Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts. 2026/05/08 14:56:05 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 145.623238][ T6116] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 149.655817][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.655836][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.700418][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.700437][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.794235][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.818570][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.820993][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.821980][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.822795][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.195648][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.195772][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.195894][ T6190] bridge_slave_0: entered allmulticast mode [ 155.197401][ T6190] bridge_slave_0: entered promiscuous mode [ 155.199410][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.199537][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.199624][ T6190] bridge_slave_1: entered allmulticast mode [ 155.200897][ T6190] bridge_slave_1: entered promiscuous mode [ 155.381489][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.390944][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.558337][ T6190] team0: Port device team_slave_0 added [ 155.560366][ T6190] team0: Port device team_slave_1 added [ 155.737352][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.737371][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.737385][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.738698][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.738710][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.738730][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.093713][ T6190] hsr_slave_0: entered promiscuous mode [ 156.094522][ T6190] hsr_slave_1: entered promiscuous mode [ 158.104141][ T6190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.140427][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.141955][ T6190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.191247][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.192852][ T6190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.239422][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.240557][ T6190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.280935][ T6190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.406409][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.436571][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.460988][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.461205][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.507507][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.507642][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.130634][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.241115][ T6190] veth0_vlan: entered promiscuous mode [ 159.258851][ T6190] veth1_vlan: entered promiscuous mode [ 159.341016][ T6190] veth0_macvtap: entered promiscuous mode [ 159.351071][ T6190] veth1_macvtap: entered promiscuous mode [ 159.406984][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.427216][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.452265][ T4562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.462456][ T4562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.463236][ T4562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.464922][ T4562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.240809][ T1181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/08 14:56:25 executed programs: 0 [ 161.162607][ T1181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.192366][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.208342][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.237003][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.266707][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.267502][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.643758][ T1181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.047438][ T1181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.985726][ T1181] bridge_slave_1: left allmulticast mode [ 162.985759][ T1181] bridge_slave_1: left promiscuous mode [ 162.986009][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.068916][ T1181] bridge_slave_0: left allmulticast mode [ 163.068951][ T1181] bridge_slave_0: left promiscuous mode [ 163.069200][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.285494][ T59] Bluetooth: hci0: command tx timeout [ 163.786029][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.846297][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.887852][ T1181] bond0 (unregistering): Released all slaves [ 164.205476][ T1181] hsr_slave_0: left promiscuous mode [ 164.246160][ T1181] hsr_slave_1: left promiscuous mode [ 164.246993][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.247011][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.286271][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.286301][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.369258][ T1181] veth1_macvtap: left promiscuous mode [ 164.369358][ T1181] veth0_macvtap: left promiscuous mode [ 164.369504][ T1181] veth1_vlan: left promiscuous mode [ 164.369598][ T1181] veth0_vlan: left promiscuous mode [ 164.966446][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 165.015953][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 165.375311][ T59] Bluetooth: hci0: command tx timeout [ 165.397430][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.397558][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.397737][ T6337] bridge_slave_0: entered allmulticast mode [ 165.400198][ T6337] bridge_slave_0: entered promiscuous mode [ 165.403509][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.403725][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.403883][ T6337] bridge_slave_1: entered allmulticast mode [ 165.410383][ T6337] bridge_slave_1: entered promiscuous mode [ 165.672583][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.710011][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.887839][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.892578][ T6337] team0: Port device team_slave_0 added [ 165.901661][ T6337] team0: Port device team_slave_1 added [ 166.097599][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.097615][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.097637][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.099655][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.099669][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.099690][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.549042][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.554737][ T6337] hsr_slave_0: entered promiscuous mode [ 166.569582][ T6337] hsr_slave_1: entered promiscuous mode [ 167.330890][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.445376][ T59] Bluetooth: hci0: command tx timeout [ 168.699664][ T6337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.742039][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.743282][ T6337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.795091][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.798053][ T6337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.832982][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.833970][ T6337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.866147][ T6337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.029468][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.066484][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.072728][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.073014][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.083461][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.083649][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.525861][ T59] Bluetooth: hci0: command tx timeout [ 169.654063][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.696555][ T6337] veth0_vlan: entered promiscuous mode [ 169.702808][ T6337] veth1_vlan: entered promiscuous mode [ 169.747626][ T6337] veth0_macvtap: entered promiscuous mode [ 169.752098][ T6337] veth1_macvtap: entered promiscuous mode [ 169.767901][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.799720][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.816399][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.819952][ T1181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.820013][ T1181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.820043][ T1181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.161076][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.161095][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.202942][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.203000][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/08 14:56:34 executed programs: 2 [ 170.538322][ T6531] loop0: detected capacity change from 0 to 32768 [ 170.673221][ T6531] Bad index:0 in slot in dtroot [ 170.673221][ T6531] [ 170.673240][ T6531] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 170.673240][ T6531] [ 170.673880][ T6531] ERROR: (device loop0): remounting filesystem as read-only [ 171.383720][ T6535] loop0: detected capacity change from 0 to 32768 [ 171.410554][ T6535] Bad index:0 in slot in dtroot [ 171.410554][ T6535] [ 171.410569][ T6535] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 171.410569][ T6535] [ 171.413659][ T6535] ERROR: (device loop0): remounting filesystem as read-only [ 172.221268][ T6538] loop0: detected capacity change from 0 to 32768 [ 172.268264][ T6538] Bad index:0 in slot in dtroot [ 172.268264][ T6538] [ 172.268285][ T6538] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 172.268285][ T6538] [ 172.269116][ T6538] ERROR: (device loop0): remounting filesystem as read-only [ 173.089503][ T6541] loop0: detected capacity change from 0 to 32768 [ 173.109806][ T6541] Bad index:0 in slot in dtroot [ 173.109806][ T6541] [ 173.109826][ T6541] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 173.109826][ T6541] [ 173.110179][ T6541] ERROR: (device loop0): remounting filesystem as read-only [ 173.941678][ T6544] loop0: detected capacity change from 0 to 32768 [ 173.974168][ T6544] Bad index:0 in slot in dtroot [ 173.974168][ T6544] [ 173.974189][ T6544] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 173.974189][ T6544] [ 173.994516][ T6544] ERROR: (device loop0): remounting filesystem as read-only [ 174.809726][ T6547] loop0: detected capacity change from 0 to 32768 [ 174.839212][ T6547] Bad index:0 in slot in dtroot [ 174.839212][ T6547] [ 174.839228][ T6547] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 174.839228][ T6547] [ 174.839457][ T6547] ERROR: (device loop0): remounting filesystem as read-only 2026/05/08 14:56:39 executed programs: 8 [ 175.637413][ T6550] loop0: detected capacity change from 0 to 32768 [ 175.655805][ T6550] Bad index:0 in slot in dtroot [ 175.655805][ T6550] [ 175.655820][ T6550] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 175.655820][ T6550] [ 175.656094][ T6550] ERROR: (device loop0): re[ 175.656094][ T6550] ERROR: (device loop0): remounting filesystem as read-only [ 175.681052][ C0] ================================================================== [ 175.681067][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 175.681114][ C0] Read of size 4 at addr ffff88803af33e08 by task ksoftirqd/0/15 [ 175.681130][ C0] [ 175.681157][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.681179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.681200][ C0] Call Trace: [ 175.681207][ C0] [ 175.681214][ C0] dump_stack_lvl+0xe8/0x150 [ 175.681236][ C0] print_address_description+0x55/0x1e0 [ 175.681257][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.681278][ C0] print_report+0x58/0x70 [ 175.681295][ C0] kasan_report+0x117/0x150 [ 175.681317][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.681342][ C0] lbmIODone+0x1312/0x16c0 [ 175.681422][ C0] ? blkg_put+0x22/0x240 [ 175.681439][ C0] ? blkg_put+0x22/0x240 [ 175.681456][ C0] ? blkg_put+0x18d/0x240 [ 175.681473][ C0] ? bio_endio+0x989/0x9d0 [ 175.681495][ C0] blk_update_request+0x57e/0xe60 [ 175.681521][ C0] blk_mq_end_request+0x3e/0x70 [ 175.681542][ C0] blk_done_softirq+0x10a/0x160 [ 175.681561][ C0] handle_softirqs+0x1de/0x6d0 [ 175.681585][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 175.681605][ C0] run_ksoftirqd+0x52/0x180 [ 175.681626][ C0] smpboot_thread_fn+0x541/0xa50 [ 175.681647][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 175.681670][ C0] kthread+0x388/0x470 [ 175.681696][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.681716][ C0] ? __pfx_kthread+0x10/0x10 [ 175.681740][ C0] ret_from_fork+0x514/0xb70 [ 175.681759][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 175.681778][ C0] ? __switch_to+0xc79/0x1410 [ 175.681803][ C0] ? __pfx_kthread+0x10/0x10 [ 175.681825][ C0] ret_from_fork_asm+0x1a/0x30 [ 175.681853][ C0] [ 175.681860][ C0] [ 175.681868][ C0] Allocated by task 6550: [ 175.681877][ C0] kasan_save_track+0x3e/0x80 [ 175.681893][ C0] __kasan_kmalloc+0x93/0xb0 [ 175.681909][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 175.681927][ C0] lmLogInit+0x3e5/0x1a00 [ 175.681946][ C0] lmLogOpen+0x4e1/0xfa0 [ 175.681964][ C0] jfs_mount_rw+0xee/0x670 [ 175.681982][ C0] jfs_fill_super+0x754/0xd80 [ 175.681997][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 175.682015][ C0] vfs_get_tree+0x92/0x2a0 [ 175.682030][ C0] do_new_mount+0x341/0xd30 [ 175.682049][ C0] __se_sys_mount+0x31d/0x420 [ 175.682069][ C0] do_syscall_64+0x15f/0xf80 [ 175.682089][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.682104][ C0] [ 175.682108][ C0] Freed by task 6550: [ 175.682117][ C0] kasan_save_track+0x3e/0x80 [ 175.682131][ C0] kasan_save_free_info+0x46/0x50 [ 175.682153][ C0] __kasan_slab_free+0x5c/0x80 [ 175.682168][ C0] kfree+0x1c5/0x6c0 [ 175.682182][ C0] lmLogShutdown+0x456/0x850 [ 175.682201][ C0] lmLogClose+0x28a/0x520 [ 175.682220][ C0] jfs_umount+0x2fb/0x3d0 [ 175.682238][ C0] jfs_fill_super+0x9c5/0xd80 [ 175.682253][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 175.682271][ C0] vfs_get_tree+0x92/0x2a0 [ 175.682288][ C0] do_new_mount+0x341/0xd30 [ 175.682309][ C0] __se_sys_mount+0x31d/0x420 [ 175.682334][ C0] do_syscall_64+0x15f/0xf80 [ 175.682359][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.682375][ C0] [ 175.682379][ C0] The buggy address belongs to the object at ffff88803af33e00 [ 175.682379][ C0] which belongs to the cache kmalloc-256 of size 256 [ 175.682395][ C0] The buggy address is located 8 bytes inside of [ 175.682395][ C0] freed 256-byte region [ffff88803af33e00, ffff88803af33f00) [ 175.682415][ C0] [ 175.682420][ C0] The buggy address belongs to the physical page: [ 175.682438][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3af32 [ 175.682456][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 175.682471][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 175.682491][ C0] page_type: f5(slab) [ 175.682508][ C0] raw: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 175.682524][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 175.682539][ C0] head: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 175.682553][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 175.682566][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 175.682579][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 175.682587][ C0] page dumped because: kasan: bad access detected [ 175.682602][ C0] page_owner tracks the page as allocated [ 175.682609][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4964, tgid 4964 (udevadm), ts 26853938404, free_ts 0 [ 175.682638][ C0] post_alloc_hook+0x231/0x280 [ 175.682656][ C0] get_page_from_freelist+0x27c8/0x2840 [ 175.682676][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 175.682696][ C0] allocate_slab+0x77/0x660 [ 175.682717][ C0] refill_objects+0x33c/0x3d0 [ 175.682736][ C0] __pcs_replace_empty_main+0x373/0x720 [ 175.682759][ C0] __kmalloc_cache_noprof+0x44e/0x690 [ 175.682776][ C0] smk_fetch+0x95/0x140 [ 175.682792][ C0] smack_d_instantiate+0x757/0x990 [ 175.682813][ C0] security_d_instantiate+0x106/0x1d0 [ 175.682830][ C0] d_splice_alias_ops+0x71/0x3e0 [ 175.682849][ C0] path_openat+0x11cb/0x38a0 [ 175.682867][ C0] do_file_open+0x23e/0x4a0 [ 175.682884][ C0] do_sys_openat2+0x113/0x200 [ 175.682906][ C0] __x64_sys_openat+0x138/0x170 [ 175.682927][ C0] do_syscall_64+0x15f/0xf80 [ 175.682945][ C0] page_owner free stack trace missing [ 175.682952][ C0] [ 175.682956][ C0] Memory state around the buggy address: [ 175.682967][ C0] ffff88803af33d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.682978][ C0] ffff88803af33d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.682990][ C0] >ffff88803af33e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.682998][ C0] ^ [ 175.683008][ C0] ffff88803af33e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.683019][ C0] ffff88803af33f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 175.683027][ C0] ================================================================== [ 175.685054][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.685074][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.685101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.685112][ C0] Call Trace: [ 175.685123][ C0] [ 175.685131][ C0] vpanic+0x56c/0xa60 [ 175.685157][ C0] ? __pfx_vpanic+0x10/0x10 [ 175.685178][ C0] ? __pfx___schedule+0x10/0x10 [ 175.685202][ C0] panic+0xc5/0xd0 [ 175.685222][ C0] ? __pfx_panic+0x10/0x10 [ 175.685242][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 175.685272][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.685294][ C0] check_panic_on_warn+0x89/0xb0 [ 175.685318][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.685340][ C0] end_report+0x73/0x170 [ 175.685368][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.685388][ C0] kasan_report+0x128/0x150 [ 175.685409][ C0] ? lbmIODone+0x1312/0x16c0 [ 175.685434][ C0] lbmIODone+0x1312/0x16c0 [ 175.685456][ C0] ? blkg_put+0x22/0x240 [ 175.685474][ C0] ? blkg_put+0x22/0x240 [ 175.685490][ C0] ? blkg_put+0x18d/0x240 [ 175.685508][ C0] ? bio_endio+0x989/0x9d0 [ 175.685530][ C0] blk_update_request+0x57e/0xe60 [ 175.685557][ C0] blk_mq_end_request+0x3e/0x70 [ 175.685578][ C0] blk_done_softirq+0x10a/0x160 [ 175.685597][ C0] handle_softirqs+0x1de/0x6d0 [ 175.685621][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 175.685642][ C0] run_ksoftirqd+0x52/0x180 [ 175.685663][ C0] smpboot_thread_fn+0x541/0xa50 [ 175.685684][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 175.685707][ C0] kthread+0x388/0x470 [ 175.685730][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 175.685750][ C0] ? __pfx_kthread+0x10/0x10 [ 175.685772][ C0] ret_from_fork+0x514/0xb70 [ 175.685792][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 175.685811][ C0] ? __switch_to+0xc79/0x1410 [ 175.685836][ C0] ? __pfx_kthread+0x10/0x10 [ 175.685859][ C0] ret_from_fork_asm+0x1a/0x30 [ 175.685887][ C0] [ 175.686426][ C0] Kernel Offset: disabled