Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts.
2026/08/25 09:26:19 parsed 1 programs
2026/08/25 09:26:19 serving rpc on tcp://32871
[ 115.169789][ T5605] cgroup: Unknown subsys name 'net'
[ 115.411799][ T5605] cgroup: Unknown subsys name 'cpuset'
[ 115.465373][ T5605] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 117.523494][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 127.267571][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.271204][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 127.271375][ T5667] bridge_slave_0: entered allmulticast mode
[ 127.273686][ T5667] bridge_slave_0: entered promiscuous mode
[ 127.308495][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.308582][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.308806][ T5667] bridge_slave_1: entered allmulticast mode
[ 127.310741][ T5667] bridge_slave_1: entered promiscuous mode
[ 127.452944][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 127.469054][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 127.514367][ T5667] team0: Port device team_slave_0 added
[ 127.525907][ T5667] team0: Port device team_slave_1 added
[ 127.570160][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 127.570176][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 127.570197][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 127.574179][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 127.574197][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 127.574227][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 127.736731][ T5667] hsr_slave_0: entered promiscuous mode
[ 127.737953][ T5667] hsr_slave_1: entered promiscuous mode
[ 128.008754][ T5667] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 128.046660][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 128.050020][ T5667] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 128.081018][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 128.256733][ T5667] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 128.278299][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 128.282497][ T5667] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 128.309755][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 128.477204][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.533285][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.565691][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.565842][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.640153][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.643896][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.182923][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.285552][ T5667] veth0_vlan: entered promiscuous mode
[ 129.325262][ T5667] veth1_vlan: entered promiscuous mode
[ 129.393056][ T5667] veth0_macvtap: entered promiscuous mode
[ 129.408005][ T5667] veth1_macvtap: entered promiscuous mode
[ 129.450940][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.474508][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.876643][ T1189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.898947][ T1189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.899001][ T1189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.899040][ T1189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.290976][ T1364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 130.733075][ T5710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 130.770600][ T5710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 130.782321][ T5710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 130.797160][ T5710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 130.806765][ T5710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 131.229047][ T1364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 131.468472][ T1364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 131.998301][ T1364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.130097][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 132.130126][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 132.223390][ T1355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 132.223413][ T1355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 132.775727][ T1364] bridge_slave_1: left allmulticast mode
[ 132.775931][ T1364] bridge_slave_1: left promiscuous mode
[ 132.782217][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.970405][ T1364] bridge_slave_0: left allmulticast mode
[ 132.970444][ T1364] bridge_slave_0: left promiscuous mode
[ 132.970701][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 133.795467][ T1364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 133.855421][ T1364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 133.877488][ T1364] bond0 (unregistering): Released all slaves
[ 133.956240][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1
[ 134.376673][ T1364] hsr_slave_0: left promiscuous mode
[ 134.414953][ T1364] hsr_slave_1: left promiscuous mode
[ 134.418855][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 134.419096][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 134.478692][ T1364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 134.478722][ T1364] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 134.768227][ T1364] veth1_macvtap: left promiscuous mode
[ 134.768491][ T1364] veth0_macvtap: left promiscuous mode
[ 134.807659][ T1364] veth1_vlan: left promiscuous mode
[ 134.808146][ T1364] veth0_vlan: left promiscuous mode
2026/08/25 09:26:43 executed programs: 0
[ 134.991192][ T5710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 134.992884][ T5710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 134.993781][ T5710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 135.037332][ T5710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 135.042480][ T5710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 135.815847][ T1364] team0 (unregistering): Port device team_slave_1 removed
[ 135.875396][ T1364] team0 (unregistering): Port device team_slave_0 removed
[ 136.077846][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2
[ 137.025930][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3
[ 137.187830][ T5710] Bluetooth: hci0: command tx timeout
[ 137.371312][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.371530][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 137.371708][ T5754] bridge_slave_0: entered allmulticast mode
[ 137.397249][ T5754] bridge_slave_0: entered promiscuous mode
[ 137.408271][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.408402][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 137.408610][ T5754] bridge_slave_1: entered allmulticast mode
[ 137.414343][ T5754] bridge_slave_1: entered promiscuous mode
[ 137.500548][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 137.508346][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 137.614911][ T5754] team0: Port device team_slave_0 added
[ 137.618828][ T5754] team0: Port device team_slave_1 added
[ 137.699164][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 137.699184][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.699214][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 137.701757][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 137.701773][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 137.701802][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 138.311489][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.311604][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.571247][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4
[ 138.604298][ T5754] hsr_slave_0: entered promiscuous mode
[ 138.613117][ T5754] hsr_slave_1: entered promiscuous mode
[ 139.264708][ T5710] Bluetooth: hci0: command tx timeout
[ 141.344698][ T5710] Bluetooth: hci0: command tx timeout
[ 141.458620][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 141.490062][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 141.491899][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 141.536926][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 141.538408][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 141.572749][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 141.574379][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 141.627474][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 141.912443][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 141.969254][ T5754] 8021q: adding VLAN 0 to HW filter on device team0
[ 141.992209][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.993063][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 142.032689][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 142.032954][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 142.777477][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 142.918718][ T5754] veth0_vlan: entered promiscuous mode
[ 142.937937][ T5754] veth1_vlan: entered promiscuous mode
[ 143.017005][ T5754] veth0_macvtap: entered promiscuous mode
[ 143.023428][ T5754] veth1_macvtap: entered promiscuous mode
[ 143.073847][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 143.138624][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 143.435728][ T5710] Bluetooth: hci0: command tx timeout
[ 143.696311][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.760739][ T3182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.760764][ T3182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.866627][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 143.866650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.908031][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.913017][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.913438][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/08/25 09:26:52 executed programs: 2
[ 144.401320][ T5932] loop0: detected capacity change from 0 to 32768
[ 145.128589][ T5934] loop0: detected capacity change from 0 to 32768
[ 145.560911][ T5935] loop0: detected capacity change from 0 to 32768
[ 146.034102][ T5936] loop0: detected capacity change from 0 to 32768
[ 146.540317][ T5937] loop0: detected capacity change from 0 to 32768
[ 146.957579][ T5938] loop0: detected capacity change from 0 to 32768
[ 147.421686][ T5939] loop0: detected capacity change from 0 to 32768
[ 147.848191][ T5940] loop0: detected capacity change from 0 to 32768
[ 148.317982][ T5941] loop0: detected capacity change from 0 to 32768
[ 148.740316][ T5942] loop0: detected capacity change from 0 to 32768
2026/08/25 09:26:57 executed programs: 13
[ 149.610366][ T5944] set_capacity_and_notify: 1 callbacks suppressed
[ 149.610380][ T5944] loop0: detected capacity change from 0 to 32768
[ 150.064305][ T5945] loop0: detected capacity change from 0 to 32768
[ 150.520478][ T5946] loop0: detected capacity change from 0 to 32768
[ 150.973685][ T5947] loop0: detected capacity change from 0 to 32768
[ 151.420527][ T5948] loop0: detected capacity change from 0 to 32768
[ 151.860937][ T5949] loop0: detected capacity change from 0 to 32768
[ 152.265065][ T5950] loop0: detected capacity change from 0 to 32768
[ 152.696472][ T5951] loop0: detected capacity change from 0 to 32768
[ 153.121047][ T5952] loop0: detected capacity change from 0 to 32768
[ 153.564892][ T5953] loop0: detected capacity change from 0 to 32768
2026/08/25 09:27:03 executed programs: 25
[ 154.901127][ T5956] set_capacity_and_notify: 2 callbacks suppressed
[ 154.901141][ T5956] loop0: detected capacity change from 0 to 32768
[ 155.280261][ T5957] loop0: detected capacity change from 0 to 32768
[ 155.726279][ T5958] loop0: detected capacity change from 0 to 32768
[ 156.097295][ T5959] loop0: detected capacity change from 0 to 32768
[ 156.482792][ T5960] loop0: detected capacity change from 0 to 32768
[ 156.884908][ T5961] loop0: detected capacity change from 0 to 32768
[ 157.323937][ T5962] loop0: detected capacity change from 0 to 32768
[ 157.770861][ T5963] loop0: detected capacity change from 0 to 32768
[ 158.224978][ T5964] loop0: detected capacity change from 0 to 32768
[ 158.632572][ T5965] loop0: detected capacity change from 0 to 32768
[ 159.134172][ C1] ==================================================================
[ 159.134192][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 159.134239][ C1] Read of size 4 at addr ffff88803458aa08 by task ksoftirqd/1/30
[ 159.134268][ C1]
[ 159.134299][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 159.134328][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 159.134351][ C1] Call Trace:
[ 159.134360][ C1]
[ 159.134370][ C1] dump_stack_lvl+0xe8/0x150
[ 159.134409][ C1] print_address_description+0x55/0x1e0
[ 159.134454][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.134475][ C1] print_report+0x58/0x70
[ 159.134506][ C1] kasan_report+0x117/0x150
[ 159.134538][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.134561][ C1] lbmIODone+0x130e/0x16b0
[ 159.134582][ C1] ? blkg_put+0x22/0x240
[ 159.134606][ C1] ? blkg_put+0x22/0x240
[ 159.134629][ C1] ? blkg_put+0x18d/0x240
[ 159.134653][ C1] ? bio_endio+0x984/0xac0
[ 159.134684][ C1] blk_update_request+0x57b/0xe50
[ 159.134721][ C1] blk_mq_end_request+0x3e/0x70
[ 159.134753][ C1] blk_done_softirq+0x10a/0x160
[ 159.134783][ C1] handle_softirqs+0x1da/0x6d0
[ 159.134817][ C1] ? smpboot_thread_fn+0x4e/0xa70
[ 159.134848][ C1] run_ksoftirqd+0x53/0x190
[ 159.134892][ C1] smpboot_thread_fn+0x565/0xa70
[ 159.134925][ C1] ? smpboot_thread_fn+0x4e/0xa70
[ 159.134959][ C1] kthread+0x38b/0x470
[ 159.134993][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 159.135024][ C1] ? __pfx_kthread+0x10/0x10
[ 159.135058][ C1] ret_from_fork+0x514/0xb70
[ 159.135095][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 159.135129][ C1] ? __switch_to+0xc89/0x1420
[ 159.135161][ C1] ? __pfx_kthread+0x10/0x10
[ 159.135196][ C1] ret_from_fork_asm+0x1a/0x30
[ 159.135226][ [ 159.135226][ C1]
[ 159.135234][ C1]
[ 159.135240][ C1] Allocated by task 5966:
[ 159.135251][ C1] kasan_save_track+0x3e/0x80
[ 159.135273][ C1] __kasan_kmalloc+0x93/0xb0
[ 159.135296][ C1] __kmalloc_cache_noprof+0x3da/0x6b0
[ 159.135320][ C1] lmLogInit+0x3e5/0x1a20
[ 159.135352][ C1] lmLogOpen+0x4e3/0xf90
[ 159.135383][ C1] jfs_mount_rw+0xf3/0x670
[ 159.135414][ C1] jfs_fill_super+0x769/0xda0
[ 159.135447][ C1] get_tree_bdev_flags+0x430/0x4f0
[ 159.135480][ C1] vfs_get_tree+0x92/0x2a0
[ 159.135511][ C1] do_new_mount+0x319/0xdc0
[ 159.135537][ C1] __se_sys_mount+0x31d/0x420
[ 159.135565][ C1] do_syscall_64+0x166/0x520
[ 159.135588][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 159.135610][ C1]
[ 159.135615][ C1] Freed by task 5754:
[ 159.135626][ C1] kasan_save_track+0x3e/0x80
[ 159.135647][ C1] kasan_save_free_info+0x40/0x50
[ 159.135677][ C1] __kasan_slab_free+0x5c/0x80
[ 159.135700][ C1] kfree+0x1c5/0x6d0
[ 159.135717][ C1] lmLogShutdown+0x456/0x850
[ 159.135735][ C1] lmLogClose+0x28c/0x530
[ 159.135767][ C1] jfs_umount+0x2da/0x3b0
[ 159.135798][ C1] jfs_put_super+0x8c/0x190
[ 159.135822][ C1] generic_shutdown_super+0x13d/0x2d0
[ 159.135849][ C1] kill_block_super+0x44/0xa0
[ 159.135879][ C1] deactivate_locked_super+0xbc/0x110
[ 159.135906][ C1] cleanup_mnt+0x3d3/0x460
[ 159.135938][ C1] task_work_run+0x1d9/0x270
[ 159.135957][ C1] exit_to_user_mode_loop+0x204/0x770
[ 159.135980][ C1] do_syscall_64+0x328/0x520
[ 159.136002][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 159.136023][ C1]
[ 159.136028][ C1] The buggy address belongs to the object at ffff88803458aa00
[ 159.136028][ C1] which belongs to the cache kmalloc-256 of size 256
[ 159.136047][ C1] The buggy address is located 8 bytes inside of
[ 159.136047][ C1] freed 256-byte region [ffff88803458aa00, ffff88803458ab00)
[ 159.136072][ C1]
[ 159.136078][ C1] The buggy address belongs to the physical page:
[ 159.136109][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3458a
[ 159.136131][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 159.136150][ C1] flags: 0x80000000000040(head|node=0|zone=1)
[ 159.136174][ C1] page_type: f5(slab)
[ 159.136196][ C1] raw: 0080000000000040 ffff88813ffbcb40 dead000000000100 dead000000000122
[ 159.136216][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 159.136239][ C1] head: 0080000000000040 ffff88813ffbcb40 dead000000000100 dead000000000122
[ 159.136259][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 159.136280][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 159.136300][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 159.136312][ C1] page dumped because: kasan: bad access detected
[ 159.136328][ C1] page_owner tracks the page as allocated
[ 159.136336][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 30852980091
[ 159.136397][ C1] post_alloc_hook+0x1f9/0x250
[ 159.136441][ C1] get_page_from_freelist+0x2591/0x2600
[ 159.136468][ C1] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 159.136494][ C1] allocate_slab+0x7c/0x5e0
[ 159.136524][ C1] refill_objects+0x2d8/0x350
[ 159.136554][ C1] __pcs_replace_empty_main+0x334/0x690
[ 159.136584][ C1] __kmalloc_node_track_caller_noprof+0x635/0x7d0
[ 159.136609][ C1] krealloc_node_align_noprof+0x19a/0x390
[ 159.136635][ C1] add_sysfs_param+0xd4/0xb80
[ 159.136659][ C1] kernel_add_sysfs_param+0x7f/0xe0
[ 159.136684][ C1] param_sysfs_builtin+0x199/0x250
[ 159.136707][ C1] param_sysfs_builtin_init+0x23/0x30
[ 159.136730][ C1] do_one_initcall+0x250/0x870
[ 159.136763][ C1] do_initcall_level+0x10a/0x1a0
[ 159.136790][ C1] do_initcalls+0x59/0xa0
[ 159.136814][ C1] kernel_init_freeable+0x29d/0x3e0
[ 159.136841][ C1] page_owner free stack trace missing
[ 159.136849][ C1]
[ 159.136854][ C1] Memory state around the buggy address:
[ 159.136867][ C1] ffff88803458a900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 159.136882][ C1] ffff88803458a980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 159.136898][ C1] >ffff88803458aa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 159.136910][ C1] ^
[ 159.136922][ C1] ffff88803458aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 159.136937][ C1] ffff88803458ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 159.136949][ C1] ==================================================================
[ 159.322852][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 159.322876][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 159.322904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 159.322918][ C1] Call Trace:
[ 159.322927][ C1]
[ 159.322937][ C1] vpanic+0x56d/0xa60
[ 159.322966][ C1] ? __pfx_vpanic+0x10/0x10
[ 159.323000][ C1] ? __pfx___schedule+0x10/0x10
[ 159.323039][ C1] panic+0xc5/0xd0
[ 159.323072][ C1] ? __pfx_panic+0x10/0x10
[ 159.323111][ C1] ? preempt_schedule_common+0x7f/0xd0
[ 159.323138][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.323160][ C1] check_panic_on_warn+0x89/0xb0
[ 159.323198][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.323219][ C1] end_report+0x73/0x170
[ 159.323247][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.323268][ C1] kasan_report+0x128/0x150
[ 159.323297][ C1] ? lbmIODone+0x130e/0x16b0
[ 159.323330][ C1] lbmIODone+0x130e/0x16b0
[ 159.323353][ C1] ? blkg_put+0x22/0x240
[ 159.323377][ C1] ? blkg_put+0x22/0x240
[ 159.323401][ C1] ? blkg_put+0x18d/0x240
[ 159.323424][ C1] ? bio_endio+0x984/0xac0
[ 159.323454][ C1] blk_update_request+0x57b/0xe50
[ 159.323490][ C1] blk_mq_end_request+0x3e/0x70
[ 159.323520][ C1] blk_done_softirq+0x10a/0x160
[ 159.323550][ C1] handle_softirqs+0x1da/0x6d0
[ 159.323583][ C1] ? smpboot_thread_fn+0x4e/0xa70
[ 159.323611][ C1] run_ksoftirqd+0x53/0x190
[ 159.323642][ C1] smpboot_thread_fn+0x565/0xa70
[ 159.323673][ C1] ? smpboot_thread_fn+0x4e/0xa70
[ 159.323706][ C1] kthread+0x38b/0x470
[ 159.323732][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 159.323754][ C1] ? __pfx_kthread+0x10/0x10
[ 159.323779][ C1] ret_from_fork+0x514/0xb70
[ 159.323805][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 159.323832][ C1] ? __switch_to+0xc89/0x1420
[ 159.323858][ C1] ? __pfx_kthread+0x10/0x10
[ 159.323884][ C1] ret_from_fork_asm+0x1a/0x30
[ 159.323906][ C1]
[ 159.325054][ C1] Kernel Offset: disabled