Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. 2026/06/17 06:13:32 parsed 1 programs [ 61.178749][ T5606] cgroup: Unknown subsys name 'net' [ 61.429593][ T5606] cgroup: Unknown subsys name 'cpuset' [ 61.478012][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.654183][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.829032][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.829057][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.848879][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.848898][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.951815][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.951920][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.951991][ T5667] bridge_slave_0: entered allmulticast mode [ 66.952728][ T5667] bridge_slave_0: entered promiscuous mode [ 66.954138][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.954221][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.954296][ T5667] bridge_slave_1: entered allmulticast mode [ 66.954976][ T5667] bridge_slave_1: entered promiscuous mode [ 66.974725][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.976929][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.996567][ T5667] team0: Port device team_slave_0 added [ 66.998571][ T5667] team0: Port device team_slave_1 added [ 67.018729][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.018744][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.018768][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.019952][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.019963][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.019987][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.050334][ T5667] hsr_slave_0: entered promiscuous mode [ 67.051075][ T5667] hsr_slave_1: entered promiscuous mode [ 67.159260][ T5667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.189313][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.189857][ T5667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.229405][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.230317][ T5667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.269062][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.269761][ T5667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.308840][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.321076][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.321204][ T5667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.321370][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.321443][ T5667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.372972][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.408180][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.447719][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.790038][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.830365][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.830454][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.833547][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.833608][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.039881][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.069839][ T5667] veth0_vlan: entered promiscuous mode [ 68.072951][ T5667] veth1_vlan: entered promiscuous mode [ 68.098998][ T5667] veth0_macvtap: entered promiscuous mode [ 68.101106][ T5667] veth1_macvtap: entered promiscuous mode [ 68.107058][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.120691][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.125963][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126092][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126122][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126150][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.759820][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.760104][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.760321][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.760936][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.761420][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/06/17 06:13:43 executed programs: 0 [ 69.994550][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.994785][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.995009][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.995635][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.996047][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.462414][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.462479][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.462544][ T5730] bridge_slave_0: entered allmulticast mode [ 70.463191][ T5730] bridge_slave_0: entered promiscuous mode [ 70.464357][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.464426][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.464491][ T5730] bridge_slave_1: entered allmulticast mode [ 70.465139][ T5730] bridge_slave_1: entered promiscuous mode [ 70.485181][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.487810][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.508742][ T5730] team0: Port device team_slave_0 added [ 70.510741][ T5730] team0: Port device team_slave_1 added [ 70.529959][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.529974][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.529999][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.531192][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.531204][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.531226][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.562739][ T5730] hsr_slave_0: entered promiscuous mode [ 70.563490][ T5730] hsr_slave_1: entered promiscuous mode [ 70.563979][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 70.564008][ T5730] Cannot create hsr debugfs directory [ 70.818525][ T5730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.068542][ T5730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.398329][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.398361][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.448425][ T5730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.668771][ T5730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.891416][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.929077][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.037411][ T4913] Bluetooth: hci0: command tx timeout [ 72.207551][ T66] bridge_slave_1: left allmulticast mode [ 72.207569][ T66] bridge_slave_1: left promiscuous mode [ 72.207732][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.327818][ T66] bridge_slave_0: left allmulticast mode [ 72.327837][ T66] bridge_slave_0: left promiscuous mode [ 72.327952][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.198053][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.257783][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.278373][ T66] bond0 (unregistering): Released all slaves [ 73.318372][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.358998][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.360759][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.400038][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.400730][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.439720][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.477429][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.484282][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.487779][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.489096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.503329][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.503401][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.702728][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.725126][ T5730] veth0_vlan: entered promiscuous mode [ 73.729116][ T5730] veth1_vlan: entered promiscuous mode [ 73.750927][ T5730] veth0_macvtap: entered promiscuous mode [ 73.752821][ T5730] veth1_macvtap: entered promiscuous mode [ 73.759770][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.762452][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.811821][ T1331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.812216][ T1331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.849390][ T1331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.850029][ T1331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.914932][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.914950][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.934139][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.934157][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.105621][ T5764] loop0: detected capacity change from 0 to 32768 [ 74.117779][ T4913] Bluetooth: hci0: command tx timeout [ 74.326932][ T5765] loop0: detected capacity change from 0 to 32768 [ 74.539207][ T5766] loop0: detected capacity change from 0 to 32768 [ 74.608776][ T66] hsr_slave_0: left promiscuous mode [ 74.649908][ T66] hsr_slave_1: left promiscuous mode [ 74.650586][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.650604][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.688026][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.688047][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.751808][ T5767] loop0: detected capacity change from 0 to 32768 [ 74.764952][ T66] veth1_macvtap: left promiscuous mode [ 74.765015][ T66] veth0_macvtap: left promiscuous mode [ 74.765134][ T66] veth1_vlan: left promiscuous mode [ 74.765276][ T66] veth0_vlan: left promiscuous mode [ 75.008305][ T5768] loop0: detected capacity change from 0 to 32768 2026/06/17 06:13:48 executed programs: 7 [ 75.242149][ T5769] loop0: detected capacity change from 0 to 32768 [ 75.447852][ T66] team0 (unregistering): Port device team_slave_1 removed [ 75.484941][ T5770] loop0: detected capacity change from 0 to 32768 [ 75.494258][ T66] team0 (unregistering): Port device team_slave_0 removed [ 75.751959][ T5771] loop0: detected capacity change from 0 to 32768 [ 75.959562][ T5772] loop0: detected capacity change from 0 to 32768 [ 76.152803][ T5773] loop0: detected capacity change from 0 to 32768 [ 76.197384][ T4913] Bluetooth: hci0: command tx timeout [ 76.520757][ T9] cfg80211: failed to load regulatory.db [ 77.562992][ T57] ================================================================== [ 77.563007][ T57] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.563040][ T57] Read of size 4096 at addr ffff88803708e000 by task kworker/u8:3/57 [ 77.563065][ T57] [ 77.563083][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 77.563102][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.563112][ T57] Workqueue: loop0 loop_workfn [ 77.563141][ T57] Call Trace: [ 77.563147][ T57] [ 77.563154][ T57] dump_stack_lvl+0xe8/0x150 [ 77.563172][ T57] print_address_description+0x55/0x1e0 [ 77.563189][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.563203][ T57] print_report+0x58/0x70 [ 77.563218][ T57] kasan_report+0x117/0x150 [ 77.563236][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.563253][ T57] kasan_check_range+0x264/0x2c0 [ 77.563271][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.563286][ T57] __asan_memcpy+0x29/0x70 [ 77.563308][ T57] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.563330][ T57] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 77.563344][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563367][ T57] ? shmem_write_begin+0x1ce/0x320 [ 77.563386][ T57] generic_perform_write+0x5a8/0x8b0 [ 77.563408][ T57] ? __pfx_generic_perform_write+0x10/0x10 [ 77.563426][ T57] ? __mark_inode_dirty+0x4e7/0x13b0 [ 77.563444][ T57] ? preempt_count_add+0x91/0x190 [ 77.563464][ T57] ? mnt_put_write_access_file+0xbf/0x100 [ 77.563483][ T57] ? file_update_time_flags+0x406/0x4b0 [ 77.563500][ T57] shmem_file_write_iter+0xfb/0x120 [ 77.563522][ T57] lo_rw_aio+0xc78/0xf30 [ 77.563543][ T57] ? kthread_associate_blkcg+0x30f/0x600 [ 77.563559][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563580][ T57] ? __pfx_lo_rw_aio+0x10/0x10 [ 77.563597][ T57] ? kthread_associate_blkcg+0x30f/0x600 [ 77.563615][ T57] ? kthread_associate_blkcg+0x490/0x600 [ 77.563630][ T57] ? rt_spin_unlock+0x160/0x200 [ 77.563652][ T57] loop_process_work+0x638/0x11d0 [ 77.563677][ T57] ? __pfx_loop_process_work+0x10/0x10 [ 77.563696][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.563711][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563732][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563752][ T57] ? trace_hrtimer_start+0x82/0x200 [ 77.563767][ T57] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 77.563790][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.563804][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.563818][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563838][ T57] ? process_scheduled_works+0xa20/0x14e0 [ 77.563858][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563877][ T57] ? lock_acquire+0x5f/0x350 [ 77.563895][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.563916][ T57] ? process_scheduled_works+0xa20/0x14e0 [ 77.563935][ T57] process_scheduled_works+0xa8e/0x14e0 [ 77.563963][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.563981][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.563997][ T57] ? assign_work+0x3cf/0x5d0 [ 77.564017][ T57] worker_thread+0xa47/0xfb0 [ 77.564045][ T57] kthread+0x388/0x470 [ 77.564067][ T57] ? __pfx_worker_thread+0x10/0x10 [ 77.564087][ T57] ? __pfx_kthread+0x10/0x10 [ 77.564101][ T57] ret_from_fork+0x514/0xb70 [ 77.564117][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 77.564133][ T57] ? __switch_to+0xc89/0x1420 [ 77.564155][ T57] ? __pfx_kthread+0x10/0x10 [ 77.564170][ T57] ret_from_fork_asm+0x1a/0x30 [ 77.564193][ T57] [ 77.564198][ T57] [ 77.564202][ T57] The buggy address belongs to the physical page: [ 77.564216][ T57] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803708e070 pfn:0x3708e [ 77.564231][ T57] flags: 0x80000000000000(node=0|zone=1) [ 77.564249][ T57] raw: 0080000000000000 ffffea0000fa6648 ffffea0001128b88 0000000000000000 [ 77.564263][ T57] raw: ffff88803708e070 0000000000000000 00000000ffffffff 0000000000000000 [ 77.564271][ T57] page dumped because: kasan: bad access detected [ 77.564283][ T57] page_owner tracks the page as freed [ 77.564292][ T57] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5779, tgid 5779 (syz.0.32), ts 77509836821, free_ts 77561480934 [ 77.564316][ T57] post_alloc_hook+0x22d/0x280 [ 77.564331][ T57] get_page_from_freelist+0x2877/0x28f0 [ 77.564349][ T57] __alloc_frozen_pages_noprof+0x18d/0x380 [ 77.564366][ T57] alloc_pages_mpol+0xce/0x280 [ 77.564382][ T57] alloc_pages_noprof+0xd2/0x2f0 [ 77.564399][ T57] lmLogInit+0x357/0x1a20 [ 77.564419][ T57] lmLogOpen+0x4e3/0xf90 [ 77.564445][ T57] jfs_mount_rw+0xf3/0x670 [ 77.564465][ T57] jfs_fill_super+0x769/0xda0 [ 77.564480][ T57] get_tree_bdev_flags+0x430/0x4f0 [ 77.564495][ T57] vfs_get_tree+0x92/0x2a0 [ 77.564509][ T57] do_new_mount+0x319/0xdc0 [ 77.564528][ T57] __se_sys_mount+0x31d/0x420 [ 77.564548][ T57] do_syscall_64+0x174/0x580 [ 77.564563][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.564578][ T57] page last free pid 5730 tgid 5730 stack trace: [ 77.564586][ T57] __free_frozen_pages+0x1019/0x1100 [ 77.564600][ T57] lmLogShutdown+0x44e/0x850 [ 77.564621][ T57] lmLogClose+0x28c/0x530 [ 77.564641][ T57] jfs_umount+0x2da/0x3b0 [ 77.564661][ T57] jfs_put_super+0x8c/0x190 [ 77.564676][ T57] generic_shutdown_super+0x13d/0x2d0 [ 77.564688][ T57] kill_block_super+0x44/0x90 [ 77.564703][ T57] deactivate_locked_super+0xbc/0x130 [ 77.564724][ T57] cleanup_mnt+0x3d3/0x460 [ 77.564738][ T57] task_work_run+0x1d9/0x270 [ 77.564752][ T57] exit_to_user_mode_loop+0x1fa/0x730 [ 77.564768][ T57] do_syscall_64+0x353/0x580 [ 77.564782][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.564796][ T57] [ 77.564799][ T57] Memory state around the buggy address: [ 77.564807][ T57] ffff88803708df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.564817][ T57] ffff88803708df80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.564827][ T57] >ffff88803708e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.564835][ T57] ^ [ 77.564842][ T57] ffff88803708e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.564852][ T57] ffff88803708e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 77.564860][ T57] ================================================================== [ 77.566359][ T57] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.566377][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 77.566398][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.566409][ T57] Workqueue: loop0 loop_workfn [ 77.566434][ T57] Call Trace: [ 77.566440][ T57] [ 77.566448][ T57] vpanic+0x56c/0xa60 [ 77.566469][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.566493][ T57] ? __pfx_vpanic+0x10/0x10 [ 77.566514][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.566541][ T57] panic+0xc5/0xd0 [ 77.566560][ T57] ? __pfx_panic+0x10/0x10 [ 77.566582][ T57] ? preempt_schedule_thunk+0x16/0x40 [ 77.566610][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566627][ T57] ? preempt_schedule_thunk+0x16/0x40 [ 77.566654][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566671][ T57] check_panic_on_warn+0x89/0xb0 [ 77.566691][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566708][ T57] end_report+0x73/0x170 [ 77.566728][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566780][ T57] kasan_report+0x128/0x150 [ 77.566802][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566823][ T57] kasan_check_range+0x264/0x2c0 [ 77.566843][ T57] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566867][ T57] __asan_memcpy+0x29/0x70 [ 77.566895][ T57] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 77.566922][ T57] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 77.566940][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.566965][ T57] ? shmem_write_begin+0x1ce/0x320 [ 77.566987][ T57] generic_perform_write+0x5a8/0x8b0 [ 77.567013][ T57] ? __pfx_generic_perform_write+0x10/0x10 [ 77.567034][ T57] ? __mark_inode_dirty+0x4e7/0x13b0 [ 77.567061][ T57] ? preempt_count_add+0x91/0x190 [ 77.567084][ T57] ? mnt_put_write_access_file+0xbf/0x100 [ 77.567106][ T57] ? file_update_time_flags+0x406/0x4b0 [ 77.567125][ T57] shmem_file_write_iter+0xfb/0x120 [ 77.567150][ T57] lo_rw_aio+0xc78/0xf30 [ 77.567176][ T57] ? kthread_associate_blkcg+0x30f/0x600 [ 77.567194][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567220][ T57] ? __pfx_lo_rw_aio+0x10/0x10 [ 77.567242][ T57] ? kthread_associate_blkcg+0x30f/0x600 [ 77.567264][ T57] ? kthread_associate_blkcg+0x490/0x600 [ 77.567284][ T57] ? rt_spin_unlock+0x160/0x200 [ 77.567308][ T57] loop_process_work+0x638/0x11d0 [ 77.567334][ T57] ? __pfx_loop_process_work+0x10/0x10 [ 77.567356][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.567373][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567396][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567420][ T57] ? trace_hrtimer_start+0x82/0x200 [ 77.567440][ T57] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 77.567467][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.567485][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.567501][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567524][ T57] ? process_scheduled_works+0xa20/0x14e0 [ 77.567546][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567566][ T57] ? lock_acquire+0x5f/0x350 [ 77.567586][ T57] ? rcu_is_watching+0x15/0xb0 [ 77.567610][ T57] ? process_scheduled_works+0xa20/0x14e0 [ 77.567634][ T57] process_scheduled_works+0xa8e/0x14e0 [ 77.567668][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 77.567691][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 77.567708][ T57] ? assign_work+0x3cf/0x5d0 [ 77.567732][ T57] worker_thread+0xa47/0xfb0 [ 77.567770][ T57] kthread+0x388/0x470 [ 77.567789][ T57] ? __pfx_worker_thread+0x10/0x10 [ 77.567813][ T57] ? __pfx_kthread+0x10/0x10 [ 77.567832][ T57] ret_from_fork+0x514/0xb70 [ 77.567853][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 77.567872][ T57] ? __switch_to+0xc89/0x1420 [ 77.567900][ T57] ? __pfx_kthread+0x10/0x10 [ 77.567918][ T57] ret_from_fork_asm+0x1a/0x30 [ 77.567947][ T57] [ 77.568266][ T57] Kernel Offset: disabled