Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. 2026/04/21 01:33:28 parsed 1 programs [ 132.879131][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.879240][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.247808][ T6214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.361079][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.370848][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.371774][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.374450][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.376249][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.313283][ T6265] chnl_net:caif_netlink_parms(): no params data found [ 140.833629][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.833813][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.833930][ T6265] bridge_slave_0: entered allmulticast mode [ 140.835319][ T6265] bridge_slave_0: entered promiscuous mode [ 140.837870][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.837989][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.838078][ T6265] bridge_slave_1: entered allmulticast mode [ 140.839416][ T6265] bridge_slave_1: entered promiscuous mode [ 141.034675][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.037015][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.302673][ T6265] team0: Port device team_slave_0 added [ 141.382805][ T6265] team0: Port device team_slave_1 added [ 141.601827][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.601843][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.601875][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.605420][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.605434][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.605458][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.796907][ T6265] hsr_slave_0: entered promiscuous mode [ 141.797611][ T6265] hsr_slave_1: entered promiscuous mode [ 143.638244][ T6265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.675430][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.676265][ T6265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.730205][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.733017][ T6265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.766322][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.768062][ T6265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.804557][ T6265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.955318][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.992348][ T6265] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.012113][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.012328][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.057040][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.057183][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.386250][ T6265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.458335][ T6265] veth0_vlan: entered promiscuous mode [ 144.486250][ T6265] veth1_vlan: entered promiscuous mode [ 144.554093][ T6265] veth0_macvtap: entered promiscuous mode [ 144.559399][ T6265] veth1_macvtap: entered promiscuous mode [ 144.619744][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.684799][ T6265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.705509][ T3017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.706009][ T3017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.706406][ T3017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.706628][ T3017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.479254][ T1468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.784201][ T1468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.897163][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.897195][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.981513][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.981533][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.540135][ T1468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.429383][ T1468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.244488][ T1468] bridge_slave_1: left allmulticast mode [ 148.244514][ T1468] bridge_slave_1: left promiscuous mode [ 148.244752][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.332324][ T1468] bridge_slave_0: left allmulticast mode [ 148.332352][ T1468] bridge_slave_0: left promiscuous mode [ 148.339004][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.081335][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.141817][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.182714][ T1468] bond0 (unregistering): Released all slaves 2026/04/21 01:33:48 executed programs: 0 [ 149.592515][ T1468] hsr_slave_0: left promiscuous mode [ 149.642449][ T1468] hsr_slave_1: left promiscuous mode [ 149.643495][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.643519][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.711720][ T1468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.711747][ T1468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.719815][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.759672][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.763347][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.768809][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.779621][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.914236][ T1468] veth1_macvtap: left promiscuous mode [ 149.919319][ T1468] veth0_macvtap: left promiscuous mode [ 149.919569][ T1468] veth1_vlan: left promiscuous mode [ 149.919730][ T1468] veth0_vlan: left promiscuous mode [ 150.581252][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 150.621529][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 150.779898][ T5477] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.225967][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 151.372745][ T5477] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.574486][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.574593][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.574767][ T6482] bridge_slave_0: entered allmulticast mode [ 151.586149][ T6482] bridge_slave_0: entered promiscuous mode [ 151.598906][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.599036][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.599225][ T6482] bridge_slave_1: entered allmulticast mode [ 151.604522][ T6482] bridge_slave_1: entered promiscuous mode [ 151.827018][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.834210][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.910819][ T60] Bluetooth: hci0: command tx timeout [ 152.127787][ T6482] team0: Port device team_slave_0 added [ 152.133198][ T6482] team0: Port device team_slave_1 added [ 152.558946][ T5477] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.559753][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.559765][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.559786][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.563729][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.563742][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.563779][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.819631][ T6482] hsr_slave_0: entered promiscuous mode [ 152.820462][ T6482] hsr_slave_1: entered promiscuous mode [ 153.454452][ T5477] 8021q: adding VLAN 0 to HW filter on device eth4 [ 153.990801][ T60] Bluetooth: hci0: command tx timeout [ 155.529217][ T6482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.564833][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.566363][ T6482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.597473][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.598286][ T6482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.634797][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.635693][ T6482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.678037][ T6482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.814353][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.840449][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.879399][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.879613][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.908491][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.908691][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.070771][ T60] Bluetooth: hci0: command tx timeout [ 156.277544][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.365962][ T6482] veth0_vlan: entered promiscuous mode [ 156.382991][ T6482] veth1_vlan: entered promiscuous mode [ 156.469485][ T6482] veth0_macvtap: entered promiscuous mode [ 156.475607][ T6482] veth1_macvtap: entered promiscuous mode [ 156.493863][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.511296][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.529668][ T1468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.529901][ T1468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.529936][ T1468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.529968][ T1468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.913719][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.913740][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.004959][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.004979][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/21 01:33:56 executed programs: 2 [ 157.584257][ T6628] loop0: detected capacity change from 0 to 32768 [ 157.726046][ T6628] Bad index:0 in slot in dtroot [ 157.726046][ T6628] [ 157.726463][ T6628] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 157.726463][ T6628] [ 157.757937][ T6628] ERROR: (device loop0): remounting filesystem as read-only [ 158.150757][ T60] Bluetooth: hci0: command tx timeout [ 158.194493][ T6637] loop0: detected capacity change from 0 to 32768 [ 158.258209][ T6637] Bad index:0 in slot in dtroot [ 158.258209][ T6637] [ 158.258221][ T6637] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 158.258221][ T6637] [ 158.258576][ T6637] ERROR: (device loop0): remounting filesystem as read-only [ 158.734556][ T6639] loop0: detected capacity change from 0 to 32768 [ 158.758991][ T6639] Bad index:0 in slot in dtroot [ 158.758991][ T6639] [ 158.759007][ T6639] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 158.759007][ T6639] [ 158.759248][ T6639] ERROR: (device loop0): remounting filesystem as read-only [ 159.074719][ T6641] loop0: detected capacity change from 0 to 32768 [ 159.117318][ T6641] Bad index:0 in slot in dtroot [ 159.117318][ T6641] [ 159.117335][ T6641] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 159.117335][ T6641] [ 159.117627][ T6641] ERROR: (device loop0): remounting filesystem as read-only [ 159.440323][ T6643] loop0: detected capacity change from 0 to 32768 [ 159.459657][ T6643] Bad index:0 in slot in dtroot [ 159.459657][ T6643] [ 159.459672][ T6643] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 159.459672][ T6643] [ 159.460018][ T6643] ERROR: (device loop0): remounting filesystem as read-only [ 159.503937][ C1] ================================================================== [ 159.503953][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 159.503985][ C1] Read of size 4 at addr ffff88802bbedc08 by task ksoftirqd/1/30 [ 159.504001][ C1] [ 159.504026][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.504047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.504065][ C1] Call Trace: [ 159.504072][ C1] [ 159.504079][ C1] dump_stack_lvl+0xe8/0x150 [ 159.504108][ C1] print_address_description+0x55/0x1e0 [ 159.504137][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.504157][ C1] print_report+0x58/0x70 [ 159.504183][ C1] kasan_report+0x117/0x150 [ 159.504205][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.504228][ C1] lbmIODone+0x1312/0x16c0 [ 159.504249][ C1] ? blkg_put+0x22/0x240 [ 159.504270][ C1] ? blkg_put+0x22/0x240 [ 159.504291][ C1] ? blkg_put+0x18d/0x240 [ 159.504312][ C1] ? bio_endio+0x989/0x9d0 [ 159.504339][ C1] blk_update_request+0x57e/0xe60 [ 159.504377][ C1] blk_mq_end_request+0x3e/0x70 [ 159.504403][ C1] blk_done_softirq+0x10a/0x160 [ 159.504427][ C1] handle_softirqs+0x1de/0x6d0 [ 159.504456][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 159.504475][ C1] run_ksoftirqd+0x52/0x180 [ 159.504495][ C1] smpboot_thread_fn+0x541/0xa50 [ 159.504515][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 159.504537][ C1] kthread+0x388/0x470 [ 159.504558][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 159.504577][ C1] ? __pfx_kthread+0x10/0x10 [ 159.504598][ C1] ret_from_fork+0x514/0xb70 [ 159.504617][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 159.504635][ C1] ? __switch_to+0xc79/0x1410 [ 159.504660][ C1] ? __pfx_kthread+0x10/0x10 [ 159.504682][ C1] ret_from_fork_asm+0x1a/0x30 [ 159.504709][ C1] [ 159.504716][ C1] [ 159.504725][ C1] Allocated by task 6643: [ 159.504735][ C1] kasan_save_track+0x3e/0x80 [ 159.504761][ C1] __kasan_kmalloc+0x93/0xb0 [ 159.504785][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 159.504802][ C1] lmLogInit+0x3e5/0x1a00 [ 159.504823][ C1] lmLogOpen+0x4e1/0xfa0 [ 159.504839][ C1] jfs_mount_rw+0xee/0x670 [ 159.504854][ C1] jfs_fill_super+0x754/0xd80 [ 159.504876][ C1] get_tree_bdev_flags+0x431/0x4f0 [ 159.504892][ C1] vfs_get_tree+0x92/0x2a0 [ 159.504906][ C1] do_new_mount+0x341/0xd30 [ 159.504926][ C1] __se_sys_mount+0x31d/0x420 [ 159.504946][ C1] do_syscall_64+0x15f/0xf80 [ 159.504965][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.504981][ C1] [ 159.504985][ C1] Freed by task 6643: [ 159.504994][ C1] kasan_save_track+0x3e/0x80 [ 159.505017][ C1] kasan_save_free_info+0x46/0x50 [ 159.505037][ C1] __kasan_slab_free+0x5c/0x80 [ 159.505062][ C1] kfree+0x1c5/0x6c0 [ 159.505085][ C1] lmLogShutdown+0x456/0x850 [ 159.505102][ C1] lmLogClose+0x28a/0x520 [ 159.505118][ C1] jfs_umount+0x2fb/0x3d0 [ 159.505134][ C1] jfs_fill_super+0x9c5/0xd80 [ 159.505155][ C1] get_tree_bdev_flags+0x431/0x4f0 [ 159.505169][ C1] vfs_get_tree+0x92/0x2a0 [ 159.505183][ C1] do_new_mount+0x341/0xd30 [ 159.505201][ C1] __se_sys_mount+0x31d/0x420 [ 159.505220][ C1] do_syscall_64+0x15f/0xf80 [ 159.505241][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.505257][ C1] [ 159.505261][ C1] The buggy address belongs to the object at ffff88802bbedc00 [ 159.505261][ C1] which belongs to the cache kmalloc-256 of size 256 [ 159.505275][ C1] The buggy address is located 8 bytes inside of [ 159.505275][ C1] freed 256-byte region [ffff88802bbedc00, ffff88802bbedd00) [ 159.505292][ C1] [ 159.505296][ C1] The buggy address belongs to the physical page: [ 159.505313][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bbec [ 159.505333][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 159.505347][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 159.505372][ C1] page_type: f5(slab) [ 159.505388][ C1] raw: 0080000000000040 ffff88801a024b40 dead000000000100 dead000000000122 [ 159.505403][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 159.505420][ C1] head: 0080000000000040 ffff88801a024b40 dead000000000100 dead000000000122 [ 159.505435][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 159.505449][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 159.505463][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 159.505471][ C1] page dumped because: kasan: bad access detected [ 159.505482][ C1] page_owner tracks the page as allocated [ 159.505488][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12547887215, free_ts 0 [ 159.505518][ C1] post_alloc_hook+0x231/0x280 [ 159.505544][ C1] get_page_from_freelist+0x27c8/0x2840 [ 159.505559][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 159.505575][ C1] allocate_slab+0x77/0x660 [ 159.505594][ C1] refill_objects+0x33c/0x3d0 [ 159.505611][ C1] __pcs_replace_empty_main+0x373/0x720 [ 159.505630][ C1] __kmalloc_cache_noprof+0x44e/0x690 [ 159.505643][ C1] mon_bus_init+0x50/0x2b0 [ 159.505661][ C1] mon_notify+0x112/0x400 [ 159.505678][ C1] notifier_call_chain+0x1ad/0x3d0 [ 159.505695][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 159.505712][ C1] usb_register_bus+0xcf/0x150 [ 159.505729][ C1] usb_add_hcd+0x451/0x10b0 [ 159.505749][ C1] vhci_hcd_probe+0x1fa/0x3f0 [ 159.505767][ C1] platform_probe+0xf9/0x190 [ 159.505788][ C1] really_probe+0x267/0xaf0 [ 159.505802][ C1] page_owner free stack trace missing [ 159.505808][ C1] [ 159.505812][ C1] Memory state around the buggy address: [ 159.505822][ C1] ffff88802bbedb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.505833][ C1] ffff88802bbedb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.505845][ C1] >ffff88802bbedc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.505853][ C1] ^ [ 159.505862][ C1] ffff88802bbedc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.505873][ C1] ffff88802bbedd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.505881][ C1] ================================================================== [ 159.505967][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.505983][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.506003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.506014][ C1] Call Trace: [ 159.506021][ C1] [ 159.506029][ C1] vpanic+0x56c/0xa60 [ 159.506050][ C1] ? __pfx_vpanic+0x10/0x10 [ 159.506068][ C1] ? __pfx___schedule+0x10/0x10 [ 159.506088][ C1] panic+0xc5/0xd0 [ 159.506104][ C1] ? __pfx_panic+0x10/0x10 [ 159.506122][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 159.506149][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.506169][ C1] check_panic_on_warn+0x89/0xb0 [ 159.506189][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.506207][ C1] end_report+0x73/0x170 [ 159.506223][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.506240][ C1] kasan_report+0x128/0x150 [ 159.506257][ C1] ? lbmIODone+0x1312/0x16c0 [ 159.506279][ C1] lbmIODone+0x1312/0x16c0 [ 159.506300][ C1] ? blkg_put+0x22/0x240 [ 159.506320][ C1] ? blkg_put+0x22/0x240 [ 159.506342][ C1] ? blkg_put+0x18d/0x240 [ 159.506369][ C1] ? bio_endio+0x989/0x9d0 [ 159.506395][ C1] blk_update_request+0x57e/0xe60 [ 159.506424][ C1] blk_mq_end_request+0x3e/0x70 [ 159.506451][ C1] blk_done_softirq+0x10a/0x160 [ 159.506474][ C1] handle_softirqs+0x1de/0x6d0 [ 159.506504][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 159.506523][ C1] run_ksoftirqd+0x52/0x180 [ 159.506540][ C1] smpboot_thread_fn+0x541/0xa50 [ 159.506560][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 159.506582][ C1] kthread+0x388/0x470 [ 159.506602][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 159.506618][ C1] ? __pfx_kthread+0x10/0x10 [ 159.506639][ C1] ret_from_fork+0x514/0xb70 [ 159.506659][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 159.506674][ C1] ? __switch_to+0xc79/0x1410 [ 159.506696][ C1] ? __pfx_kthread+0x10/0x10 [ 159.506716][ C1] ret_from_fork_asm+0x1a/0x30 [ 159.506740][ C1] [ 159.507277][ C1] Kernel Offset: disabled