Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2026/10/09 12:30:09 parsed 1 programs 2026/10/09 12:30:09 serving rpc on tcp://36229 [ 104.064313][ T5599] cgroup: Unknown subsys name 'net' [ 104.356280][ T5599] cgroup: Unknown subsys name 'cpuset' [ 104.409777][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.491373][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.989651][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.107389][ T4901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.108749][ T4901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.115736][ T4901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.127440][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.134257][ T4901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.296984][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.298345][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.298493][ T5663] bridge_slave_0: entered allmulticast mode [ 115.306261][ T5663] bridge_slave_0: entered promiscuous mode [ 115.329697][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.329785][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.329904][ T5663] bridge_slave_1: entered allmulticast mode [ 115.332078][ T5663] bridge_slave_1: entered promiscuous mode [ 115.394721][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.400356][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.457249][ T5663] team0: Port device team_slave_0 added [ 115.464881][ T5663] team0: Port device team_slave_1 added [ 115.503871][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.503888][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.503913][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.506915][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.506934][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.506954][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.668854][ T5663] hsr_slave_0: entered promiscuous mode [ 115.676082][ T5663] hsr_slave_1: entered promiscuous mode [ 115.932992][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.987936][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.998435][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.026574][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.214542][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.233989][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.236935][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.258238][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.413278][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.466352][ T5663] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.489926][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.490120][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.537704][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.541034][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.063914][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.151668][ T5663] veth0_vlan: entered promiscuous mode [ 117.175090][ T5663] veth1_vlan: entered promiscuous mode [ 117.234809][ T5663] veth0_macvtap: entered promiscuous mode [ 117.250956][ T5663] veth1_macvtap: entered promiscuous mode [ 117.297968][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.316999][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.530848][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.602493][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.607203][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.607705][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.985083][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.192575][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.192608][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.307138][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.307164][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.765048][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.782922][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.455016][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/09 12:30:29 executed programs: 0 [ 120.625291][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.639198][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.656485][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.666296][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.668221][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.230548][ T146] bridge_slave_1: left allmulticast mode [ 121.230754][ T146] bridge_slave_1: left promiscuous mode [ 121.264527][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.471159][ T146] bridge_slave_0: left allmulticast mode [ 121.471204][ T146] bridge_slave_0: left promiscuous mode [ 121.471465][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.310357][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.390461][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.432284][ T146] bond0 (unregistering): Released all slaves [ 122.492815][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 122.791326][ T4901] Bluetooth: hci0: command tx timeout [ 122.969198][ T146] hsr_slave_0: left promiscuous mode [ 123.009191][ T146] hsr_slave_1: left promiscuous mode [ 123.015759][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.015859][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.073797][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.073829][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.172418][ T146] veth1_macvtap: left promiscuous mode [ 123.172624][ T146] veth0_macvtap: left promiscuous mode [ 123.173349][ T146] veth1_vlan: left promiscuous mode [ 123.173605][ T146] veth0_vlan: left promiscuous mode [ 123.900147][ T146] team0 (unregistering): Port device team_slave_1 removed [ 123.949843][ T146] team0 (unregistering): Port device team_slave_0 removed [ 124.169095][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 124.803171][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.803413][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.803608][ T5727] bridge_slave_0: entered allmulticast mode [ 124.807236][ T5727] bridge_slave_0: entered promiscuous mode [ 124.837684][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.837937][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.838167][ T5727] bridge_slave_1: entered allmulticast mode [ 124.863523][ T5727] bridge_slave_1: entered promiscuous mode [ 124.869582][ T4901] Bluetooth: hci0: command tx timeout [ 124.925181][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.939800][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.005068][ T5727] team0: Port device team_slave_0 added [ 125.008908][ T5727] team0: Port device team_slave_1 added [ 125.070428][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.070449][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.070503][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.072849][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.072867][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.072897][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.427316][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 125.446016][ T5727] hsr_slave_0: entered promiscuous mode [ 125.446998][ T5727] hsr_slave_1: entered promiscuous mode [ 126.375801][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 126.949120][ T4901] Bluetooth: hci0: command tx timeout [ 128.771625][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.818539][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.969365][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.999547][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.000956][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.030539][ T4901] Bluetooth: hci0: command tx timeout [ 129.065532][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.077184][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.127861][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.305928][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.372642][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.402327][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.402582][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.441802][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.441953][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.443752][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.536531][ T5727] veth0_vlan: entered promiscuous mode [ 130.554183][ T5727] veth1_vlan: entered promiscuous mode [ 130.598621][ T5727] veth0_macvtap: entered promiscuous mode [ 130.613407][ T5727] veth1_macvtap: entered promiscuous mode [ 130.638608][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.658259][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.883736][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.884770][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.912691][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.913080][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.028754][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.028778][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.126668][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.126692][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/09 12:30:40 executed programs: 2 [ 131.542584][ T5897] loop0: detected capacity change from 0 to 32768 [ 132.397086][ T5898] loop0: detected capacity change from 0 to 32768 [ 133.416898][ T5899] loop0: detected capacity change from 0 to 32768 [ 133.902195][ T5900] loop0: detected capacity change from 0 to 32768 [ 134.456756][ T5901] loop0: detected capacity change from 0 to 32768 [ 134.993474][ T5904] loop0: detected capacity change from 0 to 32768 [ 135.523971][ T5908] loop0: detected capacity change from 0 to 32768 [ 135.983235][ T5910] loop0: detected capacity change from 0 to 32768 [ 136.457553][ T5911] loop0: detected capacity change from 0 to 32768 2026/10/09 12:30:45 executed programs: 11 [ 136.888693][ T5912] loop0: detected capacity change from 0 to 32768 [ 137.570183][ T5913] loop0: detected capacity change from 0 to 32768 [ 137.977722][ T5914] loop0: detected capacity change from 0 to 32768 [ 138.085559][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.085650][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.453286][ T5915] loop0: detected capacity change from 0 to 32768 [ 138.923335][ T5916] loop0: detected capacity change from 0 to 32768 [ 139.345769][ T5917] loop0: detected capacity change from 0 to 32768 [ 140.303622][ T5918] loop0: detected capacity change from 0 to 32768 [ 140.406356][ ** replaying previous printk message ** [ 140.406356][ C1] ================================================================== [ 140.406378][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 140.406429][ C1] Read of size 4 at addr ffff888030c58c08 by task rcuc/1/28 [ 140.406453][ C1] [ 140.406482][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.406516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.406540][ C1] Call Trace: [ 140.406550][ C1] [ 140.406561][ C1] dump_stack_lvl+0xe8/0x150 [ 140.406600][ C1] print_address_description+0x55/0x1e0 [ 140.406637][ C1] ? lbmIODone+0x130e/0x16b0 [ 140.406663][ C1] print_report+0x58/0x70 [ 140.406697][ C1] kasan_report+0x117/0x150 [ 140.406726][ C1] ? lbmIODone+0x130e/0x16b0 [ 140.406758][ C1] lbmIODone+0x130e/0x16b0 [ 140.406784][ C1] ? blkg_put+0x22/0x240 [ 140.406816][ C1] ? blkg_put+0x22/0x240 [ 140.406848][ C1] ? blkg_put+0x18d/0x240 [ 140.406881][ C1] ? bio_endio+0x984/0xac0 [ 140.406920][ C1] blk_update_request+0x57b/0xe50 [ 140.406950][ C1] blk_mq_end_request+0x3e/0x70 [ 140.406974][ C1] blk_done_softirq+0x10a/0x160 [ 140.407012][ C1] handle_softirqs+0x1da/0x6d0 [ 140.407052][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 140.407085][ C1] ? __pfx___mmdrop_delayed+0x10/0x10 [ 140.407113][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 140.407158][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 140.407195][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 140.407243][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 140.407289][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 140.407325][ C1] smpboot_thread_fn+0x565/0xa70 [ 140.407364][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 140.407407][ C1] kthread+0x38b/0x470 [ 140.407433][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 140.407471][ C1] ? __pfx_kthread+0x10/0x10 [ 140.407497][ C1] ret_from_fork+0x514/0xb70 [ 140.407524][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 140.407549][ C1] ? __switch_to+0xc89/0x1420 [ 140.407586][ C1] ? __pfx_kthread+0x10/0x10 [ 140.407612][ C1] ret_from_fork_asm+0x1a/0x30 [ 140.407646][ C1] [ 140.407655][ C1] [ 140.407661][ C1] Allocated by task 5918: [ 140.407673][ C1] kasan_save_track+0x3e/0x80 [ 140.407709][ C1] __kasan_kmalloc+0x93/0xb0 [ 140.407728][ C1] __kmalloc_cache_noprof+0x3d5/0x680 [ 140.407764][ C1] lmLogInit+0x3e5/0x1a20 [ 140.407786][ C1] lmLogOpen+0x4e3/0xf90 [ 140.407810][ C1] jfs_mount_rw+0xf3/0x670 [ 140.407831][ C1] jfs_fill_super+0x769/0xda0 [ 140.407859][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 140.407892][ C1] vfs_get_tree+0x92/0x2a0 [ 140.407922][ C1] do_new_mount+0x319/0xdc0 [ 140.407948][ C1] __se_sys_mount+0x31d/0x420 [ 140.407974][ C1] do_syscall_64+0x166/0x520 [ 140.408006][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.408029][ C1] [ 140.408035][ C1] Freed by task 5727: [ 140.408046][ C1] kasan_save_track+0x3e/0x80 [ 140.408080][ C1] kasan_save_free_info+0x40/0x50 [ 140.408109][ C1] __kasan_slab_free+0x5c/0x80 [ 140.408137][ C1] kfree+0x1c5/0x6d0 [ 140.408166][ C1] lmLogShutdown+0x456/0x850 [ 140.408190][ C1] lmLogClose+0x28c/0x530 [ 140.408212][ C1] jfs_umount+0x2da/0x3b0 [ 140.408232][ C1] jfs_put_super+0x8c/0x190 [ 140.408260][ C1] generic_shutdown_super+0x13d/0x2d0 [ 140.408288][ C1] kill_block_super+0x44/0xa0 [ 140.408318][ C1] deactivate_locked_super+0xbe/0x110 [ 140.408352][ C1] cleanup_mnt+0x3d3/0x460 [ 140.408383][ C1] task_work_run+0x1d9/0x270 [ 140.408408][ C1] exit_to_user_mode_loop+0x204/0x770 [ 140.408441][ C1] do_syscall_64+0x328/0x520 [ 140.408472][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.408495][ C1] [ 140.408501][ C1] The buggy address belongs to the object at ffff888030c58c00 [ 140.408501][ C1] which belongs to the cache kmalloc-256 of size 256 [ 140.408522][ C1] The buggy address is located 8 bytes inside of [ 140.408522][ C1] freed 256-byte region [ffff888030c58c00, ffff888030c58d00) [ 140.408549][ C1] [ 140.408555][ C1] The buggy address belongs to the physical page: [ 140.408575][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30c58 [ 140.408624][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 140.408644][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 140.408671][ C1] page_type: f5(slab) [ 140.408694][ C1] raw: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 140.408715][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 140.408738][ C1] head: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 140.408759][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 140.408781][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 140.408802][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 140.408823][ C1] page dumped because: kasan: bad access detected [ 140.408840][ C1] page_owner tracks the page as allocated [ 140.408849][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24653989375 [ 140.408898][ C1] post_alloc_hook+0x1f9/0x250 [ 140.408931][ C1] get_page_from_freelist+0x2591/0x2600 [ 140.408961][ C1] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 140.408983][ C1] allocate_slab+0x7d/0x620 [ 140.409007][ C1] refill_objects+0x2d8/0x350 [ 140.409042][ C1] __pcs_replace_empty_main+0x339/0x690 [ 140.409068][ C1] __kvmalloc_node_noprof+0x6f4/0x890 [ 140.409096][ C1] v4l2_ctrl_new+0xa5a/0x1820 [ 140.409134][ C1] v4l2_ctrl_new_std+0x24e/0x300 [ 140.409171][ C1] vivid_create_controls+0x2687/0x3c40 [ 140.409196][ C1] vivid_probe+0x4112/0x70d0 [ 140.409231][ C1] platform_probe+0xf9/0x190 [ 140.409254][ C1] really_probe+0x254/0xae0 [ 140.409281][ C1] __driver_probe_device+0x1e8/0x360 [ 140.409307][ C1] driver_probe_device+0x4f/0x240 [ 140.409341][ C1] __driver_attach+0x339/0x600 [ 140.409366][ C1] page_owner free stack trace missing [ 140.409375][ C1] [ 140.409381][ C1] Memory state around the buggy address: [ 140.409394][ C1] ffff888030c58b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 140.409411][ C1] ffff888030c58b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 140.409428][ C1] >ffff888030c58c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.409440][ C1] ^ [ 140.409452][ C1] ffff888030c58c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.409469][ C1] ffff888030c58d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 140.409481][ C1] ================================================================== [ 140.410034][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.075120][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.084429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.094501][ C1] Call Trace: [ 141.097803][ C1] [ 141.100753][ C1] vpanic+0x56d/0xa60 [ 141.104758][ C1] ? __pfx_vpanic+0x10/0x10 [ 141.109313][ C1] ? __pfx___schedule+0x10/0x10 [ 141.114197][ C1] panic+0xc5/0xd0 [ 141.117944][ C1] ? __pfx_panic+0x10/0x10 [ 141.122379][ C1] ? preempt_schedule_common+0x7f/0xd0 [ 141.127869][ C1] ? lbmIODone+0x130e/0x16b0 [ 141.132477][ C1] check_panic_on_warn+0x89/0xb0 [ 141.137434][ C1] ? lbmIODone+0x130e/0x16b0 [ 141.142049][ C1] end_report+0x73/0x170 [ 141.146309][ C1] ? lbmIODone+0x130e/0x16b0 [ 141.150914][ C1] kasan_report+0x128/0x150 [ 141.155442][ C1] ? lbmIODone+0x130e/0x16b0 [ 141.160050][ C1] lbmIODone+0x130e/0x16b0 [ 141.164515][ C1] ? blkg_put+0x22/0x240 [ 141.168794][ C1] ? blkg_put+0x22/0x240 [ 141.173063][ C1] ? blkg_put+0x18d/0x240 [ 141.177417][ C1] ? bio_endio+0x984/0xac0 [ 141.181865][ C1] blk_update_request+0x57b/0xe50 [ 141.186917][ C1] blk_mq_end_request+0x3e/0x70 [ 141.191786][ C1] blk_done_softirq+0x10a/0x160 [ 141.196677][ C1] handle_softirqs+0x1da/0x6d0 [ 141.201478][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 141.206699][ C1] ? __pfx___mmdrop_delayed+0x10/0x10 [ 141.212095][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 141.217147][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 141.222195][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 141.227079][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 141.232395][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 141.237449][ C1] smpboot_thread_fn+0x565/0xa70 [ 141.242422][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 141.247477][ C1] kthread+0x38b/0x470 [ 141.251575][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 141.257089][ C1] ? __pfx_kthread+0x10/0x10 [ 141.261694][ C1] ret_from_fork+0x514/0xb70 [ 141.266307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 141.271441][ C1] ? __switch_to+0xc89/0x1420 [ 141.276145][ C1] ? __pfx_kthread+0x10/0x10 [ 141.280754][ C1] ret_from_fork_asm+0x1a/0x30 [ 141.285570][ C1] [ 141.289227][ C1] Kernel Offset: disabled [ 141.293572][ C1] Rebooting in 86400 seconds..