[ 92.108404][ T135] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts.
2026/04/30 21:38:23 parsed 1 programs
[ 98.691603][ T5608] cgroup: Unknown subsys name 'net'
[ 98.952408][ T5608] cgroup: Unknown subsys name 'cpuset'
[ 99.016754][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 101.050420][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 105.355525][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.385360][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.404980][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.407774][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.409919][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.074248][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.074273][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.184106][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.184128][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.896829][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.899016][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.901018][ T5680] bridge_slave_0: entered allmulticast mode
[ 110.903288][ T5680] bridge_slave_0: entered promiscuous mode
[ 110.951039][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.951125][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.951268][ T5680] bridge_slave_1: entered allmulticast mode
[ 110.953122][ T5680] bridge_slave_1: entered promiscuous mode
[ 111.019968][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.023118][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.081490][ T5680] team0: Port device team_slave_0 added
[ 111.148238][ T5680] team0: Port device team_slave_1 added
[ 111.189592][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.189610][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.189638][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.206384][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.206437][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.206514][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.343670][ T5680] hsr_slave_0: entered promiscuous mode
[ 111.344955][ T5680] hsr_slave_1: entered promiscuous mode
[ 111.647087][ T5680] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.694515][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 111.707598][ T5680] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.743586][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 111.754227][ T5680] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.793399][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 111.794439][ T5680] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.834506][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 112.153580][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.199720][ T5680] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.238793][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.238961][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.275940][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.276978][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.797373][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.908896][ T5680] veth0_vlan: entered promiscuous mode
[ 112.939544][ T5680] veth1_vlan: entered promiscuous mode
[ 112.999289][ T5680] veth0_macvtap: entered promiscuous mode
[ 113.012789][ T5680] veth1_macvtap: entered promiscuous mode
[ 113.041381][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.069901][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.096943][ T1439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.099079][ T1439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.102405][ T1439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.145887][ T1439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.914569][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/30 21:38:43 executed programs: 0
[ 115.117396][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 115.120533][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 115.121382][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 115.122465][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 115.123468][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.280020][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.883729][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.883892][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.884013][ T5732] bridge_slave_0: entered allmulticast mode
[ 115.898503][ T5732] bridge_slave_0: entered promiscuous mode
[ 115.913592][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.913806][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.914004][ T5732] bridge_slave_1: entered allmulticast mode
[ 115.922065][ T5732] bridge_slave_1: entered promiscuous mode
[ 116.101727][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.180807][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.183977][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.388268][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.428530][ T5732] team0: Port device team_slave_0 added
[ 116.508740][ T5732] team0: Port device team_slave_1 added
[ 116.553266][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.553282][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.553304][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.558402][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.558492][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.558570][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.700436][ T5732] hsr_slave_0: entered promiscuous mode
[ 116.701602][ T5732] hsr_slave_1: entered promiscuous mode
[ 116.702364][ T5732] debugfs: 'hsr0' already exists in 'hsr'
[ 116.702440][ T5732] Cannot create hsr debugfs directory
[ 117.228750][ T4912] Bluetooth: hci0: command tx timeout
[ 117.346486][ T43] bridge_slave_1: left allmulticast mode
[ 117.346723][ T43] bridge_slave_1: left promiscuous mode
[ 117.354221][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.477542][ T43] bridge_slave_0: left allmulticast mode
[ 117.477570][ T43] bridge_slave_0: left promiscuous mode
[ 117.477814][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.166877][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 118.246885][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 118.288515][ T43] bond0 (unregistering): Released all slaves
[ 118.318529][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1
[ 118.656702][ T43] hsr_slave_0: left promiscuous mode
[ 118.696280][ T43] hsr_slave_1: left promiscuous mode
[ 118.697398][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.697449][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.728831][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.728866][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.818765][ T43] veth1_macvtap: left promiscuous mode
[ 118.818957][ T43] veth0_macvtap: left promiscuous mode
[ 118.819152][ T43] veth1_vlan: left promiscuous mode
[ 118.819348][ T43] veth0_vlan: left promiscuous mode
[ 119.296167][ T4912] Bluetooth: hci0: command tx timeout
[ 119.546876][ T43] team0 (unregistering): Port device team_slave_1 removed
[ 119.606873][ T43] team0 (unregistering): Port device team_slave_0 removed
[ 120.850969][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.916438][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 120.918094][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.986554][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 120.992796][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 121.061418][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 121.064282][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 121.103661][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 121.376074][ T4912] Bluetooth: hci0: command tx timeout
[ 121.772717][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.814073][ T5732] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.850978][ T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.852027][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.909755][ T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.909947][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 122.599525][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 122.675205][ T5732] veth0_vlan: entered promiscuous mode
[ 122.692326][ T5732] veth1_vlan: entered promiscuous mode
[ 122.745148][ T5732] veth0_macvtap: entered promiscuous mode
[ 122.762019][ T5732] veth1_macvtap: entered promiscuous mode
[ 122.791124][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 122.812359][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 122.844435][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.845403][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.866994][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.875034][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.252977][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.252999][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.328741][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.328771][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/30 21:38:52 executed programs: 2
[ 123.456180][ T4912] Bluetooth: hci0: command tx timeout
[ 123.771695][ T5833] loop0: detected capacity change from 0 to 32768
[ 124.523190][ T5834] loop0: detected capacity change from 0 to 32768
[ 125.069134][ T5835] loop0: detected capacity change from 0 to 32768
[ 125.553066][ T5836] loop0: detected capacity change from 0 to 32768
[ 126.013565][ T5837] loop0: detected capacity change from 0 to 32768
[ 126.509714][ T5838] loop0: detected capacity change from 0 to 32768
[ 126.976868][ T5839] loop0: detected capacity change from 0 to 32768
[ 127.418956][ T5840] loop0: detected capacity change from 0 to 32768
[ 127.874327][ T5841] loop0: detected capacity change from 0 to 32768
[ 128.318241][ T5842] loop0: detected capacity change from 0 to 32768
2026/04/30 21:38:57 executed programs: 13
[ 129.152417][ T5844] set_capacity_and_notify: 1 callbacks suppressed
[ 129.152431][ T5844] loop0: detected capacity change from 0 to 32768
[ 129.611039][ T5845] loop0: detected capacity change from 0 to 32768
[ 130.039669][ T5846] loop0: detected capacity change from 0 to 32768
[ 130.459353][ T5847] loop0: detected capacity change from 0 to 32768
[ 130.900298][ T5848] loop0: detected capacity change from 0 to 32768
[ 131.321469][ T5851] loop0: detected capacity change from 0 to 32768
[ 131.760710][ T5853] loop0: detected capacity change from 0 to 32768
[ 132.192159][ T5856] loop0: detected capacity change from 0 to 32768
[ 132.650329][ T5858] loop0: detected capacity change from 0 to 32768
[ 133.061797][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.061885][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.084074][ T5859] loop0: detected capacity change from 0 to 32768
2026/04/30 21:39:02 executed programs: 25
[ 134.362049][ T5862] set_capacity_and_notify: 2 callbacks suppressed
[ 134.362063][ T5862] loop0: detected capacity change from 0 to 32768
[ 134.799013][ T5863] loop0: detected capacity change from 0 to 32768
[ 135.209668][ T5864] loop0: detected capacity change from 0 to 32768
[ 135.655885][ T5865] loop0: detected capacity change from 0 to 32768
[ 136.062351][ T5866] loop0: detected capacity change from 0 to 32768
[ 136.499648][ T5867] loop0: detected capacity change from 0 to 32768
[ 136.943882][ T5868] loop0: detected capacity change from 0 to 32768
[ 137.358729][ T5869] loop0: detected capacity change from 0 to 32768
[ 137.771567][ T5870] loop0: detected capacity change from 0 to 32768
[ 138.208422][ T5871] loop0: detected capacity change from 0 to 32768
2026/04/30 21:39:08 executed programs: 37
[ 139.495185][ T5874] set_capacity_and_notify: 2 callbacks suppressed
[ 139.495200][ T5874] loop0: detected capacity change from 0 to 32768
[ 139.893841][ T5875] loop0: detected capacity change from 0 to 32768
[ 140.335304][ T5876] loop0: detected capacity change from 0 to 32768
[ 140.733800][ T5877] loop0: detected capacity change from 0 to 32768
[ 141.135715][ T5878] loop0: detected capacity change from 0 to 32768
[ 141.579829][ T5879] loop0: detected capacity change from 0 to 32768
[ 141.999714][ T5880] loop0: detected capacity change from 0 to 32768
[ 142.420732][ T5881] loop0: detected capacity change from 0 to 32768
[ 142.876736][ T5882] loop0: detected capacity change from 0 to 32768
[ 143.289151][ T5883] loop0: detected capacity change from 0 to 32768
2026/04/30 21:39:13 executed programs: 49
[ 144.558871][ T5886] set_capacity_and_notify: 2 callbacks suppressed
[ 144.558903][ T5886] loop0: detected capacity change from 0 to 32768
[ 145.020508][ T5887] loop0: detected capacity change from 0 to 32768
[ 145.462759][ T5888] loop0: detected capacity change from 0 to 32768
[ 145.860187][ T5889] loop0: detected capacity change from 0 to 32768
[ 146.262120][ T5890] loop0: detected capacity change from 0 to 32768
[ 146.348909][ C1] ==================================================================
[ 146.348927][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 146.348982][ C1] Read of size 4 at addr ffff88803716b208 by task ksoftirqd/1/30
[ 146.349003][ C1]
[ 146.349032][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 146.349059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 146.349081][ C1] Call Trace:
[ 146.349090][ C1]
[ 146.349098][ C1] dump_stack_lvl+0xe8/0x150
[ 146.349127][ C1] print_address_description+0x55/0x1e0
[ 146.349154][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.349181][ C1] print_report+0x58/0x70
[ 146.349204][ C1] kasan_report+0x117/0x150
[ 146.349231][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.349271][ C1] lbmIODone+0x1312/0x16c0
[ 146.349298][ C1] ? blkg_put+0x22/0x240
[ 146.349318][ C1] ? blkg_put+0x22/0x240
[ 146.349338][ C1] ? blkg_put+0x18d/0x240
[ 146.349358][ C1] ? bio_endio+0x989/0x9d0
[ 146.349385][ C1] blk_update_request+0x57e/0xe60
[ 146.349417][ C1] blk_mq_end_request+0x3e/0x70
[ 146.349443][ C1] blk_done_softirq+0x10a/0x160
[ 146.349467][ C1] handle_softirqs+0x1de/0x6d0
[ 146.349497][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 146.349523][ C1] run_ksoftirqd+0x52/0x180
[ 146.349551][ C1] smpboot_thread_fn+0x541/0xa50
[ 146.349578][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 146.349610][ C1] kthread+0x388/0x470
[ 146.349640][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 146.349666][ C1] ? __pfx_kthread+0x10/0x10
[ 146.349696][ C1] ret_from_fork+0x514/0xb70
[ 146.349722][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 146.349746][ C1] ? __switch_to+0xc79/0x1410
[ 146.349781][ C1] ? __pfx_kthread+0x10/0x10
[ 146.349811][ C1] ret_from_fork_asm+0x1a/0x30
[ 146.349847][ C1]
[ 146.349855][ C1]
[ 146.349866][ C1] Allocated by task 5890:
[ 146.349877][ C1] kasan_save_track+0x3e/0x80
[ 146.349897][ C1] __kasan_kmalloc+0x93/0xb0
[ 146.349916][ C1] __kmalloc_cache_noprof+0x3a6/0x690
[ 146.349940][ C1] lmLogInit+0x3e5/0x1a00
[ 146.349963][ C1] lmLogOpen+0x4e1/0xfa0
[ 146.349986][ C1] jfs_mount_rw+0xee/0x670
[ 146.350008][ C1] jfs_fill_super+0x754/0xd80
[ 146.350039][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 146.350061][ C1] vfs_get_tree+0x92/0x2a0
[ 146.350083][ C1] do_new_mount+0x341/0xd30
[ 146.350111][ C1] __se_sys_mount+0x31d/0x420
[ 146.350144][ C1] do_syscall_64+0x15f/0xf80
[ 146.350164][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.350185][ C1]
[ 146.350190][ C1] Freed by task 5732:
[ 146.350200][ C1] kasan_save_track+0x3e/0x80
[ 146.350218][ C1] kasan_save_free_info+0x46/0x50
[ 146.350245][ C1] __kasan_slab_free+0x5c/0x80
[ 146.350272][ C1] kfree+0x1c5/0x6c0
[ 146.350290][ C1] lmLogShutdown+0x456/0x850
[ 146.350315][ C1] lmLogClose+0x28a/0x520
[ 146.350340][ C1] jfs_umount+0x2fb/0x3d0
[ 146.350362][ C1] jfs_put_super+0x8c/0x190
[ 146.350379][ C1] generic_shutdown_super+0x13d/0x2d0
[ 146.350398][ C1] kill_block_super+0x44/0x90
[ 146.350420][ C1] deactivate_locked_super+0xbc/0x130
[ 146.350438][ C1] cleanup_mnt+0x437/0x4d0
[ 146.350458][ C1] task_work_run+0x1d9/0x270
[ 146.350487][ C1] exit_to_user_mode_loop+0xed/0x480
[ 146.350512][ C1] do_syscall_64+0x33e/0xf80
[ 146.350532][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.350552][ C1]
[ 146.350557][ C1] The buggy address belongs to the object at ffff88803716b200
[ 146.350557][ C1] which belongs to the cache kmalloc-256 of size 256
[ 146.350576][ C1] The buggy address is located 8 bytes inside of
[ 146.350576][ C1] freed 256-byte region [ffff88803716b200, ffff88803716b300)
[ 146.350600][ C1]
[ 146.350605][ C1] The buggy address belongs to the physical page:
[ 146.350620][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3716a
[ 146.350641][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 146.350659][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 146.350683][ C1] page_type: f5(slab)
[ 146.350704][ C1] raw: 0080000000000040 ffff88801a00bb40 dead000000000100 dead000000000122
[ 146.350723][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 146.350743][ C1] head: 0080000000000040 ffff88801a00bb40 dead000000000100 dead000000000122
[ 146.350761][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 146.350781][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 146.350798][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 146.350809][ C1] page dumped because: kasan: bad access detected
[ 146.350824][ C1] page_owner tracks the page as allocated
[ 146.350831][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 31089275548, free_ts 0
[ 146.350868][ C1] post_alloc_hook+0x231/0x280
[ 146.350891][ C1] get_page_from_freelist+0x27c8/0x2840
[ 146.350918][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 146.350945][ C1] allocate_slab+0x77/0x660
[ 146.350972][ C1] refill_objects+0x33c/0x3d0
[ 146.350999][ C1] __pcs_replace_empty_main+0x373/0x720
[ 146.351029][ C1] __kmalloc_cache_noprof+0x44e/0x690
[ 146.351052][ C1] smk_fetch+0x95/0x140
[ 146.351069][ C1] smack_d_instantiate+0x757/0x990
[ 146.351096][ C1] security_d_instantiate+0x106/0x1d0
[ 146.351117][ C1] d_splice_alias_ops+0x71/0x3e0
[ 146.351140][ C1] ext4_lookup+0x302/0x710
[ 146.351160][ C1] path_openat+0x11cb/0x38a0
[ 146.351181][ C1] do_file_open+0x23e/0x4a0
[ 146.351202][ C1] do_sys_openat2+0x113/0x200
[ 146.351231][ C1] __x64_sys_openat+0x138/0x170
[ 146.351260][ C1] page_owner free stack trace missing
[ 146.351274][ C1]
[ 146.351279][ C1] Memory state around the buggy address:
[ 146.351291][ C1] ffff88803716b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 146.351306][ C1] ffff88803716b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 146.351321][ C1] >ffff88803716b200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 146.351331][ C1] ^
[ 146.351342][ C1] ffff88803716b280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 146.351356][ C1] ffff88803716b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 146.351367][ C1] ==================================================================
[ 146.352887][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 146.352908][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 146.352934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 146.352948][ C1] Call Trace:
[ 146.352956][ C1]
[ 146.352965][ C1] vpanic+0x56c/0xa60
[ 146.352999][ C1] ? __pfx_vpanic+0x10/0x10
[ 146.353027][ C1] ? __pfx___schedule+0x10/0x10
[ 146.353065][ C1] panic+0xc5/0xd0
[ 146.353092][ C1] ? __pfx_panic+0x10/0x10
[ 146.353119][ C1] ? preempt_schedule_thunk+0x16/0x30
[ 146.353158][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.353187][ C1] check_panic_on_warn+0x89/0xb0
[ 146.353221][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.353250][ C1] end_report+0x73/0x170
[ 146.353282][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.353310][ C1] kasan_report+0x128/0x150
[ 146.353336][ C1] ? lbmIODone+0x1312/0x16c0
[ 146.353369][ C1] lbmIODone+0x1312/0x16c0
[ 146.353397][ C1] ? blkg_put+0x22/0x240
[ 146.353417][ C1] ? blkg_put+0x22/0x240
[ 146.353437][ C1] ? blkg_put+0x18d/0x240
[ 146.353458][ C1] ? bio_endio+0x989/0x9d0
[ 146.353485][ C1] blk_update_request+0x57e/0xe60
[ 146.353518][ C1] blk_mq_end_request+0x3e/0x70
[ 146.353544][ C1] blk_done_softirq+0x10a/0x160
[ 146.353569][ C1] handle_softirqs+0x1de/0x6d0
[ 146.353598][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 146.353625][ C1] run_ksoftirqd+0x52/0x180
[ 146.353652][ C1] smpboot_thread_fn+0x541/0xa50
[ 146.353680][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 146.353711][ C1] kthread+0x388/0x470
[ 146.353742][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 146.353768][ C1] ? __pfx_kthread+0x10/0x10
[ 146.353798][ C1] ret_from_fork+0x514/0xb70
[ 146.353825][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 146.353849][ C1] ? __switch_to+0xc79/0x1410
[ 146.353883][ C1] ? __pfx_kthread+0x10/0x10
[ 146.353914][ C1] ret_from_fork_asm+0x1a/0x30
[ 146.353950][ C1]
[ 146.354123][ C1] Kernel Offset: disabled