Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts.
2026/04/15 09:02:08 parsed 1 programs
[ 91.904132][ T9] cfg80211: failed to load regulatory.db
[ 92.321684][ T5835] cgroup: Unknown subsys name 'net'
[ 92.564442][ T5835] cgroup: Unknown subsys name 'cpuset'
[ 92.617717][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 94.630581][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 101.820314][ T5884] chnl_net:caif_netlink_parms(): no params data found
[ 101.953963][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.954232][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.954404][ T5884] bridge_slave_0: entered allmulticast mode
[ 101.956958][ T5884] bridge_slave_0: entered promiscuous mode
[ 101.990158][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.990261][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.990425][ T5884] bridge_slave_1: entered allmulticast mode
[ 101.992318][ T5884] bridge_slave_1: entered promiscuous mode
[ 102.065000][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.074959][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.229354][ T5884] team0: Port device team_slave_0 added
[ 102.232190][ T5884] team0: Port device team_slave_1 added
[ 102.290021][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.290035][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.290055][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.293154][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.293167][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.293188][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.513241][ T5884] hsr_slave_0: entered promiscuous mode
[ 102.514557][ T5884] hsr_slave_1: entered promiscuous mode
[ 102.968123][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.014430][ T5884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.015234][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.044441][ T5884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.045320][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.080561][ T5884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 103.081354][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.120983][ T5884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 103.236768][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.282454][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.301072][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.301356][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.356402][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.356523][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.632583][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.702110][ T5884] veth0_vlan: entered promiscuous mode
[ 103.715885][ T5884] veth1_vlan: entered promiscuous mode
[ 103.766916][ T5884] veth0_macvtap: entered promiscuous mode
[ 103.775932][ T5884] veth1_macvtap: entered promiscuous mode
[ 103.815403][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.831002][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.850164][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.854608][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.855926][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.898815][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.833522][ T3500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.378721][ T3500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.861448][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.863172][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.864087][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.865764][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.866574][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.171722][ T3500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.897571][ T3500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.233472][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.233498][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.391192][ T3500] bridge_slave_1: left allmulticast mode
[ 107.391269][ T3500] bridge_slave_1: left promiscuous mode
[ 107.396597][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.508539][ T3500] bridge_slave_0: left allmulticast mode
[ 107.508563][ T3500] bridge_slave_0: left promiscuous mode
[ 107.508750][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.177957][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 108.257923][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 108.279629][ T3500] bond0 (unregistering): Released all slaves
[ 108.378405][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.378426][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.668697][ T3500] hsr_slave_0: left promiscuous mode
[ 108.707349][ T3500] hsr_slave_1: left promiscuous mode
[ 108.708680][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 108.712652][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 108.749103][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 108.749131][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.854251][ T3500] veth1_macvtap: left promiscuous mode
[ 108.855894][ T3500] veth0_macvtap: left promiscuous mode
[ 108.856739][ T3500] veth1_vlan: left promiscuous mode
[ 108.876864][ T3500] veth0_vlan: left promiscuous mode
[ 109.620309][ T3500] team0 (unregistering): Port device team_slave_1 removed
[ 109.678066][ T3500] team0 (unregistering): Port device team_slave_0 removed
[ 109.882526][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1
2026/04/15 09:02:30 executed programs: 0
[ 110.779694][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.797391][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.798421][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.800353][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.822610][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 110.874841][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2
[ 111.475520][ T5969] chnl_net:caif_netlink_parms(): no params data found
[ 111.564645][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3
[ 112.078309][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.078422][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.078594][ T5969] bridge_slave_0: entered allmulticast mode
[ 112.080747][ T5969] bridge_slave_0: entered promiscuous mode
[ 112.096577][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.096904][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.098971][ T5969] bridge_slave_1: entered allmulticast mode
[ 112.106295][ T5969] bridge_slave_1: entered promiscuous mode
[ 112.226479][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.244877][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.317009][ T5969] team0: Port device team_slave_0 added
[ 112.326489][ T5969] team0: Port device team_slave_1 added
[ 112.403245][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.403264][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.403293][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.405655][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.405672][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.405700][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.774403][ T5969] hsr_slave_0: entered promiscuous mode
[ 112.775557][ T5969] hsr_slave_1: entered promiscuous mode
[ 112.929251][ T5149] Bluetooth: hci0: command tx timeout
[ 115.007469][ T5149] Bluetooth: hci0: command tx timeout
[ 115.383931][ T5969] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.423115][ T5969] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 115.424081][ T5969] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.459934][ T5969] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 115.460728][ T5969] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.500353][ T5969] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 115.501209][ T5969] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.541822][ T5969] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 115.634003][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.664039][ T5969] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.681852][ T174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.681989][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.723225][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.723371][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.990778][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.054681][ T5969] veth0_vlan: entered promiscuous mode
[ 116.081808][ T5969] veth1_vlan: entered promiscuous mode
[ 116.162078][ T5969] veth0_macvtap: entered promiscuous mode
[ 116.173810][ T5969] veth1_macvtap: entered promiscuous mode
[ 116.200324][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.204747][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.245381][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.245614][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.250664][ T1188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.281951][ T1188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.674940][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.674963][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.746867][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.746890][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/15 09:02:36 executed programs: 2
[ 117.087226][ T5149] Bluetooth: hci0: command tx timeout
[ 117.175109][ T6071] loop0: detected capacity change from 0 to 32768
[ 117.188744][ T6071] =======================================================
[ 117.188744][ T6071] WARNING: The mand mount option has been deprecated and
[ 117.188744][ T6071] and is ignored by this kernel. Remove the mand
[ 117.188744][ T6071] option from the mount to silence this warning.
[ 117.188744][ T6071] =======================================================
[ 117.954012][ T6072] loop0: detected capacity change from 0 to 32768
[ 118.461540][ T6073] loop0: detected capacity change from 0 to 32768
[ 118.952566][ T6074] loop0: detected capacity change from 0 to 32768
[ 119.167213][ T5149] Bluetooth: hci0: command tx timeout
[ 119.405952][ T6075] loop0: detected capacity change from 0 to 32768
[ 119.840663][ T6076] loop0: detected capacity change from 0 to 32768
[ 120.241944][ T6077] loop0: detected capacity change from 0 to 32768
[ 120.702578][ T6078] loop0: detected capacity change from 0 to 32768
[ 121.114785][ T6079] loop0: detected capacity change from 0 to 32768
[ 121.593678][ T6080] loop0: detected capacity change from 0 to 32768
2026/04/15 09:02:41 executed programs: 13
[ 122.498854][ T6082] set_capacity_and_notify: 1 callbacks suppressed
[ 122.498869][ T6082] loop0: detected capacity change from 0 to 32768
[ 122.941083][ T6083] loop0: detected capacity change from 0 to 32768
[ 123.328961][ T6084] loop0: detected capacity change from 0 to 32768
[ 123.735057][ T6085] loop0: detected capacity change from 0 to 32768
[ 124.134615][ T6086] loop0: detected capacity change from 0 to 32768
[ 124.559104][ T6087] loop0: detected capacity change from 0 to 32768
[ 124.982657][ T6089] loop0: detected capacity change from 0 to 32768
[ 125.411879][ T6092] loop0: detected capacity change from 0 to 32768
[ 125.839912][ T6095] loop0: detected capacity change from 0 to 32768
[ 126.260534][ T6096] loop0: detected capacity change from 0 to 32768
2026/04/15 09:02:46 executed programs: 25
[ 127.882617][ T6101] set_capacity_and_notify: 3 callbacks suppressed
[ 127.882631][ T6101] loop0: detected capacity change from 0 to 32768
[ 128.290826][ T6102] loop0: detected capacity change from 0 to 32768
[ 128.728169][ T6103] loop0: detected capacity change from 0 to 32768
[ 129.123835][ T6104] loop0: detected capacity change from 0 to 32768
[ 129.522660][ T6105] loop0: detected capacity change from 0 to 32768
[ 129.943379][ T6106] loop0: detected capacity change from 0 to 32768
[ 130.022637][ C1] ==================================================================
[ 130.022658][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 130.022710][ C1] Read of size 4 at addr ffff88802a45a608 by task ksoftirqd/1/31
[ 130.022728][ C1]
[ 130.022760][ C1] CPU: 1 UID: 0 PID: 31 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 130.022786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 130.022808][ C1] Call Trace:
[ 130.022821][ C1]
[ 130.022831][ C1] dump_stack_lvl+0xe8/0x150
[ 130.022859][ C1] print_address_description+0x55/0x1e0
[ 130.022884][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.022916][ C1] print_report+0x58/0x70
[ 130.022937][ C1] kasan_report+0x117/0x150
[ 130.022971][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.023009][ C1] lbmIODone+0x1312/0x16c0
[ 130.023043][ C1] ? blkg_put+0x22/0x240
[ 130.023075][ C1] ? blkg_put+0x22/0x240
[ 130.023105][ C1] ? blkg_put+0x18d/0x240
[ 130.023137][ C1] ? bio_endio+0x989/0x9d0
[ 130.023160][ C1] blk_update_request+0x57e/0xe60
[ 130.023190][ C1] blk_mq_end_request+0x3e/0x70
[ 130.023213][ C1] blk_done_softirq+0x10a/0x160
[ 130.023249][ C1] handle_softirqs+0x1de/0x6d0
[ 130.023277][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.023302][ C1] run_ksoftirqd+0x52/0x180
[ 130.023328][ C1] smpboot_thread_fn+0x541/0xa50
[ 130.023354][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.023382][ C1] kthread+0x388/0x470
[ 130.023410][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 130.023436][ C1] ? __pfx_kthread+0x10/0x10
[ 130.023465][ C1] ret_from_fork+0x514/0xb70
[ 130.023490][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 130.023513][ C1] ? __switch_to+0xc79/0x1410
[ 130.023548][ C1] ? __pfx_kthread+0x10/0x10
[ 130.023576][ C1] ret_from_fork_asm+0x1a/0x30
[ 130.023612][ C1]
[ 130.023628][ C1]
[ 130.023634][ C1] Allocated by task 6106:
[ 130.023644][ C1] kasan_save_track+0x3e/0x80
[ 130.023671][ C1] __kasan_kmalloc+0x93/0xb0
[ 130.023698][ C1] __kmalloc_cache_noprof+0x3a6/0x690
[ 130.023729][ C1] lmLogInit+0x3e5/0x1a00
[ 130.023757][ C1] lmLogOpen+0x4e1/0xfa0
[ 130.023785][ C1] jfs_mount_rw+0xee/0x670
[ 130.023813][ C1] jfs_fill_super+0x754/0xd80
[ 130.023834][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 130.023869][ C1] vfs_get_tree+0x92/0x2a0
[ 130.023898][ C1] do_new_mount+0x341/0xd30
[ 130.023919][ C1] __se_sys_mount+0x31d/0x420
[ 130.023942][ C1] do_syscall_64+0x15f/0xf80
[ 130.023972][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.023993][ C1]
[ 130.023998][ C1] Freed by task 5969:
[ 130.024008][ C1] kasan_save_track+0x3e/0x80
[ 130.024033][ C1] kasan_save_free_info+0x46/0x50
[ 130.024054][ C1] __kasan_slab_free+0x5c/0x80
[ 130.024081][ C1] kfree+0x1c5/0x6c0
[ 130.024105][ C1] lmLogShutdown+0x456/0x850
[ 130.024135][ C1] lmLogClose+0x28a/0x520
[ 130.024164][ C1] jfs_umount+0x2fb/0x3d0
[ 130.024191][ C1] jfs_put_super+0x8c/0x190
[ 130.024213][ C1] generic_shutdown_super+0x13d/0x2d0
[ 130.024239][ C1] kill_block_super+0x44/0x90
[ 130.024269][ C1] deactivate_locked_super+0xbc/0x130
[ 130.024294][ C1] cleanup_mnt+0x437/0x4d0
[ 130.024321][ C1] task_work_run+0x1d9/0x270
[ 130.024349][ C1] exit_to_user_mode_loop+0xed/0x480
[ 130.024375][ C1] do_syscall_64+0x33e/0xf80
[ 130.024404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.024425][ C1]
[ 130.024430][ C1] The buggy address belongs to the object at ffff88802a45a600
[ 130.024430][ C1] which belongs to the cache kmalloc-256 of size 256
[ 130.024448][ C1] The buggy address is located 8 bytes inside of
[ 130.024448][ C1] freed 256-byte region [ffff88802a45a600, ffff88802a45a700)
[ 130.024471][ C1]
[ 130.024476][ C1] The buggy address belongs to the physical page:
[ 130.024497][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a45a
[ 130.024519][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 130.024537][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 130.024559][ C1] page_type: f5(slab)
[ 130.024579][ C1] raw: 0080000000000040 ffff88801a02cb40 dead000000000100 dead000000000122
[ 130.024598][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 130.024625][ C1] head: 0080000000000040 ffff88801a02cb40 dead000000000100 dead000000000122
[ 130.024644][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 130.024664][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 130.024683][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 130.024694][ C1] page dumped because: kasan: bad access detected
[ 130.024710][ C1] page_owner tracks the page as allocated
[ 130.024719][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 155, tgid 155 (kworker/u8:6), ts 12504727555, free_ts 0
[ 130.024757][ C1] post_alloc_hook+0x231/0x280
[ 130.024786][ C1] get_page_from_freelist+0x27d6/0x2850
[ 130.024819][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 130.024854][ C1] allocate_slab+0x77/0x660
[ 130.024875][ C1] refill_objects+0x33c/0x3d0
[ 130.024894][ C1] __pcs_replace_empty_main+0x373/0x720
[ 130.024917][ C1] __kmalloc_cache_noprof+0x44e/0x690
[ 130.024945][ C1] scsi_probe_and_add_lun+0x2f8/0x48e0
[ 130.024974][ C1] __scsi_scan_target+0x1f0/0xe10
[ 130.025000][ C1] scsi_scan_host_selected+0x3d3/0x780
[ 130.025028][ C1] do_scan_async+0x124/0x6f0
[ 130.025054][ C1] async_run_entry_fn+0xa8/0x440
[ 130.025076][ C1] process_scheduled_works+0xb68/0x1910
[ 130.025096][ C1] worker_thread+0xa90/0x1040
[ 130.025116][ C1] kthread+0x388/0x470
[ 130.025141][ C1] ret_from_fork+0x514/0xb70
[ 130.025161][ C1] page_owner free stack trace missing
[ 130.025169][ C1]
[ 130.025174][ C1] Memory state around the buggy address:
[ 130.025185][ C1] ffff88802a45a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.025200][ C1] ffff88802a45a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.025215][ C1] >ffff88802a45a600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.025226][ C1] ^
[ 130.025237][ C1] ffff88802a45a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 130.025251][ C1] ffff88802a45a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 130.025262][ C1] ==================================================================
[ 130.029938][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 130.029958][ C1] CPU: 1 UID: 0 PID: 31 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 130.029979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 130.029990][ C1] Call Trace:
[ 130.029996][ C1]
[ 130.030004][ C1] vpanic+0x56c/0xa60
[ 130.030031][ C1] ? __pfx_vpanic+0x10/0x10
[ 130.030053][ C1] ? __pfx___schedule+0x10/0x10
[ 130.030082][ C1] panic+0xc5/0xd0
[ 130.030100][ C1] ? __pfx_panic+0x10/0x10
[ 130.030119][ C1] ? preempt_schedule_thunk+0x16/0x30
[ 130.030148][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.030174][ C1] check_panic_on_warn+0x89/0xb0
[ 130.030200][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.030225][ C1] end_report+0x73/0x170
[ 130.030250][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.030275][ C1] kasan_report+0x128/0x150
[ 130.030301][ C1] ? lbmIODone+0x1312/0x16c0
[ 130.030331][ C1] lbmIODone+0x1312/0x16c0
[ 130.030359][ C1] ? blkg_put+0x22/0x240
[ 130.030387][ C1] ? blkg_put+0x22/0x240
[ 130.030411][ C1] ? blkg_put+0x18d/0x240
[ 130.030440][ C1] ? bio_endio+0x989/0x9d0
[ 130.030463][ C1] blk_update_request+0x57e/0xe60
[ 130.030495][ C1] blk_mq_end_request+0x3e/0x70
[ 130.030519][ C1] blk_done_softirq+0x10a/0x160
[ 130.030555][ C1] handle_softirqs+0x1de/0x6d0
[ 130.030604][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.030639][ C1] run_ksoftirqd+0x52/0x180
[ 130.030667][ C1] smpboot_thread_fn+0x541/0xa50
[ 130.030693][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 130.030724][ C1] kthread+0x388/0x470
[ 130.030753][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 130.030779][ C1] ? __pfx_kthread+0x10/0x10
[ 130.030842][ C1] ret_from_fork+0x514/0xb70
[ 130.030869][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 130.030892][ C1] ? __switch_to+0xc79/0x1410
[ 130.030944][ C1] ? __pfx_kthread+0x10/0x10
[ 130.030973][ C1] ret_from_fork_asm+0x1a/0x30
[ 130.031038][ C1]
[ 130.032050][ C1] Kernel Offset: disabled