Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 2026/05/13 18:44:05 parsed 1 programs [ 102.508201][ T5619] cgroup: Unknown subsys name 'net' [ 102.750586][ T5619] cgroup: Unknown subsys name 'cpuset' [ 102.824331][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 104.771995][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.706427][ T5661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.709471][ T5661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.721348][ T5661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.722704][ T5661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.726124][ T5661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.012213][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.012235][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.082040][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.082063][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.374954][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.376972][ T5683] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.377105][ T5683] bridge_slave_0: entered allmulticast mode [ 114.378833][ T5683] bridge_slave_0: entered promiscuous mode [ 114.392078][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.392303][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.392477][ T5683] bridge_slave_1: entered allmulticast mode [ 114.395246][ T5683] bridge_slave_1: entered promiscuous mode [ 114.447874][ T5683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.452342][ T5683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.509701][ T5683] team0: Port device team_slave_0 added [ 114.511891][ T5683] team0: Port device team_slave_1 added [ 114.548725][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.548738][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.548753][ T5683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.552220][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.552236][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.552254][ T5683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.713269][ T5683] hsr_slave_0: entered promiscuous mode [ 114.719021][ T5683] hsr_slave_1: entered promiscuous mode [ 114.960160][ T5683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.000503][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.002912][ T5683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.032314][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.033343][ T5683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.069172][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.070094][ T5683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.107061][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.145106][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.145231][ T5683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.146030][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.146122][ T5683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.221789][ T1552] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.253834][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.470493][ T5683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.502881][ T5683] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.520658][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.531373][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.558396][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.558990][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.030784][ T5683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.103247][ T5683] veth0_vlan: entered promiscuous mode [ 116.120962][ T5683] veth1_vlan: entered promiscuous mode [ 116.174461][ T5683] veth0_macvtap: entered promiscuous mode [ 116.182682][ T5683] veth1_macvtap: entered promiscuous mode [ 116.222184][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.238207][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.272254][ T1552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.279980][ T1552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.292518][ T1552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.292952][ T1552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.060472][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.770439][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.357145][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.741120][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/13 18:44:25 executed programs: 0 [ 119.767261][ T172] bridge_slave_1: left allmulticast mode [ 119.767517][ T172] bridge_slave_1: left promiscuous mode [ 119.798590][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.894996][ T5661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.910485][ T5661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.921667][ T5661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.921830][ T172] bridge_slave_0: left allmulticast mode [ 119.921862][ T172] bridge_slave_0: left promiscuous mode [ 119.922242][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.933622][ T5661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.938646][ T5661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.724142][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.785252][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.806919][ T172] bond0 (unregistering): Released all slaves [ 120.848821][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.193636][ T172] hsr_slave_0: left promiscuous mode [ 121.235894][ T172] hsr_slave_1: left promiscuous mode [ 121.237396][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.237471][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.286932][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.286962][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.391320][ T172] veth1_macvtap: left promiscuous mode [ 121.391581][ T172] veth0_macvtap: left promiscuous mode [ 121.391882][ T172] veth1_vlan: left promiscuous mode [ 121.392215][ T172] veth0_vlan: left promiscuous mode [ 122.106392][ T59] Bluetooth: hci0: command tx timeout [ 122.174113][ T172] team0 (unregistering): Port device team_slave_1 removed [ 122.214490][ T172] team0 (unregistering): Port device team_slave_0 removed [ 122.406137][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 123.216623][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.216852][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.217030][ T5754] bridge_slave_0: entered allmulticast mode [ 123.220097][ T5754] bridge_slave_0: entered promiscuous mode [ 123.255975][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.256207][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.256424][ T5754] bridge_slave_1: entered allmulticast mode [ 123.296905][ T5754] bridge_slave_1: entered promiscuous mode [ 123.368497][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 123.392673][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.399494][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.495758][ T5754] team0: Port device team_slave_0 added [ 123.503748][ T5754] team0: Port device team_slave_1 added [ 123.545600][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.545619][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.545647][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.548142][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.548157][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.548184][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.746020][ T5754] hsr_slave_0: entered promiscuous mode [ 123.747559][ T5754] hsr_slave_1: entered promiscuous mode [ 124.183501][ T59] Bluetooth: hci0: command tx timeout [ 124.285972][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 126.263508][ T59] Bluetooth: hci0: command tx timeout [ 126.267355][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.309868][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.313266][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.348266][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.350001][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.397897][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.399552][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.439442][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.656641][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.697263][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.716462][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.716787][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.733061][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.733264][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.535907][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.640836][ T5754] veth0_vlan: entered promiscuous mode [ 127.660410][ T5754] veth1_vlan: entered promiscuous mode [ 127.755479][ T5754] veth0_macvtap: entered promiscuous mode [ 127.769959][ T5754] veth1_macvtap: entered promiscuous mode [ 127.820390][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.840919][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.860176][ T1552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.860226][ T1552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.860262][ T1552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.860299][ T1552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.277270][ T3389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.277295][ T3389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.330994][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.331016][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.343511][ T59] Bluetooth: hci0: command tx timeout 2026/05/13 18:44:34 executed programs: 2 [ 128.711004][ T5906] loop0: detected capacity change from 0 to 32768 [ 129.457705][ T5907] loop0: detected capacity change from 0 to 32768 [ 129.990458][ T5908] loop0: detected capacity change from 0 to 32768 [ 130.456725][ T5909] loop0: detected capacity change from 0 to 32768 [ 130.927385][ T5910] loop0: detected capacity change from 0 to 32768 [ 131.347290][ T5911] loop0: detected capacity change from 0 to 32768 [ 131.766627][ T5912] loop0: detected capacity change from 0 to 32768 [ 132.200895][ T5913] loop0: detected capacity change from 0 to 32768 [ 132.603067][ T5914] loop0: detected capacity change from 0 to 32768 [ 133.058368][ T5915] loop0: detected capacity change from 0 to 32768 [ 133.227524][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227626][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 2026/05/13 18:44:39 executed programs: 13 [ 133.929685][ T5917] set_capacity_and_notify: 1 callbacks suppressed [ 133.929699][ T5917] loop0: detected capacity change from 0 to 32768 [ 134.331015][ T5918] loop0: detected capacity change from 0 to 32768 [ 134.740372][ T5919] loop0: detected capacity change from 0 to 32768 [ 135.179897][ T5920] loop0: detected capacity change from 0 to 32768 [ 135.634062][ T5921] loop0: detected capacity change from 0 to 32768 [ 136.068085][ T5922] loop0: detected capacity change from 0 to 32768 [ 136.451096][ T5923] loop0: detected capacity change from 0 to 32768 [ 136.898261][ T5924] loop0: detected capacity change from 0 to 32768 [ 137.297959][ T5925] loop0: detected capacity change from 0 to 32768 [ 137.685585][ T5926] loop0: detected capacity change from 0 to 32768 2026/05/13 18:44:44 executed programs: 25 [ 138.966378][ T5929] set_capacity_and_notify: 2 callbacks suppressed [ 138.966394][ T5929] loop0: detected capacity change from 0 to 32768 [ 139.394612][ T5930] loop0: detected capacity change from 0 to 32768 [ 139.790727][ T5931] loop0: detected capacity change from 0 to 32768 [ 140.178746][ T5932] loop0: detected capacity change from 0 to 32768 [ 140.630834][ T5933] loop0: detected capacity change from 0 to 32768 [ 141.037714][ T5934] loop0: detected capacity change from 0 to 32768 [ 141.445682][ T5935] loop0: detected capacity change from 0 to 32768 [ 141.848267][ T5936] loop0: detected capacity change from 0 to 32768 [ 142.247721][ T5937] loop0: detected capacity change from 0 to 32768 [ 142.679756][ T5938] loop0: detected capacity change from 0 to 32768 [ 142.740949][ C1] ================================================================== [ 142.740968][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 142.741007][ C1] Read of size 4 at addr ffff8880317cee08 by task ksoftirqd/1/30 [ 142.741024][ C1] [ 142.741037][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.741061][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.741076][ C1] Call Trace: [ 142.741085][ C1] [ 142.741094][ C1] dump_stack_lvl+0xe8/0x150 [ 142.741120][ C1] print_address_description+0x55/0x1e0 [ 142.741143][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.741169][ C1] print_report+0x58/0x70 [ 142.741190][ C1] kasan_report+0x117/0x150 [ 142.741216][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.741246][ C1] lbmIODone+0x1312/0x16c0 [ 142.741282][ C1] ? blkg_put+0x22/0x240 [ 142.741303][ C1] ? blkg_put+0x22/0x240 [ 142.741323][ C1] ? blkg_put+0x18d/0x240 [ 142.741323][ C1] ? blkg_put+0x18d/0x240 [ 142.741342][ C1] ? bio_endio+0x989/0x9d0 [ 142.741367][ C1] blk_update_request+0x57e/0xe60 [ 142.741398][ C1] blk_mq_end_request+0x3e/0x70 [ 142.741423][ C1] blk_done_softirq+0x10a/0x160 [ 142.741447][ C1] handle_softirqs+0x1de/0x6d0 [ 142.741474][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 142.741499][ C1] run_ksoftirqd+0x52/0x180 [ 142.741524][ C1] smpboot_thread_fn+0x541/0xa50 [ 142.741549][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 142.741577][ C1] kthread+0x388/0x470 [ 142.741605][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 142.741629][ C1] ? __pfx_kthread+0x10/0x10 [ 142.741656][ C1] ret_from_fork+0x514/0xb70 [ 142.741680][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 142.741702][ C1] ? __switch_to+0xc79/0x1410 [ 142.741732][ C1] ? __pfx_kthread+0x10/0x10 [ 142.741760][ C1] ret_from_fork_asm+0x1a/0x30 [ 142.741791][ C1] [ 142.741799][ C1] [ 142.741804][ C1] Allocated by task 5938: [ 142.741814][ C1] kasan_save_track+0x3e/0x80 [ 142.741833][ C1] __kasan_kmalloc+0x93/0xb0 [ 142.741852][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 142.741873][ C1] lmLogInit+0x3e5/0x1a00 [ 142.741895][ C1] lmLogOpen+0x4e1/0xfa0 [ 142.741916][ C1] jfs_mount_rw+0xee/0x670 [ 142.741937][ C1] jfs_fill_super+0x754/0xd80 [ 142.741953][ C1] get_tree_bdev_flags+0x431/0x4f0 [ 142.741974][ C1] vfs_get_tree+0x92/0x2a0 [ 142.741995][ C1] do_new_mount+0x341/0xd30 [ 142.742019][ C1] __se_sys_mount+0x31d/0x420 [ 142.742045][ C1] do_syscall_64+0x15f/0xf80 [ 142.742068][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.742086][ C1] [ 142.742091][ C1] Freed by task 5754: [ 142.742100][ C1] kasan_save_track+0x3e/0x80 [ 142.742118][ C1] kasan_save_free_info+0x46/0x50 [ 142.742143][ C1] __kasan_slab_free+0x5c/0x80 [ 142.742161][ C1] kfree+0x1c5/0x6c0 [ 142.742183][ C1] lmLogShutdown+0x456/0x850 [ 142.742205][ C1] lmLogClose+0x28a/0x520 [ 142.742227][ C1] jfs_umount+0x2fb/0x3d0 [ 142.742248][ C1] jfs_put_super+0x8c/0x190 [ 142.742273][ C1] generic_shutdown_super+0x13d/0x2d0 [ 142.742290][ C1] kill_block_super+0x44/0x90 [ 142.742311][ C1] deactivate_locked_super+0xbc/0x130 [ 142.742328][ C1] cleanup_mnt+0x437/0x4d0 [ 142.742347][ C1] task_work_run+0x1d9/0x270 [ 142.742373][ C1] exit_to_user_mode_loop+0xf3/0x4d0 [ 142.742396][ C1] do_syscall_64+0x33e/0xf80 [ 142.742418][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.742437][ C1] [ 142.742441][ C1] The buggy address belongs to the object at ffff8880317cee00 [ 142.742441][ C1] which belongs to the cache kmalloc-256 of size 256 [ 142.742458][ C1] The buggy address is located 8 bytes inside of [ 142.742458][ C1] freed 256-byte region [ffff8880317cee00, ffff8880317cef00) [ 142.742479][ C1] [ 142.742484][ C1] The buggy address belongs to the physical page: [ 142.742494][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880317cfe00 pfn:0x317ce [ 142.742514][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.742531][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 142.742550][ C1] page_type: f5(slab) [ 142.742569][ C1] raw: 0080000000000240 ffff88801a010b40 ffffea0000aaf690 ffffea0000b5f710 [ 142.742587][ C1] raw: ffff8880317cfe00 000000080010000f 00000000f5000000 0000000000000000 [ 142.742606][ C1] head: 0080000000000240 ffff88801a010b40 ffffea0000aaf690 ffffea0000b5f710 [ 142.742623][ C1] head: ffff8880317cfe00 000000080010000f 00000000f5000000 0000000000000000 [ 142.742641][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 142.742657][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 142.742667][ C1] page dumped because: kasan: bad access detected [ 142.742676][ C1] page_owner tracks the page as allocated [ 142.742683][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (udevd), ts 142318037157, free_ts 141883012219 [ 142.742718][ C1] post_alloc_hook+0x231/0x280 [ 142.742739][ C1] get_page_from_freelist+0x27c8/0x2840 [ 142.742763][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 142.742786][ C1] allocate_slab+0x77/0x660 [ 142.742812][ C1] refill_objects+0x33c/0x3d0 [ 142.742836][ C1] __pcs_replace_empty_main+0x373/0x720 [ 142.742863][ C1] __kmalloc_noprof+0x530/0x7b0 [ 142.742882][ C1] security_inode_init_security+0x102/0x3d0 [ 142.742904][ C1] shmem_mknod+0x1fe/0x360 [ 142.742929][ C1] shmem_mkdir+0x33/0x70 [ 142.742953][ C1] vfs_mkdir+0x40b/0x630 [ 142.742973][ C1] filename_mkdirat+0x289/0x520 [ 142.742995][ C1] __se_sys_mkdir+0x34/0x150 [ 142.743016][ C1] do_syscall_64+0x15f/0xf80 [ 142.743037][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.743055][ C1] page last free pid 5936 tgid 5936 stack trace: [ 142.743066][ C1] __free_frozen_pages+0xfa6/0x10f0 [ 142.743086][ C1] __mmdrop+0xb1/0x6d0 [ 142.743102][ C1] exit_mm+0x18e/0x250 [ 142.743126][ C1] do_exit+0x6a2/0x22c0 [ 142.743148][ C1] do_group_exit+0x21b/0x2d0 [ 142.743173][ C1] __x64_sys_exit_group+0x3f/0x40 [ 142.743199][ C1] x64_sys_call+0x221a/0x2240 [ 142.743221][ C1] do_syscall_64+0x15f/0xf80 [ 142.743242][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.743260][ C1] [ 142.743286][ C1] Memory state around the buggy address: [ 142.743297][ C1] ffff8880317ced00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.743310][ C1] ffff8880317ced80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.743323][ C1] >ffff8880317cee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.743333][ C1] ^ [ 142.743344][ C1] ffff8880317cee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.743356][ C1] ffff8880317cef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.743364][ C1] ================================================================== [ 142.844489][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.844515][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.844543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.844556][ C1] Call Trace: [ 142.844565][ C1] [ 142.844574][ C1] vpanic+0x56c/0xa60 [ 142.844608][ C1] ? __pfx_vpanic+0x10/0x10 [ 142.844635][ C1] ? __pfx___schedule+0x10/0x10 [ 142.844662][ C1] panic+0xc5/0xd0 [ 142.844686][ C1] ? __pfx_panic+0x10/0x10 [ 142.844711][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 142.844747][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.844775][ C1] check_panic_on_warn+0x89/0xb0 [ 142.844805][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.844832][ C1] end_report+0x73/0x170 [ 142.844855][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.844881][ C1] kasan_report+0x128/0x150 [ 142.844905][ C1] ? lbmIODone+0x1312/0x16c0 [ 142.844935][ C1] lbmIODone+0x1312/0x16c0 [ 142.844971][ C1] ? blkg_put+0x22/0x240 [ 142.844992][ C1] ? blkg_put+0x22/0x240 [ 142.845011][ C1] ? blkg_put+0x18d/0x240 [ 142.845031][ C1] ? bio_endio+0x989/0x9d0 [ 142.845056][ C1] blk_update_request+0x57e/0xe60 [ 142.845086][ C1] blk_mq_end_request+0x3e/0x70 [ 142.845110][ C1] blk_done_softirq+0x10a/0x160 [ 142.845134][ C1] handle_softirqs+0x1de/0x6d0 [ 142.845160][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 142.845185][ C1] run_ksoftirqd+0x52/0x180 [ 142.845211][ C1] smpboot_thread_fn+0x541/0xa50 [ 142.845237][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 142.845273][ C1] kthread+0x388/0x470 [ 142.845300][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 142.845323][ C1] ? __pfx_kthread+0x10/0x10 [ 142.845349][ C1] ret_from_fork+0x514/0xb70 [ 142.845374][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 142.845397][ C1] ? __switch_to+0xc79/0x1410 [ 142.845425][ C1] ? __pfx_kthread+0x10/0x10 [ 142.845451][ C1] ret_from_fork_asm+0x1a/0x30 [ 142.845483][ C1] [ 142.846258][ C1] Kernel Offset: disabled