Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts.
2026/09/24 05:28:43 parsed 1 programs
[ 197.694335][ T6116] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 200.692205][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[ 200.692280][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[ 204.077293][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state
[ 204.077473][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 204.077659][ T6142] bridge_slave_0: entered allmulticast mode
[ 204.082157][ T6142] bridge_slave_0: entered promiscuous mode
[ 204.113702][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state
[ 204.113929][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 204.114452][ T6142] bridge_slave_1: entered allmulticast mode
[ 204.123335][ T6142] bridge_slave_1: entered promiscuous mode
[ 204.523840][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 204.529747][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 204.708475][ T6142] team0: Port device team_slave_0 added
[ 204.711967][ T6142] team0: Port device team_slave_1 added
[ 204.877211][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 204.877227][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 204.877249][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 204.879275][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 204.879292][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 204.879316][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 205.272393][ T6142] hsr_slave_0: entered promiscuous mode
[ 205.274401][ T6142] hsr_slave_1: entered promiscuous mode
[ 207.839670][ T6142] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 207.889260][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 207.891462][ T6142] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 207.940569][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 207.942492][ T6142] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 208.046088][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 208.053279][ T6142] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 208.091388][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 208.331718][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0
[ 208.392580][ T6142] 8021q: adding VLAN 0 to HW filter on device team0
[ 208.439795][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 208.440037][ T1390] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 208.478070][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 208.478660][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 209.635062][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 209.786324][ T6142] veth0_vlan: entered promiscuous mode
[ 209.835903][ T6142] veth1_vlan: entered promiscuous mode
[ 209.923505][ T6142] veth0_macvtap: entered promiscuous mode
[ 209.986318][ T6142] veth1_macvtap: entered promiscuous mode
[ 210.065911][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 210.112178][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 210.569350][ T1390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 210.571628][ T1390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 210.572038][ T1390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 210.572430][ T1390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 211.212734][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 211.260158][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 211.274688][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 211.293400][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 211.303507][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 211.604914][ T1403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.134597][ T1403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 212.582526][ T1403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 213.047594][ T1403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 214.225730][ T1403] bridge_slave_1: left allmulticast mode
[ 214.225774][ T1403] bridge_slave_1: left promiscuous mode
[ 214.228085][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 214.369218][ T1403] bridge_slave_0: left allmulticast mode
[ 214.369260][ T1403] bridge_slave_0: left promiscuous mode
[ 214.372369][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 215.474636][ T1403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 215.564685][ T1403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 215.607027][ T1403] bond0 (unregistering): Released all slaves
[ 216.166102][ T1403] hsr_slave_0: left promiscuous mode
[ 216.227495][ T1403] hsr_slave_1: left promiscuous mode
[ 216.286388][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 216.286422][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 216.348356][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 216.348389][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 216.425865][ T1403] veth1_macvtap: left promiscuous mode
[ 216.425983][ T1403] veth0_macvtap: left promiscuous mode
[ 216.426249][ T1403] veth1_vlan: left promiscuous mode
[ 216.426473][ T1403] veth0_vlan: left promiscuous mode
[ 217.234721][ T1403] team0 (unregistering): Port device team_slave_1 removed
[ 217.295716][ T1403] team0 (unregistering): Port device team_slave_0 removed
[ 217.527364][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 218.566987][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[ 219.827763][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[ 220.007665][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.007692][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.107688][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.107712][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.958626][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
2026/09/24 05:29:14 executed programs: 0
[ 222.227673][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 222.230241][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 222.232492][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 222.283482][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 222.298665][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 224.275961][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 224.276096][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 224.276308][ T6462] bridge_slave_0: entered allmulticast mode
[ 224.298219][ T6462] bridge_slave_0: entered promiscuous mode
[ 224.345655][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 224.345860][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 224.346189][ T6462] bridge_slave_1: entered allmulticast mode
[ 224.349204][ T6462] bridge_slave_1: entered promiscuous mode
[ 224.369235][ T4912] Bluetooth: hci0: command tx timeout
[ 224.687797][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 224.706285][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 224.907429][ T6462] team0: Port device team_slave_0 added
[ 224.927127][ T6462] team0: Port device team_slave_1 added
[ 225.107065][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 225.107083][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 225.107105][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 225.109310][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 225.109329][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 225.109361][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 225.404796][ T6462] hsr_slave_0: entered promiscuous mode
[ 225.408784][ T6462] hsr_slave_1: entered promiscuous mode
[ 226.456110][ T4912] Bluetooth: hci0: command tx timeout
[ 228.113173][ T6462] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 228.148779][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 228.150147][ T6462] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 228.202491][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 228.212267][ T6462] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 228.249673][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 228.252814][ T6462] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 228.304213][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 228.516777][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 228.524961][ T4912] Bluetooth: hci0: command tx timeout
[ 228.588943][ T6462] 8021q: adding VLAN 0 to HW filter on device team0
[ 228.620145][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 228.620423][ T1390] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 228.658586][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 228.658837][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 229.715009][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 229.866736][ T6462] veth0_vlan: entered promiscuous mode
[ 229.914909][ T6462] veth1_vlan: entered promiscuous mode
[ 230.062294][ T6462] veth0_macvtap: entered promiscuous mode
[ 230.091373][ T6462] veth1_macvtap: entered promiscuous mode
[ 230.130405][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 230.169381][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 230.466334][ T1174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.466706][ T1174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.589955][ T1174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.590324][ T1174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 230.622343][ T4912] Bluetooth: hci0: command tx timeout
[ 230.835435][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 230.835461][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 231.026944][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 231.026970][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/24 05:29:23 executed programs: 2
[ 231.928149][ T6590] loop0: detected capacity change from 0 to 32768
[ 232.244160][ T6590]
[ 232.244160][ T6590] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 232.244160][ T6590]
[ 232.303272][ T6590] Bad index:-128 of stbl[1] in dtroot
[ 232.303272][ T6590]
[ 232.303301][ T6590] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 232.303301][ T6590]
[ 233.159848][ T6613] loop0: detected capacity change from 0 to 32768
[ 233.203541][ T6613]
[ 233.203541][ T6613] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 233.203541][ T6613]
[ 233.226666][ T6613] Bad index:-128 of stbl[1] in dtroot
[ 233.226666][ T6613]
[ 233.226690][ T6613] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 233.226690][ T6613]
[ 233.706167][ T6624] loop0: detected capacity change from 0 to 32768
[ 233.758859][ T6624]
[ 233.758859][ T6624] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 233.758859][ T6624]
[ 233.783863][ T6624] Bad index:-128 of stbl[1] in dtroot
[ 233.783863][ T6624]
[ 233.783889][ T6624] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 233.783889][ T6624]
[ 234.225074][ T6626] loop0: detected capacity change from 0 to 32768
[ 234.267995][ T6626]
[ 234.267995][ T6626] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 234.267995][ T6626]
[ 234.272967][ T6626] Bad index:-128 of stbl[1] in dtroot
[ 234.272967][ T6626]
[ 234.273161][ T6626] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 234.273161][ T6626]
[ 234.746816][ T6628] loop0: detected capacity change from 0 to 32768
[ 234.780229][ T6628]
[ 234.780229][ T6628] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 234.780229][ T6628]
[ 234.781076][ T6628] Bad index:-128 of stbl[1] in dtroot
[ 234.781076][ T6628]
[ 234.781093][ T6628] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 234.781093][ T6628]
[ 235.271711][ T6630] loop0: detected capacity change from 0 to 32768
[ 235.306259][ T6630]
[ 235.306259][ T6630] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 235.306259][ T6630]
[ 235.307712][ T6630] Bad index:-128 of stbl[1] in dtroot
[ 235.307712][ T6630]
[ 235.307735][ T6630] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 235.307735][ T6630]
[ 235.780399][ T6632] loop0: detected capacity change from 0 to 32768
[ 235.824448][ T6632]
[ 235.824448][ T6632] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 235.824448][ T6632]
[ 235.832218][ T6632] Bad index:-128 of stbl[1] in dtroot
[ 235.832218][ T6632]
[ 235.832241][ T6632] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 235.832241][ T6632]
[ 236.326224][ T6634] loop0: detected capacity change from 0 to 32768
[ 236.355089][ T6634]
[ 236.355089][ T6634] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 236.355089][ T6634]
[ 236.368346][ T6634] Bad index:-128 of stbl[1] in dtroot
[ 236.368346][ T6634]
[ 236.368403][ T6634] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 236.368403][ T6634]
2026/09/24 05:29:29 executed programs: 10
[ 236.906717][ T6636] loop0: detected capacity change from 0 to 32768
[ 236.951299][ T6636]
[ 236.951299][ T6636] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 236.951299][ T6636]
[ 236.952058][ T6636] Bad index:-128 of stbl[1] in dtroot
[ 236.952058][ T6636]
[ 236.952076][ T6636] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 236.952076][ T6636]
[ 237.430755][ T6638] loop0: detected capacity change from 0 to 32768
[ 237.466055][ T6638]
[ 237.466055][ T6638] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 237.466055][ T6638]
[ 237.472474][ T6638] Bad index:-128 of stbl[1] in dtroot
[ 237.472474][ T6638]
[ 237.472509][ T6638] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 237.472509][ T6638]
[ 237.917117][ T6640] loop0: detected capacity change from 0 to 32768
[ 237.935056][ T6640]
[ 237.935056][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 237.935056][ T6640]
[ 237.939872][ T6640] Bad index:-128 of stbl[1] in dtroot
[ 237.939872][ T6640]
[ 237.939896][ T6640] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 237.939896][ T6640]
[ 238.339274][ T6642] loop0: detected capacity change from 0 to 32768
[ 238.359974][ T6642]
[ 238.359974][ T6642] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 238.359974][ T6642]
[ 238.362596][ T6642] Bad index:-128 of stbl[1] in dtroot
[ 238.362596][ T6642]
[ 238.362617][ T6642] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 238.362617][ T6642]
[ 238.883037][ T6644] loop0: detected capacity change from 0 to 32768
[ 238.911001][ T6644]
[ 238.911001][ T6644] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 238.911001][ T6644]
[ 238.911794][ T6644] Bad index:-128 of stbl[1] in dtroot
[ 238.911794][ T6644]
[ 238.911814][ T6644] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 238.911814][ T6644]
[ 239.340033][ T6646] loop0: detected capacity change from 0 to 32768
[ 239.362963][ T6646]
[ 239.362963][ T6646] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 239.362963][ T6646]
[ 239.364655][ T6646] Bad index:-128 of stbl[1] in dtroot
[ 239.364655][ T6646]
[ 239.364683][ T6646] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 239.364683][ T6646]
[ 239.806021][ T6648] loop0: detected capacity change from 0 to 32768
[ 239.820141][ T6648]
[ 239.820141][ T6648] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 239.820141][ T6648]
[ 239.823213][ T6648] Bad index:-128 of stbl[1] in dtroot
[ 239.823213][ T6648]
[ 239.823308][ T6648] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 239.823308][ T6648]
[ 240.358504][ T6650] loop0: detected capacity change from 0 to 32768
[ 240.382112][ T6650]
[ 240.382112][ T6650] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 240.382112][ T6650]
[ 240.383397][ T6650] Bad index:-128 of stbl[1] in dtroot
[ 240.383397][ T6650]
[ 240.383418][ T6650] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 240.383418][ T6650]
[ 240.858029][ T6652] loop0: detected capacity change from 0 to 32768
[ 240.885071][ T6652]
[ 240.885071][ T6652] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 240.885071][ T6652]
[ 240.885928][ T6652] Bad index:-128 of stbl[1] in dtroot
[ 240.885928][ T6652]
[ 240.885946][ T6652] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 240.885946][ T6652]
[ 240.922008][ C0] =========================================
** replaying previous printk message **
[ 240.922008][ C0] ==================================================================
[ 240.922063][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 240.922182][ C0] Read of size 4 at addr ffff88802d3aa208 by task ktimers/0/16
[ 240.922235][ C0]
[ 240.922337][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 240.922413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 240.922468][ C0] Call Trace:
[ 240.922502][ C0]
[ 240.922534][ C0] dump_stack_lvl+0xe8/0x150
[ 240.922632][ C0] print_address_description+0x55/0x1e0
[ 240.922720][ C0] ? lbmIODone+0x130e/0x16b0
[ 240.922807][ C0] print_report+0x58/0x70
[ 240.922892][ C0] kasan_report+0x117/0x150
[ 240.922998][ C0] ? lbmIODone+0x130e/0x16b0
[ 240.923096][ C0] lbmIODone+0x130e/0x16b0
[ 240.923183][ C0] ? blkg_put+0x22/0x240
[ 240.923249][ C0] ? blkg_put+0x22/0x240
[ 240.923313][ C0] ? blkg_put+0x18d/0x240
[ 240.923378][ C0] ? bio_endio+0x984/0xac0
[ 240.923461][ C0] blk_update_request+0x57b/0xe50
[ 240.923558][ C0] blk_mq_end_request+0x3e/0x70
[ 240.923596][ C0] blk_done_softirq+0x10a/0x160
[ 240.923624][ C0] handle_softirqs+0x1da/0x6d0
[ 240.923689][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 240.923776][ C0] run_ktimerd+0x6a/0x100
[ 240.923863][ C0] smpboot_thread_fn+0x565/0xa70
[ 240.923909][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 240.923963][ C0] kthread+0x38b/0x470
[ 240.924025][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 240.924112][ C0] ? __pfx_kthread+0x10/0x10
[ 240.924183][ C0] ret_from_fork+0x514/0xb70
[ 240.924248][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 240.924311][ C0] ? __switch_to+0xc89/0x1420
[ 240.924398][ C0] ? __pfx_kthread+0x10/0x10
[ 240.924465][ C0] ret_from_fork_asm+0x1a/0x30
[ 240.924550][ C0]
[ 240.924571][ C0]
[ 240.924591][ C0] Allocated by task 6652:
[ 240.924622][ C0] kasan_save_track+0x3e/0x80
[ 240.924699][ C0] __kasan_kmalloc+0x93/0xb0
[ 240.924783][ C0] __kmalloc_cache_noprof+0x3d5/0x680
[ 240.924858][ C0] lmLogInit+0x3e5/0x1a20
[ 240.924935][ C0] lmLogOpen+0x4e3/0xf90
[ 240.925040][ C0] jfs_mount_rw+0xf3/0x670
[ 240.925102][ C0] jfs_fill_super+0x769/0xda0
[ 240.925124][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 240.925172][ C0] vfs_get_tree+0x92/0x2a0
[ 240.925236][ C0] do_new_mount+0x319/0xdc0
[ 240.925282][ C0] __se_sys_mount+0x31d/0x420
[ 240.925342][ C0] do_syscall_64+0x166/0x520
[ 240.925388][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 240.925448][ C0]
[ 240.925460][ C0] Freed by task 6652:
[ 240.925492][ C0] kasan_save_track+0x3e/0x80
[ 240.925560][ C0] kasan_save_free_info+0x40/0x50
[ 240.925624][ C0] __kasan_slab_free+0x5c/0x80
[ 240.925710][ C0] kfree+0x1c5/0x6d0
[ 240.925781][ C0] lmLogShutdown+0x456/0x850
[ 240.925872][ C0] lmLogClose+0x28c/0x530
[ 240.925947][ C0] jfs_umount+0x2da/0x3b0
[ 240.926025][ C0] jfs_fill_super+0x9e7/0xda0
[ 240.926080][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 240.926146][ C0] vfs_get_tree+0x92/0x2a0
[ 240.926210][ C0] do_new_mount+0x319/0xdc0
[ 240.926262][ C0] __se_sys_mount+0x31d/0x420
[ 240.926309][ C0] do_syscall_64+0x166/0x520
[ 240.926360][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 240.926418][ C0]
[ 240.926430][ C0] The buggy address belongs to the object at ffff88802d3aa200
[ 240.926430][ C0] which belongs to the cache kmalloc-256 of size 256
[ 240.926483][ C0] The buggy address is located 8 bytes inside of
[ 240.926483][ C0] freed 256-byte region [ffff88802d3aa200, ffff88802d3aa300)
[ 240.926548][ C0]
[ 240.926554][ C0] The buggy address belongs to the physical page:
[ 240.926591][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d3aa
[ 240.926655][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 240.926716][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 240.926761][ C0] page_type: f5(slab)
[ 240.926822][ C0] raw: 0080000000000040 ffff88813ffbdb40 dead000000000100 dead000000000122
[ 240.926868][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 240.926930][ C0] head: 0080000000000040 ffff88813ffbdb40 dead000000000100 dead000000000122
[ 240.926975][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 240.927021][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 240.927073][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 240.927099][ C0] page dumped because: kasan: bad access detected
[ 240.927131][ C0] page_owner tracks the page as allocated
[ 240.927155][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 32611342753
[ 240.927283][ C0] post_alloc_hook+0x1f9/0x250
[ 240.927359][ C0] get_page_from_freelist+0x2591/0x2600
[ 240.927436][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 240.927529][ C0] allocate_slab+0x7d/0x620
[ 240.927583][ C0] refill_objects+0x2d8/0x350
[ 240.927645][ C0] __pcs_replace_empty_main+0x339/0x690
[ 240.927701][ C0] __kvmalloc_node_noprof+0x6f4/0x890
[ 240.927783][ C0] v4l2_ctrl_new+0xa5a/0x1820
[ 240.927840][ C0] v4l2_ctrl_new_std+0x24e/0x300
[ 240.927895][ C0] vivid_create_controls+0x276e/0x3c40
[ 240.927981][ C0] vivid_probe+0x4112/0x70d0
[ 240.928047][ C0] platform_probe+0xf9/0x190
[ 240.928126][ C0] really_probe+0x254/0xae0
[ 240.928179][ C0] __driver_probe_device+0x1e8/0x360
[ 240.928232][ C0] driver_probe_device+0x4f/0x240
[ 240.928312][ C0] __driver_attach+0x339/0x600
[ 240.928364][ C0] page_owner free stack trace missing
[ 240.928385][ C0]
[ 240.928397][ C0] Memory state around the buggy address:
[ 240.928429][ C0] ffff88802d3aa100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 240.928472][ C0] ffff88802d3aa180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 240.928515][ C0] >ffff88802d3aa200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 240.928556][ C0] ^
[ 240.928588][ C0] ffff88802d3aa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 240.928638][ C0] ffff88802d3aa300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 240.928677][ C0] ==================================================================
[ 240.928849][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 241.634264][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 241.644721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 241.655693][ C0] Call Trace:
[ 241.659329][ C0]
[ 241.662646][ C0] vpanic+0x56d/0xa60
[ 241.666980][ C0] ? rcu_is_watching+0x16/0xb0
[ 241.672150][ C0] ? __pfx_vpanic+0x10/0x10
[ 241.677147][ C0] panic+0xc5/0xd0
[ 241.681079][ C0] ? __pfx_panic+0x10/0x10
[ 241.685983][ C0] ? lbmIODone+0x130e/0x16b0
[ 241.690818][ C0] ? lbmIODone+0x130e/0x16b0
[ 241.695640][ C0] check_panic_on_warn+0x89/0xb0
[ 241.700899][ C0] ? lbmIODone+0x130e/0x16b0
[ 241.705746][ C0] end_report+0x73/0x170
[ 241.710320][ C0] ? lbmIODone+0x130e/0x16b0
[ 241.715074][ C0] kasan_report+0x128/0x150
[ 241.719708][ C0] ? lbmIODone+0x130e/0x16b0
[ 241.724760][ C0] lbmIODone+0x130e/0x16b0
[ 241.729329][ C0] ? blkg_put+0x22/0x240
[ 241.733809][ C0] ? blkg_put+0x22/0x240
[ 241.738198][ C0] ? blkg_put+0x18d/0x240
[ 241.742832][ C0] ? bio_endio+0x984/0xac0
[ 241.747583][ C0] blk_update_request+0x57b/0xe50
[ 241.753846][ C0] blk_mq_end_request+0x3e/0x70
[ 241.760101][ C0] blk_done_softirq+0x10a/0x160
[ 241.765360][ C0] handle_softirqs+0x1da/0x6d0
[ 241.770884][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 241.777100][ C0] run_ktimerd+0x6a/0x100
[ 241.781841][ C0] smpboot_thread_fn+0x565/0xa70
[ 241.786923][ C0] ? smpboot_thread_fn+0x4e/0xa70
[ 241.792028][ C0] kthread+0x38b/0x470
[ 241.796473][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 241.802319][ C0] ? __pfx_kthread+0x10/0x10
[ 241.807430][ C0] ret_from_fork+0x514/0xb70
[ 241.812294][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 241.817551][ C0] ? __switch_to+0xc89/0x1420
[ 241.822471][ C0] ? __pfx_kthread+0x10/0x10
[ 241.827649][ C0] ret_from_fork_asm+0x1a/0x30
[ 241.832658][ C0]
[ 241.836344][ C0] Kernel Offset: disabled
[ 241.840893][ C0] Rebooting in 86400 seconds..