Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts.
2026/11/04 21:47:03 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 155.522000][ T5984] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 159.268479][ T2224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 159.268503][ T2224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 159.344277][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 159.344303][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.837813][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.837902][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[ 161.838069][ T6063] bridge_slave_0: entered allmulticast mode
[ 161.839885][ T6063] bridge_slave_0: entered promiscuous mode
[ 161.842415][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.842576][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[ 161.842692][ T6063] bridge_slave_1: entered allmulticast mode
[ 161.844424][ T6063] bridge_slave_1: entered promiscuous mode
[ 161.936978][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 161.940862][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 161.993895][ T6063] team0: Port device team_slave_0 added
[ 162.001317][ T6063] team0: Port device team_slave_1 added
[ 162.038966][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 162.038986][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 162.039005][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 162.040695][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 162.040707][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 162.040726][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 162.186875][ T6063] hsr_slave_0: entered promiscuous mode
[ 162.188245][ T6063] hsr_slave_1: entered promiscuous mode
[ 164.378609][ T6063] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 164.421876][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 164.423423][ T6063] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 164.459238][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 164.461741][ T6063] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 164.501075][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 164.503783][ T6063] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 164.539661][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 164.712133][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[ 164.760666][ T6063] 8021q: adding VLAN 0 to HW filter on device team0
[ 164.778408][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 164.778709][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 164.815563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 164.815720][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 165.756522][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 165.862088][ T6063] veth0_vlan: entered promiscuous mode
[ 165.891509][ T6063] veth1_vlan: entered promiscuous mode
[ 165.948718][ T6063] veth0_macvtap: entered promiscuous mode
[ 165.969872][ T6063] veth1_macvtap: entered promiscuous mode
[ 166.030928][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 166.050218][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 166.163565][ T2224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.255543][ T1032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.255825][ T1032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.256083][ T1032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.159287][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 168.170357][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 168.579068][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 169.038447][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 169.875312][ T1032] bridge_slave_1: left allmulticast mode
[ 169.875353][ T1032] bridge_slave_1: left promiscuous mode
[ 169.875668][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 170.057965][ T1032] bridge_slave_0: left allmulticast mode
[ 170.058008][ T1032] bridge_slave_0: left promiscuous mode
[ 170.058273][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 171.046024][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 171.125455][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 171.149343][ T1032] bond0 (unregistering): Released all slaves
[ 171.575722][ T1032] hsr_slave_0: left promiscuous mode
[ 171.614638][ T1032] hsr_slave_1: left promiscuous mode
[ 171.617402][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 171.617429][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 171.659566][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 171.688774][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 171.689878][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 171.690997][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 171.691928][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 171.736783][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 171.736813][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 171.886720][ T1032] veth1_macvtap: left promiscuous mode
[ 171.886841][ T1032] veth0_macvtap: left promiscuous mode
[ 171.887128][ T1032] veth1_vlan: left promiscuous mode
[ 171.887338][ T1032] veth0_vlan: left promiscuous mode
[ 172.636788][ T1032] team0 (unregistering): Port device team_slave_1 removed
[ 172.695474][ T1032] team0 (unregistering): Port device team_slave_0 removed
[ 173.097082][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1
[ 173.912509][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2
[ 174.997642][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3
[ 176.029500][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4
2026/11/04 21:47:31 executed programs: 0
[ 176.592324][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 176.610658][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 176.611601][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 176.612689][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 176.613391][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 177.535301][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.536717][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 177.536940][ T6385] bridge_slave_0: entered allmulticast mode
[ 177.539007][ T6385] bridge_slave_0: entered promiscuous mode
[ 177.541794][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.541957][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 177.542075][ T6385] bridge_slave_1: entered allmulticast mode
[ 177.543837][ T6385] bridge_slave_1: entered promiscuous mode
[ 177.643959][ T6385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 177.657468][ T6385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 177.720421][ T6385] team0: Port device team_slave_0 added
[ 177.723005][ T6385] team0: Port device team_slave_1 added
[ 177.791293][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 177.791308][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 177.791328][ T6385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 177.793123][ T6385] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 177.793136][ T6385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 177.793161][ T6385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 177.938859][ T6385] hsr_slave_0: entered promiscuous mode
[ 177.939856][ T6385] hsr_slave_1: entered promiscuous mode
[ 178.714817][ T4920] Bluetooth: hci0: command tx timeout
[ 180.083868][ T6385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 180.119440][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 180.124350][ T6385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 180.162491][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 180.163674][ T6385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 180.219200][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 180.233382][ T6385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 180.288790][ T6385] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 180.460090][ T6385] 8021q: adding VLAN 0 to HW filter on device bond0
[ 180.496670][ T6385] 8021q: adding VLAN 0 to HW filter on device team0
[ 180.531655][ T473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 180.531876][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 180.562544][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 180.562757][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 180.794699][ T4920] Bluetooth: hci0: command tx timeout
[ 181.293991][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 181.397030][ T6385] veth0_vlan: entered promiscuous mode
[ 181.413929][ T6385] veth1_vlan: entered promiscuous mode
[ 181.519399][ T6385] veth0_macvtap: entered promiscuous mode
[ 181.548762][ T6385] veth1_macvtap: entered promiscuous mode
[ 181.579447][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 181.598967][ T6385] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 181.716469][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 181.716524][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 181.716563][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 181.716600][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 182.168623][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 182.168652][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 182.319031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 182.319058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/11/04 21:47:37 executed programs: 2
[ 182.874586][ T4920] Bluetooth: hci0: command tx timeout
[ 183.037065][ T6513] loop0: detected capacity change from 0 to 32768
[ 183.317431][ T6513] Bad index:0 in slot in dtroot
[ 183.317431][ T6513]
[ 183.317459][ T6513] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 183.317459][ T6513]
[ 183.317873][ T6513] ERROR: (device loop0): remounting filesystem as read-only
[ 183.952911][ T6529] loop0: detected capacity change from 0 to 32768
[ 183.978189][ T6529] Bad index:0 in slot in dtroot
[ 183.978189][ T6529]
[ 183.978210][ T6529] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 183.978210][ T6529]
[ 183.978711][ T6529] ERROR: (device loop0): remounting filesystem as read-only
[ 184.380014][ T6531] loop0: detected capacity change from 0 to 32768
[ 184.418626][ T6531] Bad index:0 in slot in dtroot
[ 184.418626][ T6531]
[ 184.418645][ T6531] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 184.418645][ T6531]
[ 184.419962][ T6531] ERROR: (device loop0): remounting filesystem as read-only
[ 184.793925][ T6533] loop0: detected capacity change from 0 to 32768
[ 184.850451][ T6533] Bad index:0 in slot in dtroot
[ 184.850451][ T6533]
[ 184.850474][ T6533] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 184.850474][ T6533]
[ 184.850705][ T6533] ERROR: (device loop0): remounting filesystem as read-only
[ 184.954604][ T4920] Bluetooth: hci0: command tx timeout
[ 185.223684][ T6535] loop0: detected capacity change from 0 to 32768
[ 185.252981][ T6535] Bad index:0 in slot in dtroot
[ 185.252981][ T6535]
[ 185.253001][ T6535] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 185.253001][ T6535]
[ 185.253296][ T6535] ERROR: (device loop0): remounting filesystem as read-only
[ 185.631883][ T6537] loop0: detected capacity change from 0 to 32768
[ 185.663897][ T6537] Bad index:0 in slot in dtroot
[ 185.663897][ T6537]
[ 185.663918][ T6537] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 185.663918][ T6537]
[ 185.664283][ T6537] ERROR: (device loop0): remounting filesystem as read-only
[ 186.066628][ T6539] loop0: detected capacity change from 0 to 32768
[ 186.101354][ T6539] Bad index:0 in slot in dtroot
[ 186.101354][ T6539]
[ 186.101374][ T6539] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 186.101374][ T6539]
[ 186.101693][ T6539] ERROR: (device loop0): remounting filesystem as read-only
[ 186.513440][ T6541] loop0: detected capacity change from 0 to 32768
[ 186.531612][ T6541] Bad index:0 in slot in dtroot
[ 186.531612][ T6541]
[ 186.531631][ T6541] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 186.531631][ T6541]
[ 186.531965][ T6541] ERROR: (device loop0): remounting filesystem as read-only
[ 186.938024][ T6543] loop0: detected capacity change from 0 to 32768
[ 186.980684][ T6543] Bad index:0 in slot in dtroot
[ 186.980684][ T6543]
[ 186.980705][ T6543] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 186.980705][ T6543]
[ 186.981171][ T6543] ERROR: (device loop0): remounting filesystem as read-only
[ 187.401069][ T6545] loop0: detected capacity change from 0 to 32768
[ 187.424316][ T6545] Bad index:0 in slot in dtroot
[ 187.424316][ T6545]
[ 187.424337][ T6545] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 187.424337][ T6545]
[ 187.426802][ T6545] ERROR: (device loop0): remounting filesystem as read-only
2026/11/04 21:47:42 executed programs: 12
[ 187.823100][ T6547] Bad index:0 in slot in dtroot
[ 187.823100][ T6547]
[ 187.823118][ T6547] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 187.823118][ T6547]
[ 187.823398][ T6547] ERROR: (device loop0): remounting filesystem as read-only
[ 188.232474][ T6549] set_capacity_and_notify: 1 callbacks suppressed
[ 188.232491][ T6549] loop0: detected capacity change from 0 to 32768
[ 188.255605][ T6549] Bad index:0 in slot in dtroot
[ 188.255605][ T6549]
[ 188.255622][ T6549] ERROR: (d
** replaying previous printk message **
[ 188.255622][ T6549] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 188.255622][ T6549]
[ 188.255873][ T6549] ERROR: (device loop0): remounting filesystem as read-only
[ 188.265429][ C0] ==================================================================
[ 188.265477][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 188.265594][ C0] Read of size 4 at addr ffff88803caeb008 by task klogd/4959
[ 188.265646][ C0]
[ 188.265720][ C0] CPU: 0 UID: 0 PID: 4959 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 188.265786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 188.265830][ C0] Call Trace:
[ 188.265852][ C0]
[ 188.265875][ C0] dump_stack_lvl+0xe8/0x150
[ 188.265984][ C0] print_address_description+0x55/0x1e0
[ 188.266056][ C0] ? lbmIODone+0x130e/0x16b0
[ 188.266106][ C0] print_report+0x58/0x70
[ 188.266209][ C0] kasan_report+0x117/0x150
[ 188.266292][ C0] ? lbmIODone+0x130e/0x16b0
[ 188.266399][ C0] lbmIODone+0x130e/0x16b0
[ 188.266481][ C0] ? blkg_put+0x22/0x240
[ 188.266557][ C0] ? blkg_put+0x22/0x240
[ 188.266635][ C0] ? blkg_put+0x18d/0x240
[ 188.266720][ C0] ? bio_endio+0x984/0xac0
[ 188.266776][ C0] blk_update_request+0x57b/0xe50
[ 188.266852][ C0] blk_mq_end_request+0x3e/0x70
[ 188.266917][ C0] blk_done_softirq+0x10a/0x160
[ 188.267022][ C0] handle_softirqs+0x1d4/0x6c0
[ 188.267119][ C0] __local_bh_enable_ip+0x16f/0x2b0
[ 188.267205][ C0] ? __alloc_skb+0x18d/0x7a0
[ 188.267292][ C0] __alloc_skb+0x1b1/0x7a0
[ 188.267380][ C0] alloc_skb_with_frags+0xc6/0x760
[ 188.267439][ C0] ? kasan_save_track+0x4f/0x80
[ 188.267508][ C0] ? kasan_save_track+0x3e/0x80
[ 188.267538][ C0] ? kasan_save_free_info+0x40/0x50
[ 188.267631][ C0] ? __kasan_slab_free+0x5c/0x80
[ 188.267711][ C0] sock_alloc_send_pskb+0xc75/0xda0
[ 188.267841][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 188.267918][ C0] ? smack_socket_getpeersec_dgram+0x320/0x430
[ 188.268065][ C0] unix_dgram_sendmsg+0x4ff/0x17e0
[ 188.268143][ C0] ? lockdep_hardirqs_on+0x7b/0x110
[ 188.268219][ C0] ? kfree+0x1c5/0x6d0
[ 188.268305][ C0] ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 188.268412][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 188.268510][ C0] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 188.268587][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 188.268663][ C0] sock_sendmsg_nosec+0x14e/0x190
[ 188.268742][ C0] __sys_sendto+0x41e/0x5d0
[ 188.268828][ C0] ? smack_privileged_cred+0x33c/0x380
[ 188.268905][ C0] ? __pfx___sys_sendto+0x10/0x10
[ 188.269001][ C0] ? rcu_is_watching+0x16/0xb0
[ 188.269092][ C0] __x64_sys_sendto+0xde/0x100
[ 188.269196][ C0] do_syscall_64+0x166/0x520
[ 188.269268][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.269325][ C0] ? clear_bhb_loop+0x70/0xc0
[ 188.269399][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.269451][ C0] RIP: 0033:0x7f81f9d3d407
[ 188.269547][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 188.269601][ C0] RSP: 002b:00007ffd7d2988b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 188.269672][ C0] RAX: ffffffffffffffda RBX: 00007f81f9bedc80 RCX: 00007f81f9d3d407
[ 188.269723][ C0] RDX: 000000000000004f RSI: 00007ffd7d2989f0 RDI: 0000000000000003
[ 188.269758][ C0] RBP: 00007ffd7d298e20 R08: 0000000000000000 R09: 0000000000000000
[ 188.269799][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7d298e38
[ 188.269834][ C0] R13: 00007ffd7d2989f0 R14: 0000000000000034 R15: 00007ffd7d2989f0
[ 188.269900][ C0]
[ 188.269922][ C0]
[ 188.270008][ C0] Allocated by task 6549:
[ 188.270033][ C0] kasan_save_track+0x3e/0x80
[ 188.270088][ C0] __kasan_kmalloc+0x93/0xb0
[ 188.270144][ C0] __kmalloc_cache_noprof+0x3d0/0x670
[ 188.270197][ C0] lmLogInit+0x3e5/0x1a20
[ 188.270274][ C0] lmLogOpen+0x4e3/0xf90
[ 188.270351][ C0] jfs_mount_rw+0xf3/0x670
[ 188.270409][ C0] jfs_fill_super+0x769/0xda0
[ 188.270441][ C0] get_tree_bdev_flags+0x436/0x500
[ 188.270501][ C0] vfs_get_tree+0x92/0x2a0
[ 188.270560][ C0] do_new_mount+0x325/0xb00
[ 188.270635][ C0] __se_sys_mount+0x31d/0x420
[ 188.270702][ C0] do_syscall_64+0x166/0x520
[ 188.270765][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.270819][ C0]
[ 188.270831][ C0] Freed by task 6549:
[ 188.270861][ C0] kasan_save_track+0x3e/0x80
[ 188.270908][ C0] kasan_save_free_info+0x40/0x50
[ 188.270985][ C0] __kasan_slab_free+0x5c/0x80
[ 188.271047][ C0] kfree+0x1c5/0x6d0
[ 188.271126][ C0] lmLogShutdown+0x456/0x850
[ 188.271205][ C0] lmLogClose+0x28c/0x530
[ 188.271283][ C0] jfs_umount+0x2da/0x3b0
[ 188.271360][ C0] jfs_fill_super+0x9ed/0xda0
[ 188.271416][ C0] get_tree_bdev_flags+0x436/0x500
[ 188.271462][ C0] vfs_get_tree+0x92/0x2a0
[ 188.271501][ C0] do_new_mount+0x325/0xb00
[ 188.271574][ C0] __se_sys_mount+0x31d/0x420
[ 188.271642][ C0] do_syscall_64+0x166/0x520
[ 188.271698][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.271782][ C0]
[ 188.271799][ C0] The buggy address belongs to the object at ffff88803caeb000
[ 188.271799][ C0] which belongs to the cache kmalloc-256 of size 256
[ 188.271817][ C0] The buggy address is located 8 bytes inside of
[ 188.271817][ C0] freed 256-byte region [ffff88803caeb000, ffff88803caeb100)
[ 188.271839][ C0]
[ 188.271846][ C0] The buggy address belongs to the physical page:
[ 188.271884][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803caea400 pfn:0x3caea
[ 188.271976][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 188.272044][ C0] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 188.272098][ C0] page_type: f5(slab)
[ 188.272153][ C0] raw: 0080000000000240 ffff88813ff13b40 ffff88813ff12988 ffffea0000f38d10
[ 188.272208][ C0] raw: ffff88803caea400 000000000010000e 00000000f5000000 0000000000000000
[ 188.272290][ C0] head: 0080000000000240 ffff88813ff13b40 ffff88813ff12988 ffffea0000f38d10
[ 188.272344][ C0] head: ffff88803caea400 000000000010000e 00000000f5000000 0000000000000000
[ 188.272398][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 188.272436][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 188.272446][ C0] page dumped because: kasan: bad access detected
[ 188.272461][ C0] page_owner tracks the page as allocated
[ 188.272467][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4971, tgid 4971 (udevadm), ts 40062400501
[ 188.272553][ C0] post_alloc_hook+0x1f9/0x250
[ 188.272639][ C0] get_page_from_freelist+0x258b/0x2600
[ 188.272696][ C0] __alloc_frozen_pages_noprof+0x227/0x440
[ 188.272760][ C0] allocate_slab+0x7d/0x5e0
[ 188.272834][ C0] refill_objects+0x2d8/0x350
[ 188.272902][ C0] __pcs_replace_empty_main+0x339/0x690
[ 188.272987][ C0] __kmalloc_cache_noprof+0x46a/0x670
[ 188.273042][ C0] smk_fetch+0x95/0x140
[ 188.273100][ C0] smack_d_instantiate+0x6b3/0x810
[ 188.273185][ C0] security_d_instantiate+0x106/0x1d0
[ 188.273243][ C0] d_splice_alias_ops+0x72/0x440
[ 188.273266][ C0] lookup_open+0xa5e/0x1b00
[ 188.273284][ C0] path_openat+0x711/0x2100
[ 188.273339][ C0] do_file_open+0x23e/0x4a0
[ 188.273400][ C0] do_sys_openat2+0x115/0x200
[ 188.273486][ C0] __x64_sys_openat+0x138/0x170
[ 188.273552][ C0] page_owner free stack trace missing
[ 188.273574][ C0]
[ 188.273586][ C0] Memory state around the buggy address:
[ 188.273618][ C0] ffff88803caeaf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 188.273661][ C0] ffff88803caeaf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 188.273703][ C0] >ffff88803caeb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 188.273734][ C0] ^
[ 188.273765][ C0] ffff88803caeb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 188.273800][ C0] ffff88803caeb100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 188.273832][ C0] ==================================================================
[ 188.274342][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 189.099979][ C0] CPU: 0 UID: 0 PID: 4959 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 189.109478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 189.119841][ C0] Call Trace:
[ 189.123184][ C0]
[ 189.126165][ C0] vpanic+0x26f/0x710
[ 189.130284][ C0] panic+0xc5/0xd0
[ 189.134318][ C0] ? __pfx_panic+0x10/0x10
[ 189.138827][ C0] ? preempt_schedule_thunk+0x16/0x40
[ 189.144340][ C0] ? preempt_schedule_thunk+0x16/0x40
[ 189.149854][ C0] ? lbmIODone+0x130e/0x16b0
[ 189.154526][ C0] check_panic_on_warn+0x89/0xb0
[ 189.159542][ C0] ? lbmIODone+0x130e/0x16b0
[ 189.164227][ C0] end_report+0x73/0x170
[ 189.168521][ C0] ? lbmIODone+0x130e/0x16b0
[ 189.173170][ C0] kasan_report+0x128/0x150
[ 189.177719][ C0] ? lbmIODone+0x130e/0x16b0
[ 189.182370][ C0] lbmIODone+0x130e/0x16b0
[ 189.186848][ C0] ? blkg_put+0x22/0x240
[ 189.191136][ C0] ? blkg_put+0x22/0x240
[ 189.195430][ C0] ? blkg_put+0x18d/0x240
[ 189.200096][ C0] ? bio_endio+0x984/0xac0
[ 189.204566][ C0] blk_update_request+0x57b/0xe50
[ 189.209641][ C0] blk_mq_end_request+0x3e/0x70
[ 189.214540][ C0] blk_done_softirq+0x10a/0x160
[ 189.219544][ C0] handle_softirqs+0x1d4/0x6c0
[ 189.224393][ C0] __local_bh_enable_ip+0x16f/0x2b0
[ 189.229661][ C0] ? __alloc_skb+0x18d/0x7a0
[ 189.234311][ C0] __alloc_skb+0x1b1/0x7a0
[ 189.238796][ C0] alloc_skb_with_frags+0xc6/0x760
[ 189.244140][ C0] ? kasan_save_track+0x4f/0x80
[ 189.249037][ C0] ? kasan_save_track+0x3e/0x80
[ 189.253939][ C0] ? kasan_save_free_info+0x40/0x50
[ 189.259191][ C0] ? __kasan_slab_free+0x5c/0x80
[ 189.264187][ C0] sock_alloc_send_pskb+0xc75/0xda0
[ 189.269890][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 189.275754][ C0] ? smack_socket_getpeersec_dgram+0x320/0x430
[ 189.282072][ C0] unix_dgram_sendmsg+0x4ff/0x17e0
[ 189.287534][ C0] ? lockdep_hardirqs_on+0x7b/0x110
[ 189.292785][ C0] ? kfree+0x1c5/0x6d0
[ 189.296991][ C0] ? __pfx_smack_socket_sendmsg+0x10/0x10
[ 189.302824][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 189.308413][ C0] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 189.315147][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 189.320739][ C0] sock_sendmsg_nosec+0x14e/0x190
[ 189.326254][ C0] __sys_sendto+0x41e/0x5d0
[ 189.330908][ C0] ? smack_privileged_cred+0x33c/0x380
[ 189.336512][ C0] ? __pfx___sys_sendto+0x10/0x10
[ 189.341725][ C0] ? rcu_is_watching+0x16/0xb0
[ 189.346634][ C0] __x64_sys_sendto+0xde/0x100
[ 189.351470][ C0] do_syscall_64+0x166/0x520
[ 189.356373][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 189.362574][ C0] ? clear_bhb_loop+0x70/0xc0
[ 189.367314][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 189.373346][ C0] RIP: 0033:0x7f81f9d3d407
[ 189.377905][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 189.397542][ C0] RSP: 002b:00007ffd7d2988b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 189.406086][ C0] RAX: ffffffffffffffda RBX: 00007f81f9bedc80 RCX: 00007f81f9d3d407
[ 189.414216][ C0] RDX: 000000000000004f RSI: 00007ffd7d2989f0 RDI: 0000000000000003
[ 189.422326][ C0] RBP: 00007ffd7d298e20 R08: 0000000000000000 R09: 0000000000000000
[ 189.430733][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd7d298e38
[ 189.438928][ C0] R13: 00007ffd7d2989f0 R14: 0000000000000034 R15: 00007ffd7d2989f0
[ 189.447222][ C0]
[ 189.451971][ C0] Kernel Offset: disabled
[ 189.456470][ C0] Rebooting in 86400 seconds..