Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts.
2026/05/15 06:02:20 parsed 1 programs
[ 101.940234][ T5623] cgroup: Unknown subsys name 'net'
[ 102.160624][ T5623] cgroup: Unknown subsys name 'cpuset'
[ 102.206413][ T5623] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 103.912617][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.461734][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.462877][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.463058][ T5637] bridge_slave_0: entered allmulticast mode
[ 107.464856][ T5637] bridge_slave_0: entered promiscuous mode
[ 107.479932][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.480042][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.480215][ T5637] bridge_slave_1: entered allmulticast mode
[ 107.482674][ T5637] bridge_slave_1: entered promiscuous mode
[ 107.538632][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.541568][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.574437][ T5637] team0: Port device team_slave_0 added
[ 107.579984][ T5637] team0: Port device team_slave_1 added
[ 107.607284][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.607296][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.607310][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.610426][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.610440][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.610465][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.680584][ T5637] hsr_slave_0: entered promiscuous mode
[ 107.681966][ T5637] hsr_slave_1: entered promiscuous mode
[ 107.897945][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.940038][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 107.944457][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.965108][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 107.967655][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.000060][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 108.002533][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.022658][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 108.074011][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.074141][ T5637] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.074780][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.074864][ T5637] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.182177][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.240857][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.276291][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.481101][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.522929][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.523438][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.544298][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.544434][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.954561][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.024915][ T5637] veth0_vlan: entered promiscuous mode
[ 109.037219][ T5637] veth1_vlan: entered promiscuous mode
[ 109.082104][ T5637] veth0_macvtap: entered promiscuous mode
[ 109.092444][ T5637] veth1_macvtap: entered promiscuous mode
[ 109.117068][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.133742][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.155038][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.165112][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.194071][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.195510][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.920455][ T1456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.340798][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.340822][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.421621][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.421642][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.792749][ T1456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.768365][ T1456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.328315][ T1456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.066213][ T1456] bridge_slave_1: left allmulticast mode
[ 113.066409][ T1456] bridge_slave_1: left promiscuous mode
[ 113.075505][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.196986][ T1456] bridge_slave_0: left allmulticast mode
[ 113.197011][ T1456] bridge_slave_0: left promiscuous mode
[ 113.197173][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.916742][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 113.996470][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 114.038090][ T1456] bond0 (unregistering): Released all slaves
[ 114.278254][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[ 114.577459][ T1456] hsr_slave_0: left promiscuous mode
[ 114.619454][ T1456] hsr_slave_1: left promiscuous mode
[ 114.620886][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.620980][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.686789][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.686817][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.824263][ T1456] veth1_macvtap: left promiscuous mode
[ 114.824498][ T1456] veth0_macvtap: left promiscuous mode
[ 114.824766][ T1456] veth1_vlan: left promiscuous mode
[ 114.855850][ T1456] veth0_vlan: left promiscuous mode
[ 115.580698][ T1456] team0 (unregistering): Port device team_slave_1 removed
[ 115.616485][ T1456] team0 (unregistering): Port device team_slave_0 removed
[ 115.812466][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[ 116.664994][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[ 116.979085][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.020507][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.033569][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.043141][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.048402][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.049395][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
2026/05/15 06:02:40 executed programs: 0
[ 119.714345][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 119.726847][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 119.728453][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 119.734057][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 119.734602][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 120.868967][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.869107][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.869235][ T5811] bridge_slave_0: entered allmulticast mode
[ 120.870658][ T5811] bridge_slave_0: entered promiscuous mode
[ 120.879517][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.879708][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.879880][ T5811] bridge_slave_1: entered allmulticast mode
[ 120.883932][ T5811] bridge_slave_1: entered promiscuous mode
[ 120.935651][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.939805][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.971827][ T5811] team0: Port device team_slave_0 added
[ 120.973889][ T5811] team0: Port device team_slave_1 added
[ 121.008801][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.008814][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.008828][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.010128][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.010140][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.010158][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.302342][ T5811] hsr_slave_0: entered promiscuous mode
[ 121.303059][ T5811] hsr_slave_1: entered promiscuous mode
[ 121.828230][ T59] Bluetooth: hci0: command tx timeout
[ 123.430729][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.473864][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 123.488299][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.531582][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 123.532750][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.608627][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 123.610905][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.654879][ T5811] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 123.829819][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[ 123.865322][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[ 123.883285][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.883493][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 123.905959][ T59] Bluetooth: hci0: command tx timeout
[ 123.911295][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.911425][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.711908][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 124.829932][ T5811] veth0_vlan: entered promiscuous mode
[ 124.845337][ T5811] veth1_vlan: entered promiscuous mode
[ 124.891652][ T5811] veth0_macvtap: entered promiscuous mode
[ 124.903710][ T5811] veth1_macvtap: entered promiscuous mode
[ 124.967751][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.987598][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.005364][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.005600][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.010493][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.019398][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.424645][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.424662][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.505518][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.505538][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/15 06:02:46 executed programs: 2
[ 125.985966][ T59] Bluetooth: hci0: command tx timeout
[ 126.184395][ T5948] loop0: detected capacity change from 0 to 32768
[ 126.952222][ T5966] loop0: detected capacity change from 0 to 32768
[ 127.378330][ T5967] loop0: detected capacity change from 0 to 32768
[ 127.778765][ T5968] loop0: detected capacity change from 0 to 32768
[ 128.066241][ T59] Bluetooth: hci0: command tx timeout
[ 128.131885][ T5969] loop0: detected capacity change from 0 to 32768
[ 128.503176][ T5970] loop0: detected capacity change from 0 to 32768
[ 128.869219][ T5971] loop0: detected capacity change from 0 to 32768
[ 129.258516][ T5972] loop0: detected capacity change from 0 to 32768
[ 129.679490][ T5973] loop0: detected capacity change from 0 to 32768
[ 130.081179][ T5974] loop0: detected capacity change from 0 to 32768
2026/05/15 06:02:51 executed programs: 14
[ 131.209244][ T5977] set_capacity_and_notify: 2 callbacks suppressed
[ 131.209256][ T5977] loop0: detected capacity change from 0 to 32768
[ 131.565473][ T5978] loop0: detected capacity change from 0 to 32768
[ 131.913482][ T5979] loop0: detected capacity change from 0 to 32768
[ 132.267684][ T5980] loop0: detected capacity change from 0 to 32768
[ 132.658098][ T5981] loop0: detected capacity change from 0 to 32768
[ 132.793520][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.793610][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.047923][ T5982] loop0: detected capacity change from 0 to 32768
[ 133.418228][ T5983] loop0: detected capacity change from 0 to 32768
[ 133.786406][ T5984] loop0: detected capacity change from 0 to 32768
[ 134.155121][ T5985] loop0: detected capacity change from 0 to 32768
[ 134.520684][ T5986] loop0: detected capacity change from 0 to 32768
2026/05/15 06:02:56 executed programs: 28
[ 136.351994][ T5991] set_capacity_and_notify: 4 callbacks suppressed
[ 136.352006][ T5991] loop0: detected capacity change from 0 to 32768
[ 136.711825][ T5992] loop0: detected capacity change from 0 to 32768
[ 137.068778][ T5993] loop0: detected capacity change from 0 to 32768
[ 137.416119][ T5994] loop0: detected capacity change from 0 to 32768
[ 137.794056][ T5995] loop0: detected capacity change from 0 to 32768
[ 138.162804][ T5996] loop0: detected capacity change from 0 to 32768
[ 138.514127][ T5997] loop0: detected capacity change from 0 to 32768
[ 138.877488][ T5998] loop0: detected capacity change from 0 to 32768
[ 139.238533][ T5999] loop0: detected capacity change from 0 to 32768
[ 139.583424][ T6000] loop0: detected capacity change from 0 to 32768
[ 140.028536][ C1] =========[ 140.028536][ C1] ==================================================================
[ 140.028551][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0
[ 140.028592][ C1] Read of size 4 at addr ffff8880355b8608 by task ksoftirqd/1/30
[ 140.028607][ C1]
[ 140.028632][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.028651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 140.028671][ C1] Call Trace:
[ 140.028679][ C1]
[ 140.028687][ C1] dump_stack_lvl+0xe8/0x150
[ 140.028712][ C1] print_address_description+0x55/0x1e0
[ 140.028734][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.028757][ C1] print_report+0x58/0x70
[ 140.028775][ C1] kasan_report+0x117/0x150
[ 140.028799][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.028825][ C1] lbmIODone+0x1312/0x16c0
[ 140.028849][ C1] ? blkg_put+0x22/0x240
[ 140.028865][ C1] ? blkg_put+0x22/0x240
[ 140.028882][ C1] ? blkg_put+0x18d/0x240
[ 140.028900][ C1] ? bio_endio+0x989/0x9d0
[ 140.028922][ C1] blk_update_request+0x57e/0xe60
[ 140.028948][ C1] blk_mq_end_request+0x3e/0x70
[ 140.028967][ C1] blk_done_softirq+0x10a/0x160
[ 140.028993][ C1] handle_softirqs+0x1de/0x6d0
[ 140.029017][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 140.029038][ C1] run_ksoftirqd+0x52/0x180
[ 140.029059][ C1] smpboot_thread_fn+0x541/0xa50
[ 140.029080][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 140.029103][ C1] kthread+0x388/0x470
[ 140.029126][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 140.029146][ C1] ? __pfx_kthread+0x10/0x10
[ 140.029169][ C1] ret_from_fork+0x514/0xb70
[ 140.029190][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 140.029211][ C1] ? __switch_to+0xc79/0x1410
[ 140.029238][ C1] ? __pfx_kthread+0x10/0x10
[ 140.029262][ C1] ret_from_fork_asm+0x1a/0x30
[ 140.029292][ C1]
[ 140.029299][ C1]
[ 140.029310][ C1] Allocated by task 6001:
[ 140.029319][ C1] kasan_save_track+0x3e/0x80
[ 140.029336][ C1] __kasan_kmalloc+0x93/0xb0
[ 140.029353][ C1] __kmalloc_cache_noprof+0x3a6/0x690
[ 140.029372][ C1] lmLogInit+0x3e5/0x1a00
[ 140.029392][ C1] lmLogOpen+0x4e1/0xfa0
[ 140.029409][ C1] jfs_mount_rw+0xee/0x670
[ 140.029429][ C1] jfs_fill_super+0x754/0xd80
[ 140.029444][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 140.029463][ C1] vfs_get_tree+0x92/0x2a0
[ 140.029480][ C1] do_new_mount+0x341/0xd30
[ 140.029503][ C1] __se_sys_mount+0x31d/0x420
[ 140.029526][ C1] do_syscall_64+0x15f/0xf80
[ 140.029548][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.029566][ C1]
[ 140.029570][ C1] Freed by task 5811:
[ 140.029578][ C1] kasan_save_track+0x3e/0x80
[ 140.029591][ C1] kasan_save_free_info+0x46/0x50
[ 140.029614][ C1] __kasan_slab_free+0x5c/0x80
[ 140.029631][ C1] kfree+0x1c5/0x6c0
[ 140.029646][ C1] lmLogShutdown+0x456/0x850
[ 140.029666][ C1] lmLogClose+0x28a/0x520
[ 140.029690][ C1] jfs_umount+0x2fb/0x3d0
[ 140.029709][ C1] jfs_put_super+0x8c/0x190
[ 140.029724][ C1] generic_shutdown_super+0x13d/0x2d0
[ 140.029741][ C1] kill_block_super+0x44/0x90
[ 140.029760][ C1] deactivate_locked_super+0xbc/0x130
[ 140.029776][ C1] cleanup_mnt+0x437/0x4d0
[ 140.029794][ C1] task_work_run+0x1d9/0x270
[ 140.029816][ C1] exit_to_user_mode_loop+0xf3/0x4d0
[ 140.029837][ C1] do_syscall_64+0x33e/0xf80
[ 140.029858][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.029890][ C1]
[ 140.029894][ C1] The buggy address belongs to the object at ffff8880355b8600
[ 140.029894][ C1] which belongs to the cache kmalloc-256 of size 256
[ 140.029909][ C1] The buggy address is located 8 bytes inside of
[ 140.029909][ C1] freed 256-byte region [ffff8880355b8600, ffff8880355b8700)
[ 140.029927][ C1]
[ 140.029932][ C1] The buggy address belongs to the physical page:
[ 140.029950][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880355b8800 pfn:0x355b8
[ 140.029969][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 140.029991][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 140.030011][ C1] page_type: f5(slab)
[ 140.030028][ C1] raw: 0080000000000240 ffff88801a010b40 ffffea0000a45c10 ffff88801a00b988
[ 140.030045][ C1] raw: ffff8880355b8800 0000000800100004 00000000f5000000 0000000000000000
[ 140.030062][ C1] head: 0080000000000240 ffff88801a010b40 ffffea0000a45c10 ffff88801a00b988
[ 140.030078][ C1] head: ffff8880355b8800 0000000800100004 00000000f5000000 0000000000000000
[ 140.030094][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 140.030109][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 140.030118][ C1] page dumped because: kasan: bad access detected
[ 140.030132][ C1] page_owner tracks the page as allocated
[ 140.030138][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6001, tgid 6001 (syz.0.53), ts 139967136584, free_ts 139959720129
[ 140.030170][ C1] post_alloc_hook+0x231/0x280
[ 140.030190][ C1] get_page_from_freelist+0x27c8/0x2840
[ 140.030209][ C1] __alloc_frozen_pages_noprof+0x18d/0x380
[ 140.030231][ C1] allocate_slab+0x77/0x660
[ 140.030254][ C1] refill_objects+0x33c/0x3d0
[ 140.030276][ C1] __pcs_replace_empty_main+0x373/0x720
[ 140.030299][ C1] __kmalloc_cache_noprof+0x44e/0x690
[ 140.030318][ C1] lmLogInit+0x3e5/0x1a00
[ 140.030338][ C1] lmLogOpen+0x4e1/0xfa0
[ 140.030356][ C1] jfs_mount_rw+0xee/0x670
[ 140.030375][ C1] jfs_fill_super+0x754/0xd80
[ 140.030390][ C1] get_tree_bdev_flags+0x431/0x4f0
[ 140.030408][ C1] vfs_get_tree+0x92/0x2a0
[ 140.030425][ C1] do_new_mount+0x341/0xd30
[ 140.030447][ C1] __se_sys_mount+0x31d/0x420
[ 140.030476][ C1] do_syscall_64+0x15f/0xf80
[ 140.030497][ C1] page last free pid 6001 tgid 6001 stack trace:
[ 140.030507][ C1] __free_frozen_pages+0xfa6/0x10f0
[ 140.030525][ C1] __slab_free+0x252/0x2a0
[ 140.030543][ C1] qlist_free_all+0x99/0x100
[ 140.030558][ C1] kasan_quarantine_reduce+0x148/0x160
[ 140.030574][ C1] __kasan_slab_alloc+0x22/0x80
[ 140.030590][ C1] kmem_cache_alloc_noprof+0x33b/0x680
[ 140.030604][ C1] do_getname+0x2e/0x250
[ 140.030622][ C1] do_sys_openat2+0xca/0x200
[ 140.030641][ C1] __x64_sys_openat+0x138/0x170
[ 140.030662][ C1] do_syscall_64+0x15f/0xf80
[ 140.030680][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.030697][ C1]
[ 140.030700][ C1] Memory state around the buggy address:
[ 140.030709][ C1] ffff8880355b8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.030721][ C1] ffff8880355b8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.030733][ C1] >ffff8880355b8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.030742][ C1] ^
[ 140.030752][ C1] ffff8880355b8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 140.030764][ C1] ffff8880355b8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 140.030772][ C1] ==================================================================
[ 140.036744][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.036764][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.036786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 140.036797][ C1] Call Trace:
[ 140.036805][ C1]
[ 140.036812][ C1] vpanic+0x56c/0xa60
[ 140.036841][ C1] ? __pfx_vpanic+0x10/0x10
[ 140.036862][ C1] ? __pfx___schedule+0x10/0x10
[ 140.036887][ C1] panic+0xc5/0xd0
[ 140.036907][ C1] ? __pfx_panic+0x10/0x10
[ 140.036929][ C1] ? preempt_schedule_thunk+0x16/0x30
[ 140.036959][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.036988][ C1] check_panic_on_warn+0x89/0xb0
[ 140.037015][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.037038][ C1] end_report+0x73/0x170
[ 140.037058][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.037081][ C1] kasan_report+0x128/0x150
[ 140.037101][ C1] ? lbmIODone+0x1312/0x16c0
[ 140.037128][ C1] lbmIODone+0x1312/0x16c0
[ 140.037151][ C1] ? blkg_put+0x22/0x240
[ 140.037169][ C1] ? blkg_put+0x22/0x240
[ 140.037186][ C1] ? blkg_put+0x18d/0x240
[ 140.037203][ C1] ? bio_endio+0x989/0x9d0
[ 140.037225][ C1] blk_update_request+0x57e/0xe60
[ 140.037253][ C1] blk_mq_end_request+0x3e/0x70
[ 140.037274][ C1] blk_done_softirq+0x10a/0x160
[ 140.037296][ C1] handle_softirqs+0x1de/0x6d0
[ 140.037322][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 140.037344][ C1] run_ksoftirqd+0x52/0x180
[ 140.037365][ C1] smpboot_thread_fn+0x541/0xa50
[ 140.037387][ C1] ? smpboot_thread_fn+0x4d/0xa50
[ 140.037410][ C1] kthread+0x388/0x470
[ 140.037435][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 140.037455][ C1] ? __pfx_kthread+0x10/0x10
[ 140.037478][ C1] ret_from_fork+0x514/0xb70
[ 140.037499][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 140.037519][ C1] ? __switch_to+0xc79/0x1410
[ 140.037546][ C1] ? __pfx_kthread+0x10/0x10
[ 140.037569][ C1] ret_from_fork_asm+0x1a/0x30
[ 140.037598][ C1]
[ 140.037863][ C1] Kernel Offset: disabled