Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. 2026/06/19 01:37:40 parsed 1 programs 2026/06/19 01:37:40 serving rpc on tcp://33533 [ 62.574514][ T5603] cgroup: Unknown subsys name 'net' [ 62.815627][ T5603] cgroup: Unknown subsys name 'cpuset' [ 62.874114][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.087833][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.244364][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.244414][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.511879][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.512167][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.512380][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.512962][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.514164][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.560760][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.560843][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.560906][ T5656] bridge_slave_0: entered allmulticast mode [ 67.561573][ T5656] bridge_slave_0: entered promiscuous mode [ 67.562732][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.562801][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.562856][ T5656] bridge_slave_1: entered allmulticast mode [ 67.565703][ T5656] bridge_slave_1: entered promiscuous mode [ 67.585253][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.587367][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.605891][ T5656] team0: Port device team_slave_0 added [ 67.607717][ T5656] team0: Port device team_slave_1 added [ 67.625164][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.625177][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.625199][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.626378][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.626388][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.626411][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.655290][ T5656] hsr_slave_0: entered promiscuous mode [ 67.655935][ T5656] hsr_slave_1: entered promiscuous mode [ 67.760647][ T5656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.785288][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.785815][ T5656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.835010][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.835557][ T5656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.864976][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.865509][ T5656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.905007][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.994741][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.994820][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.995025][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.995111][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.028043][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.064290][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.103606][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.346403][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.384344][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.384423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.387815][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.387882][ T3970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.619221][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.740370][ T5656] veth0_vlan: entered promiscuous mode [ 68.745921][ T5656] veth1_vlan: entered promiscuous mode [ 68.763125][ T5656] veth0_macvtap: entered promiscuous mode [ 68.766160][ T5656] veth1_macvtap: entered promiscuous mode [ 68.776459][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.780449][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.799287][ T210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799422][ T210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799453][ T210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799480][ T210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.093905][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.093933][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.121867][ T210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.121884][ T210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.774449][ T215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.634933][ T215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/19 01:37:51 executed programs: 0 [ 71.011654][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.012206][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.012416][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.012996][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.014927][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.434802][ T215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.474254][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.474369][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.474504][ T5731] bridge_slave_0: entered allmulticast mode [ 71.475226][ T5731] bridge_slave_0: entered promiscuous mode [ 71.476484][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.476569][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.476665][ T5731] bridge_slave_1: entered allmulticast mode [ 71.477298][ T5731] bridge_slave_1: entered promiscuous mode [ 71.503612][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.507251][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.526393][ T5731] team0: Port device team_slave_0 added [ 71.528485][ T5731] team0: Port device team_slave_1 added [ 71.546681][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.546695][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.546718][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.547954][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.547965][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.547988][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.579356][ T5731] hsr_slave_0: entered promiscuous mode [ 71.580087][ T5731] hsr_slave_1: entered promiscuous mode [ 71.580598][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 71.580632][ T5731] Cannot create hsr debugfs directory [ 71.754643][ T215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.353823][ T215] bridge_slave_1: left allmulticast mode [ 72.353841][ T215] bridge_slave_1: left promiscuous mode [ 72.355557][ T215] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.493814][ T215] bridge_slave_0: left allmulticast mode [ 72.493832][ T215] bridge_slave_0: left promiscuous mode [ 72.493927][ T215] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.043613][ T4911] Bluetooth: hci0: command tx timeout [ 73.063788][ T215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.143896][ T215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.164287][ T215] bond0 (unregistering): Released all slaves [ 73.204607][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 74.221236][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.245546][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.284256][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.325126][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.325698][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.375206][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.375802][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.415250][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.687210][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.724635][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.728004][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.728071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.731587][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.731661][ T1542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.943559][ T215] hsr_slave_0: left promiscuous mode [ 74.983530][ T215] hsr_slave_1: left promiscuous mode [ 74.983966][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.983979][ T215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.004500][ T215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.004521][ T215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.083748][ T215] veth1_macvtap: left promiscuous mode [ 75.083791][ T215] veth0_macvtap: left promiscuous mode [ 75.083857][ T215] veth1_vlan: left promiscuous mode [ 75.083903][ T215] veth0_vlan: left promiscuous mode [ 75.123573][ T4911] Bluetooth: hci0: command tx timeout [ 75.585324][ T215] team0 (unregistering): Port device team_slave_1 removed [ 75.623777][ T215] team0 (unregistering): Port device team_slave_0 removed [ 75.843285][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.873138][ T5731] veth0_vlan: entered promiscuous mode [ 75.882760][ T5731] veth1_vlan: entered promiscuous mode [ 75.898307][ T5731] veth0_macvtap: entered promiscuous mode [ 75.900237][ T5731] veth1_macvtap: entered promiscuous mode [ 75.907930][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.910549][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.919119][ T1197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.919407][ T1197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.919448][ T1197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.919484][ T1197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079218][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.079237][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.098447][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.098463][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/19 01:37:56 executed programs: 2 [ 76.303077][ T5847] loop0: detected capacity change from 0 to 32768 [ 76.494128][ T31] cfg80211: failed to load regulatory.db [ 76.552027][ T5849] loop0: detected capacity change from 0 to 32768 [ 76.763574][ T5851] loop0: detected capacity change from 0 to 32768 [ 77.027241][ T5853] loop0: detected capacity change from 0 to 32768 [ 77.203512][ T4911] Bluetooth: hci0: command tx timeout [ 77.297172][ T5855] loop0: detected capacity change from 0 to 32768 [ 77.520357][ T5857] loop0: detected capacity change from 0 to 32768 [ 77.734918][ T5859] loop0: detected capacity change from 0 to 32768 [ 77.970651][ T5861] loop0: detected capacity change from 0 to 32768 [ 78.180756][ T5863] loop0: detected capacity change from 0 to 32768 [ 78.392277][ T5865] loop0: detected capacity change from 0 to 32768 [ 79.283481][ T4911] Bluetooth: hci0: command tx timeout 2026/06/19 01:38:01 executed programs: 25 [ 81.337996][ T5893] set_capacity_and_notify: 13 callbacks suppressed [ 81.338008][ T5893] loop0: detected capacity change from 0 to 32768 [ 81.540058][ T5895] loop0: detected capacity change from 0 to 32768 [ 81.748436][ T5897] loop0: detected capacity change from 0 to 32768 [ 81.982333][ T5899] loop0: detected capacity change from 0 to 32768 [ 82.274575][ T5901] loop0: detected capacity change from 0 to 32768 [ 82.460806][ T5903] loop0: detected capacity change from 0 to 32768 [ 82.671450][ T5905] loop0: detected capacity change from 0 to 32768 [ 82.874539][ T5907] loop0: detected capacity change from 0 to 32768 [ 83.092318][ T5909] loop0: detected capacity change from 0 to 32768 [ 83.303967][ T5911] loop0: detected capacity change from 0 to 32768 [ 84.957667][ T3970] ================================================================== [ 84.957683][ T3970] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.957721][ T3970] Read of size 4096 at addr ffff88805e759000 by task kworker/u8:15/3970 [ 84.957736][ T3970] [ 84.957754][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 84.957776][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.957787][ T3970] Workqueue: loop0 loop_workfn [ 84.957816][ T3970] Call Trace: [ 84.957823][ T3970] [ 84.957831][ T3970] dump_stack_lvl+0xe8/0x150 [ 84.957852][ T3970] print_address_description+0x55/0x1e0 [ 84.957872][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.957894][ T3970] print_report+0x58/0x70 [ 84.957912][ T3970] kasan_report+0x117/0x150 [ 84.957933][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.957958][ T3970] kasan_check_range+0x264/0x2c0 [ 84.957977][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.957998][ T3970] __asan_memcpy+0x29/0x70 [ 84.958023][ T3970] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.958054][ T3970] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 84.958083][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958108][ T3970] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 84.958133][ T3970] ? shmem_write_begin+0x1ce/0x320 [ 84.958155][ T3970] generic_perform_write+0x5a8/0x8b0 [ 84.958179][ T3970] ? __pfx_generic_perform_write+0x10/0x10 [ 84.958198][ T3970] ? generic_write_checks_count+0x426/0x530 [ 84.958223][ T3970] ? file_update_time_flags+0x3b9/0x4b0 [ 84.958242][ T3970] shmem_file_write_iter+0xfb/0x120 [ 84.958266][ T3970] lo_rw_aio+0xc78/0xf30 [ 84.958287][ T3970] ? kthread_associate_blkcg+0x30f/0x600 [ 84.958305][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958328][ T3970] ? __pfx_lo_rw_aio+0x10/0x10 [ 84.958344][ T3970] ? kthread_associate_blkcg+0x30f/0x600 [ 84.958366][ T3970] ? kthread_associate_blkcg+0x490/0x600 [ 84.958385][ T3970] ? rt_spin_unlock+0x160/0x200 [ 84.958412][ T3970] loop_process_work+0x638/0x11d0 [ 84.958436][ T3970] ? __pfx_loop_process_work+0x10/0x10 [ 84.958455][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.958473][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958496][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958520][ T3970] ? trace_hrtimer_start+0x82/0x200 [ 84.958539][ T3970] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 84.958566][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.958583][ T3970] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.958600][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958623][ T3970] ? process_scheduled_works+0xa20/0x14e0 [ 84.958646][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958669][ T3970] ? lock_acquire+0x5f/0x350 [ 84.958690][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.958714][ T3970] ? process_scheduled_works+0xa20/0x14e0 [ 84.958736][ T3970] process_scheduled_works+0xa8e/0x14e0 [ 84.958769][ T3970] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.958791][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.958811][ T3970] ? assign_work+0x3cf/0x5d0 [ 84.958835][ T3970] worker_thread+0xa47/0xfb0 [ 84.958868][ T3970] kthread+0x388/0x470 [ 84.958886][ T3970] ? __pfx_worker_thread+0x10/0x10 [ 84.958909][ T3970] ? __pfx_kthread+0x10/0x10 [ 84.958927][ T3970] ret_from_fork+0x514/0xb70 [ 84.958951][ T3970] ? __pfx_ret_from_fork+0x10/0x10 [ 84.958970][ T3970] ? __switch_to+0xc89/0x1420 [ 84.958996][ T3970] ? __pfx_kthread+0x10/0x10 [ 84.959015][ T3970] ret_from_fork_asm+0x1a/0x30 [ 84.959043][ T3970] [ 84.959050][ T3970] [ 84.959054][ T3970] The buggy address belongs to the physical page: [ 84.959077][ T3970] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x39 pfn:0x5e759 [ 84.959095][ T3970] flags: 0x80000000000000(node=0|zone=1) [ 84.959116][ T3970] raw: 0080000000000000 ffffea000179d788 ffffea000179d688 0000000000000000 [ 84.959130][ T3970] raw: 0000000000000039 0000000000000000 00000000ffffffff 0000000000000000 [ 84.959140][ T3970] page dumped because: kasan: bad access detected [ 84.959152][ T3970] page_owner tracks the page as freed [ 84.959159][ T3970] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5927, tgid 5926 (syz.0.57), ts 84921620678, free_ts 84956205435 [ 84.959192][ T3970] post_alloc_hook+0x22d/0x280 [ 84.959208][ T3970] get_page_from_freelist+0x2877/0x28f0 [ 84.959227][ T3970] __alloc_frozen_pages_noprof+0x18d/0x380 [ 84.959246][ T3970] alloc_pages_mpol+0xce/0x280 [ 84.959265][ T3970] alloc_pages_noprof+0xd2/0x2f0 [ 84.959282][ T3970] lmLogInit+0x357/0x1a20 [ 84.959301][ T3970] lmLogOpen+0x4e3/0xf90 [ 84.959319][ T3970] jfs_mount_rw+0xf3/0x670 [ 84.959336][ T3970] jfs_fill_super+0x769/0xda0 [ 84.959358][ T3970] get_tree_bdev_flags+0x430/0x4f0 [ 84.959375][ T3970] vfs_get_tree+0x92/0x2a0 [ 84.959390][ T3970] do_new_mount+0x319/0xdc0 [ 84.959411][ T3970] __se_sys_mount+0x31d/0x420 [ 84.959432][ T3970] do_syscall_64+0x174/0x580 [ 84.959452][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.959468][ T3970] page last free pid 5731 tgid 5731 stack trace: [ 84.959478][ T3970] __free_frozen_pages+0x1019/0x1100 [ 84.959494][ T3970] lmLogShutdown+0x44e/0x850 [ 84.959513][ T3970] lmLogClose+0x28c/0x530 [ 84.959531][ T3970] jfs_umount+0x2da/0x3b0 [ 84.959549][ T3970] jfs_put_super+0x8c/0x190 [ 84.959563][ T3970] generic_shutdown_super+0x13d/0x2d0 [ 84.959585][ T3970] kill_block_super+0x44/0x90 [ 84.959601][ T3970] deactivate_locked_super+0xbc/0x130 [ 84.959623][ T3970] cleanup_mnt+0x3d3/0x460 [ 84.959638][ T3970] task_work_run+0x1d9/0x270 [ 84.959655][ T3970] exit_to_user_mode_loop+0x1fa/0x730 [ 84.959674][ T3970] do_syscall_64+0x353/0x580 [ 84.959693][ T3970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.959709][ T3970] [ 84.959713][ T3970] Memory state around the buggy address: [ 84.959723][ T3970] ffff88805e758f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.959735][ T3970] ffff88805e758f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.959747][ T3970] >ffff88805e759000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.959755][ T3970] ^ [ 84.959764][ T3970] ffff88805e759080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.959775][ T3970] ffff88805e759100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 84.959784][ T3970] ================================================================== [ 84.961293][ T3970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.961311][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 84.961332][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.961344][ T3970] Workqueue: loop0 loop_workfn [ 84.961365][ T3970] Call Trace: [ 84.961372][ T3970] [ 84.961379][ T3970] vpanic+0x56c/0xa60 [ 84.961403][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.961426][ T3970] ? __pfx_vpanic+0x10/0x10 [ 84.961447][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.961472][ T3970] panic+0xc5/0xd0 [ 84.961491][ T3970] ? __pfx_panic+0x10/0x10 [ 84.961513][ T3970] ? preempt_schedule_thunk+0x16/0x40 [ 84.961540][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961562][ T3970] ? preempt_schedule_thunk+0x16/0x40 [ 84.961587][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961609][ T3970] check_panic_on_warn+0x89/0xb0 [ 84.961629][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961651][ T3970] end_report+0x73/0x170 [ 84.961671][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961692][ T3970] kasan_report+0x128/0x150 [ 84.961712][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961736][ T3970] kasan_check_range+0x264/0x2c0 [ 84.961756][ T3970] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961779][ T3970] __asan_memcpy+0x29/0x70 [ 84.961804][ T3970] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 84.961834][ T3970] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 84.961856][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.961879][ T3970] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 84.961904][ T3970] ? shmem_write_begin+0x1ce/0x320 [ 84.961925][ T3970] generic_perform_write+0x5a8/0x8b0 [ 84.961949][ T3970] ? __pfx_generic_perform_write+0x10/0x10 [ 84.961968][ T3970] ? generic_write_checks_count+0x426/0x530 [ 84.961993][ T3970] ? file_update_time_flags+0x3b9/0x4b0 [ 84.962013][ T3970] shmem_file_write_iter+0xfb/0x120 [ 84.962037][ T3970] lo_rw_aio+0xc78/0xf30 [ 84.962057][ T3970] ? kthread_associate_blkcg+0x30f/0x600 [ 84.962082][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962106][ T3970] ? __pfx_lo_rw_aio+0x10/0x10 [ 84.962123][ T3970] ? kthread_associate_blkcg+0x30f/0x600 [ 84.962146][ T3970] ? kthread_associate_blkcg+0x490/0x600 [ 84.962164][ T3970] ? rt_spin_unlock+0x160/0x200 [ 84.962191][ T3970] loop_process_work+0x638/0x11d0 [ 84.962217][ T3970] ? __pfx_loop_process_work+0x10/0x10 [ 84.962236][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.962254][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962279][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962315][ T3970] ? trace_hrtimer_start+0x82/0x200 [ 84.962334][ T3970] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 84.962359][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.962378][ T3970] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.962395][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962419][ T3970] ? process_scheduled_works+0xa20/0x14e0 [ 84.962441][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962465][ T3970] ? lock_acquire+0x5f/0x350 [ 84.962487][ T3970] ? rcu_is_watching+0x15/0xb0 [ 84.962511][ T3970] ? process_scheduled_works+0xa20/0x14e0 [ 84.962534][ T3970] process_scheduled_works+0xa8e/0x14e0 [ 84.962568][ T3970] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.962589][ T3970] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.962609][ T3970] ? assign_work+0x3cf/0x5d0 [ 84.962632][ T3970] worker_thread+0xa47/0xfb0 [ 84.962665][ T3970] kthread+0x388/0x470 [ 84.962686][ T3970] ? __pfx_worker_thread+0x10/0x10 [ 84.962710][ T3970] ? __pfx_kthread+0x10/0x10 [ 84.962728][ T3970] ret_from_fork+0x514/0xb70 [ 84.962747][ T3970] ? __pfx_ret_from_fork+0x10/0x10 [ 84.962766][ T3970] ? __switch_to+0xc89/0x1420 [ 84.962793][ T3970] ? __pfx_kthread+0x10/0x10 [ 84.962811][ T3970] ret_from_fork_asm+0x1a/0x30 [ 84.962839][ T3970] [ 84.963100][ T3970] Kernel Offset: disabled