[ 91.874581][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts.
2026/10/18 00:33:03 parsed 1 programs
2026/10/18 00:33:03 serving rpc on tcp://33225
[ 101.984476][ T5607] cgroup: Unknown subsys name 'net'
[ 102.238265][ T5607] cgroup: Unknown subsys name 'cpuset'
[ 102.320637][ T5607] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 104.406690][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.786185][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 109.614733][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.614762][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.701014][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.701046][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.733164][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 113.735197][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 113.738247][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.171129][ T5591] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.171914][ T5682] infiniband rxe0: set active
[ 114.171934][ T5682] infiniband rxe0: added rxe_eth0
[ 114.227633][ T5682] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 114.227676][ T5682] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 114.227718][ T5682] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 114.309177][ T5682] RDS/IB: rxe0: added
[ 114.315350][ T5682] smc: adding ib device rxe0 with port count 1
[ 114.315538][ T5682] smc: ib device rxe0 port 1 has no pnetid
[ 114.317049][ T5591] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.347205][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.456389][ T30] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.475176][ T5675] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.705901][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 115.108866][ T5682] rxe_eth0 speed is unknown, defaulting to 1000
[ 116.114067][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.115531][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.115651][ T5682] bridge_slave_0: entered allmulticast mode
[ 116.117646][ T5682] bridge_slave_0: entered promiscuous mode
[ 116.151256][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.151458][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.151597][ T5682] bridge_slave_1: entered allmulticast mode
[ 116.153435][ T5682] bridge_slave_1: entered promiscuous mode
[ 116.213638][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.216774][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.266052][ T5682] team0: Port device team_slave_0 added
[ 116.268616][ T5682] team0: Port device team_slave_1 added
[ 116.306846][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.306860][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.306879][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.309701][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.311826][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.311857][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.463728][ T5682] hsr_slave_0: entered promiscuous mode
[ 116.464963][ T5682] hsr_slave_1: entered promiscuous mode
[ 116.726669][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.756553][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.940991][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.966500][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.969123][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.988319][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.998040][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 117.027535][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 117.189700][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.231731][ T5682] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.258877][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.270308][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.315671][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.316212][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.854191][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.940782][ T5682] veth0_vlan: entered promiscuous mode
[ 117.960518][ T5682] veth1_vlan: entered promiscuous mode
[ 118.035234][ T5682] veth0_macvtap: entered promiscuous mode
[ 118.046333][ T5682] veth1_macvtap: entered promiscuous mode
[ 118.074656][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.095301][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.403442][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.550202][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.550781][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.550826][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.680329][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.704307][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.712511][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.719243][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.728973][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.866468][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.954752][ T5736] rxe_eth0 speed is unknown, defaulting to 1000
[ 119.553323][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.641331][ T5743] rxe_eth0 speed is unknown, defaulting to 1000
2026/10/18 00:33:26 executed programs: 0
[ 120.415823][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 120.437506][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 120.454832][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 120.473044][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 120.474415][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 120.624885][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.895256][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.036407][ T5748] rxe_eth0 speed is unknown, defaulting to 1000
[ 121.555334][ T13] bridge_slave_1: left allmulticast mode
[ 121.555427][ T13] bridge_slave_1: left promiscuous mode
[ 121.573819][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.753118][ T13] bridge_slave_0: left allmulticast mode
[ 121.753158][ T13] bridge_slave_0: left promiscuous mode
[ 121.753425][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.581731][ T60] Bluetooth: hci0: command tx timeout
[ 122.593129][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 122.670450][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 122.712181][ T13] bond0 (unregistering): Released all slaves
[ 122.738661][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1
[ 123.518433][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2
[ 123.679952][ T13] hsr_slave_0: left promiscuous mode
[ 123.719977][ T13] hsr_slave_1: left promiscuous mode
[ 123.721326][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 123.726482][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 123.781863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 123.781886][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 123.878407][ T13] veth1_macvtap: left promiscuous mode
[ 123.878601][ T13] veth0_macvtap: left promiscuous mode
[ 123.878824][ T13] veth1_vlan: left promiscuous mode
[ 123.879035][ T13] veth0_vlan: left promiscuous mode
[ 124.610508][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 124.650703][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 124.659882][ T60] Bluetooth: hci0: command tx timeout
[ 124.908172][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.908388][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.908562][ T5748] bridge_slave_0: entered allmulticast mode
[ 124.915794][ T5748] bridge_slave_0: entered promiscuous mode
[ 124.941626][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.941765][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.941946][ T5748] bridge_slave_1: entered allmulticast mode
[ 124.947796][ T5748] bridge_slave_1: entered promiscuous mode
[ 125.033565][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 125.049402][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 125.109042][ T5748] team0: Port device team_slave_0 added
[ 125.116744][ T5748] team0: Port device team_slave_1 added
[ 125.185768][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 125.185788][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.185817][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 125.188251][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 125.188267][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.188295][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 125.396785][ T5748] hsr_slave_0: entered promiscuous mode
[ 125.398346][ T5748] hsr_slave_1: entered promiscuous mode
[ 125.897286][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3
[ 126.744136][ T60] Bluetooth: hci0: command tx timeout
[ 127.947762][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 128.001202][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 128.080068][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 128.149364][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 128.160785][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 128.208849][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 128.212561][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 128.247157][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 128.553351][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.594869][ T5748] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.625705][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.625939][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.667199][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.667415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.820575][ T60] Bluetooth: hci0: command tx timeout
[ 128.844959][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 129.401536][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.499445][ T5748] veth0_vlan: entered promiscuous mode
[ 129.526860][ T5748] veth1_vlan: entered promiscuous mode
[ 129.594872][ T5748] veth0_macvtap: entered promiscuous mode
[ 129.606933][ T5748] veth1_macvtap: entered promiscuous mode
[ 129.640572][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.660863][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.981501][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.983870][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.102730][ T3368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.102773][ T3368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.174807][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.174830][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.220195][ T3368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.226126][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
2026/10/18 00:33:36 executed programs: 2
[ 130.588872][ T5897] loop0: detected capacity change from 0 to 32768
[ 131.339488][ T5898] loop0: detected capacity change from 0 to 32768
[ 131.889158][ T5899] loop0: detected capacity change from 0 to 32768
[ 132.366817][ T5902] loop0: detected capacity change from 0 to 32768
[ 132.816998][ T5905] loop0: detected capacity change from 0 to 32768
[ 132.842025][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.842125][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.272814][ T5906] loop0: detected capacity change from 0 to 32768
[ 133.705225][ T5908] loop0: detected capacity change from 0 to 32768
[ 134.099632][ T5909] loop0: detected capacity change from 0 to 32768
[ 134.538795][ T5910] loop0: detected capacity change from 0 to 32768
[ 134.944363][ T5911] loop0: detected capacity change from 0 to 32768
2026/10/18 00:33:41 executed programs: 13
[ 135.801816][ T5913] set_capacity_and_notify: 1 callbacks suppressed
[ 135.801832][ T5913] loop0: detected capacity change from 0 to 32768
[ 136.248262][ T5914] loop0: detected capacity change from 0 to 32768
[ 136.644511][ T5915] loop0: detected capacity change from 0 to 32768
[ 137.045770][ T5916] loop0: detected capacity change from 0 to 32768
[ 137.419540][ T5917] loop0: detected capacity change from 0 to 32768
[ 137.838199][ T5918] loop0: detected capacity change from 0 to 32768
[ 138.267777][ T5919] loop0: detected capacity change from 0 to 32768
[ 138.660507][ T5920] loop0: detected capacity change from 0 to 32768
[ 139.097578][ T5921] loop0: detected capacity change from 0 to 32768
[ 139.526787][ T5922] loop0: detected capacity change from 0 to 32768
2026/10/18 00:33:46 executed programs: 26
[ 141.142785][ T5926] set_capacity_and_notify: 3 callbacks suppressed
[ 141.142799][ T5926] loop0: detected capacity change from 0 to 32768
[ 141.546428][ T5927] loop0: detected capacity change from 0 to 32768
[ 141.966741][ T5928] loop0: detected capacity change from 0 to 32768
[ 142.368956][ T5929] loop0: detected capacity change from 0 to 32768
[ 142.768630][ T5930] loop0: detected capacity change from 0 to 32768
[ 143.166524][ T5931] loop0: detected capacity change from 0 to 32768
[ 143.608343][ T5932] loop0: detected capacity change from 0 to 32768
[ 144.026559][ T5933] loop0: detected capacity change from 0 to 32768
[ 144.503627][ T5934] loop0: detected capacity change from 0 to 32768
[ 144.925366][ T5935] loop0: detected capacity change from 0 to 32768
2026/10/18 00:33:51 executed programs: 38
[ 146.185041][ T5938] set_capacity_and_notify: 2 callbacks suppressed
[ 146.185056][ T5938] loop0: detected capacity change from 0 to 32768
[ 146.616518][ T5939] loop0: detected capacity change from 0 to 32768
[ 147.041703][ T5940] loop0: detected capacity change from 0 to 32768
[ 147.444681][ T5941] loop0: detected capacity change from 0 to 32768
[ 147.890629][ T5942] loop0: detected capacity change from 0 to 32768
[ 148.267665][ T5943] loop0: detected capacity change from 0 to 32768
[ 148.681395][ T5944] loop0: detected capacity change from 0 to 32768
[ 149.075370][ T5945] loop0: detected capacity change from 0 to 32768
[ 149.479585][ T5946] loop0: detected capacity change from 0 to 32768
[ 149.888197][ T5947] loop0: detected capacity change from 0 to 32768
2026/10/18 00:33:57 executed programs: 51
[ 151.509216][ T5951] set_capacity_and_notify: 3 callbacks suppressed
[ 151.509231][ T5951] loop0: detected capacity change from 0 to 32768
[ 151.948457][ T5952] loop0: detected capacity change from 0 to 32768
[ 152.380504][ T5953] loop0: detected capacity change from 0 to 32768
[ 152.796857][ T5954] loop0: detected capacity change from 0 to 32768
[ 153.196767][ T5955] loop0: detected capacity change from 0 to 32768
[ 153.771375][ T5956] loop0: detected capacity change from 0 to 32768
[ 154.161857][ T5957] loop0: detected capacity change from 0 to 32768
[ 154.558509][ T5958] loop0: detected capacity change from 0 to 32768
[ 154.967325][ T5959] loop0: detected capacity change from 0 to 32768
[ 155.020027][ C0] ==================================================================
[ 155.020046][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 155.020090][ C0] Read of size 4 at addr ffff888036aed408 by task ksoftirqd/0/15
[ 155.020111][ C0]
[ 155.020143][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 155.020197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 155.020231][ C0] Call Trace:
[ 155.020240][ C0]
[ 155.020250][ C0] dump_stack_lvl+0xe8/0x150
[ 155.020288][ C0] print_address_description+0x55/0x1e0
[ 155.020323][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.020349][ C0] print_report+0x58/0x70
[ 155.020381][ C0] kasan_report+0x117/0x150
[ 155.020407][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.020436][ C0] lbmIODone+0x130e/0x16b0
[ 155.020465][ C0] ? blkg_put+0x22/0x240
[ 155.020489][ C0] ? blkg_put+0x22/0x240
[ 155.020511][ C0] ? blkg_put+0x18d/0x240
[ 155.020535][ C0] ? bio_endio+0x984/0xac0
[ 155.020551][ C0] blk_update_request+0x57b/0xe50
[ 155.020572][ C0] blk_mq_end_request+0x3e/0x70
[ 155.020589][ C0] blk_done_softirq+0x10a/0x160
[ 155.020615][ C0] handle_softirqs+0x1da/0x6d0
[ 155.020642][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 155.020666][ C0] run_ksoftirqd+0x53/0x190
[ 155.020691][ C0] smpboot_thread_fn+0x565/0xa70
[ 155.020747][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 155.020775][ C0] kthread+0x38b/0x470
[ 155.020791][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 155.020815][ C0] ? __pfx_kthread+0x10/0x10
[ 155.020831][ C0] ret_from_fork+0x514/0xb70
[ 155.020849][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 155.020865][ C0] ? __switch_to+0xc89/0x1420
[ 155.020890][ C0] ? __pfx_kthread+0x10/0x10
[ 155.020907][ C0] ret_from_fork_asm+0x1a/0x30
[ 155.020929][ C0]
[ 155.020934][ C0]
[ 155.020938][ C0] Allocated by task 5959:
[ 155.020946][ C0] kasan_save_track+0x3e/0x80
[ 155.020970][ C0] __kasan_kmalloc+0x93/0xb0
[ 155.020983][ C0] __kmalloc_cache_noprof+0x3d5/0x680
[ 155.021007][ C0] lmLogInit+0x3e5/0x1a20
[ 155.021028][ C0] lmLogOpen+0x4e3/0xf90
[ 155.021042][ C0] jfs_mount_rw+0xf3/0x670
[ 155.021056][ C0] jfs_fill_super+0x769/0xda0
[ 155.021082][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 155.021103][ C0] vfs_get_tree+0x92/0x2a0
[ 155.021123][ C0] do_new_mount+0x325/0xb00
[ 155.021139][ C0] __se_sys_mount+0x31d/0x420
[ 155.021156][ C0] do_syscall_64+0x166/0x520
[ 155.021178][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.021193][ C0]
[ 155.021197][ C0] Freed by task 5748:
[ 155.021204][ C0] kasan_save_track+0x3e/0x80
[ 155.021226][ C0] kasan_save_free_info+0x40/0x50
[ 155.021246][ C0] __kasan_slab_free+0x5c/0x80
[ 155.021259][ C0] kfree+0x1c5/0x6d0
[ 155.021278][ C0] lmLogShutdown+0x456/0x850
[ 155.021318][ C0] lmLogClose+0x28c/0x530
[ 155.021341][ C0] jfs_umount+0x2da/0x3b0
[ 155.021360][ C0] jfs_put_super+0x8c/0x190
[ 155.021390][ C0] generic_shutdown_super+0x13d/0x2d0
[ 155.021408][ C0] kill_block_super+0x44/0xa0
[ 155.021428][ C0] deactivate_locked_super+0xbe/0x110
[ 155.021445][ C0] cleanup_mnt+0x204/0x2a0
[ 155.021465][ C0] task_work_run+0x1d9/0x270
[ 155.021481][ C0] exit_to_user_mode_loop+0x204/0x770
[ 155.021503][ C0] do_syscall_64+0x328/0x520
[ 155.021526][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.021541][ C0]
[ 155.021544][ C0] The buggy address belongs to the object at ffff888036aed400
[ 155.021544][ C0] which belongs to the cache kmalloc-256 of size 256
[ 155.021558][ C0] The buggy address is located 8 bytes inside of
[ 155.021558][ C0] freed 256-byte region [ffff888036aed400, ffff888036aed500)
[ 155.021575][ C0]
[ 155.021579][ C0] The buggy address belongs to the physical page:
[ 155.021593][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36aec
[ 155.021611][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 155.021624][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 155.021640][ C0] page_type: f5(slab)
[ 155.021655][ C0] raw: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122
[ 155.021669][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 155.021685][ C0] head: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122
[ 155.021698][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 155.021713][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 155.021726][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 155.021735][ C0] page dumped because: kasan: bad access detected
[ 155.021746][ C0] page_owner tracks the page as allocated
[ 155.021751][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5748, tgid 5748 (syz-executor), ts 128794440972
[ 155.021777][ C0] post_alloc_hook+0x1f9/0x250
[ 155.021798][ C0] get_page_from_freelist+0x2591/0x2600
[ 155.021813][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 155.021827][ C0] allocate_slab+0x7d/0x620
[ 155.021845][ C0] refill_objects+0x2d8/0x350
[ 155.021863][ C0] __pcs_replace_empty_main+0x339/0x690
[ 155.021880][ C0] __kmalloc_noprof+0x54b/0x790
[ 155.021902][ C0] fib_create_info+0x16fe/0x3170
[ 155.021918][ C0] fib_table_insert+0xcb/0x1b10
[ 155.021936][ C0] fib_magic+0x43b/0x530
[ 155.021958][ C0] fib_add_ifaddr+0x3e6/0x5d0
[ 155.021980][ C0] fib_netdev_event+0x382/0x490
[ 155.021993][ C0] notifier_call_chain+0x1a5/0x3d0
[ 155.022007][ C0] __dev_notify_flags+0x31e/0x510
[ 155.022033][ C0] netif_change_flags+0xde/0x1b0
[ 155.022052][ C0] do_setlink+0xdd6/0x4670
[ 155.022072][ C0] page last free pid 5591 tgid 5591 ts 128671482209 stack trace:
[ 155.022082][ C0] __free_frozen_pages+0xf8e/0x1070
[ 155.022104][ C0] __slab_free+0x250/0x2a0
[ 155.022116][ C0] qlist_free_all+0x99/0x100
[ 155.022142][ C0] kasan_quarantine_reduce+0x148/0x160
[ 155.022165][ C0] __kasan_slab_alloc+0x22/0x80
[ 155.022178][ C0] __kmalloc_cache_noprof+0x353/0x680
[ 155.022201][ C0] nsim_fib_event+0xf37/0xa3a0
[ 155.022216][ C0] nsim_fib_event_work+0x26a/0x3e0
[ 155.022229][ C0] process_scheduled_works+0xc3d/0x1630
[ 155.022249][ C0] worker_thread+0xa47/0xfb0
[ 155.022270][ C0] kthread+0x38b/0x470
[ 155.022284][ C0] ret_from_fork+0x514/0xb70
[ 155.022297][ C0] ret_from_fork_asm+0x1a/0x30
[ 155.022311][ C0]
[ 155.022314][ C0] Memory state around the buggy address:
[ 155.022323][ C0] ffff888036aed300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.022334][ C0] ffff888036aed380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.022344][ C0] >ffff888036aed400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 155.022353][ C0] ^
[ 155.022361][ C0] ffff888036aed480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 155.022371][ C0] ffff888036aed500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.022379][ C0] ==================================================================
[ 155.025340][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 155.724911][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 155.734647][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 155.744722][ C0] Call Trace:
[ 155.748020][ C0]
[ 155.750980][ C0] vpanic+0x56d/0xa60
[ 155.755008][ C0] ? __pfx_vpanic+0x10/0x10
[ 155.759526][ C0] ? __pfx___schedule+0x10/0x10
[ 155.764405][ C0] panic+0xc5/0xd0
[ 155.768146][ C0] ? __pfx_panic+0x10/0x10
[ 155.772582][ C0] ? preempt_schedule_common+0x7f/0xd0
[ 155.778071][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.782679][ C0] check_panic_on_warn+0x89/0xb0
[ 155.787636][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.792245][ C0] end_report+0x73/0x170
[ 155.796504][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.801112][ C0] kasan_report+0x128/0x150
[ 155.805637][ C0] ? lbmIODone+0x130e/0x16b0
[ 155.810255][ C0] lbmIODone+0x130e/0x16b0
[ 155.814693][ C0] ? blkg_put+0x22/0x240
[ 155.818962][ C0] ? blkg_put+0x22/0x240
[ 155.823226][ C0] ? blkg_put+0x18d/0x240
[ 155.827596][ C0] ? bio_endio+0x984/0xac0
[ 155.832025][ C0] blk_update_request+0x57b/0xe50
[ 155.837070][ C0] blk_mq_end_request+0x3e/0x70
[ 155.841932][ C0] blk_done_softirq+0x10a/0x160
[ 155.846807][ C0] handle_softirqs+0x1da/0x6d0
[ 155.851602][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 155.856663][ C0] run_ksoftirqd+0x53/0x190
[ 155.861194][ C0] smpboot_thread_fn+0x565/0xa70
[ 155.866169][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 155.871224][ C0] kthread+0x38b/0x470
[ 155.875321][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 155.880802][ C0] ? __pfx_kthread+0x10/0x10
[ 155.885407][ C0] ret_from_fork+0x514/0xb70
[ 155.890015][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 155.895147][ C0] ? __switch_to+0xc89/0x1420
[ 155.899872][ C0] ? __pfx_kthread+0x10/0x10
[ 155.904482][ C0] ret_from_fork_asm+0x1a/0x30
[ 155.909270][ C0]
[ 155.912911][ C0] Kernel Offset: disabled
[ 155.917249][ C0] Rebooting in 86400 seconds..