[ 91.879927][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. 2026/07/28 23:55:32 parsed 1 programs 2026/07/28 23:55:32 serving rpc on tcp://34835 [ 101.125429][ T5615] cgroup: Unknown subsys name 'net' [ 101.365932][ T5615] cgroup: Unknown subsys name 'cpuset' [ 101.430796][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.359553][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.672642][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.673976][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.674117][ T5652] bridge_slave_0: entered allmulticast mode [ 109.676211][ T5652] bridge_slave_0: entered promiscuous mode [ 109.686397][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.686762][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.687471][ T5652] bridge_slave_1: entered allmulticast mode [ 109.696327][ T5652] bridge_slave_1: entered promiscuous mode [ 109.764753][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.767884][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.817414][ T5652] team0: Port device team_slave_0 added [ 109.819882][ T5652] team0: Port device team_slave_1 added [ 109.862643][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.862657][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.862676][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.865590][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.865601][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.865621][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.004637][ T5652] hsr_slave_0: entered promiscuous mode [ 110.005868][ T5652] hsr_slave_1: entered promiscuous mode [ 110.640982][ T5652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.695449][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.699925][ T5652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.754418][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.757327][ T5652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.788961][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.799984][ T5652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.844081][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.973711][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.018523][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.037247][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.037408][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.067058][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.069835][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.725038][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.882060][ T5652] veth0_vlan: entered promiscuous mode [ 111.914304][ T5652] veth1_vlan: entered promiscuous mode [ 111.968347][ T5652] veth0_macvtap: entered promiscuous mode [ 111.982128][ T5652] veth1_macvtap: entered promiscuous mode [ 112.009105][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.028553][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.047071][ T1026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.065870][ T1026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.066740][ T1026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.066982][ T1026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.896946][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.484298][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.284108][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.691122][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.157103][ T5716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.175114][ T5716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.176090][ T5716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.203885][ T5716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.205326][ T5716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.493650][ T13] bridge_slave_1: left allmulticast mode [ 115.493754][ T13] bridge_slave_1: left promiscuous mode [ 115.499887][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.702177][ T13] bridge_slave_0: left allmulticast mode [ 115.702213][ T13] bridge_slave_0: left promiscuous mode [ 115.702479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.490901][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.570988][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.594015][ T13] bond0 (unregistering): Released all slaves [ 116.639516][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.020256][ T13] hsr_slave_0: left promiscuous mode [ 117.060230][ T13] hsr_slave_1: left promiscuous mode [ 117.061273][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.061339][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.122195][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.122224][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.235291][ T13] veth1_macvtap: left promiscuous mode [ 117.235561][ T13] veth0_macvtap: left promiscuous mode [ 117.235856][ T13] veth1_vlan: left promiscuous mode [ 117.236194][ T13] veth0_vlan: left promiscuous mode [ 118.000837][ T13] team0 (unregistering): Port device team_slave_1 removed [ 118.063882][ T13] team0 (unregistering): Port device team_slave_0 removed [ 118.288212][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.175210][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.288782][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.288813][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.597433][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.597454][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.890301][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 2026/07/28 23:55:56 executed programs: 0 [ 121.202300][ T5716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.215806][ T5716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.243067][ T5716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.244647][ T5716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.245334][ T5716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.943091][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.943254][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.943606][ T5801] bridge_slave_0: entered allmulticast mode [ 121.945411][ T5801] bridge_slave_0: entered promiscuous mode [ 121.947798][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.947939][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.948038][ T5801] bridge_slave_1: entered allmulticast mode [ 121.949893][ T5801] bridge_slave_1: entered promiscuous mode [ 122.346075][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.361665][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.408433][ T5801] team0: Port device team_slave_0 added [ 122.419169][ T5801] team0: Port device team_slave_1 added [ 122.453950][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.453963][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.453982][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.455830][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.455840][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.455859][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.008685][ T5801] hsr_slave_0: entered promiscuous mode [ 123.009681][ T5801] hsr_slave_1: entered promiscuous mode [ 123.311558][ T60] Bluetooth: hci0: command tx timeout [ 125.278728][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.309845][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.319584][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.346141][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.369395][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.390954][ T60] Bluetooth: hci0: command tx timeout [ 125.415158][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.419586][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.465766][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.628939][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.699522][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.726701][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.726920][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.758595][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.759510][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.437882][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.530493][ T5801] veth0_vlan: entered promiscuous mode [ 126.548063][ T5801] veth1_vlan: entered promiscuous mode [ 126.622992][ T5801] veth0_macvtap: entered promiscuous mode [ 126.629955][ T5801] veth1_macvtap: entered promiscuous mode [ 126.673771][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.724458][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.744605][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.745695][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.745740][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.745778][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.255082][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.255104][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.360806][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.360825][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/28 23:56:03 executed programs: 2 [ 127.470354][ T60] Bluetooth: hci0: command tx timeout [ 128.071209][ T5936] loop0: detected capacity change from 0 to 32768 [ 129.059736][ T5962] loop0: detected capacity change from 0 to 32768 [ 129.506735][ T5963] loop0: detected capacity change from 0 to 32768 [ 129.550261][ T60] Bluetooth: hci0: command tx timeout [ 129.960788][ T5964] loop0: detected capacity change from 0 to 32768 [ 130.382947][ T5965] loop0: detected capacity change from 0 to 32768 [ 130.828345][ T5966] loop0: detected capacity change from 0 to 32768 [ 131.258778][ T5967] loop0: detected capacity change from 0 to 32768 [ 131.654833][ T5968] loop0: detected capacity change from 0 to 32768 [ 132.109022][ T5969] loop0: detected capacity change from 0 to 32768 [ 132.538995][ T5970] loop0: detected capacity change from 0 to 32768 2026/07/28 23:56:08 executed programs: 12 [ 132.834466][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834568][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.373400][ T5972] set_capacity_and_notify: 1 callbacks suppressed [ 133.373414][ T5972] loop0: detected capacity change from 0 to 32768 [ 133.844603][ T5973] loop0: detected capacity change from 0 to 32768 [ 134.240838][ T5974] loop0: detected capacity change from 0 to 32768 [ 134.649263][ T5975] loop0: detected capacity change from 0 to 32768 [ 135.094866][ T5976] loop0: detected capacity change from 0 to 32768 [ 135.487749][ T5977] loop0: detected capacity change from 0 to 32768 [ 135.897537][ T5978] loop0: detected capacity change from 0 to 32768 [ 136.285444][ T5979] loop0: detected capacity change from 0 to 32768 [ 136.715874][ T5980] loop0: detected capacity change from 0 to 32768 [ 137.137746][ T5981] loop0: detected capacity change from 0 to 32768 2026/07/28 23:56:13 executed programs: 24 [ 138.398442][ T5984] set_capacity_and_notify: 2 callbacks suppressed [ 138.398456][ T5984] loop0: detected capacity change from 0 to 32768 [ 138.852714][ T5985] loop0: detected capacity change from 0 to 32768 [ 139.265664][ T5986] loop0: detected capacity change from 0 to 32768 [ 139.655790][ T5987] loop0: detected capacity change from 0 to 32768 [ 140.062419][ T5988] loop0: detected capacity change from 0 to 32768 [ 140.479866][ T5989] loop0: detected capacity change from 0 to 32768 [ 140.918410][ T5990] loop0: detected capacity change from 0 to 32768 [ 141.338786][ T5991] loop0: detected capacity change from 0 to 32768 [ 141.769116][ T5992] loop0: detected capacity change from 0 to 32768 [ 142.171655][ T5993] loop0: detected capacity change from 0 to 32768 2026/07/28 23:56:18 executed programs: 36 [ 143.762277][ T5997] set_capacity_and_notify: 3 callbacks suppressed [ 143.762298][ T5997] loop0: detected capacity change from 0 to 32768 [ 143.841318][ C0] ================================================================== [ 143.841318][ C0] ================================================================== [ 143.841335][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 143.841378][ C0] Read of size 4 at addr ffff88802b7a4e08 by task ksoftirqd/0/15 [ 143.841397][ C0] [ 143.841421][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.841452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.841474][ C0] Call Trace: [ 143.841483][ C0] [ 143.841492][ C0] dump_stack_lvl+0xe8/0x150 [ 143.841530][ C0] print_address_description+0x55/0x1e0 [ 143.841565][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.841584][ C0] print_report+0x58/0x70 [ 143.841615][ C0] kasan_report+0x117/0x150 [ 143.841644][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.841669][ C0] lbmIODone+0x130e/0x16b0 [ 143.841689][ C0] ? blkg_put+0x22/0x240 [ 143.841709][ C0] ? blkg_put+0x22/0x240 [ 143.841729][ C0] ? blkg_put+0x18d/0x240 [ 143.841749][ C0] ? bio_endio+0x980/0x9d0 [ 143.841776][ C0] blk_update_request+0x57b/0xe50 [ 143.841809][ C0] blk_mq_end_request+0x3e/0x70 [ 143.841835][ C0] blk_done_softirq+0x10a/0x160 [ 143.841860][ C0] handle_softirqs+0x1d9/0x6c0 [ 143.841894][ C0] run_ksoftirqd+0x52/0x180 [ 143.841933][ C0] smpboot_thread_fn+0x57c/0xa80 [ 143.841967][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 143.842000][ C0] kthread+0x388/0x470 [ 143.842034][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 143.842064][ C0] ? __pfx_kthread+0x10/0x10 [ 143.842116][ C0] ret_from_fork+0x514/0xb70 [ 143.842153][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 143.842193][ C0] ? __switch_to+0xc89/0x1420 [ 143.842225][ C0] ? __pfx_kthread+0x10/0x10 [ 143.842260][ C0] ret_from_fork_asm+0x1a/0x30 [ 143.842298][ C0] [ 143.842306][ C0] [ 143.842311][ C0] Allocated by task 5997: [ 143.842322][ C0] kasan_save_track+0x3e/0x80 [ 143.842345][ C0] __kasan_kmalloc+0x93/0xb0 [ 143.842366][ C0] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 143.842390][ C0] lmLogInit+0x3e5/0x1a20 [ 143.842423][ C0] lmLogOpen+0x4e3/0xf90 [ 143.842452][ C0] jfs_mount_rw+0xf3/0x670 [ 143.842481][ C0] jfs_fill_super+0x769/0xda0 [ 143.842504][ C0] get_tree_bdev_flags+0x430/0x4f0 [ 143.842532][ C0] vfs_get_tree+0x92/0x2a0 [ 143.842558][ C0] do_new_mount+0x319/0xdc0 [ 143.842578][ C0] __se_sys_mount+0x31d/0x420 [ 143.842598][ C0] do_syscall_64+0x174/0x580 [ 143.842623][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.842645][ C0] [ 143.842650][ C0] Freed by task 5801: [ 143.842660][ C0] kasan_save_track+0x3e/0x80 [ 143.842680][ C0] kasan_save_free_info+0x40/0x50 [ 143.842710][ C0] __kasan_slab_free+0x5c/0x80 [ 143.842732][ C0] kfree+0x1c5/0x6c0 [ 143.842748][ C0] lmLogShutdown+0x456/0x850 [ 143.842767][ C0] lmLogClose+0x28c/0x530 [ 143.842799][ C0] jfs_umount+0x2da/0x3b0 [ 143.842828][ C0] jfs_put_super+0x8c/0x190 [ 143.842852][ C0] generic_shutdown_super+0x13d/0x2d0 [ 143.842876][ C0] kill_block_super+0x44/0x90 [ 143.842903][ C0] deactivate_locked_super+0xbc/0x130 [ 143.842927][ C0] cleanup_mnt+0x3d3/0x460 [ 143.842953][ C0] task_work_run+0x1d9/0x270 [ 143.842972][ C0] exit_to_user_mode_loop+0x1fa/0x730 [ 143.842993][ C0] do_syscall_64+0x353/0x580 [ 143.843018][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.843039][ C0] [ 143.843044][ C0] The buggy address belongs to the object at ffff88802b7a4e00 [ 143.843044][ C0] which belongs to the cache kmalloc-256 of size 256 [ 143.843064][ C0] The buggy address is located 8 bytes inside of [ 143.843064][ C0] freed 256-byte region [ffff88802b7a4e00, ffff88802b7a4f00) [ 143.843088][ C0] [ 143.843093][ C0] The buggy address belongs to the physical page: [ 143.843116][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b7a4 [ 143.843138][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.843156][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 143.843181][ C0] page_type: f5(slab) [ 143.843202][ C0] raw: 0080000000000040 ffff88813ffb1b40 dead000000000100 dead000000000122 [ 143.843233][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 143.843254][ C0] head: 0080000000000040 ffff88813ffb1b40 dead000000000100 dead000000000122 [ 143.843273][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 143.843300][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 143.843317][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 143.843328][ C0] page dumped because: kasan: bad access detected [ 143.843342][ C0] page_owner tracks the page as allocated [ 143.843349][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5995, tgid 5995 (syz.0.51), ts 142972913005, free_ts 136188094266 [ 143.843388][ C0] post_alloc_hook+0x1f9/0x250 [ 143.843408][ C0] get_page_from_freelist+0x262a/0x26a0 [ 143.843433][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 143.843468][ C0] allocate_slab+0x79/0x5e0 [ 143.843494][ C0] refill_objects+0x2d8/0x350 [ 143.843521][ C0] __pcs_replace_empty_main+0x330/0x690 [ 143.843547][ C0] __kmalloc_cache_noprof+0x468/0x6b0 [ 143.843568][ C0] lmLogInit+0x3e5/0x1a20 [ 143.843596][ C0] lmLogOpen+0x4e3/0xf90 [ 143.843622][ C0] jfs_mount_rw+0xf3/0x670 [ 143.843649][ C0] jfs_fill_super+0x769/0xda0 [ 143.843670][ C0] get_tree_bdev_flags+0x430/0x4f0 [ 143.843695][ C0] vfs_get_tree+0x92/0x2a0 [ 143.843718][ C0] do_new_mount+0x319/0xdc0 [ 143.843736][ C0] __se_sys_mount+0x31d/0x420 [ 143.843754][ C0] do_syscall_64+0x174/0x580 [ 143.843777][ C0] page last free pid 5618 tgid 5618 stack trace: [ 143.843789][ C0] __free_frozen_pages+0x10e7/0x11c0 [ 143.843808][ C0] __slab_free+0x252/0x2a0 [ 143.843828][ C0] qlist_free_all+0x99/0x100 [ 143.843844][ C0] kasan_quarantine_reduce+0x148/0x160 [ 143.843862][ C0] __kasan_slab_alloc+0x22/0x80 [ 143.843881][ C0] __kmalloc_noprof+0x3b6/0x780 [ 143.843899][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 143.843927][ C0] tomoyo_path2_perm+0x2e7/0x760 [ 143.843946][ C0] tomoyo_path_rename+0x14e/0x1b0 [ 143.843973][ C0] security_path_rename+0x248/0x460 [ 143.844003][ C0] filename_renameat2+0x4ba/0x9b0 [ 143.844019][ C0] __se_sys_rename+0x55/0x2c0 [ 143.844037][ C0] do_syscall_64+0x174/0x580 [ 143.844059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.844078][ C0] [ 143.844083][ C0] Memory state around the buggy address: [ 143.844094][ C0] ffff88802b7a4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.844108][ C0] ffff88802b7a4d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.844122][ C0] >ffff88802b7a4e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.844132][ C0] ^ [ 143.844141][ C0] ffff88802b7a4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 143.844155][ C0] ffff88802b7a4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.844165][ C0] ================================================================== [ 143.858347][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.858368][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.858394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.858407][ C0] Call Trace: [ 143.858428][ C0] [ 143.858436][ C0] vpanic+0x56c/0xa60 [ 143.858463][ C0] ? __pfx_vpanic+0x10/0x10 [ 143.858480][ C0] ? __pfx___schedule+0x10/0x10 [ 143.858505][ C0] panic+0xc5/0xd0 [ 143.858523][ C0] ? __pfx_panic+0x10/0x10 [ 143.858542][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 143.858574][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.858594][ C0] check_panic_on_warn+0x89/0xb0 [ 143.858624][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.858659][ C0] end_report+0x73/0x170 [ 143.858687][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.858708][ C0] kasan_report+0x128/0x150 [ 143.858736][ C0] ? lbmIODone+0x130e/0x16b0 [ 143.858760][ C0] lbmIODone+0x130e/0x16b0 [ 143.858782][ C0] ? blkg_put+0x22/0x240 [ 143.858803][ C0] ? blkg_put+0x22/0x240 [ 143.858824][ C0] ? blkg_put+0x18d/0x240 [ 143.858845][ C0] ? bio_endio+0x980/0x9d0 [ 143.858873][ C0] blk_update_request+0x57b/0xe50 [ 143.858907][ C0] blk_mq_end_request+0x3e/0x70 [ 143.858935][ C0] blk_done_softirq+0x10a/0x160 [ 143.858959][ C0] handle_softirqs+0x1d9/0x6c0 [ 143.858994][ C0] run_ksoftirqd+0x52/0x180 [ 143.859027][ C0] smpboot_thread_fn+0x57c/0xa80 [ 143.859061][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 143.859096][ C0] kthread+0x388/0x470 [ 143.859131][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 143.859162][ C0] ? __pfx_kthread+0x10/0x10 [ 143.859197][ C0] ret_from_fork+0x514/0xb70 [ 143.859236][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 143.859272][ C0] ? __switch_to+0xc89/0x1420 [ 143.859310][ C0] ? __pfx_kthread+0x10/0x10 [ 143.859344][ C0] ret_from_fork_asm+0x1a/0x30 [ 143.859375][ C0] [ 143.859540][ C0] Kernel Offset: disabled