[ 91.958127][ T42] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts.
2026/04/18 13:15:29 parsed 1 programs
[ 100.507342][ T5811] cgroup: Unknown subsys name 'net'
[ 100.769451][ T5811] cgroup: Unknown subsys name 'cpuset'
[ 100.824104][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.521214][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 105.239512][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.254130][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.255275][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.256180][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.256759][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.871772][ T5837] chnl_net:caif_netlink_parms(): no params data found
[ 106.991282][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.992385][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.992504][ T5837] bridge_slave_0: entered allmulticast mode
[ 106.995790][ T5837] bridge_slave_0: entered promiscuous mode
[ 107.021913][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.022035][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.022135][ T5837] bridge_slave_1: entered allmulticast mode
[ 107.025605][ T5837] bridge_slave_1: entered promiscuous mode
[ 107.090436][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.103527][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.261083][ T5837] team0: Port device team_slave_0 added
[ 107.263399][ T5837] team0: Port device team_slave_1 added
[ 107.303271][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.303300][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.303318][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.325368][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.325407][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.325473][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.438594][ T5837] hsr_slave_0: entered promiscuous mode
[ 107.439446][ T5837] hsr_slave_1: entered promiscuous mode
[ 107.748900][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.780259][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 107.781024][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.808885][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 107.809541][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.847104][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 107.847844][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.887966][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 108.180088][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.206741][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.216327][ T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.216733][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.253928][ T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.254033][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.480897][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.535483][ T5837] veth0_vlan: entered promiscuous mode
[ 108.542248][ T5837] veth1_vlan: entered promiscuous mode
[ 108.587292][ T5837] veth0_macvtap: entered promiscuous mode
[ 108.590925][ T5837] veth1_macvtap: entered promiscuous mode
[ 108.618821][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.635354][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.657791][ T3605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.686402][ T3605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.691390][ T3605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.712580][ T3605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.298571][ T3605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.578409][ T3605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.816282][ T3605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.067872][ T3605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.617441][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.617470][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.893905][ T3605] bridge_slave_1: left allmulticast mode
[ 112.894028][ T3605] bridge_slave_1: left promiscuous mode
[ 112.898179][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.984677][ T3605] bridge_slave_0: left allmulticast mode
[ 112.984698][ T3605] bridge_slave_0: left promiscuous mode
[ 112.984851][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.675972][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 113.734476][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 113.775630][ T3605] bond0 (unregistering): Released all slaves
[ 113.915982][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.916001][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.214858][ T3605] hsr_slave_0: left promiscuous mode
[ 114.253638][ T3605] hsr_slave_1: left promiscuous mode
[ 114.254861][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.254919][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.315724][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.315752][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.428939][ T3605] veth1_macvtap: left promiscuous mode
[ 114.429127][ T3605] veth0_macvtap: left promiscuous mode
[ 114.429373][ T3605] veth1_vlan: left promiscuous mode
[ 114.430984][ T3605] veth0_vlan: left promiscuous mode
[ 115.134217][ T3605] team0 (unregistering): Port device team_slave_1 removed
[ 115.194211][ T3605] team0 (unregistering): Port device team_slave_0 removed
[ 115.397749][ T5467] 8021q: adding VLAN 0 to HW filter on device eth1
2026/04/18 13:15:48 executed programs: 0
[ 116.242491][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.277528][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.284517][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.305620][ T5467] 8021q: adding VLAN 0 to HW filter on device eth2
[ 116.307421][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.312245][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.155214][ T5944] chnl_net:caif_netlink_parms(): no params data found
[ 117.818094][ T5467] 8021q: adding VLAN 0 to HW filter on device eth3
[ 117.927147][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.927319][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.927459][ T5944] bridge_slave_0: entered allmulticast mode
[ 117.929022][ T5944] bridge_slave_0: entered promiscuous mode
[ 117.932533][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.932705][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.932833][ T5944] bridge_slave_1: entered allmulticast mode
[ 117.988400][ T5944] bridge_slave_1: entered promiscuous mode
[ 118.046833][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.050752][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.213961][ T5944] team0: Port device team_slave_0 added
[ 118.217031][ T5944] team0: Port device team_slave_1 added
[ 118.279120][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.279136][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.279161][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.281238][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.281251][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.281275][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.434987][ T59] Bluetooth: hci0: command tx timeout
[ 118.436718][ T5944] hsr_slave_0: entered promiscuous mode
[ 118.438521][ T5944] hsr_slave_1: entered promiscuous mode
[ 118.700012][ T5467] 8021q: adding VLAN 0 to HW filter on device eth4
[ 120.513547][ T59] Bluetooth: hci0: command tx timeout
[ 121.083794][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 121.109309][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 121.143959][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 121.193001][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 121.223878][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 121.272843][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 121.304570][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 121.350443][ T5944] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 121.588299][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.619551][ T5944] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.637086][ T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.637264][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.671435][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.671837][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 122.070874][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 122.169033][ T5944] veth0_vlan: entered promiscuous mode
[ 122.199320][ T5944] veth1_vlan: entered promiscuous mode
[ 122.267204][ T5944] veth0_macvtap: entered promiscuous mode
[ 122.272259][ T5944] veth1_macvtap: entered promiscuous mode
[ 122.306630][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 122.326946][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 122.351041][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.351903][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.351947][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.351985][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.593650][ T59] Bluetooth: hci0: command tx timeout
[ 122.713734][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.713754][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.795776][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.795796][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/18 13:15:54 executed programs: 2
[ 123.176742][ T6085] loop0: detected capacity change from 0 to 32768
[ 123.749119][ T6087] loop0: detected capacity change from 0 to 32768
[ 124.180429][ T6089] loop0: detected capacity change from 0 to 32768
[ 124.571032][ T6091] loop0: detected capacity change from 0 to 32768
[ 124.674905][ T59] Bluetooth: hci0: command tx timeout
[ 125.016508][ T6093] loop0: detected capacity change from 0 to 32768
[ 125.407447][ T6096] loop0: detected capacity change from 0 to 32768
[ 125.779826][ T6098] loop0: detected capacity change from 0 to 32768
[ 126.156113][ T6101] loop0: detected capacity change from 0 to 32768
[ 126.585759][ T6105] loop0: detected capacity change from 0 to 32768
[ 126.950924][ T6109] loop0: detected capacity change from 0 to 32768
2026/04/18 13:16:00 executed programs: 15
[ 128.420856][ T6117] set_capacity_and_notify: 3 callbacks suppressed
[ 128.420871][ T6117] loop0: detected capacity change from 0 to 32768
[ 128.818777][ T6119] loop0: detected capacity change from 0 to 32768
[ 129.182740][ T6121] loop0: detected capacity change from 0 to 32768
[ 129.581989][ T6123] loop0: detected capacity change from 0 to 32768
[ 129.952248][ T6125] loop0: detected capacity change from 0 to 32768
[ 130.009744][ C1] ==================================================================
[ 130.009761][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 130.009800][ C1] Read of size 4 at addr ffff888024b95408 by task ktimers/1/29
[ 130.009816][ C1]
[ 130.009844][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 130.009885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 130.009914][ C1] Call Trace:
[ 130.009921][ C1]
[ 130.009930][ C1] dump_stack_lvl+0xe8/0x150
[ 130.009980][ C1] print_address_description+0x55/0x1e0
[ 130.010034][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.010053][ C1] print_report+0x58/0x70
[ 130.010098][ C1] kasan_report+0x117/0x150
[ 130.010133][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.010157][ C1] lbmIODone+0x1312/0x16c0
[ 130.010177][ C1] ? blkg_put+0x22/0x240
[ 130.010199][ C1] ? blkg_put+0x22/0x240
[ 130.010221][ C1] ? blkg_put+0x18d/0x240
[ 130.010244][ C1] ? bio_endio+0x989/0x9d0
[ 130.010274][ C1] blk_update_request+0x57e/0xe60
[ 130.010309][ C1] blk_mq_end_request+0x3e/0x70
[ 130.010337][ C1] blk_done_softirq+0x10a/0x160
[ 130.010364][ C1] handle_softirqs+0x1de/0x6d0
[ 130.010402][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.010424][ C1] run_ktimerd+0x69/0x100
[ 130.010445][ C1] smpboot_thread_fn+0x541/0xa50
[ 130.010467][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.010493][ C1] kthread+0x388/0x470
[ 130.010518][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 130.010539][ C1] ? __pfx_kthread+0x10/0x10
[ 130.010565][ C1] ret_from_fork+0x514/0xb70
[ 130.010600][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 130.010634][ C1] ? __switch_to+0xc79/0x1410
[ 130.010663][ C1] ? __pfx_kthread+0x10/0x10
[ 130.010688][ C1] ret_from_fork_asm+0x1a/0x30
[ 130.010720][ C1]
[ 130.010728][ C1]
[ 130.010749][ C1] Allocated by task 6125:
[ 130.010760][ C1] kasan_save_track+0x3e/0x80
[ 130.010787][ C1] __kasan_kmalloc+0x93/0xb0
[ 130.010814][ C1] __kmalloc_cache_noprof+0x3a6/0x690
[ 130.010844][ C1] lmLogInit+0x3e5/0x1a00
[ 130.010872][ C1] lmLogOpen+0x4e1/0xfa0
[ 130.010898][ C1] jfs_mount_rw+0xee/0x670
[ 130.010924][ C1] jfs_fill_super+0x754/0xd80
[ 130.010944][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 130.010974][ C1] vfs_get_tree+0x92/0x2a0
[ 130.011001][ C1] do_new_mount+0x341/0xd30
[ 130.011022][ C1] __se_sys_mount+0x31d/0x420
[ 130.011044][ C1] do_syscall_64+0x15f/0xf80
[ 130.011075][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.011094][ C1]
[ 130.011099][ C1] Freed by task 5944:
[ 130.011108][ C1] kasan_save_track+0x3e/0x80
[ 130.011133][ C1] kasan_save_free_info+0x46/0x50
[ 130.011165][ C1] __kasan_slab_free+0x5c/0x80
[ 130.011190][ C1] kfree+0x1c5/0x6c0
[ 130.011212][ C1] lmLogShutdown+0x456/0x850
[ 130.011239][ C1] lmLogClose+0x28a/0x520
[ 130.011266][ C1] jfs_umount+0x2fb/0x3d0
[ 130.011290][ C1] jfs_put_super+0x8c/0x190
[ 130.011309][ C1] generic_shutdown_super+0x13d/0x2d0
[ 130.011333][ C1] kill_block_super+0x44/0x90
[ 130.011359][ C1] deactivate_locked_super+0xbc/0x130
[ 130.011381][ C1] cleanup_mnt+0x437/0x4d0
[ 130.011405][ C1] task_work_run+0x1d9/0x270
[ 130.011428][ C1] exit_to_user_mode_loop+0xed/0x480
[ 130.011447][ C1] do_syscall_64+0x33e/0xf80
[ 130.011468][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.011485][ C1]
[ 130.011489][ C1] The buggy address belongs to the object at ffff888024b95400
[ 130.011489][ C1] which belongs to the cache kmalloc-256 of size 256
[ 130.011505][ C1] The buggy address is located 8 bytes inside of
[ 130.011505][ C1] freed 256-byte region [ffff888024b95400, ffff888024b95500)
[ 130.011525][ C1]
[ 130.011529][ C1] The buggy address belongs to the physical page:
[ 130.011543][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024b95a00 pfn:0x24b94
[ 130.011562][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 130.011577][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 130.011597][ C1] page_type: f5(slab)
[ 130.011615][ C1] raw: 0080000000000240 ffff88801a01fb40 ffff88801a01e988 ffffea0000f08b90
[ 130.011632][ C1] raw: ffff888024b95a00 000000080010000d 00000000f5000000 0000000000000000
[ 130.011649][ C1] head: 0080000000000240 ffff88801a01fb40 ffff88801a01e988 ffffea0000f08b90
[ 130.011666][ C1] head: ffff888024b95a00 000000080010000d 00000000f5000000 0000000000000000
[ 130.011683][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 130.011698][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 130.011708][ C1] page dumped because: kasan: bad access detected
[ 130.011721][ C1] page_owner tracks the page as allocated
[ 130.011727][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6123, tgid 6122 (syz.0.33), ts 129609420886, free_ts 128838539343
[ 130.011759][ C1] post_alloc_hook+0x231/0x280
[ 130.011787][ C1] get_page_from_freelist+0x27c8/0x2840
[ 130.011806][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 130.011824][ C1] allocate_slab+0x77/0x660
[ 130.011845][ C1] refill_objects+0x33c/0x3d0
[ 130.011863][ C1] __pcs_replace_empty_main+0x373/0x720
[ 130.011885][ C1] __kmalloc_noprof+0x530/0x7b0
[ 130.011911][ C1] tomoyo_encode+0x28b/0x550
[ 130.011929][ C1] tomoyo_realpath_from_path+0x58d/0x5d0
[ 130.011947][ C1] tomoyo_check_open_permission+0x229/0x470
[ 130.011973][ C1] security_file_open+0xa9/0x240
[ 130.012000][ C1] do_dentry_open+0x4c0/0x13e0
[ 130.012020][ C1] vfs_open+0x3b/0x350
[ 130.012038][ C1] path_openat+0x2e43/0x38a0
[ 130.012068][ C1] do_file_open+0x23e/0x4a0
[ 130.012093][ C1] do_sys_openat2+0x113/0x200
[ 130.012113][ C1] page last free pid 5172 tgid 5172 stack trace:
[ 130.012124][ C1] __free_frozen_pages+0xfa6/0x10f0
[ 130.012151][ C1] __slab_free+0x252/0x2a0
[ 130.012178][ C1] qlist_free_all+0x99/0x100
[ 130.012201][ C1] kasan_quarantine_reduce+0x148/0x160
[ 130.012225][ C1] __kasan_slab_alloc+0x22/0x80
[ 130.012250][ C1] kmem_cache_alloc_noprof+0x33b/0x680
[ 130.012275][ C1] do_getname+0x2e/0x250
[ 130.012292][ C1] do_sys_openat2+0xca/0x200
[ 130.012312][ C1] __x64_sys_openat+0x138/0x170
[ 130.012332][ C1] do_syscall_64+0x15f/0xf80
[ 130.012354][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.012372][ C1]
[ 130.012377][ C1] Memory state around the buggy address:
[ 130.012387][ C1] ffff888024b95300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.012399][ C1] ffff888024b95380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.012412][ C1] >ffff888024b95400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.012422][ C1] ^
[ 130.012431][ C1] ffff888024b95480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.012443][ C1] ffff888024b95500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.012453][ C1] ==================================================================
[ 130.012485][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 130.012499][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 130.012521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 130.012532][ C1] Call Trace:
[ 130.012539][ C1]
[ 130.012547][ C1] vpanic+0x56c/0xa60
[ 130.012568][ C1] ? __pfx_vpanic+0x10/0x10
[ 130.012592][ C1] panic+0xc5/0xd0
[ 130.012609][ C1] ? __pfx_panic+0x10/0x10
[ 130.012628][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.012651][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.012668][ C1] check_panic_on_warn+0x89/0xb0
[ 130.012692][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.012709][ C1] end_report+0x73/0x170
[ 130.012738][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.012754][ C1] kasan_report+0x128/0x150
[ 130.012784][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.012806][ C1] lbmIODone+0x1312/0x16c0
[ 130.012824][ C1] ? blkg_put+0x22/0x240
[ 130.012844][ C1] ? blkg_put+0x22/0x240
[ 130.012864][ C1] ? blkg_put+0x18d/0x240
[ 130.012884][ C1] ? bio_endio+0x989/0x9d0
[ 130.012910][ C1] blk_update_request+0x57e/0xe60
[ 130.012940][ C1] blk_mq_end_request+0x3e/0x70
[ 130.012965][ C1] blk_done_softirq+0x10a/0x160
[ 130.012988][ C1] handle_softirqs+0x1de/0x6d0
[ 130.013021][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.013040][ C1] run_ktimerd+0x69/0x100
[ 130.013059][ C1] smpboot_thread_fn+0x541/0xa50
[ 130.013086][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.013109][ C1] kthread+0x388/0x470
[ 130.013131][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 130.013150][ C1] ? __pfx_kthread+0x10/0x10
[ 130.013172][ C1] ret_from_fork+0x514/0xb70
[ 130.013204][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 130.013234][ C1] ? __switch_to+0xc79/0x1410
[ 130.013260][ C1] ? __pfx_kthread+0x10/0x10
[ 130.013283][ C1] ret_from_fork_asm+0x1a/0x30
[ 130.013311][ C1]
[ 130.014235][ C1] Kernel Offset: disabled