.125447][ C0] Kernel Offset: disabled