Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. 2026/08/11 02:27:39 parsed 1 programs [ 168.874634][ T6114] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 175.869995][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.894575][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.895504][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.913958][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.914724][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.628917][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.628938][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.708367][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.708387][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.728166][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.728330][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.728492][ T6173] bridge_slave_0: entered allmulticast mode [ 178.730375][ T6173] bridge_slave_0: entered promiscuous mode [ 178.732900][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.733060][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.735642][ T6173] bridge_slave_1: entered allmulticast mode [ 178.784391][ T6173] bridge_slave_1: entered promiscuous mode [ 179.255384][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.290293][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.578949][ T6173] team0: Port device team_slave_0 added [ 179.581988][ T6173] team0: Port device team_slave_1 added [ 179.758879][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.758893][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.758913][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.760646][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.760658][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.760677][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.034259][ T6173] hsr_slave_0: entered promiscuous mode [ 180.035233][ T6173] hsr_slave_1: entered promiscuous mode [ 182.318461][ T6173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.362322][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.363909][ T6173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.416122][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.424032][ T6173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.457492][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.461538][ T6173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.494473][ T6173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.746097][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.834930][ T6173] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.854834][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.854981][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.892134][ T3354] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.892350][ T3354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.668671][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.779436][ T6173] veth0_vlan: entered promiscuous mode [ 183.798011][ T6173] veth1_vlan: entered promiscuous mode [ 183.879693][ T6173] veth0_macvtap: entered promiscuous mode [ 183.885870][ T6173] veth1_macvtap: entered promiscuous mode [ 183.968299][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.016857][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.438310][ T3354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.438361][ T3354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.438399][ T3354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.438437][ T3354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.945069][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.612303][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.976047][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.571064][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.667164][ T12] bridge_slave_1: left allmulticast mode [ 187.667201][ T12] bridge_slave_1: left promiscuous mode [ 187.667483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.838157][ T12] bridge_slave_0: left allmulticast mode [ 187.838195][ T12] bridge_slave_0: left promiscuous mode [ 187.838461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.787115][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.867429][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.888852][ T12] bond0 (unregistering): Released all slaves [ 189.333017][ T12] hsr_slave_0: left promiscuous mode [ 189.366379][ T12] hsr_slave_1: left promiscuous mode [ 189.367404][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.367432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.417663][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.417709][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.624716][ T12] veth1_macvtap: left promiscuous mode [ 189.628792][ T12] veth0_macvtap: left promiscuous mode [ 189.629563][ T12] veth1_vlan: left promiscuous mode [ 189.630167][ T12] veth0_vlan: left promiscuous mode 2026/08/11 02:28:07 executed programs: 0 [ 190.072117][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.112848][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.117038][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.133310][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.137275][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.617104][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.657095][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.840617][ T5249] 8021q: adding VLAN 0 to HW filter on device eth1 [ 191.689659][ T5249] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.216480][ T4903] Bluetooth: hci0: command tx timeout [ 192.265904][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.268076][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.268879][ T6410] bridge_slave_0: entered allmulticast mode [ 192.282310][ T6410] bridge_slave_0: entered promiscuous mode [ 192.297146][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.297369][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.297582][ T6410] bridge_slave_1: entered allmulticast mode [ 192.306087][ T6410] bridge_slave_1: entered promiscuous mode [ 192.429550][ T5249] 8021q: adding VLAN 0 to HW filter on device eth3 [ 192.791199][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.795182][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.070297][ T6410] team0: Port device team_slave_0 added [ 193.074221][ T6410] team0: Port device team_slave_1 added [ 193.259702][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.259722][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.259751][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.262289][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.262305][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.262349][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.560165][ T6410] hsr_slave_0: entered promiscuous mode [ 193.561580][ T6410] hsr_slave_1: entered promiscuous mode [ 193.826366][ T5249] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.296518][ T4903] Bluetooth: hci0: command tx timeout [ 195.903961][ T6410] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.941138][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.943585][ T6410] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.983431][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.984604][ T6410] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.034090][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.043948][ T6410] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.094597][ T6410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 196.311230][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.352469][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.376368][ T4903] Bluetooth: hci0: command tx timeout [ 196.379053][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.379244][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.427730][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.427862][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.211454][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.363926][ T6410] veth0_vlan: entered promiscuous mode [ 197.415385][ T6410] veth1_vlan: entered promiscuous mode [ 197.493020][ T6410] veth0_macvtap: entered promiscuous mode [ 197.538473][ T6410] veth1_macvtap: entered promiscuous mode [ 197.595951][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.622331][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.676964][ T3337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.701869][ T3321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.702149][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.703765][ T3321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.178898][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.178922][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.293957][ T1515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.293980][ T1515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/11 02:28:15 executed programs: 2 [ 198.458588][ T4903] Bluetooth: hci0: command tx timeout [ 198.774936][ T6569] loop0: detected capacity change from 0 to 32768 [ 198.927523][ T6569] Bad index:0 in slot in dtroot [ 198.927523][ T6569] [ 198.927548][ T6569] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 198.927548][ T6569] [ 198.927950][ T6569] ERROR: (device loop0): remounting filesystem as read-only [ 199.764982][ T6571] loop0: detected capacity change from 0 to 32768 [ 199.827642][ T6571] Bad index:0 in slot in dtroot [ 199.827642][ T6571] [ 199.827657][ T6571] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 199.827657][ T6571] [ 199.827998][ T6571] ERROR: (device loop0): remounting filesystem as read-only [ 199.901622][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.901697][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.306114][ T6573] loop0: detected capacity change from 0 to 32768 [ 200.345803][ T6573] Bad index:0 in slot in dtroot [ 200.345803][ T6573] [ 200.345824][ T6573] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 200.345824][ T6573] [ 200.346167][ T6573] ERROR: (device loop0): remounting filesystem as read-only [ 200.842301][ T6575] loop0: detected capacity change from 0 to 32768 [ 200.877390][ T6575] Bad index:0 in slot in dtroot [ 200.877390][ T6575] [ 200.877408][ T6575] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 200.877408][ T6575] [ 200.877738][ T6575] ERROR: (device loop0): remounting filesystem as read-only [ 201.295569][ T6577] loop0: detected capacity change from 0 to 32768 [ 201.329316][ T6577] Bad index:0 in slot in dtroot [ 201.329316][ T6577] [ 201.329334][ T6577] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 201.329334][ T6577] [ 201.329562][ T6577] ERROR: (device loop0): remounting filesystem as read-only [ 201.777031][ T6579] loop0: detected capacity change from 0 to 32768 [ 201.841964][ T6579] Bad index:0 in slot in dtroot [ 201.841964][ T6579] [ 201.841984][ T6579] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 201.841984][ T6579] [ 201.842521][ T6579] ERROR: (device loop0): remounting filesystem as read-only [ 202.278405][ T6581] loop0: detected capacity change from 0 to 32768 [ 202.323500][ T6581] Bad index:0 in slot in dtroot [ 202.323500][ T6581] [ 202.323518][ T6581] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 202.323518][ T6581] [ 202.323895][ T6581] ERROR: (device loop0): remounting filesystem as read-only [ 202.822350][ T6585] loop0: detected capacity change from 0 to 32768 [ 202.855944][ T6585] Bad index:0 in slot in dtroot [ 202.855944][ T6585] [ 202.855963][ T6585] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 202.855963][ T6585] [ 202.861675][ T6585] ERROR: (device loop0): remounting filesystem as read-only [ 203.375083][ T6589] loop0: detected capacity change from 0 to 32768 [ 203.412290][ T6589] Bad index:0 in slot in dtroot [ 203.412290][ T6589] [ 203.412310][ T6589] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 203.412310][ T6589] [ 203.412905][ T6589] ERROR: (device loop0): remounting filesystem as read-only 2026/08/11 02:28:20 executed programs: 11 [ 203.910917][ T6591] loop0: detected capacity change from 0 to 32768 [ 203.935694][ T6591] Bad index:0 in slot in dtroot [ 203.935694][ T6591] [ 203.935715][ T6591] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 203.935715][ T6591] [ 203.936087][ T6591] ERROR: (device loop0): remounting filesystem as read-only [ 203.995451][ C1] ================================================================== [ 203.995475][ C1] BUG: KASA[ 203.995475][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 203.995521][ C1] Read of size 4 at addr ffff888044f89008 by task ksoftirqd/1/30 [ 203.995542][ C1] [ 203.995571][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.995604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.995628][ C1] Call Trace: [ 203.995637][ C1] [ 203.995647][ C1] dump_stack_lvl+0xe8/0x150 [ 203.995683][ C1] print_address_description+0x55/0x1e0 [ 203.995716][ C1] ? lbmIODone+0x130e/0x16b0 [ 203.995743][ C1] print_report+0x58/0x70 [ 203.995922][ C1] kasan_report+0x117/0x150 [ 203.995950][ C1] ? lbmIODone+0x130e/0x16b0 [ 203.995982][ C1] lbmIODone+0x130e/0x16b0 [ 203.996011][ C1] ? blkg_put+0x22/0x240 [ 203.996045][ C1] ? blkg_put+0x22/0x240 [ 203.996077][ C1] ? blkg_put+0x18d/0x240 [ 203.996109][ C1] ? bio_endio+0x980/0x9d0 [ 203.996133][ C1] blk_update_request+0x57b/0xe50 [ 203.996164][ C1] blk_mq_end_request+0x3e/0x70 [ 203.996193][ C1] blk_done_softirq+0x10a/0x160 [ 203.996227][ C1] handle_softirqs+0x1d9/0x6c0 [ 203.996399][ C1] run_ksoftirqd+0x52/0x180 [ 203.996457][ C1] smpboot_thread_fn+0x57c/0xa80 [ 203.996493][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 203.996712][ C1] kthread+0x388/0x470 [ 203.996769][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 203.996799][ C1] ? __pfx_kthread+0x10/0x10 [ 203.996828][ C1] ret_from_fork+0x514/0xb70 [ 203.996862][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 203.996893][ C1] ? __switch_to+0xc89/0x1420 [ 203.996924][ C1] ? __pfx_kthread+0x10/0x10 [ 203.996957][ C1] ret_from_fork_asm+0x1a/0x30 [ 203.997000][ C1] [ 203.997010][ C1] [ 203.997016][ C1] Allocated by task 6591: [ 203.997027][ C1] kasan_save_track+0x3e/0x80 [ 203.997243][ C1] __kasan_kmalloc+0x93/0xb0 [ 203.997262][ C1] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 203.997281][ C1] lmLogInit+0x3e5/0x1a20 [ 203.997305][ C1] lmLogOpen+0x4e3/0xf90 [ 203.997327][ C1] jfs_mount_rw+0xf3/0x670 [ 203.997348][ C1] jfs_fill_super+0x769/0xda0 [ 203.997379][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 203.997404][ C1] vfs_get_tree+0x92/0x2a0 [ 203.997427][ C1] do_new_mount+0x319/0xdc0 [ 203.997458][ C1] __se_sys_mount+0x31d/0x420 [ 203.997475][ C1] do_syscall_64+0x174/0x580 [ 203.997505][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.997526][ C1] [ 203.997531][ C1] Freed by task 6591: [ 203.997540][ C1] kasan_save_track+0x3e/0x80 [ 203.997573][ C1] kasan_save_free_info+0x40/0x50 [ 203.997598][ C1] __kasan_slab_free+0x5c/0x80 [ 203.997617][ C1] kfree+0x1c5/0x6c0 [ 203.997645][ C1] lmLogShutdown+0x456/0x850 [ 203.997671][ C1] lmLogClose+0x28c/0x530 [ 203.997695][ C1] jfs_umount+0x2da/0x3b0 [ 203.997717][ C1] jfs_fill_super+0x9e7/0xda0 [ 203.997748][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 203.997772][ C1] vfs_get_tree+0x92/0x2a0 [ 203.997795][ C1] do_new_mount+0x319/0xdc0 [ 203.997826][ C1] __se_sys_mount+0x31d/0x420 [ 203.997844][ C1] do_syscall_64+0x174/0x580 [ 203.997873][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.997894][ C1] [ 203.997900][ C1] The buggy address belongs to the object at ffff888044f89000 [ 203.997900][ C1] which belongs to the cache kmalloc-256 of size 256 [ 203.997919][ C1] The buggy address is located 8 bytes inside of [ 203.997919][ C1] freed 256-byte region [ffff888044f89000, ffff888044f89100) [ 203.997940][ C1] [ 203.997944][ C1] The buggy address belongs to the physical page: [ 203.997985][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44f88 [ 203.998007][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.998025][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 203.998061][ C1] page_type: f5(slab) [ 203.998082][ C1] raw: 0080000000000040 ffff88813ffb1b40 dead000000000122 0000000000000000 [ 203.998102][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 203.998123][ C1] head: 0080000000000040 ffff88813ffb1b40 dead000000000122 0000000000000000 [ 203.998143][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 203.998163][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 203.998182][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 203.998194][ C1] page dumped because: kasan: bad access detected [ 203.998211][ C1] page_owner tracks the page as allocated [ 203.998219][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6591, tgid 6590 (syz.0.26), ts 203927190283, free_ts 203853648754 [ 203.998270][ C1] post_alloc_hook+0x1f9/0x250 [ 203.998304][ C1] get_page_from_freelist+0x262a/0x26a0 [ 203.998328][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 203.998350][ C1] allocate_slab+0x79/0x5e0 [ 203.998377][ C1] refill_objects+0x2d8/0x350 [ 203.998404][ C1] __pcs_replace_empty_main+0x330/0x690 [ 203.998430][ C1] __kmalloc_cache_noprof+0x468/0x6b0 [ 203.998450][ C1] lmLogInit+0x3e5/0x1a20 [ 203.998473][ C1] lmLogOpen+0x4e3/0xf90 [ 203.998495][ C1] jfs_mount_rw+0xf3/0x670 [ 203.998517][ C1] jfs_fill_super+0x769/0xda0 [ 203.998548][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 203.998573][ C1] vfs_get_tree+0x92/0x2a0 [ 203.998597][ C1] do_new_mount+0x319/0xdc0 [ 203.998629][ C1] __se_sys_mount+0x31d/0x420 [ 203.998646][ C1] do_syscall_64+0x174/0x580 [ 203.998676][ C1] page last free pid 6592 tgid 6592 stack trace: [ 203.998690][ C1] __free_frozen_pages+0x10e7/0x11c0 [ 203.998723][ C1] __mmdrop+0xf3/0x480 [ 203.998740][ C1] exit_mm+0x186/0x240 [ 203.998769][ C1] do_exit+0x6cd/0x2360 [ 203.998795][ C1] do_group_exit+0x22d/0x2f0 [ 203.998824][ C1] __x64_sys_exit_group+0x3f/0x40 [ 203.998851][ C1] x64_sys_call+0x221a/0x2240 [ 203.998882][ C1] do_syscall_64+0x174/0x580 [ 203.998991][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.999012][ C1] [ 203.999018][ C1] Memory state around the buggy address: [ 203.999029][ C1] ffff888044f88f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.999043][ C1] ffff888044f88f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.999067][ C1] >ffff888044f89000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.999078][ C1] ^ [ 203.999090][ C1] ffff888044f89080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 203.999104][ C1] ffff888044f89100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.999115][ C1] ================================================================== [ 204.011552][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 204.011616][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.011690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.011725][ C1] Call Trace: [ 204.011754][ C1] [ 204.011777][ C1] vpanic+0x56c/0xa60 [ 204.011883][ C1] ? __pfx_vpanic+0x10/0x10 [ 204.011970][ C1] ? __pfx___schedule+0x10/0x10 [ 204.012059][ C1] panic+0xc5/0xd0 [ 204.012131][ C1] ? __pfx_panic+0x10/0x10 [ 204.012231][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 204.012317][ C1] ? lbmIODone+0x130e/0x16b0 [ 204.012394][ C1] check_panic_on_warn+0x89/0xb0 [ 204.012484][ C1] ? lbmIODone+0x130e/0x16b0 [ 204.012763][ C1] end_report+0x73/0x170 [ 204.012980][ C1] ? lbmIODone+0x130e/0x16b0 [ 204.013192][ C1] kasan_report+0x128/0x150 [ 204.013269][ C1] ? lbmIODone+0x130e/0x16b0 [ 204.013350][ C1] lbmIODone+0x130e/0x16b0 [ 204.013432][ C1] ? blkg_put+0x22/0x240 [ 204.013526][ C1] ? blkg_put+0x22/0x240 [ 204.013553][ C1] ? blkg_put+0x18d/0x240 [ 204.013580][ C1] ? bio_endio+0x980/0x9d0 [ 204.013599][ C1] blk_update_request+0x57b/0xe50 [ 204.013626][ C1] blk_mq_end_request+0x3e/0x70 [ 204.013645][ C1] blk_done_softirq+0x10a/0x160 [ 204.013711][ C1] handle_softirqs+0x1d9/0x6c0 [ 204.013812][ C1] run_ksoftirqd+0x52/0x180 [ 204.013887][ C1] smpboot_thread_fn+0x57c/0xa80 [ 204.013963][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 204.014057][ C1] kthread+0x388/0x470 [ 204.014135][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 204.014209][ C1] ? __pfx_kthread+0x10/0x10 [ 204.014253][ C1] ret_from_fork+0x514/0xb70 [ 204.014307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 204.014384][ C1] ? __switch_to+0xc89/0x1420 [ 204.014468][ C1] ? __pfx_kthread+0x10/0x10 [ 204.014525][ C1] ret_from_fork_asm+0x1a/0x30 [ 204.014638][ C1] [ 204.014825][ C1] Kernel Offset: disabled