Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. 2026/10/10 18:35:30 parsed 1 programs [ 132.987545][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987638][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 135.570243][ T6041] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 139.858944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.858966][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.914156][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.914177][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.666296][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.691138][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.692011][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.693848][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.694527][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.928931][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.929692][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.929821][ T6166] bridge_slave_0: entered allmulticast mode [ 144.931253][ T6166] bridge_slave_0: entered promiscuous mode [ 144.933653][ T6166] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.933771][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.933864][ T6166] bridge_slave_1: entered allmulticast mode [ 144.935291][ T6166] bridge_slave_1: entered promiscuous mode [ 145.112690][ T6166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.115192][ T6166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.292713][ T6166] team0: Port device team_slave_0 added [ 145.294817][ T6166] team0: Port device team_slave_1 added [ 145.470581][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.470600][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.470613][ T6166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.471957][ T6166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.471970][ T6166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.471986][ T6166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.935377][ T6166] hsr_slave_0: entered promiscuous mode [ 145.936144][ T6166] hsr_slave_1: entered promiscuous mode [ 148.420382][ T6166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.455059][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.456307][ T6166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.505990][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.507364][ T6166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.537883][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.546335][ T6166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.572660][ T6166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.701192][ T6166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.740138][ T6166] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.775483][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.775617][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.820545][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.820690][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.511226][ T6166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.615102][ T6166] veth0_vlan: entered promiscuous mode [ 149.644859][ T6166] veth1_vlan: entered promiscuous mode [ 149.708218][ T6166] veth0_macvtap: entered promiscuous mode [ 149.735596][ T6166] veth1_macvtap: entered promiscuous mode [ 149.764366][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.782595][ T6166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.944639][ T157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.944996][ T157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.073110][ T157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.074010][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.606755][ T1895] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.406684][ T1895] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/10 18:35:51 executed programs: 0 [ 151.631108][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.669781][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.670845][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.672567][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.674092][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.061842][ T1895] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.666868][ T1895] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.279302][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.279481][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.279666][ T6328] bridge_slave_0: entered allmulticast mode [ 153.287636][ T6328] bridge_slave_0: entered promiscuous mode [ 153.400812][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.400943][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.401108][ T6328] bridge_slave_1: entered allmulticast mode [ 153.404062][ T6328] bridge_slave_1: entered promiscuous mode [ 153.614116][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.631728][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.698653][ T60] Bluetooth: hci0: command tx timeout [ 153.819013][ T1895] bridge_slave_1: left allmulticast mode [ 153.819038][ T1895] bridge_slave_1: left promiscuous mode [ 153.819249][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.919534][ T1895] bridge_slave_0: left allmulticast mode [ 153.919561][ T1895] bridge_slave_0: left promiscuous mode [ 153.919745][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.489361][ T1895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.569186][ T1895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.590531][ T1895] bond0 (unregistering): Released all slaves [ 154.774088][ T6328] team0: Port device team_slave_0 added [ 154.776694][ T6328] team0: Port device team_slave_1 added [ 155.008606][ T1895] hsr_slave_0: left promiscuous mode [ 155.028628][ T1895] hsr_slave_1: left promiscuous mode [ 155.029424][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.029441][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.069318][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.069340][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.129556][ T1895] veth1_macvtap: left promiscuous mode [ 155.129621][ T1895] veth0_macvtap: left promiscuous mode [ 155.129764][ T1895] veth1_vlan: left promiscuous mode [ 155.129882][ T1895] veth0_vlan: left promiscuous mode [ 155.709267][ T1895] team0 (unregistering): Port device team_slave_1 removed [ 155.749141][ T1895] team0 (unregistering): Port device team_slave_0 removed [ 155.778466][ T60] Bluetooth: hci0: command tx timeout [ 155.972592][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.972610][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.972634][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.974815][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.974829][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.974852][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.259852][ T6328] hsr_slave_0: entered promiscuous mode [ 156.261177][ T6328] hsr_slave_1: entered promiscuous mode [ 156.480510][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 157.062826][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.858499][ T60] Bluetooth: hci0: command tx timeout [ 158.429015][ T6328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 158.470102][ T6328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.474796][ T6328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 158.512668][ T6328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.514107][ T6328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 158.570451][ T6328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.572047][ T6328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.627285][ T6328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.814269][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.843978][ T6328] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.854261][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.854478][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.869635][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.869809][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.290688][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.351019][ T6328] veth0_vlan: entered promiscuous mode [ 159.358239][ T6328] veth1_vlan: entered promiscuous mode [ 159.395812][ T6328] veth0_macvtap: entered promiscuous mode [ 159.407629][ T6328] veth1_macvtap: entered promiscuous mode [ 159.440856][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.457059][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.680664][ T4012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.680709][ T4012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.680741][ T4012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.680772][ T4012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.819100][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.819121][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.887955][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.887977][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/10 18:36:00 executed programs: 2 [ 159.938543][ T60] Bluetooth: hci0: command tx timeout [ 160.207795][ T6491] loop0: detected capacity change from 0 to 32768 [ 160.489818][ T6491] UFO tlock:0xffffc90003c5a1f8 [ 160.900416][ T6493] loop0: detected capacity change from 0 to 32768 [ 161.001184][ T6493] UFO tlock:0xffffc90003c5a090 [ 161.401488][ T6495] loop0: detected capacity change from 0 to 32768 [ 161.479907][ T6495] UFO tlock:0xffffc90003c5a1f8 [ 161.917698][ T6497] loop0: detected capacity change from 0 to 32768 [ 161.977521][ T6497] UFO tlock:0xffffc90003c5a090 [ 162.333947][ T6499] loop0: detected capacity change from 0 to 32768 [ 162.413412][ T6499] UFO tlock:0xffffc90003c5a1f8 [ 162.753357][ T6501] loop0: detected capacity change from 0 to 32768 [ 162.817900][ T6501] UFO tlock:0xffffc90003c5a090 [ 163.205597][ T6503] loop0: detected capacity change from 0 to 32768 [ 163.241404][ T6503] UFO tlock:0xffffc90003c5a1f8 [ 163.577426][ T6505] loop0: detected capacity change from 0 to 32768 [ 163.633778][ T6505] UFO tlock:0xffffc90003c5a090 [ 164.002403][ T6507] loop0: detected capacity change from 0 to 32768 [ 164.035929][ T6507] UFO tlock:0xffffc90003c5a1f8 [ 164.617133][ T6509] loop0: detected capacity change from 0 to 32768 [ 164.662140][ T6509] UFO tlock:0xffffc90003c5a090 [ 165.106555][ T6511] UFO tlock:0xffffc90003c5a1f8 2026/10/10 18:36:05 executed programs: 13 [ 165.417199][ T6513] set_capacity_and_notify: 1 callbacks suppressed [ 165.417212][ T6513] loop0: detected capacity change from 0 to 32768 [ 165.475370][ T6513] UFO tlock:0xffffc90003c5a090 [ 165.815597][ T6515] loop0: detected capacity change from 0 to 32768 [ 165.853980][ T6515] UFO tlock:0xffffc90003c5a1f8 [ 166.467987][ T6517] loop0: detected capacity change from 0 to 32768 [ 166.520473][ T6517] UFO tlock:0xffffc90003c5a090 [ 167.105184][ T6519] loop0: detected capacity change from 0 to 32768 [ 167.142830][ T6519] UFO tlock:0xffffc90003c5a1f8 [ 167.501049][ T6521] loop0: detected capacity change from 0 to 32768 [ 167.542663][ T6521] UFO tlock:0xffffc90003c5a090 [ 167.866313][ T6523] loop0: detected capacity change from 0 to 32768 [ 167.881333][ T6523] UFO tlock:0xffffc90003c5a1f8 [ 168.251578][ T6525] loop0: detected capacity change from 0 to 32768 [ 168.292487][ T6525] UFO tlock:0xffffc90003c5a090 [ 168.879495][ T6527] loop0: detected capacity change from 0 to 32768 [ 168.917314][ T6527] UFO tlock:0xffffc90003c5a1f8 [ 169.249559][ T6529] loop0: detected capacity change from 0 to 32768 [ 169.275820][ T6529] UFO tlock:0xffffc90003c5a090 [ 169.609978][ T6531] loop0: detected capacity change from 0 to 32768 [ 169.655225][ T6531] UFO tlock:0xffffc90003c5a1f8 [ 170.026586][ T6533] UFO tlock:0xffffc90003c5a090 2026/10/10 18:36:10 executed programs: 25 [ 170.418281][ T6535] UFO tlock:0xffffc90003c5a1f8 [ 170.766953][ T6537] set_capacity_and_notify: 2 callbacks suppressed [ 170.766965][ T6537] loop0: detected capacity change from 0 to 32768 [ 170.815545][ T6537] UFO tlock:0xffffc90003c5a090 [ 171.157770][ T6539] loop0: detected capacity change from 0 to 32768 [ 171.182616][ T6539] UFO tlock:0xffffc90003c5a1f8 [ 171.536733][ T6541] loop0: detected capacity change from 0 to 32768 [ 171.574831][ T6541] UFO tlock:0xffffc90003c5a090 [ 171.900357][ T6543] loop0: detected capacity change from 0 to 32768 [ 171.925172][ T6543] UFO tlock:0xffffc90003c5a1f8 [ 172.256474][ T6545] loop0: detected capacity change from 0 to 32768 [ 172.280698][ T6545] UFO tlock:0xffffc90003c5a090 [ 172.636830][ T6547] loop0: detected capacity change from 0 to 32768 [ 172.661135][ T6547] UFO tlock:0xffffc90003c5a1f8 [ 173.282529][ T6549] loop0: detected capacity change from 0 to 32768 [ 173.335084][ T6549] UFO tlock:0xffffc90003c5a090 [ 173.686977][ T6551] loop0: detected capacity change from 0 to 32768 [ 173.721681][ T6551] UFO tlock:0xffffc90003c5a1f8 [ 174.082191][ T6553] loop0: detected capacity change from 0 to 32768 [ 174.114815][ T6553] UFO tlock:0xffffc90003c5a090 [ 174.462865][ T6555] loop0: detected capacity change from 0 to 32768 [ 174.513101][ T6555] UFO tlock:0xffffc90003c5a1f8 [ 175.130881][ T6557] UFO tlock:0xffffc90003c5a090 [ 175.510726][ T6559] UFO tlock:0xffffc90003c5a1f8 2026/10/10 18:36:15 executed programs: 37 [ 176.088229][ T6561] set_capacity_and_notify: 2 callbacks suppressed [ 176.088243][ T6561] loop0: detected capacity change from 0 to 32768 [ 176.135321][ T6561] UFO tlock:0xffffc90003c5a090 [ 176.471801][ T6563] loop0: detected capacity change from 0 to 32768 [ 176.508216][ T6563] UFO tlock:0xffffc90003c5a1f8 [ 176.865519][ T6565] loop0: detected capacity change from 0 to 32768 [ 176.906791][ T6565] UFO tlock:0xffffc90003c5a090 [ 177.247246][ T6567] loop0: detected capacity change from 0 to 32768 [ 177.295063][ T6567] UFO tlock:0xffffc90003c5a1f8 [ 177.345635][ C1] ================================================================== [ 177.345655][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 177.345696][ C1] Read of size 4 at addr ffff888037790e08 by task rcuc/1/28 [ 177.345717][ C1] [ 177.345744][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.345774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.345795][ C1] Call Trace: [ 177.345803][ C1] [ 177.345813][ C1] dump_stack_lvl+0xe8/0x150 [ 177.345848][ C1] print_address_description+0x55/0x1e0 [ 177.345883][ C1] ? lbmIODone+0x130e/0x16b0 [ 177.345907][ C1] print_report+0x58/0x70 [ 177.345936][ C1] kasan_report+0x117/0x150 [ 177.345962][ C1] ? lbmIODone+0x130e/0x16b0 [ 177.345991][ C1] lbmIODone+0x130e/0x16b0 [ 177.346016][ C1] ? blkg_put+0x22/0x240 [ 177.346045][ C1] ? blkg_put+0x22/0x240 [ 177.346074][ C1] ? blkg_put+0x18d/0x240 [ 177.346103][ C1] ? bio_endio+0x984/0xac0 [ 177.346126][ C1] blk_update_request+0x57b/0xe50 [ 177.346154][ C1] blk_mq_end_request+0x3e/0x70 [ 177.346176][ C1] blk_done_softirq+0x10a/0x160 [ 177.346211][ C1] handle_softirqs+0x1da/0x6d0 [ 177.346248][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 177.346277][ C1] ? __pfx_sched_cache_group_free_rcu+0x10/0x10 [ 177.346303][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 177.346336][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 177.346366][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 177.346402][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 177.346448][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 177.346478][ C1] smpboot_thread_fn+0x565/0xa70 [ 177.346513][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 177.346549][ C1] kthread+0x38b/0x470 [ 177.346573][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 177.346607][ C1] ? __pfx_kthread+0x10/0x10 [ 177.346631][ C1] ret_from_fork+0x514/0xb70 [ 177.346654][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 177.346675][ C1] ? __switch_to+0xc89/0x1420 [ 177.346710][ C1] ? __pfx_kthread+0x10/0x10 [ 177.346734][ C1] ret_from_fork_asm+0x1a/0x30 [ 177.346764][ C1] [ 177.346773][ C1] [ 177.346779][ C1] Allocated by task 6567: [ 177.346790][ C1] kasan_save_track+0x3e/0x80 [ 177.346822][ C1] __kasan_kmalloc+0x93/0xb0 [ 177.346840][ C1] __kmalloc_cache_noprof+0x3d5/0x680 [ 177.346871][ C1] lmLogInit+0x3e5/0x1a20 [ 177.346891][ C1] lmLogOpen+0x4e3/0xf90 [ 177.346910][ C1] jfs_mount_rw+0xf3/0x670 [ 177.346928][ C1] jfs_fill_super+0x769/0xda0 [ 177.346952][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 177.346980][ C1] vfs_get_tree+0x92/0x2a0 [ 177.347005][ C1] do_new_mount+0x325/0xb00 [ 177.347026][ C1] __se_sys_mount+0x31d/0x420 [ 177.347053][ C1] do_syscall_64+0x166/0x520 [ 177.347082][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.347103][ C1] [ 177.347107][ C1] Freed by task 6328: [ 177.347117][ C1] kasan_save_track+0x3e/0x80 [ 177.347144][ C1] kasan_save_free_info+0x40/0x50 [ 177.347165][ C1] __kasan_slab_free+0x5c/0x80 [ 177.347179][ C1] kfree+0x1c5/0x6d0 [ 177.347199][ C1] lmLogShutdown+0x456/0x850 [ 177.347215][ C1] lmLogClose+0x28c/0x530 [ 177.347231][ C1] jfs_umount+0x2da/0x3b0 [ 177.347244][ C1] jfs_put_super+0x8c/0x190 [ 177.347264][ C1] generic_shutdown_super+0x13d/0x2d0 [ 177.347282][ C1] kill_block_super+0x44/0xa0 [ 177.347302][ C1] deactivate_locked_super+0xbe/0x110 [ 177.347320][ C1] cleanup_mnt+0x204/0x2a0 [ 177.347340][ C1] task_work_run+0x1d9/0x270 [ 177.347357][ C1] exit_to_user_mode_loop+0x204/0x770 [ 177.347378][ C1] do_syscall_64+0x328/0x520 [ 177.347399][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.347414][ C1] [ 177.347418][ C1] The buggy address belongs to the object at ffff888037790e00 [ 177.347418][ C1] which belongs to the cache kmalloc-256 of size 256 [ 177.347503][ C1] The buggy address is located 8 bytes inside of [ 177.347503][ C1] freed 256-byte region [ffff888037790e00, ffff888037790f00) [ 177.347522][ C1] [ 177.347526][ C1] The buggy address belongs to the physical page: [ 177.347545][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37790 [ 177.347565][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 177.347580][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 177.347598][ C1] page_type: f5(slab) [ 177.347614][ C1] raw: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 177.347628][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 177.347644][ C1] head: 0080000000000040 ffff88813ffbeb40 dead000000000100 dead000000000122 [ 177.347657][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 177.347672][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 177.347686][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 177.347694][ C1] page dumped because: kasan: bad access detected [ 177.347705][ C1] page_owner tracks the page as allocated [ 177.347712][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 25340997905 [ 177.347739][ C1] post_alloc_hook+0x1f9/0x250 [ 177.347760][ C1] get_page_from_freelist+0x2591/0x2600 [ 177.347776][ C1] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 177.347791][ C1] allocate_slab+0x7d/0x620 [ 177.347809][ C1] refill_objects+0x2d8/0x350 [ 177.347827][ C1] __pcs_replace_empty_main+0x339/0x690 [ 177.347845][ C1] __kmalloc_noprof+0x54b/0x790 [ 177.347867][ C1] security_inode_init_security+0x102/0x3e0 [ 177.347888][ C1] shmem_mknod+0x1ea/0x340 [ 177.347904][ C1] lookup_open+0xc17/0x1a60 [ 177.347924][ C1] path_openat+0x67c/0x1d60 [ 177.347945][ C1] do_file_open+0x23e/0x4a0 [ 177.347966][ C1] do_sys_openat2+0x115/0x200 [ 177.347983][ C1] __x64_sys_openat+0x138/0x170 [ 177.347999][ C1] do_syscall_64+0x166/0x520 [ 177.348019][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.348035][ C1] page last free pid 28 tgid 28 ts 25289233051 stack trace: [ 177.348046][ C1] __free_frozen_pages+0xf8e/0x1070 [ 177.348073][ C1] __mmdrop+0xbc/0x450 [ 177.348091][ C1] rcu_cpu_kthread+0xb2c/0x1740 [ 177.348114][ C1] smpboot_thread_fn+0x565/0xa70 [ 177.348136][ C1] kthread+0x38b/0x470 [ 177.348151][ C1] ret_from_fork+0x514/0xb70 [ 177.348166][ C1] ret_from_fork_asm+0x1a/0x30 [ 177.348181][ C1] [ 177.348185][ C1] Memory state around the buggy address: [ 177.348194][ C1] ffff888037790d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.348205][ C1] ffff888037790d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.348216][ C1] >ffff888037790e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.348225][ C1] ^ [ 177.348233][ C1] ffff888037790e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.348244][ C1] ffff888037790f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 177.348252][ C1] ================================================================== [ 177.348305][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.054041][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.063426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.073507][ C1] Call Trace: [ 178.076838][ C1] [ 178.079902][ C1] vpanic+0x56d/0xa60 [ 178.083901][ C1] ? __pfx_vpanic+0x10/0x10 [ 178.088404][ C1] ? __pfx___schedule+0x10/0x10 [ 178.093384][ C1] panic+0xc5/0xd0 [ 178.097306][ C1] ? __pfx_panic+0x10/0x10 [ 178.101919][ C1] ? preempt_schedule_common+0x7f/0xd0 [ 178.107725][ C1] ? lbmIODone+0x130e/0x16b0 [ 178.112417][ C1] check_panic_on_warn+0x89/0xb0 [ 178.117447][ C1] ? lbmIODone+0x130e/0x16b0 [ 178.122110][ C1] end_report+0x73/0x170 [ 178.126443][ C1] ? lbmIODone+0x130e/0x16b0 [ 178.131214][ C1] kasan_report+0x128/0x150 [ 178.135821][ C1] ? lbmIODone+0x130e/0x16b0 [ 178.140418][ C1] lbmIODone+0x130e/0x16b0 [ 178.144944][ C1] ? blkg_put+0x22/0x240 [ 178.149392][ C1] ? blkg_put+0x22/0x240 [ 178.153646][ C1] ? blkg_put+0x18d/0x240 [ 178.158061][ C1] ? bio_endio+0x984/0xac0 [ 178.162480][ C1] blk_update_request+0x57b/0xe50 [ 178.167506][ C1] blk_mq_end_request+0x3e/0x70 [ 178.172623][ C1] blk_done_softirq+0x10a/0x160 [ 178.177568][ C1] handle_softirqs+0x1da/0x6d0 [ 178.182335][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 178.187551][ C1] ? __pfx_sched_cache_group_free_rcu+0x10/0x10 [ 178.193875][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 178.198913][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 178.203940][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 178.208798][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 178.214091][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 178.219134][ C1] smpboot_thread_fn+0x565/0xa70 [ 178.224122][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 178.229255][ C1] kthread+0x38b/0x470 [ 178.233325][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 178.238904][ C1] ? __pfx_kthread+0x10/0x10 [ 178.243494][ C1] ret_from_fork+0x514/0xb70 [ 178.248079][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 178.253274][ C1] ? __switch_to+0xc89/0x1420 [ 178.259011][ C1] ? __pfx_kthread+0x10/0x10 [ 178.263695][ C1] ret_from_fork_asm+0x1a/0x30 [ 178.268577][ C1] [ 178.271944][ C1] Kernel Offset: disabled [ 178.276372][ C1] Rebooting in 86400 seconds..