Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts.
2026/04/17 19:40:19 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 132.157042][ T6280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 132.740446][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.740531][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[ 136.037208][ T6300] chnl_net:caif_netlink_parms(): no params data found
[ 136.363060][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.363231][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.363388][ T6300] bridge_slave_0: entered allmulticast mode
[ 136.365632][ T6300] bridge_slave_0: entered promiscuous mode
[ 136.368170][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.368293][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.368396][ T6300] bridge_slave_1: entered allmulticast mode
[ 136.369750][ T6300] bridge_slave_1: entered promiscuous mode
[ 136.633682][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 136.636246][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 136.883438][ T6300] team0: Port device team_slave_0 added
[ 136.886296][ T6300] team0: Port device team_slave_1 added
[ 137.163658][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 137.163674][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.163696][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 137.165318][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 137.165331][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.165344][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 137.366545][ T6300] hsr_slave_0: entered promiscuous mode
[ 137.367239][ T6300] hsr_slave_1: entered promiscuous mode
[ 139.084551][ T6300] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 139.116524][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 139.117331][ T6300] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 139.164569][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 139.165356][ T6300] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 139.210304][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 139.219694][ T6300] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 139.245205][ T6300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 139.400618][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0
[ 139.428975][ T6300] 8021q: adding VLAN 0 to HW filter on device team0
[ 139.442174][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.442354][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 139.468590][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.468783][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 139.795411][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 139.859596][ T6300] veth0_vlan: entered promiscuous mode
[ 139.879438][ T6300] veth1_vlan: entered promiscuous mode
[ 139.945252][ T6300] veth0_macvtap: entered promiscuous mode
[ 139.950628][ T6300] veth1_macvtap: entered promiscuous mode
[ 139.993986][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 140.007642][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 140.024898][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.029093][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.030252][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.030440][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 140.860168][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 141.194214][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 141.503283][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 142.271347][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 143.431560][ T45] bridge_slave_1: left allmulticast mode
[ 143.431585][ T45] bridge_slave_1: left promiscuous mode
[ 143.431782][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.502163][ T45] bridge_slave_0: left allmulticast mode
[ 143.502182][ T45] bridge_slave_0: left promiscuous mode
[ 143.502329][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.091736][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 144.173392][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 144.193428][ T45] bond0 (unregistering): Released all slaves
[ 144.551286][ T45] hsr_slave_0: left promiscuous mode
[ 144.591259][ T45] hsr_slave_1: left promiscuous mode
[ 144.592263][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 144.592295][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 144.652195][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 144.652220][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 144.752631][ T45] veth1_macvtap: left promiscuous mode
[ 144.758392][ T45] veth0_macvtap: left promiscuous mode
[ 144.759263][ T45] veth1_vlan: left promiscuous mode
[ 144.759436][ T45] veth0_vlan: left promiscuous mode
[ 145.562295][ T45] team0 (unregistering): Port device team_slave_1 removed
[ 145.601740][ T45] team0 (unregistering): Port device team_slave_0 removed
[ 145.960990][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.961022][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.052697][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 146.052719][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.640741][ T5475] 8021q: adding VLAN 0 to HW filter on device eth1
[ 147.869333][ T5475] 8021q: adding VLAN 0 to HW filter on device eth2
[ 148.425154][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 148.453982][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 148.455135][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 148.456337][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 148.457303][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 148.776488][ T5475] 8021q: adding VLAN 0 to HW filter on device eth3
[ 149.303462][ T5475] 8021q: adding VLAN 0 to HW filter on device eth4
2026/04/17 19:40:41 executed programs: 0
[ 150.372412][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 150.404421][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 150.405662][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 150.406643][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 150.407451][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 150.622188][ T6607] chnl_net:caif_netlink_parms(): no params data found
[ 150.892563][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.892653][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 150.892848][ T6607] bridge_slave_0: entered allmulticast mode
[ 150.894221][ T6607] bridge_slave_0: entered promiscuous mode
[ 150.896273][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.896437][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.896534][ T6607] bridge_slave_1: entered allmulticast mode
[ 150.897888][ T6607] bridge_slave_1: entered promiscuous mode
[ 151.047928][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 151.052715][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 151.423200][ T6607] team0: Port device team_slave_0 added
[ 151.544156][ T6607] team0: Port device team_slave_1 added
[ 151.703075][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 151.703091][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.703107][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 151.704316][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 151.704327][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 151.704349][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 151.909121][ T6607] hsr_slave_0: entered promiscuous mode
[ 151.909820][ T6607] hsr_slave_1: entered promiscuous mode
[ 152.492738][ T5862] Bluetooth: hci0: command tx timeout
[ 153.835015][ T6607] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 153.865242][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 153.878316][ T6607] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 153.906971][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 153.908115][ T6607] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.973098][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 153.974715][ T6607] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 154.028781][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 154.202474][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0
[ 154.230230][ T6607] 8021q: adding VLAN 0 to HW filter on device team0
[ 154.240070][ T104] bridge0: port 1(bridge_slave_0) entered blocking state
[ 154.240282][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 154.250240][ T104] bridge0: port 2(bridge_slave_1) entered blocking state
[ 154.250435][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 154.571320][ T5862] Bluetooth: hci0: command tx timeout
[ 154.589671][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 154.671000][ T6607] veth0_vlan: entered promiscuous mode
[ 154.679631][ T6607] veth1_vlan: entered promiscuous mode
[ 154.733962][ T6607] veth0_macvtap: entered promiscuous mode
[ 154.742998][ T6607] veth1_macvtap: entered promiscuous mode
[ 154.775395][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 154.787643][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 154.797394][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.797615][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.797649][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.797680][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 155.128483][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.128503][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 155.206079][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 155.206099][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/17 19:40:46 executed programs: 2
[ 155.817363][ T6710] loop0: detected capacity change from 0 to 32768
[ 156.255728][ T127] ERROR: (device loop0): dbFree: error in block map
[ 156.255728][ T127]
[ 156.297083][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 156.651520][ T5862] Bluetooth: hci0: command tx timeout
[ 156.868461][ T6737] loop0: detected capacity change from 0 to 32768
[ 157.057381][ T128] ERROR: (device loop0): dbFree: error in block map
[ 157.057381][ T128]
[ 157.060263][ T128] ERROR: (device loop0): remounting filesystem as read-only
[ 157.415452][ T6752] loop0: detected capacity change from 0 to 32768
[ 157.467955][ T127] ERROR: (device loop0): dbFree: error in block map
[ 157.467955][ T127]
[ 157.494005][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 158.288674][ T6754] loop0: detected capacity change from 0 to 32768
[ 158.375715][ T127] ERROR: (device loop0): dbFree: error in block map
[ 158.375715][ T127]
[ 158.375967][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 158.731241][ T5862] Bluetooth: hci0: command tx timeout
[ 158.923831][ T6756] loop0: detected capacity change from 0 to 32768
[ 159.007170][ T128] ERROR: (device loop0): dbFree: error in block map
[ 159.007170][ T128]
[ 159.007356][ T128] ERROR: (device loop0): remounting filesystem as read-only
[ 159.788628][ T6758] loop0: detected capacity change from 0 to 32768
[ 159.890640][ T127] ERROR: (device loop0): dbFree: error in block map
[ 159.890640][ T127]
[ 159.901589][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 160.686327][ T6760] loop0: detected capacity change from 0 to 32768
2026/04/17 19:40:51 executed programs: 9
[ 160.766977][ T128] ERROR: (device loop0): dbFree: error in block map
[ 160.766977][ T128]
[ 160.781836][ T128] ERROR: (device loop0): remounting filesystem as read-only
[ 161.574918][ T6762] loop0: detected capacity change from 0 to 32768
[ 161.633899][ T127] ERROR: (device loop0): dbFree: error in block map
[ 161.633899][ T127]
[ 161.634123][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 162.435380][ T6764] loop0: detected capacity change from 0 to 32768
[ 162.494212][ T127] ERROR: (device loop0): dbFree: error in block map
[ 162.494212][ T127]
[ 162.494509][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 163.285346][ T6766] loop0: detected capacity change from 0 to 32768
[ 163.365561][ T127] ERROR: (device loop0): dbFree: error in block map
[ 163.365561][ T127]
[ 163.365830][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 164.164847][ T6768] loop0: detected capacity change from 0 to 32768
[ 164.226998][ T127] ERROR: (device loop0): dbFree: error in block map
[ 164.226998][ T127]
[ 164.227194][ T127] ERROR: (device loop0): remounting filesystem as read-only
[ 165.013855][ T6770] loop0: detected capacity change from 0 to 32768
[ 165.073443][ T128] ERROR: (device loop0): dbFree: error in block map
[ 165.073443][ T128]
[ 165.073630][ T128] ERROR: (device loop0): remounting filesystem as read-only
[ 165.376494][ T6772] loop0: detected capacity change from 0 to 32768
[ 165.444223][ T128] ERROR: (device loop0): dbFree: error in block map
[ 165.444223][ T128]
[ 165.444414][ T128] ERROR: (device loop0): remounting filesystem as read-only
[ 165.715414][ C0] ==================================================================
[ 165.715432][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 165.715464][ C0] Read of size 4 at addr ffff88801b6c1808 by task ksoftirqd/0/15
[ 165.715481][ C0]
[ 165.715503][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 165.715525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 165.715545][ C0] Call Trace:
[ 165.715553][ C0]
[ 165.715562][ C0] dump_stack_lvl+0xe8/0x150
[ 165.715593][ C0] print_address_description+0x55/0x1e0
[ 165.715622][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.715645][ C0] print_report+0x58/0x70
[ 165.715670][ C0] kasan_report+0x117/0x150
[ 165.715699][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.715725][ C0] lbmIODone+0x1312/0x16c0
[ 165.715749][ C0] ? blkg_put+0x22/0x240
[ 165.715775][ C0] ? blkg_put+0x22/0x240
[ 165.715801][ C0] ? blkg_put+0x18d/0x240
[ 165.715827][ C0] ? bio_endio+0x989/0x9d0
[ 165.715848][ C0] blk_update_request+0x57e/0xe60
[ 165.715874][ C0] blk_mq_end_request+0x3e/0x70
[ 165.715894][ C0] blk_done_softirq+0x10a/0x160
[ 165.715913][ C0] handle_softirqs+0x1de/0x6d0
[ 165.715948][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 165.715969][ C0] run_ksoftirqd+0x52/0x180
[ 165.715990][ C0] smpboot_thread_fn+0x541/0xa50
[ 165.716011][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 165.716035][ C0] kthread+0x388/0x470
[ 165.716059][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 165.716079][ C0] ? __pfx_kthread+0x10/0x10
[ 165.716102][ C0] ret_from_fork+0x514/0xb70
[ 165.716122][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 165.716140][ C0] ? __switch_to+0xc79/0x1410
[ 165.716166][ C0] ? __pfx_kthread+0x10/0x10
[ 165.716189][ C0] ret_from_fork_asm+0x1a/0x30
[ 165.716221][ C0]
[ 165.716228][ C0]
[ 165.716233][ C0] Allocated by task 6772:
[ 165.716242][ C0] kasan_save_track+0x3e/0x80
[ 165.716264][ C0] __kasan_kmalloc+0x93/0xb0
[ 165.716286][ C0] __kmalloc_cache_noprof+0x3a6/0x690
[ 165.716310][ C0] lmLogInit+0x3e5/0x1a00
[ 165.716330][ C0] lmLogOpen+0x4e1/0xfa0
[ 165.716350][ C0] jfs_mount_rw+0xee/0x670
[ 165.716369][ C0] jfs_fill_super+0x754/0xd80
[ 165.716384][ C0] get_tree_bdev_flags+0x431/0x4f0
[ 165.716409][ C0] vfs_get_tree+0x92/0x2a0
[ 165.716432][ C0] do_new_mount+0x341/0xd30
[ 165.716452][ C0] __se_sys_mount+0x31d/0x420
[ 165.716473][ C0] do_syscall_64+0x15f/0xf80
[ 165.716491][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 165.716509][ C0]
[ 165.716513][ C0] Freed by task 6607:
[ 165.716522][ C0] kasan_save_track+0x3e/0x80
[ 165.716544][ C0] kasan_save_free_info+0x46/0x50
[ 165.716562][ C0] __kasan_slab_free+0x5c/0x80
[ 165.716585][ C0] kfree+0x1c5/0x6c0
[ 165.716605][ C0] lmLogShutdown+0x456/0x850
[ 165.716626][ C0] lmLogClose+0x28a/0x520
[ 165.716647][ C0] jfs_umount+0x2fb/0x3d0
[ 165.716667][ C0] jfs_put_super+0x8c/0x190
[ 165.716685][ C0] generic_shutdown_super+0x13d/0x2d0
[ 165.716707][ C0] kill_block_super+0x44/0x90
[ 165.716732][ C0] deactivate_locked_super+0xbc/0x130
[ 165.716753][ C0] cleanup_mnt+0x437/0x4d0
[ 165.716776][ C0] task_work_run+0x1d9/0x270
[ 165.716798][ C0] exit_to_user_mode_loop+0xed/0x480
[ 165.716820][ C0] do_syscall_64+0x33e/0xf80
[ 165.716837][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 165.716855][ C0]
[ 165.716859][ C0] The buggy address belongs to the object at ffff88801b6c1800
[ 165.716859][ C0] which belongs to the cache kmalloc-256 of size 256
[ 165.716876][ C0] The buggy address is located 8 bytes inside of
[ 165.716876][ C0] freed 256-byte region [ffff88801b6c1800, ffff88801b6c1900)
[ 165.716897][ C0]
[ 165.716902][ C0] The buggy address belongs to the physical page:
[ 165.716920][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b6c0
[ 165.716939][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 165.716956][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 165.716976][ C0] page_type: f5(slab)
[ 165.716994][ C0] raw: 0080000000000040 ffff88813fe00b40 dead000000000100 dead000000000122
[ 165.717010][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 165.717026][ C0] head: 0080000000000040 ffff88813fe00b40 dead000000000100 dead000000000122
[ 165.717042][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 165.717058][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 165.717073][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 165.717082][ C0] page dumped because: kasan: bad access detected
[ 165.717095][ C0] page_owner tracks the page as allocated
[ 165.717102][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3467088608, free_ts 0
[ 165.717138][ C0] post_alloc_hook+0x231/0x280
[ 165.717162][ C0] get_page_from_freelist+0x27c8/0x2840
[ 165.717179][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 165.717205][ C0] allocate_slab+0x77/0x660
[ 165.717228][ C0] refill_objects+0x33c/0x3d0
[ 165.717244][ C0] __pcs_replace_empty_main+0x373/0x720
[ 165.717264][ C0] __kmalloc_cache_noprof+0x44e/0x690
[ 165.717287][ C0] kset_create_and_add+0x5a/0x180
[ 165.717308][ C0] bus_register+0x234/0x490
[ 165.717323][ C0] tee_init+0x42/0xc0
[ 165.717344][ C0] do_one_initcall+0x250/0x870
[ 165.717360][ C0] do_initcall_level+0x104/0x190
[ 165.717384][ C0] do_initcalls+0x59/0xa0
[ 165.717406][ C0] kernel_init_freeable+0x2a6/0x3e0
[ 165.717429][ C0] kernel_init+0x1d/0x1d0
[ 165.717450][ C0] ret_from_fork+0x514/0xb70
[ 165.717466][ C0] page_owner free stack trace missing
[ 165.717473][ C0]
[ 165.717477][ C0] Memory state around the buggy address:
[ 165.717488][ C0] ffff88801b6c1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 165.717500][ C0] ffff88801b6c1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 165.717512][ C0] >ffff88801b6c1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 165.717521][ C0] ^
[ 165.717531][ C0] ffff88801b6c1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 165.717543][ C0] ffff88801b6c1900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 165.717552][ C0] ==================================================================
[ 165.719041][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 165.719058][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 165.719080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 165.719091][ C0] Call Trace:
[ 165.719098][ C0]
[ 165.719106][ C0] vpanic+0x56c/0xa60
[ 165.719129][ C0] ? __pfx_vpanic+0x10/0x10
[ 165.719147][ C0] ? __pfx___schedule+0x10/0x10
[ 165.719167][ C0] panic+0xc5/0xd0
[ 165.719185][ C0] ? __pfx_panic+0x10/0x10
[ 165.719203][ C0] ? preempt_schedule_thunk+0x16/0x30
[ 165.719236][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.719259][ C0] check_panic_on_warn+0x89/0xb0
[ 165.719283][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.719311][ C0] end_report+0x73/0x170
[ 165.719338][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.719360][ C0] kasan_report+0x128/0x150
[ 165.719387][ C0] ? lbmIODone+0x1312/0x16c0
[ 165.719414][ C0] lbmIODone+0x1312/0x16c0
[ 165.719438][ C0] ? blkg_put+0x22/0x240
[ 165.719463][ C0] ? blkg_put+0x22/0x240
[ 165.719488][ C0] ? blkg_put+0x18d/0x240
[ 165.719514][ C0] ? bio_endio+0x989/0x9d0
[ 165.719533][ C0] blk_update_request+0x57e/0xe60
[ 165.719554][ C0] blk_mq_end_request+0x3e/0x70
[ 165.719572][ C0] blk_done_softirq+0x10a/0x160
[ 165.719589][ C0] handle_softirqs+0x1de/0x6d0
[ 165.719611][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 165.719631][ C0] run_ksoftirqd+0x52/0x180
[ 165.719652][ C0] smpboot_thread_fn+0x541/0xa50
[ 165.719673][ C0] ? smpboot_thread_fn+0x4d/0xa50
[ 165.719697][ C0] kthread+0x388/0x470
[ 165.719720][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 165.719740][ C0] ? __pfx_kthread+0x10/0x10
[ 165.719763][ C0] ret_from_fork+0x514/0xb70
[ 165.719783][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 165.719800][ C0] ? __switch_to+0xc79/0x1410
[ 165.719826][ C0] ? __pfx_kthread+0x10/0x10
[ 165.719849][ C0] ret_from_fork_asm+0x1a/0x30
[ 165.719875][ C0]
[ 165.720518][ C0] Kernel Offset: disabled