[ 132.963074][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.963128][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
2026/05/08 06:35:38 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 139.309599][ T6120] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 141.972503][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 141.975527][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 141.993517][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 141.998150][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 141.999910][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 147.322885][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.323013][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.323113][ T6184] bridge_slave_0: entered allmulticast mode
[ 147.324555][ T6184] bridge_slave_0: entered promiscuous mode
[ 147.347178][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.347371][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.347549][ T6184] bridge_slave_1: entered allmulticast mode
[ 147.349952][ T6184] bridge_slave_1: entered promiscuous mode
[ 147.471604][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 147.475125][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 147.525235][ T6184] team0: Port device team_slave_0 added
[ 147.534616][ T6184] team0: Port device team_slave_1 added
[ 147.563794][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 147.563810][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 147.563831][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 147.565907][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 147.565931][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 147.565950][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 147.622305][ T6184] hsr_slave_0: entered promiscuous mode
[ 147.623378][ T6184] hsr_slave_1: entered promiscuous mode
[ 149.605212][ T6184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 149.640076][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 149.641111][ T6184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 149.694037][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 149.696735][ T6184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 149.741015][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 149.742617][ T6184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 149.793283][ T6184] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 149.930230][ T6184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 149.975154][ T6184] 8021q: adding VLAN 0 to HW filter on device team0
[ 149.998149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 149.998335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 150.026254][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.026441][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.710490][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 150.813622][ T6184] veth0_vlan: entered promiscuous mode
[ 150.828291][ T6184] veth1_vlan: entered promiscuous mode
[ 150.875444][ T6184] veth0_macvtap: entered promiscuous mode
[ 150.894620][ T6184] veth1_macvtap: entered promiscuous mode
[ 150.965710][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 150.986505][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 151.049049][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.052267][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.052311][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 151.052343][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 152.145469][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 152.873011][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.101041][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 153.101062][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.281155][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.398739][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 153.398760][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.806151][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/08 06:35:58 executed programs: 0
[ 154.831359][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 154.861643][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 154.864121][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 154.866507][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 154.870621][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 155.044628][ T68] bridge_slave_1: left allmulticast mode
[ 155.044658][ T68] bridge_slave_1: left promiscuous mode
[ 155.044876][ T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 155.149104][ T68] bridge_slave_0: left allmulticast mode
[ 155.149138][ T68] bridge_slave_0: left promiscuous mode
[ 155.149379][ T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 155.839036][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 155.918847][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 155.962733][ T68] bond0 (unregistering): Released all slaves
[ 156.327479][ T68] hsr_slave_0: left promiscuous mode
[ 156.367408][ T68] hsr_slave_1: left promiscuous mode
[ 156.368420][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 156.368444][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 156.428435][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 156.428461][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 156.538726][ T68] veth1_macvtap: left promiscuous mode
[ 156.538826][ T68] veth0_macvtap: left promiscuous mode
[ 156.539016][ T68] veth1_vlan: left promiscuous mode
[ 156.539133][ T68] veth0_vlan: left promiscuous mode
[ 156.958694][ T5768] Bluetooth: hci0: command tx timeout
[ 157.218058][ T68] team0 (unregistering): Port device team_slave_1 removed
[ 157.258140][ T68] team0 (unregistering): Port device team_slave_0 removed
[ 157.449786][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 158.023225][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.023447][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state
[ 158.023615][ T6395] bridge_slave_0: entered allmulticast mode
[ 158.026288][ T6395] bridge_slave_0: entered promiscuous mode
[ 158.059684][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.059882][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state
[ 158.060066][ T6395] bridge_slave_1: entered allmulticast mode
[ 158.063938][ T6395] bridge_slave_1: entered promiscuous mode
[ 158.159605][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 158.164378][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 158.214103][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[ 158.236977][ T6395] team0: Port device team_slave_0 added
[ 158.244654][ T6395] team0: Port device team_slave_1 added
[ 158.289435][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 158.289451][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.289474][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.291619][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.291633][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.291654][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.462361][ T6395] hsr_slave_0: entered promiscuous mode
[ 158.463669][ T6395] hsr_slave_1: entered promiscuous mode
[ 158.790412][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[ 159.047417][ T5768] Bluetooth: hci0: command tx timeout
[ 161.127372][ T5768] Bluetooth: hci0: command tx timeout
[ 161.566300][ T6395] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 161.598026][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 161.603346][ T6395] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 161.645887][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 161.646996][ T6395] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 161.701749][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 161.703443][ T6395] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 161.742738][ T6395] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 161.902036][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0
[ 161.936479][ T6395] 8021q: adding VLAN 0 to HW filter on device team0
[ 161.946199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.946389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 161.985129][ T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.985249][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 162.586907][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 162.701773][ T6395] veth0_vlan: entered promiscuous mode
[ 162.725790][ T6395] veth1_vlan: entered promiscuous mode
[ 162.771816][ T6395] veth0_macvtap: entered promiscuous mode
[ 162.776079][ T6395] veth1_macvtap: entered promiscuous mode
[ 162.804890][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 162.818360][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 162.826822][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.827067][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.827101][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.827132][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.187017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.187037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 163.198017][ T5768] Bluetooth: hci0: command tx timeout
[ 163.248842][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.248861][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/08 06:36:07 executed programs: 2
[ 163.611916][ T6574] loop0: detected capacity change from 0 to 32768
[ 163.807948][ T6574] Bad index:0 in slot in dtroot
[ 163.807948][ T6574]
[ 163.807970][ T6574] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 163.807970][ T6574]
[ 163.808304][ T6574] ERROR: (device loop0): remounting filesystem as read-only
[ 164.275024][ T6576] loop0: detected capacity change from 0 to 32768
[ 164.316128][ T6576] Bad index:0 in slot in dtroot
[ 164.316128][ T6576]
[ 164.316144][ T6576] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 164.316144][ T6576]
[ 164.316377][ T6576] ERROR: (device loop0): remounting filesystem as read-only
[ 164.701622][ T6578] loop0: detected capacity change from 0 to 32768
[ 164.745622][ T6578] Bad index:0 in slot in dtroot
[ 164.745622][ T6578]
[ 164.745640][ T6578] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 164.745640][ T6578]
[ 164.745936][ T6578] ERROR: (device loop0): remounting filesystem as read-only
[ 165.143535][ T6580] loop0: detected capacity change from 0 to 32768
[ 165.168175][ T6580] Bad index:0 in slot in dtroot
[ 165.168175][ T6580]
[ 165.168190][ T6580] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 165.168190][ T6580]
[ 165.168397][ T6580] ERROR: (device loop0): remounting filesystem as read-only
[ 165.571123][ T6582] loop0: detected capacity change from 0 to 32768
[ 165.591895][ T6582] Bad index:0 in slot in dtroot
[ 165.591895][ T6582]
[ 165.591911][ T6582] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 165.591911][ T6582]
[ 165.592402][ T6582] ERROR: (device loop0): remounting filesystem as read-only
[ 165.933579][ T6584] loop0: detected capacity change from 0 to 32768
[ 165.964440][ T6584] Bad index:0 in slot in dtroot
[ 165.964440][ T6584]
[ 165.964456][ T6584] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 165.964456][ T6584]
[ 165.964775][ T6584] ERROR: (device loop0): remounting filesystem as read-only
[ 166.309780][ T6586] loop0: detected capacity change from 0 to 32768
[ 166.350732][ T6586] Bad index:0 in slot in dtroot
[ 166.350732][ T6586]
[ 166.350747][ T6586] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 166.350747][ T6586]
[ 166.351052][ T6586] ERROR: (device loop0): remounting filesystem as read-only
[ 166.387695][ C1] ==================================================================
[ 166.387710][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 166.387737][ C1] Read of size 4 at addr ffff888029ff1c08 by task ksoftirqd/1/30
[ 166.387749][ C1]
[ 166.387772][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.387790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 166.387805][ C1] Call Trace:
[ 166.387811][ C1]
[ 166.387818][ C1] dump_stack_lvl+0xe8/0x150
[ 166.387838][ C1] print_address_description+0x55/0x1e0
[ 166.387855][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.387873][ C1] print_report+0x58/0x70
[ 166.387886][ C1] kasan_report+0x117/0x150
[ 166.387903][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.387921][ C1] lbmIODone+0x1312/0x16c0
[ 166.387937][ C1] ? blkg_put+0x22/0x240
[ 166.387950][ C1] ? blkg_put+0x22/0x240
[ 166.387962][ C1] ? blkg_put+0x18d/0x240
[ 166.387974][ C1] ? bio_endio+0x989/0x9d0
[ 166.387991][ C1] blk_update_request+0x57e/0xe60
[ 166.388013][ C1] blk_mq_end_request+0x3e/0x70
[ 166.388030][ C1] blk_done_softirq+0x10a/0x160
[ 166.388048][ C1] handle_softirqs+0x1de/0x6d0
[ 166.388065][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 166.388081][ C1] run_ksoftirqd+0x52/0x180
[ 166.388097][ C1] smpboot_thread_fn+0x541/0xa50
[ 166.388113][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 166.388130][ C1] kthread+0x388/0x470
[ 166.388148][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 166.388165][ C1] ? __pfx_kthread+0x10/0x10
[ 166.388184][ C1] ret_from_fork+0x514/0xb70
[ 166.388203][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 166.388219][ C1] ? __switch_to+0xc79/0x1410
[ 166.388250][ C1] ? __pfx_kthread+0x10/0x10
[ 166.388265][ C1] ret_from_fork_asm+0x1a/0x30
[ 166.388287][ C1]
[ 166.388297][ C1]
[ 166.388308][ C1] Allocated by task 6586:
[ 166.388315][ C1] kasan_save_track+0x3e/0x80
[ 166.388328][ C1] __kasan_kmalloc+0x93/0xb0
[ 166.388341][ C1] __kmalloc_cache_noprof+0x3a6/0x690
[ 166.388358][ C1] lmLogInit+0x3e5/0x1a00
[ 166.388374][ C1] lmLogOpen+0x4e1/0xfa0
[ 166.388388][ C1] jfs_mount_rw+0xee/0x670
[ 166.388403][ C1] jfs_fill_super+0x754/0xd80
[ 166.388415][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 166.388430][ C1] vfs_get_tree+0x92/0x2a0
[ 166.388442][ C1] do_new_mount+0x341/0xd30
[ 166.388459][ C1] __se_sys_mount+0x31d/0x420
[ 166.388474][ C1] do_syscall_64+0x15f/0xf80
[ 166.388489][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.388502][ C1]
[ 166.388505][ C1] Freed by task 6586:
[ 166.388512][ C1] kasan_save_track+0x3e/0x80
[ 166.388524][ C1] kasan_save_free_info+0x46/0x50
[ 166.388541][ C1] __kasan_slab_free+0x5c/0x80
[ 166.388552][ C1] kfree+0x1c5/0x6c0
[ 166.388563][ C1] lmLogShutdown+0x456/0x850
[ 166.388578][ C1] lmLogClose+0x28a/0x520
[ 166.388592][ C1] jfs_umount+0x2fb/0x3d0
[ 166.388606][ C1] jfs_fill_super+0x9c5/0xd80
[ 166.388616][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 166.388630][ C1] vfs_get_tree+0x92/0x2a0
[ 166.388643][ C1] do_new_mount+0x341/0xd30
[ 166.388660][ C1] __se_sys_mount+0x31d/0x420
[ 166.388675][ C1] do_syscall_64+0x15f/0xf80
[ 166.388690][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.388703][ C1]
[ 166.388706][ C1] The buggy address belongs to the object at ffff888029ff1c00
[ 166.388706][ C1] which belongs to the cache kmalloc-256 of size 256
[ 166.388721][ C1] The buggy address is located 8 bytes inside of
[ 166.388721][ C1] freed 256-byte region [ffff888029ff1c00, ffff888029ff1d00)
[ 166.388736][ C1]
[ 166.388739][ C1] The buggy address belongs to the physical page:
[ 166.388761][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29ff0
[ 166.388778][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 166.388792][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 166.388810][ C1] page_type: f5(slab)
[ 166.388826][ C1] raw: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122
[ 166.388840][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 166.388854][ C1] head: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122
[ 166.388869][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 166.388882][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 166.388895][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 166.388902][ C1] page dumped because: kasan: bad access detected
[ 166.388919][ C1] page_owner tracks the page as allocated
[ 166.388925][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10119961023, free_ts 0
[ 166.388954][ C1] post_alloc_hook+0x231/0x280
[ 166.388971][ C1] get_page_from_freelist+0x27c8/0x2840
[ 166.388989][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 166.389006][ C1] allocate_slab+0x77/0x660
[ 166.389023][ C1] refill_objects+0x33c/0x3d0
[ 166.389042][ C1] __pcs_replace_empty_main+0x373/0x720
[ 166.389063][ C1] __kmalloc_noprof+0x530/0x7b0
[ 166.389078][ C1] usb_hcd_submit_urb+0x786/0x1b50
[ 166.389096][ C1] usb_start_wait_urb+0x13f/0x5b0
[ 166.389110][ C1] usb_control_msg+0x234/0x3e0
[ 166.389124][ C1] usb_get_string+0xa1/0x3c0
[ 166.389140][ C1] usb_string_sub+0x76/0x420
[ 166.389155][ C1] usb_string+0x38f/0x7d0
[ 166.389168][ C1] usb_cache_string+0x7d/0xf0
[ 166.389182][ C1] usb_new_device+0x289/0x16e0
[ 166.389205][ C1] register_root_hub+0x270/0x5f0
[ 166.389227][ C1] page_owner free stack trace missing
[ 166.389242][ C1]
[ 166.389245][ C1] Memory state around the buggy address:
[ 166.389256][ C1] ffff888029ff1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.389268][ C1] ffff888029ff1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.389279][ C1] >ffff888029ff1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 166.389287][ C1] ^
[ 166.389296][ C1] ffff888029ff1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 166.389307][ C1] ffff888029ff1d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 166.389315][ C1] ==================================================================
[ 166.389414][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 166.389430][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 166.389452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 166.389463][ C1] Call Trace:
[ 166.389470][ C1]
[ 166.389478][ C1] vpanic+0x56c/0xa60
[ 166.389501][ C1] ? __pfx_vpanic+0x10/0x10
[ 166.389521][ C1] ? __pfx___schedule+0x10/0x10
[ 166.389541][ C1] panic+0xc5/0xd0
[ 166.389561][ C1] ? __pfx_panic+0x10/0x10
[ 166.389581][ C1] ? preempt_schedule_thunk+0x16/0x30
[ 166.389607][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.389629][ C1] check_panic_on_warn+0x89/0xb0
[ 166.389651][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.389672][ C1] end_report+0x73/0x170
[ 166.389692][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.389712][ C1] kasan_report+0x128/0x150
[ 166.389733][ C1] ? lbmIODone+0x1312/0x16c0
[ 166.389756][ C1] lbmIODone+0x1312/0x16c0
[ 166.389778][ C1] ? blkg_put+0x22/0x240
[ 166.389793][ C1] ? blkg_put+0x22/0x240
[ 166.389809][ C1] ? blkg_put+0x18d/0x240
[ 166.389825][ C1] ? bio_endio+0x989/0x9d0
[ 166.389846][ C1] blk_update_request+0x57e/0xe60
[ 166.389869][ C1] blk_mq_end_request+0x3e/0x70
[ 166.389889][ C1] blk_done_softirq+0x10a/0x160
[ 166.389910][ C1] handle_softirqs+0x1de/0x6d0
[ 166.389934][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 166.389954][ C1] run_ksoftirqd+0x52/0x180
[ 166.389975][ C1] smpboot_thread_fn+0x541/0xa50
[ 166.389994][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 166.390018][ C1] kthread+0x388/0x470
[ 166.390037][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 166.390054][ C1] ? __pfx_kthread+0x10/0x10
[ 166.390073][ C1] ret_from_fork+0x514/0xb70
[ 166.390090][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 166.390105][ C1] ? __switch_to+0xc79/0x1410
[ 166.390128][ C1] ? __pfx_kthread+0x10/0x10
[ 166.390146][ C1] ret_from_fork_asm+0x1a/0x30
[ 166.390169][ C1]
[ 166.390790][ C1] Kernel Offset: disabled