Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts.
2026/08/11 03:56:22 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 180.980347][ T6112] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 185.337790][ T5781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.337814][ T5781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 185.496047][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.496072][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 188.201009][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 188.201176][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 188.201318][ T6138] bridge_slave_0: entered allmulticast mode
[ 188.203341][ T6138] bridge_slave_0: entered promiscuous mode
[ 188.206285][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 188.206442][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 188.206561][ T6138] bridge_slave_1: entered allmulticast mode
[ 188.208484][ T6138] bridge_slave_1: entered promiscuous mode
[ 188.524566][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 188.532708][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 188.713707][ T6138] team0: Port device team_slave_0 added
[ 188.716475][ T6138] team0: Port device team_slave_1 added
[ 189.021355][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 189.021374][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 189.021397][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 189.024982][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 189.025000][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 189.025028][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 189.289975][ T6138] hsr_slave_0: entered promiscuous mode
[ 189.292735][ T6138] hsr_slave_1: entered promiscuous mode
[ 191.473498][ T6138] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 191.504212][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 191.510333][ T6138] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 191.553173][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 191.554737][ T6138] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 191.616258][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 191.617885][ T6138] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 191.646452][ T6138] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 191.826791][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0
[ 191.890536][ T6138] 8021q: adding VLAN 0 to HW filter on device team0
[ 191.918561][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 191.928237][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 191.977792][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 191.977948][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 192.821645][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 193.018254][ T6138] veth0_vlan: entered promiscuous mode
[ 193.050689][ T6138] veth1_vlan: entered promiscuous mode
[ 193.184128][ T6138] veth0_macvtap: entered promiscuous mode
[ 193.207395][ T6138] veth1_macvtap: entered promiscuous mode
[ 193.270700][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 193.293663][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 193.435123][ T1288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 193.435479][ T1288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 193.436129][ T1288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 193.440236][ T1278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 194.215896][ T4899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 194.242159][ T4899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 194.245088][ T4899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 194.278911][ T4899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 194.281234][ T4899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 194.594844][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 195.303722][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 195.752741][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 196.235535][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 197.369714][ T12] bridge_slave_1: left allmulticast mode
[ 197.369752][ T12] bridge_slave_1: left promiscuous mode
[ 197.370053][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 197.557714][ T12] bridge_slave_0: left allmulticast mode
[ 197.557753][ T12] bridge_slave_0: left promiscuous mode
[ 197.558000][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 198.590110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 198.670058][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 198.702247][ T12] bond0 (unregistering): Released all slaves
[ 199.179044][ T12] hsr_slave_0: left promiscuous mode
[ 199.219177][ T12] hsr_slave_1: left promiscuous mode
[ 199.220869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 199.220982][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 199.290139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 199.290170][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 199.383098][ T12] veth1_macvtap: left promiscuous mode
[ 199.383218][ T12] veth0_macvtap: left promiscuous mode
[ 199.386389][ T12] veth1_vlan: left promiscuous mode
[ 199.386627][ T12] veth0_vlan: left promiscuous mode
[ 200.159610][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 200.219895][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 200.360435][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 200.360514][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 200.460814][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1
[ 201.425468][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2
[ 202.742907][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3
[ 203.539214][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4
2026/08/11 03:56:53 executed programs: 0
[ 204.877274][ T4899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 204.893478][ T4899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 204.894815][ T4899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 204.896167][ T4899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 204.896888][ T4899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 206.171282][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 206.171412][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 206.171563][ T6458] bridge_slave_0: entered allmulticast mode
[ 206.173619][ T6458] bridge_slave_0: entered promiscuous mode
[ 206.176020][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 206.176166][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 206.176283][ T6458] bridge_slave_1: entered allmulticast mode
[ 206.186417][ T6458] bridge_slave_1: entered promiscuous mode
[ 206.413463][ T6458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 206.416680][ T6458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 206.662437][ T6458] team0: Port device team_slave_0 added
[ 206.665417][ T6458] team0: Port device team_slave_1 added
[ 206.880093][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 206.880107][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 206.880140][ T6458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 206.883917][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 206.883936][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 206.883956][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 207.006382][ T4899] Bluetooth: hci0: command tx timeout
[ 207.210585][ T6458] hsr_slave_0: entered promiscuous mode
[ 207.211655][ T6458] hsr_slave_1: entered promiscuous mode
[ 209.068988][ T4899] Bluetooth: hci0: command tx timeout
[ 209.699533][ T6458] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 209.743720][ T6458] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 209.745413][ T6458] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 209.783645][ T6458] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 209.785206][ T6458] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 209.837270][ T6458] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 209.847443][ T6458] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 209.885449][ T6458] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 210.100326][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 210.175551][ T6458] 8021q: adding VLAN 0 to HW filter on device team0
[ 210.214942][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 210.215219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 210.252418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 210.252659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 211.035856][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 211.143276][ T6458] veth0_vlan: entered promiscuous mode
[ 211.159437][ T4899] Bluetooth: hci0: command tx timeout
[ 211.205326][ T6458] veth1_vlan: entered promiscuous mode
[ 211.305709][ T6458] veth0_macvtap: entered promiscuous mode
[ 211.330174][ T6458] veth1_macvtap: entered promiscuous mode
[ 211.385439][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 211.432653][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 211.955646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 211.955669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 212.079722][ T1278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 212.079778][ T1278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 212.079819][ T1278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 212.079858][ T1278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 212.213163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 212.213186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/11 03:57:01 executed programs: 2
[ 212.906292][ T6591] loop0: detected capacity change from 0 to 32768
[ 213.231346][ T4899] Bluetooth: hci0: command tx timeout
[ 213.424901][ T6591] Bad index:0 in slot in dtroot
[ 213.424901][ T6591]
[ 213.424926][ T6591] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 213.424926][ T6591]
[ 213.425209][ T6591] ERROR: (device loop0): remounting filesystem as read-only
[ 214.408308][ T6623] loop0: detected capacity change from 0 to 32768
[ 214.471410][ T6623] Bad index:0 in slot in dtroot
[ 214.471410][ T6623]
[ 214.471427][ T6623] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 214.471427][ T6623]
[ 214.479484][ T6623] ERROR: (device loop0): remounting filesystem as read-only
[ 215.283035][ T6626] loop0: detected capacity change from 0 to 32768
[ 215.331549][ T6626] Bad index:0 in slot in dtroot
[ 215.331549][ T6626]
[ 215.331568][ T6626] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 215.331568][ T6626]
[ 215.331915][ T6626] ERROR: (device loop0): remounting filesystem as read-only
[ 216.172404][ T6630] loop0: detected capacity change from 0 to 32768
[ 216.213718][ T6630] Bad index:0 in slot in dtroot
[ 216.213718][ T6630]
[ 216.213737][ T6630] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 216.213737][ T6630]
[ 216.214045][ T6630] ERROR: (device loop0): remounting filesystem as read-only
[ 216.987707][ T6633] loop0: detected capacity change from 0 to 32768
[ 217.089870][ T6633] Bad index:0 in slot in dtroot
[ 217.089870][ T6633]
[ 217.089890][ T6633] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 217.089890][ T6633]
[ 217.090208][ T6633] ERROR: (device loop0): remounting filesystem as read-only
2026/08/11 03:57:06 executed programs: 7
[ 217.915607][ T6637] loop0: detected capacity change from 0 to 32768
[ 217.946087][ T6637] Bad index:0 in slot in dtroot
[ 217.946087][ T6637]
[ 217.946104][ T6637] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 217.946104][ T6637]
[ 217.955604][ T6637] ERROR: (device loop0): remounting filesystem as read-only
[ 218.755316][ T6640] loop0: detected capacity change from 0 to 32768
[ 218.787135][ T6640] Bad index:0 in slot in dtroot
[ 218.787135][ T6640]
[ 218.787155][ T6640] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 218.787155][ T6640]
[ 218.787738][ T6640] ERROR: (device loop0): remounting filesystem as read-only
[ 219.847341][ T6644] loop0: detected capacity change from 0 to 32768
[ 219.971679][ T6644] Bad index:0 in slot in dtroot
[ 219.971679][ T6644]
[ 219.971699][ T6644] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 219.971699][ T6644]
[ 219.972001][ T6644] ERROR: (device loop0): remounting filesystem as read-only
[ 220.719354][ T6647] loop0: detected capacity change from 0 to 32768
[ 220.808442][ T6647] Bad index:0 in slot in dtroot
[ 220.808442][ T6647]
[ 220.808463][ T6647] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 220.808463][ T6647]
[ 220.813056][ T6647] ERROR: (device loop0): remounting filesystem as read-only
[ 221.965275][ T6650] loop0: detected capacity change from 0 to 32768
[ 222.053709][ T6650] Bad index:0 in slot in dtroot
[ 222.053709][ T6650]
[ 222.054639][ T6650] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 222.054639][ T6650]
[ 222.055414][ T6650] ERROR: (device loop0): remounting filesystem as read-only
[ 222.783298][ T6653] loop0: detected capacity change from 0 to 32768
[ 222.820398][ T6653] Bad index:0 in slot in dtroot
[ 222.820398][ T6653]
[ 222.820416][ T6653] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 222.820416][ T6653]
[ 222.820941][ T6653] ERROR: (device loop0): remounting filesystem as read-only
2026/08/11 03:57:12 executed programs: 13
[ 223.601459][ T6656] loop0: detected capacity change from 0 to 32768
[ 223.635970][ T6656] Bad index:0 in slot in dtroot
[ 223.635970][ T6656]
[ 223.635990][ T6656] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 223.635990][ T6656]
[ 223.636636][ T6656] ERROR: (device loop0): remounting filesystem as read-only
[ 224.543133][ T6659] loop0: detected capacity change from 0 to 32768
[ 224.596812][ T6659] Bad index:0 in slot in dtroot
[ 224.596812][ T6659]
[ 224.596832][ T6659] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 224.596832][ T6659]
[ 224.597720][ T6659] ERROR: (device loop0): remounting filesystem as read-only
[ 225.327154][ T6663] loop0: detected capacity change from 0 to 32768
[ 225.353469][ T6663] Bad index:0 in slot in dtroot
[ 225.353469][ T6663]
[ 225.353489][ T6663] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 225.353489][ T6663]
[ 225.354712][ T6663] ERROR: (device loop0): remounting filesystem as read-only
[ 226.154914][ T6666] loop0: detected capacity change from 0 to 32768
[ 226.186682][ T6666] Bad index:0 in slot in dtroot
[ 226.186682][ T6666]
[ 226.186700][ T6666] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 226.186700][ T6666]
[ 226.187041][ T6666] ERROR: (device loop0): remounting filesystem as read-only
[ 227.052895][ T6669] loop0: detected capacity change from 0 to 32768
[ 227.081367][ T6669] Bad index:0 in slot in dtroot
[ 227.081367][ T6669]
[ 227.081387][ T6669] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 227.081387][ T6669]
[ 227.081858][ T6669] ERROR: (device loop0): remounting filesystem as read-only
[ 227.986747][ T6672] loop0: detected capacity change from 0 to 32768
[ 228.007617][ T6672] Bad index:0 in slot in dtroot
[ 228.007617][ T6672]
[ 228.007635][ T6672] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 228.007635][ T6672]
[ 228.007957][ T6672] ERROR: (device loop0): remounting filesystem as read-only
[ 228.056191][ C0] ==================================================================
[ 228.056211][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 228.056251][ C0] Read of size 4 at addr ffff88802a2faa08 by task ksoftirqd/0/15
[ 228.056271][ C0]
[ 228.056299][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 228.056340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 228.056363][ C0] Call Trace:
[ 228.056372][ C0]
[ 228.056381][ C0] dump_stack_lvl+0xe8/0x150
[ 228.056417][ C0] print_address_description+0x55/0x1e0
[ 228.056450][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.056478][ C0] print_report+0x58/0x70
[ 228.056507][ C0] kasan_report+0x117/0x150
[ 228.056534][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.056567][ C0] lbmIODone+0x130e/0x16b0
[ 228.056596][ C0] ? blkg_put+0x22/0x240
[ 228.056628][ C0] ? blkg_put+0x22/0x240
[ 228.056670][ C0] ? blkg_put+0x18d/0x240
[ 228.056702][ C0] ? bio_endio+0x980/0x9d0
[ 228.056725][ C0] blk_update_request+0x57b/0xe50
[ 228.056754][ C0] blk_mq_end_request+0x3e/0x70
[ 228.056779][ C0] blk_done_softirq+0x10a/0x160
[ 228.056817][ C0] handle_softirqs+0x1d9/0x6c0
[ 228.056853][ C0] run_ksoftirqd+0x52/0x180
[ 228.056882][ C0] smpboot_thread_fn+0x57c/0xa80
[ 228.056912][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 228.056912][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 228.056944][ C0] kthread+0x388/0x470
[ 228.057001][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 228.057028][ C0] ? __pfx_kthread+0x10/0x10
[ 228.057058][ C0] ret_from_fork+0x514/0xb70
[ 228.057092][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 228.057123][ C0] ? __switch_to+0xc89/0x1420
[ 228.057152][ C0] ? __pfx_kthread+0x10/0x10
[ 228.057183][ C0] ret_from_fork_asm+0x1a/0x30
[ 228.057226][ C0]
[ 228.057234][ C0]
[ 228.057239][ C0] Allocated by task 6672:
[ 228.057249][ C0] kasan_save_track+0x3e/0x80
[ 228.057283][ C0] __kasan_kmalloc+0x93/0xb0
[ 228.057300][ C0] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 228.057319][ C0] lmLogInit+0x3e5/0x1a20
[ 228.057343][ C0] lmLogOpen+0x4e3/0xf90
[ 228.057366][ C0] jfs_mount_rw+0xf3/0x670
[ 228.057389][ C0] jfs_fill_super+0x769/0xda0
[ 228.057418][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 228.057443][ C0] vfs_get_tree+0x92/0x2a0
[ 228.057466][ C0] do_new_mount+0x319/0xdc0
[ 228.057496][ C0] __se_sys_mount+0x31d/0x420
[ 228.057512][ C0] do_syscall_64+0x174/0x580
[ 228.057664][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 228.057686][ C0]
[ 228.057691][ C0] Freed by task 6672:
[ 228.057700][ C0] kasan_save_track+0x3e/0x80
[ 228.057732][ C0] kasan_save_free_info+0x40/0x50
[ 228.057757][ C0] __kasan_slab_free+0x5c/0x80
[ 228.057775][ C0] kfree+0x1c5/0x6c0
[ 228.057804][ C0] lmLogShutdown+0x456/0x850
[ 228.057831][ C0] lmLogClose+0x28c/0x530
[ 228.057855][ C0] jfs_umount+0x2da/0x3b0
[ 228.057877][ C0] jfs_fill_super+0x9e7/0xda0
[ 228.057908][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 228.057932][ C0] vfs_get_tree+0x92/0x2a0
[ 228.057953][ C0] do_new_mount+0x319/0xdc0
[ 228.057984][ C0] __se_sys_mount+0x31d/0x420
[ 228.058000][ C0] do_syscall_64+0x174/0x580
[ 228.058026][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 228.058045][ C0]
[ 228.058050][ C0] The buggy address belongs to the object at ffff88802a2faa00
[ 228.058050][ C0] which belongs to the cache kmalloc-256 of size 256
[ 228.058068][ C0] The buggy address is located 8 bytes inside of
[ 228.058068][ C0] freed 256-byte region [ffff88802a2faa00, ffff88802a2fab00)
[ 228.058089][ C0]
[ 228.058094][ C0] The buggy address belongs to the physical page:
[ 228.058127][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a2fa400 pfn:0x2a2fa
[ 228.058150][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 228.058166][ C0] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 228.058189][ C0] page_type: f5(slab)
[ 228.058208][ C0] raw: 0080000000000240 ffff88813ffb1b40 ffff88813ffb0988 ffffea000078e290
[ 228.058227][ C0] raw: ffff88802a2fa400 000000080010000f 00000000f5000000 0000000000000000
[ 228.058248][ C0] head: 0080000000000240 ffff88813ffb1b40 ffff88813ffb0988 ffffea000078e290
[ 228.058268][ C0] head: ffff88802a2fa400 000000080010000f 00000000f5000000 0000000000000000
[ 228.058288][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 228.058306][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 228.058318][ C0] page dumped because: kasan: bad access detected
[ 228.058333][ C0] page_owner tracks the page as allocated
[ 228.058342][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17747503120, free_ts 0
[ 228.058379][ C0] post_alloc_hook+0x1f9/0x250
[ 228.058414][ C0] get_page_from_freelist+0x262a/0x26a0
[ 228.058437][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 228.058461][ C0] allocate_slab+0x79/0x5e0
[ 228.058487][ C0] refill_objects+0x2d8/0x350
[ 228.058515][ C0] __pcs_replace_empty_main+0x330/0x690
[ 228.058542][ C0] __kmalloc_cache_noprof+0x468/0x6b0
[ 228.058562][ C0] usb_string+0x108/0x790
[ 228.058658][ C0] usb_cache_string+0x7d/0xf0
[ 228.058691][ C0] usb_new_device+0x328/0x1680
[ 228.058744][ C0] register_root_hub+0x250/0x5c0
[ 228.058770][ C0] usb_add_hcd+0xac7/0xf80
[ 228.058794][ C0] dummy_hcd_probe+0x134/0x270
[ 228.058817][ C0] platform_probe+0xf9/0x190
[ 228.058893][ C0] really_probe+0x254/0xae0
[ 228.058943][ C0] __driver_probe_device+0x1e8/0x360
[ 228.058968][ C0] page_owner free stack trace missing
[ 228.058976][ C0]
[ 228.058981][ C0] Memory state around the buggy address:
[ 228.058993][ C0] ffff88802a2fa900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 228.059008][ C0] ffff88802a2fa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 228.059022][ C0] >ffff88802a2faa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 228.059032][ C0] ^
[ 228.059042][ C0] ffff88802a2faa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 228.059057][ C0] ffff88802a2fab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 228.059067][ C0] ==================================================================
[ 228.249788][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 228.249810][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 228.249830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 228.249841][ C0] Call Trace:
[ 228.249852][ C0]
[ 228.249860][ C0] vpanic+0x56c/0xa60
[ 228.249894][ C0] ? __pfx_vpanic+0x10/0x10
[ 228.249921][ C0] ? __pfx___schedule+0x10/0x10
[ 228.250019][ C0] panic+0xc5/0xd0
[ 228.250043][ C0] ? __pfx_panic+0x10/0x10
[ 228.250067][ C0] ? preempt_schedule_thunk+0x16/0x40
[ 228.250263][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.250288][ C0] check_panic_on_warn+0x89/0xb0
[ 228.250315][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.250335][ C0] end_report+0x73/0x170
[ 228.250353][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.250373][ C0] kasan_report+0x128/0x150
[ 228.250393][ C0] ? lbmIODone+0x130e/0x16b0
[ 228.250417][ C0] lbmIODone+0x130e/0x16b0
[ 228.250445][ C0] ? blkg_put+0x22/0x240
[ 228.250470][ C0] ? blkg_put+0x22/0x240
[ 228.250499][ C0] ? blkg_put+0x18d/0x240
[ 228.250523][ C0] ? bio_endio+0x980/0x9d0
[ 228.250540][ C0] blk_update_request+0x57b/0xe50
[ 228.250563][ C0] blk_mq_end_request+0x3e/0x70
[ 228.250580][ C0] blk_done_softirq+0x10a/0x160
[ 228.250611][ C0] handle_softirqs+0x1d9/0x6c0
[ 228.250634][ C0] run_ksoftirqd+0x52/0x180
[ 228.250657][ C0] smpboot_thread_fn+0x57c/0xa80
[ 228.250679][ C0] ? smpboot_thread_fn+0x4e/0xa80
[ 228.250702][ C0] kthread+0x388/0x470
[ 228.250726][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 228.250747][ C0] ? __pfx_kthread+0x10/0x10
[ 228.250770][ C0] ret_from_fork+0x514/0xb70
[ 228.250797][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 228.250821][ C0] ? __switch_to+0xc89/0x1420
[ 228.250844][ C0] ? __pfx_kthread+0x10/0x10
[ 228.250869][ C0] ret_from_fork_asm+0x1a/0x30
[ 228.250904][ C0]
[ 228.251461][ C0] Kernel Offset: disabled