Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts.
[ 132.960282][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.960399][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
2026/05/08 06:21:57 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 138.076211][ T5995] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 142.175431][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.175452][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.225424][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.225446][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.066052][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 143.069373][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 143.070173][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 143.071195][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 143.072515][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 145.757236][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state
[ 145.757393][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 145.757486][ T6050] bridge_slave_0: entered allmulticast mode
[ 145.758808][ T6050] bridge_slave_0: entered promiscuous mode
[ 145.768057][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state
[ 145.768280][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[ 145.768444][ T6050] bridge_slave_1: entered allmulticast mode
[ 145.770873][ T6050] bridge_slave_1: entered promiscuous mode
[ 145.813455][ T6050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 145.819153][ T6050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 145.934606][ T6050] team0: Port device team_slave_0 added
[ 145.936806][ T6050] team0: Port device team_slave_1 added
[ 145.969155][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 145.969171][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.969192][ T6050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 145.970408][ T6050] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 145.970420][ T6050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 145.970438][ T6050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 146.035700][ T6050] hsr_slave_0: entered promiscuous mode
[ 146.036887][ T6050] hsr_slave_1: entered promiscuous mode
[ 148.040814][ T6050] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 148.086122][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 148.087267][ T6050] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 148.136854][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 148.140408][ T6050] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 148.182671][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 148.184877][ T6050] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 148.235688][ T6050] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 148.428181][ T6050] 8021q: adding VLAN 0 to HW filter on device bond0
[ 148.456267][ T6050] 8021q: adding VLAN 0 to HW filter on device team0
[ 148.471582][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 148.473478][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 148.487426][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 148.487651][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 149.133250][ T6050] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 149.234081][ T6050] veth0_vlan: entered promiscuous mode
[ 149.249198][ T6050] veth1_vlan: entered promiscuous mode
[ 149.321534][ T6050] veth0_macvtap: entered promiscuous mode
[ 149.337871][ T6050] veth1_macvtap: entered promiscuous mode
[ 149.379577][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 149.414724][ T6050] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 149.446701][ T105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.454880][ T105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.457115][ T105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 149.457157][ T105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.401105][ T3035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 151.227297][ T3035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 151.767377][ T3035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 152.264344][ T3035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.192205][ T3035] bridge_slave_1: left allmulticast mode
[ 153.192238][ T3035] bridge_slave_1: left promiscuous mode
[ 153.192582][ T3035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 153.282787][ T3035] bridge_slave_0: left allmulticast mode
[ 153.282812][ T3035] bridge_slave_0: left promiscuous mode
[ 153.282963][ T3035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.942533][ T3035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 154.022824][ T3035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 154.063855][ T3035] bond0 (unregistering): Released all slaves
[ 154.451940][ T3035] hsr_slave_0: left promiscuous mode
[ 154.491935][ T3035] hsr_slave_1: left promiscuous mode
[ 154.493004][ T3035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 154.493029][ T3035] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 154.542851][ T3035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 154.542877][ T3035] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 154.650839][ T3035] veth1_macvtap: left promiscuous mode
[ 154.650941][ T3035] veth0_macvtap: left promiscuous mode
[ 154.665541][ T3035] veth1_vlan: left promiscuous mode
[ 154.665723][ T3035] veth0_vlan: left promiscuous mode
2026/05/08 06:22:18 executed programs: 0
[ 155.006883][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 155.043967][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 155.048493][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 155.050500][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 155.056367][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 155.522604][ T3035] team0 (unregistering): Port device team_slave_1 removed
[ 155.562697][ T3035] team0 (unregistering): Port device team_slave_0 removed
[ 155.713712][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[ 156.435849][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[ 156.910374][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.911515][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.914706][ T6289] bridge_slave_0: entered allmulticast mode
[ 156.917248][ T6289] bridge_slave_0: entered promiscuous mode
[ 156.926763][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.926954][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.927265][ T6289] bridge_slave_1: entered allmulticast mode
[ 156.932985][ T6289] bridge_slave_1: entered promiscuous mode
[ 156.986317][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 156.989329][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[ 156.996756][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.030448][ T6289] team0: Port device team_slave_0 added
[ 157.034280][ T6289] team0: Port device team_slave_1 added
[ 157.082753][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 157.082768][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.082791][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 157.084953][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 157.084966][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.084988][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 157.112173][ T4914] Bluetooth: hci0: command tx timeout
[ 157.156426][ T6289] hsr_slave_0: entered promiscuous mode
[ 157.157636][ T6289] hsr_slave_1: entered promiscuous mode
[ 157.776231][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
[ 159.191958][ T4914] Bluetooth: hci0: command tx timeout
[ 159.749661][ T6289] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 159.778849][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 159.781204][ T6289] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 159.819584][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 159.820950][ T6289] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 159.859984][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 159.861409][ T6289] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 159.910453][ T6289] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 160.098229][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0
[ 160.119923][ T6289] 8021q: adding VLAN 0 to HW filter on device team0
[ 160.130424][ T105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 160.130622][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 160.160883][ T105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 160.161109][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 160.838832][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 160.959482][ T6289] veth0_vlan: entered promiscuous mode
[ 160.989148][ T6289] veth1_vlan: entered promiscuous mode
[ 161.057726][ T6289] veth0_macvtap: entered promiscuous mode
[ 161.070135][ T6289] veth1_macvtap: entered promiscuous mode
[ 161.094371][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 161.108066][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 161.146396][ T180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.146924][ T180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.147413][ T180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.147834][ T180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 161.275575][ T4914] Bluetooth: hci0: command tx timeout
[ 161.630717][ T3035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.630739][ T3035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 161.698550][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 161.698571][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/08 06:22:25 executed programs: 2
[ 162.034296][ T6449] loop0: detected capacity change from 0 to 32768
[ 162.202759][ T6449] Bad index:0 in slot in dtroot
[ 162.202759][ T6449]
[ 162.202781][ T6449] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 162.202781][ T6449]
[ 162.203060][ T6449] ERROR: (device loop0): remounting filesystem as read-only
[ 162.637907][ T6451] loop0: detected capacity change from 0 to 32768
[ 162.666677][ T6451] Bad index:0 in slot in dtroot
[ 162.666677][ T6451]
[ 162.666694][ T6451] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 162.666694][ T6451]
[ 162.666956][ T6451] ERROR: (device loop0): remounting filesystem as read-only
[ 163.040310][ T6453] loop0: detected capacity change from 0 to 32768
[ 163.099566][ T6453] Bad index:0 in slot in dtroot
[ 163.099566][ T6453]
[ 163.099583][ T6453] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 163.099583][ T6453]
[ 163.099861][ T6453] ERROR: (device loop0): remounting filesystem as read-only
[ 163.351939][ T4914] Bluetooth: hci0: command tx timeout
[ 163.476763][ T6455] loop0: detected capacity change from 0 to 32768
[ 163.508891][ T6455] Bad index:0 in slot in dtroot
[ 163.508891][ T6455]
[ 163.508909][ T6455] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 163.508909][ T6455]
[ 163.509091][ T6455] ERROR: (device loop0): remounting filesystem as read-only
[ 163.856397][ T6457] loop0: detected capacity change from 0 to 32768
[ 163.868909][ T6457] Bad index:0 in slot in dtroot
[ 163.868909][ T6457]
[ 163.868923][ T6457] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 163.868923][ T6457]
[ 163.869196][ T6457] ERROR: (device loop0): remounting filesystem as read-only
[ 164.201491][ T6459] loop0: detected capacity change from 0 to 32768
[ 164.219715][ T6459] Bad index:0 in slot in dtroot
[ 164.219715][ T6459]
[ 164.219731][ T6459] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 164.219731][ T6459]
[ 164.219998][ T6459] ERROR: (device loop0): remounting filesystem as read-only
[ 164.567818][ T6461] loop0: detected capacity change from 0 to 32768
[ 164.585350][ T6461] Bad index:0 in slot in dtroot
[ 164.585350][ T6461]
[ 164.585367][ T6461] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 164.585367][ T6461]
[ 164.585637][ T6461] ERROR: (device loop0): remounting filesystem as read-only
[ 164.934760][ T6463] loop0: detected capacity change from 0 to 32768
[ 164.963275][ T6463] Bad index:0 in slot in dtroot
[ 164.963275][ T6463]
[ 164.963291][ T6463] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 164.963291][ T6463]
[ 164.963488][ T6463] ERROR: (device loop0): remounting filesystem as read-only
[ 165.279700][ T6465] loop0: detected capacity change from 0 to 32768
[ 165.305991][ T6465] Bad index:0 in slot in dtroot
[ 165.305991][ T6465]
[ 165.306007][ T6465] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 165.306007][ T6465]
[ 165.306295][ T6465] ERROR: (device loop0): remounting filesystem as read-only
[ 165.636172][ T6467] loop0: detected capacity change from 0 to 32768
[ 165.644277][ T6467] Bad index:0 in slot in dtroot
[ 165.644277][ T6467]
[ 165.644293][ T6467] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 165.644293][ T6467]
[ 165.644557][ T6467] ERROR: (device loop0): remounting filesystem as read-only
[ 166.032892][ T6469] Bad index:0 in slot in dtroot
[ 166.032892][ T6469]
[ 166.032908][ T6469] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 166.032908][ T6469]
[ 166.033172][ T6469] ERROR: (device loop0): remounting filesystem as read-only
[ 166.369680][ T6471] Bad index:0 in slot in dtroot
[ 166.369680][ T6471]
[ 166.369696][ T6471] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 166.369696][ T647[ 166.369696][ T6471] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 166.369696][ T6471]
[ 166.369946][ T6471] ERROR: (device loop0): remounting filesystem as read-only
[ 166.380905][ C0] ==================================================================
[ 166.380920][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 166.380950][ C0] Read of size 4 at addr ffff88803492ee08 by task ksoftirqd/0/15
[ 166.380966][ C0]
[ 166.380991][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.381012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 166.381030][ C0] Call Trace:
[ 166.381037][ C0]
[ 166.381045][ C0] dump_stack_lvl+0xe8/0x150
[ 166.381066][ C0] print_address_description+0x55/0x1e0
[ 166.381087][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.381108][ C0] print_report+0x58/0x70
[ 166.381126][ C0] kasan_report+0x117/0x150
[ 166.381148][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.381173][ C0] lbmIODone+0x1312/0x16c0
[ 166.381196][ C0] ? blkg_put+0x22/0x240
[ 166.381213][ C0] ? blkg_put+0x22/0x240
[ 166.381230][ C0] ? blkg_put+0x18d/0x240
[ 166.381247][ C0] ? bio_endio+0x989/0x9d0
[ 166.381268][ C0] blk_update_request+0x57e/0xe60
[ 166.381294][ C0] blk_mq_end_request+0x3e/0x70
[ 166.381321][ C0] blk_done_softirq+0x10a/0x160
[ 166.381341][ C0] handle_softirqs+0x1de/0x6d0
[ 166.381365][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 166.381386][ C0] run_ksoftirqd+0x52/0x180
[ 166.381406][ C0] smpboot_thread_fn+0x541/0xa50
[ 166.381427][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 166.381451][ C0] kthread+0x388/0x470
[ 166.381473][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 166.381493][ C0] ? __pfx_kthread+0x10/0x10
[ 166.381515][ C0] ret_from_fork+0x514/0xb70
[ 166.381536][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 166.381555][ C0] ? __switch_to+0xc79/0x1410
[ 166.381581][ C0] ? __pfx_kthread+0x10/0x10
[ 166.381603][ C0] ret_from_fork_asm+0x1a/0x30
[ 166.381630][ C0]
[ 166.381637][ C0]
[ 166.381645][ C0] Allocated by task 6471:
[ 166.381654][ C0] kasan_save_track+0x3e/0x80
[ 166.381670][ C0] __kasan_kmalloc+0x93/0xb0
[ 166.381686][ C0] __kmalloc_cache_noprof+0x3a6/0x690
[ 166.381704][ C0] lmLogInit+0x3e5/0x1a00
[ 166.381723][ C0] lmLogOpen+0x4e1/0xfa0
[ 166.381741][ C0] jfs_mount_rw+0xee/0x670
[ 166.381762][ C0] jfs_fill_super+0x754/0xd80
[ 166.381775][ C0] get_tree_bdev_flags+0x431/0x4f0
[ 166.381792][ C0] vfs_get_tree+0x92/0x2a0
[ 166.381806][ C0] do_new_mount+0x341/0xd30
[ 166.381826][ C0] __se_sys_mount+0x31d/0x420
[ 166.381847][ C0] do_syscall_64+0x15f/0xf80
[ 166.381866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.381882][ C0]
[ 166.381886][ C0] Freed by task 6471:
[ 166.381894][ C0] kasan_save_track+0x3e/0x80
[ 166.381908][ C0] kasan_save_free_info+0x46/0x50
[ 166.381929][ C0] __kasan_slab_free+0x5c/0x80
[ 166.381944][ C0] kfree+0x1c5/0x6c0
[ 166.381957][ C0] lmLogShutdown+0x456/0x850
[ 166.381977][ C0] lmLogClose+0x28a/0x520
[ 166.381996][ C0] jfs_umount+0x2fb/0x3d0
[ 166.382014][ C0] jfs_fill_super+0x9c5/0xd80
[ 166.382028][ C0] get_tree_bdev_flags+0x431/0x4f0
[ 166.382046][ C0] vfs_get_tree+0x92/0x2a0
[ 166.382062][ C0] do_new_mount+0x341/0xd30
[ 166.382082][ C0] __se_sys_mount+0x31d/0x420
[ 166.382104][ C0] do_syscall_64+0x15f/0xf80
[ 166.382122][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.382138][ C0]
[ 166.382143][ C0] The buggy address belongs to the object at ffff88803492ee00
[ 166.382143][ C0] which belongs to the cache kmalloc-256 of size 256
[ 166.382160][ C0] The buggy address is located 8 bytes inside of
[ 166.382160][ C0] freed 256-byte region [ffff88803492ee00, ffff88803492ef00)
[ 166.382178][ C0]
[ 166.382183][ C0] The buggy address belongs to the physical page:
[ 166.382203][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3492e
[ 166.382221][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 166.382237][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 166.382255][ C0] page_type: f5(slab)
[ 166.382271][ C0] raw: 0080000000000040 ffff88801a010b40 dead000000000122 0000000000000000
[ 166.382286][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 166.382301][ C0] head: 0080000000000040 ffff88801a010b40 dead000000000122 0000000000000000
[ 166.382320][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 166.382336][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 166.382350][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 166.382359][ C0] page dumped because: kasan: bad access detected
[ 166.382375][ C0] page_owner tracks the page as allocated
[ 166.382381][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6471, tgid 6470 (syz.0.28), ts 166363264424, free_ts 166043503622
[ 166.382412][ C0] post_alloc_hook+0x231/0x280
[ 166.382431][ C0] get_page_from_freelist+0x27c8/0x2840
[ 166.382451][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 166.382471][ C0] allocate_slab+0x77/0x660
[ 166.382492][ C0] refill_objects+0x33c/0x3d0
[ 166.382512][ C0] __pcs_replace_empty_main+0x373/0x720
[ 166.382534][ C0] __kmalloc_cache_noprof+0x44e/0x690
[ 166.382552][ C0] lmLogInit+0x3e5/0x1a00
[ 166.382571][ C0] lmLogOpen+0x4e1/0xfa0
[ 166.382589][ C0] jfs_mount_rw+0xee/0x670
[ 166.382606][ C0] jfs_fill_super+0x754/0xd80
[ 166.382620][ C0] get_tree_bdev_flags+0x431/0x4f0
[ 166.382638][ C0] vfs_get_tree+0x92/0x2a0
[ 166.382655][ C0] do_new_mount+0x341/0xd30
[ 166.382676][ C0] __se_sys_mount+0x31d/0x420
[ 166.382698][ C0] do_syscall_64+0x15f/0xf80
[ 166.382716][ C0] page last free pid 20 tgid 20 stack trace:
[ 166.382726][ C0] __free_frozen_pages+0xfa6/0x10f0
[ 166.382744][ C0] rcu_cpu_kthread+0x99e/0x1470
[ 166.382765][ C0] smpboot_thread_fn+0x541/0xa50
[ 166.382783][ C0] kthread+0x388/0x470
[ 166.382803][ C0] ret_from_fork+0x514/0xb70
[ 166.382819][ C0] ret_from_fork_asm+0x1a/0x30
[ 166.382838][ C0]
[ 166.382842][ C0] Memory state around the buggy address:
[ 166.382852][ C0] ffff88803492ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.382863][ C0] ffff88803492ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.382875][ C0] >ffff88803492ee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 166.382884][ C0] ^
[ 166.382893][ C0] ffff88803492ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 166.382905][ C0] ffff88803492ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.382913][ C0] ==================================================================
[ 166.386817][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 166.386837][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.386860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 166.386871][ C0] Call Trace:
[ 166.386878][ C0]
[ 166.386885][ C0] vpanic+0x56c/0xa60
[ 166.386912][ C0] ? __pfx_vpanic+0x10/0x10
[ 166.386934][ C0] ? __pfx___schedule+0x10/0x10
[ 166.386956][ C0] panic+0xc5/0xd0
[ 166.386975][ C0] ? __pfx_panic+0x10/0x10
[ 166.386995][ C0] ? preempt_schedule_thunk+0x16/0x30
[ 166.387024][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.387048][ C0] check_panic_on_warn+0x89/0xb0
[ 166.387072][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.387093][ C0] end_report+0x73/0x170
[ 166.387113][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.387134][ C0] kasan_report+0x128/0x150
[ 166.387155][ C0] ? lbmIODone+0x1312/0x16c0
[ 166.387180][ C0] lbmIODone+0x1312/0x16c0
[ 166.387202][ C0] ? blkg_put+0x22/0x240
[ 166.387219][ C0] ? blkg_put+0x22/0x240
[ 166.387236][ C0] ? blkg_put+0x18d/0x240
[ 166.387254][ C0] ? bio_endio+0x989/0x9d0
[ 166.387275][ C0] blk_update_request+0x57e/0xe60
[ 166.387301][ C0] blk_mq_end_request+0x3e/0x70
[ 166.387327][ C0] blk_done_softirq+0x10a/0x160
[ 166.387347][ C0] handle_softirqs+0x1de/0x6d0
[ 166.387368][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 166.387398][ C0] run_ksoftirqd+0x52/0x180
[ 166.387423][ C0] smpboot_thread_fn+0x541/0xa50
[ 166.387442][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 166.387463][ C0] kthread+0x388/0x470
[ 166.387484][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 166.387507][ C0] ? __pfx_kthread+0x10/0x10
[ 166.387527][ C0] ret_from_fork+0x514/0xb70
[ 166.387560][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 166.387577][ C0] ? __switch_to+0xc79/0x1410
[ 166.387600][ C0] ? __pfx_kthread+0x10/0x10
[ 166.387621][ C0] ret_from_fork_asm+0x1a/0x30
[ 166.387652][ C0]
[ 166.388039][ C0] Kernel Offset: disabled