Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. 2026/10/08 07:26:39 parsed 1 programs 2026/10/08 07:26:39 serving rpc on tcp://36895 syzkaller login: [ 84.139723][ T5595] cgroup: Unknown subsys name 'net' [ 84.380134][ T5595] cgroup: Unknown subsys name 'cpuset' [ 84.455513][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.141820][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.709926][ T998] cfg80211: failed to load regulatory.db [ 89.119521][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.226889][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.226968][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.227063][ T5619] bridge_slave_0: entered allmulticast mode [ 90.229203][ T5619] bridge_slave_0: entered promiscuous mode [ 90.233082][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.233149][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.233231][ T5619] bridge_slave_1: entered allmulticast mode [ 90.234618][ T5619] bridge_slave_1: entered promiscuous mode [ 90.389033][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.391459][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.435752][ T5619] team0: Port device team_slave_0 added [ 90.437718][ T5619] team0: Port device team_slave_1 added [ 90.467915][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.467924][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.467938][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.469822][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.469834][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.469850][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.540622][ T5619] hsr_slave_0: entered promiscuous mode [ 90.541962][ T5619] hsr_slave_1: entered promiscuous mode [ 90.832832][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.893052][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.898306][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.929265][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.932286][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.967735][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.971013][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.008266][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.046325][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.046529][ T5619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.048164][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.048248][ T5619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.096208][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.123981][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.382860][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.418591][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.424186][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.439326][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.459799][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.459932][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.863892][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.933784][ T5619] veth0_vlan: entered promiscuous mode [ 91.963304][ T5619] veth1_vlan: entered promiscuous mode [ 92.002157][ T5619] veth0_macvtap: entered promiscuous mode [ 92.012296][ T5619] veth1_macvtap: entered promiscuous mode [ 92.040880][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.060792][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.283157][ T550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318785][ T550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318827][ T550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318854][ T550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.719276][ T550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.060036][ T550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.400597][ T550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.783670][ T550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.987589][ T550] bridge_slave_1: left allmulticast mode [ 94.987670][ T550] bridge_slave_1: left promiscuous mode [ 95.030324][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.188577][ T550] bridge_slave_0: left allmulticast mode [ 95.188613][ T550] bridge_slave_0: left promiscuous mode [ 95.188859][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.935493][ T550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.995738][ T550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.036806][ T550] bond0 (unregistering): Released all slaves [ 96.090049][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.446881][ T550] hsr_slave_0: left promiscuous mode [ 96.485083][ T550] hsr_slave_1: left promiscuous mode [ 96.486447][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.486521][ T550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.529896][ T550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.529924][ T550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.617597][ T550] veth1_macvtap: left promiscuous mode [ 96.617856][ T550] veth0_macvtap: left promiscuous mode [ 96.618137][ T550] veth1_vlan: left promiscuous mode [ 96.618449][ T550] veth0_vlan: left promiscuous mode [ 97.295931][ T550] team0 (unregistering): Port device team_slave_1 removed [ 97.337843][ T550] team0 (unregistering): Port device team_slave_0 removed [ 97.498728][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.883997][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.904315][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.912922][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.924203][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.933141][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.207517][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.924210][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4 [ 99.198571][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.198600][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.448433][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.448454][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/08 07:26:58 executed programs: 0 [ 100.819222][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.850587][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.851504][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.852352][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.852950][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.430561][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.430690][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.430944][ T5786] bridge_slave_0: entered allmulticast mode [ 101.433672][ T5786] bridge_slave_0: entered promiscuous mode [ 101.438837][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.440502][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.440647][ T5786] bridge_slave_1: entered allmulticast mode [ 101.444608][ T5786] bridge_slave_1: entered promiscuous mode [ 101.494405][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.500215][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.531932][ T5786] team0: Port device team_slave_0 added [ 101.533818][ T5786] team0: Port device team_slave_1 added [ 101.573641][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.573658][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.573671][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.578341][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.578356][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.578379][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.656239][ T5786] hsr_slave_0: entered promiscuous mode [ 101.657424][ T5786] hsr_slave_1: entered promiscuous mode [ 102.926847][ T60] Bluetooth: hci0: command tx timeout [ 103.750062][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.791284][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.792726][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.831161][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.832235][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.870775][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.871911][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.909963][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.139273][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.182752][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.210088][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.210282][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.303386][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.303520][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.996521][ T60] Bluetooth: hci0: command tx timeout [ 105.278453][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.746295][ T5786] veth0_vlan: entered promiscuous mode [ 105.757892][ T5786] veth1_vlan: entered promiscuous mode [ 105.933902][ T5786] veth0_macvtap: entered promiscuous mode [ 105.943373][ T5786] veth1_macvtap: entered promiscuous mode [ 105.988119][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.017488][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.725502][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.725544][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.725576][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.725607][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.726029][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.726044][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.809225][ T5769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.809245][ T5769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/08 07:27:04 executed programs: 2 [ 107.075012][ T60] Bluetooth: hci0: command tx timeout [ 107.123034][ T5940] loop0: detected capacity change from 0 to 32768 [ 107.690503][ T5941] loop0: detected capacity change from 0 to 32768 [ 108.118770][ T5942] loop0: detected capacity change from 0 to 32768 [ 108.480716][ T5943] loop0: detected capacity change from 0 to 32768 [ 108.888434][ T5944] loop0: detected capacity change from 0 to 32768 [ 109.155026][ T60] Bluetooth: hci0: command tx timeout [ 109.268718][ T5945] loop0: detected capacity change from 0 to 32768 [ 109.661520][ T5946] loop0: detected capacity change from 0 to 32768 [ 110.051140][ T5947] loop0: detected capacity change from 0 to 32768 [ 110.405038][ T5948] loop0: detected capacity change from 0 to 32768 [ 110.786515][ T5949] loop0: detected capacity change from 0 to 32768 2026/10/08 07:27:09 executed programs: 15 [ 112.235929][ T5953] set_capacity_and_notify: 3 callbacks suppressed [ 112.235942][ T5953] loop0: detected capacity change from 0 to 32768 [ 112.559639][ T5954] loop0: detected capacity change from 0 to 32768 [ 112.925680][ T5955] loop0: detected capacity change from 0 to 32768 [ 113.293340][ T5956] loop0: detected capacity change from 0 to 32768 [ 113.627853][ T5958] loop0: detected capacity change from 0 to 32768 [ 113.948804][ T5959] loop0: detected capacity change from 0 to 32768 [ 114.268146][ T5960] loop0: detected capacity change from 0 to 32768 [ 114.632964][ T5961] loop0: detected capacity change from 0 to 32768 [ 114.962712][ T5962] loop0: detected capacity change from 0 to 32768 [ 115.022452][ C0] ================================================================== [ 115.022470][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 115.022515][ C0] Read of size 4 at addr ffff88802df47a08 by task ksoftirqd/0/15 [ 115.022536][ C0] [ 115.022565][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.022599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.022628][ C0] Call Trace: [ 115.022637][ C0] [ 115.022646][ C0] dump_stack_lvl+0xe8/0x150 [ 115.022681][ C0] print_address_description+0x55/0x1e0 [ 115.022715][ C0] ? lbmIODone+0x130e/0x16b0 [ 115.022738][ C0] print_report+0x58/0x70 [ 115.022769][ C0] kasan_report+0x117/0x150 [ 115.022794][ C0] ? lbmIODone+0x130e/0x16b0 [ 115.022822][ C0] lbmIODone+0x130e/0x16b0 [ 115.022845][ C0] ? blkg_put+0x22/0x240 [ 115.022873][ C0] ? blkg_put+0x22/0x240 [ 115.022900][ C0] ? blkg_put+0x18d/0x240 [ 115.022927][ C0] ? bio_endio+0x984/0xac0 [ 115.022960][ C0] blk_update_request+0x57b/0xe50 [ 115.023001][ C0] blk_mq_end_request+0x3e/0x70 [ 115.023044][ C0] blk_done_softirq+0x10a/0x160 [ 115.023078][ C0] handle_softirqs+0x1da/0x6d0 [ 115.023117][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 115.023150][ C0] run_ksoftirqd+0x53/0x190 [ 115.023183][ C0] smpboot_thread_fn+0x565/0xa70 [ 115.023217][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 115.023255][ C0] kthread+0x38b/0x470 [ 115.023278][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 115.023312][ C0] ? __pfx_kthread+0x10/0x10 [ 115.023335][ C0] ret_from_fork+0x514/0xb70 [ 115.023359][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 115.023381][ C0] ? __switch_to+0xc89/0x1420 [ 115.023413][ C0] ? __pfx_kthread+0x10/0x10 [ 115.023437][ C0] ret_from_fork_asm+0x1a/0x30 [ 115.023466][ C0] [ 115.023475][ C0] [ 115.023481][ C0] Allocated by task 5962: [ 115.023492][ C0] kasan_save_track+0x3e/0x80 [ 115.023524][ C0] __kasan_kmalloc+0x93/0xb0 [ 115.023542][ C0] __kmalloc_cache_noprof+0x3d5/0x680 [ 115.023572][ C0] lmLogInit+0x3e5/0x1a20 [ 115.023590][ C0] lmLogOpen+0x4e3/0xf90 [ 115.023607][ C0] jfs_mount_rw+0xf3/0x670 [ 115.023639][ C0] jfs_fill_super+0x769/0xda0 [ 115.023664][ C0] get_tree_bdev_flags+0x430/0x4f0 [ 115.023694][ C0] vfs_get_tree+0x92/0x2a0 [ 115.023721][ C0] do_new_mount+0x319/0xdc0 [ 115.023743][ C0] __se_sys_mount+0x31d/0x420 [ 115.023767][ C0] do_syscall_64+0x166/0x520 [ 115.023791][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.023813][ C0] [ 115.023819][ C0] Freed by task 5786: [ 115.023829][ C0] kasan_save_track+0x3e/0x80 [ 115.023864][ C0] kasan_save_free_info+0x40/0x50 [ 115.023890][ C0] __kasan_slab_free+0x5c/0x80 [ 115.023922][ C0] kfree+0x1c5/0x6d0