Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. 2026/06/24 17:42:53 parsed 1 programs 2026/06/24 17:42:54 serving rpc on tcp://40693 [ 87.256949][ T10] cfg80211: failed to load regulatory.db [ 88.037179][ T5605] cgroup: Unknown subsys name 'net' [ 88.308527][ T5605] cgroup: Unknown subsys name 'cpuset' [ 88.362738][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.216849][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.096379][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.099136][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.099284][ T5647] bridge_slave_0: entered allmulticast mode [ 96.100784][ T5647] bridge_slave_0: entered promiscuous mode [ 96.115412][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.119881][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.120071][ T5647] bridge_slave_1: entered allmulticast mode [ 96.131369][ T5647] bridge_slave_1: entered promiscuous mode [ 96.185865][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.188305][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.230927][ T5647] team0: Port device team_slave_0 added [ 96.237324][ T5647] team0: Port device team_slave_1 added [ 96.266793][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.266808][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.266822][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.269683][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.269700][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.269718][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.351325][ T5647] hsr_slave_0: entered promiscuous mode [ 96.358297][ T5647] hsr_slave_1: entered promiscuous mode [ 96.827358][ T5647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.878219][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.891066][ T5647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.915973][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.917378][ T5647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.945427][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.949453][ T5647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.996891][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.171439][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.213839][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.230297][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.230857][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.269435][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.269512][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.678829][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.753593][ T5647] veth0_vlan: entered promiscuous mode [ 97.775544][ T5647] veth1_vlan: entered promiscuous mode [ 97.822999][ T5647] veth0_macvtap: entered promiscuous mode [ 97.828792][ T5647] veth1_macvtap: entered promiscuous mode [ 97.863829][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.877580][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.893851][ T3411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.896750][ T3411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.899142][ T3411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.931203][ T3411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.669019][ T3411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.796018][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.796047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.955937][ T3411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.020669][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.020690][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.677040][ T3411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.109714][ T5702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.111465][ T5702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.128491][ T5702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.141756][ T5702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.150868][ T5702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.566826][ T3411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.364278][ T3411] bridge_slave_1: left allmulticast mode [ 101.364381][ T3411] bridge_slave_1: left promiscuous mode [ 101.372695][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.570263][ T3411] bridge_slave_0: left allmulticast mode [ 101.570299][ T3411] bridge_slave_0: left promiscuous mode [ 101.570624][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.432990][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.512570][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.545741][ T3411] bond0 (unregistering): Released all slaves [ 102.596561][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.992040][ T3411] hsr_slave_0: left promiscuous mode [ 103.033233][ T3411] hsr_slave_1: left promiscuous mode [ 103.034339][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.034414][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.087908][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.087937][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.193370][ T3411] veth1_macvtap: left promiscuous mode [ 103.194587][ T3411] veth0_macvtap: left promiscuous mode [ 103.194783][ T3411] veth1_vlan: left promiscuous mode [ 103.194977][ T3411] veth0_vlan: left promiscuous mode [ 103.874015][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 103.922624][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 104.108462][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.928130][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 2026/06/24 17:43:14 executed programs: 0 [ 105.607010][ T5702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.620116][ T5702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.635422][ T5702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.637819][ T5702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.639980][ T5702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.196577][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 107.014052][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.014186][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.015013][ T5781] bridge_slave_0: entered allmulticast mode [ 107.016412][ T5781] bridge_slave_0: entered promiscuous mode [ 107.019007][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.019173][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.019264][ T5781] bridge_slave_1: entered allmulticast mode [ 107.020681][ T5781] bridge_slave_1: entered promiscuous mode [ 107.101277][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.107084][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.148779][ T5781] team0: Port device team_slave_0 added [ 107.151192][ T5781] team0: Port device team_slave_1 added [ 107.191757][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.191776][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.191793][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.200665][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.200700][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.200725][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.349885][ T5781] hsr_slave_0: entered promiscuous mode [ 107.350742][ T5781] hsr_slave_1: entered promiscuous mode [ 107.725653][ T4909] Bluetooth: hci0: command tx timeout [ 109.802076][ T4909] Bluetooth: hci0: command tx timeout [ 110.335165][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.379225][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.380647][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.430723][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.433008][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.485927][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.487923][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.529896][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.691826][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.736725][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.756504][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.756708][ T5789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.794431][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.794646][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.547173][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.678145][ T5781] veth0_vlan: entered promiscuous mode [ 111.706072][ T5781] veth1_vlan: entered promiscuous mode [ 111.759748][ T5781] veth0_macvtap: entered promiscuous mode [ 111.776785][ T5781] veth1_macvtap: entered promiscuous mode [ 111.813758][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.851720][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.882086][ T4909] Bluetooth: hci0: command tx timeout [ 111.910110][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.935918][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.939845][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.941245][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.583012][ T5788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.583037][ T5788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.644785][ T5789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.644809][ T5789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/24 17:43:21 executed programs: 2 [ 113.011288][ T5947] loop0: detected capacity change from 0 to 32768 [ 113.027754][ T5947] ======================================================= [ 113.027754][ T5947] WARNING: The mand mount option has been deprecated and [ 113.027754][ T5947] and is ignored by this kernel. Remove the mand [ 113.027754][ T5947] option from the mount to silence this warning. [ 113.027754][ T5947] ======================================================= [ 113.632592][ T5948] loop0: detected capacity change from 0 to 32768 [ 113.962062][ T4909] Bluetooth: hci0: command tx timeout [ 114.019368][ T5949] loop0: detected capacity change from 0 to 32768 [ 114.467676][ T5950] loop0: detected capacity change from 0 to 32768 [ 114.853775][ T5951] loop0: detected capacity change from 0 to 32768 [ 115.240128][ T5952] loop0: detected capacity change from 0 to 32768 [ 115.641079][ T5953] loop0: detected capacity change from 0 to 32768 [ 116.024529][ T5954] loop0: detected capacity change from 0 to 32768 [ 116.404436][ T5955] loop0: detected capacity change from 0 to 32768 [ 116.823200][ T5956] loop0: detected capacity change from 0 to 32768 2026/06/24 17:43:26 executed programs: 15 [ 118.328924][ T5960] set_capacity_and_notify: 3 callbacks suppressed [ 118.328938][ T5960] loop0: detected capacity change from 0 to 32768 [ 118.670456][ T5961] loop0: detected capacity change from 0 to 32768 [ 119.078321][ T5962] loop0: detected capacity change from 0 to 32768 [ 119.503122][ T5964] loop0: detected capacity change from 0 to 32768 [ 119.884385][ T5965] loop0: detected capacity change from 0 to 32768 [ 119.972248][ T3411] ================================================================== [ 119.972266][ T3411] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.972305][ T3411] Read of size 4096 at addr ffff88803f7f2000 by task kworker/u8:12/3411 [ 119.972326][ T3411] [ 119.972344][ T3411] CPU: 1 UID: 0 PID: 3411 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.972365][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.972376][ T3411] Workqueue: loop0 loop_workfn [ 119.972429][ T3411] Call Trace: [ 119.972437][ T3411] [ 119.972444][ T3411] dump_stack_lvl+0xe8/0x150 [ 119.972465][ T3411] print_address_description+0x55/0x1e0 [ 119.972486][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.972504][ T3411] print_report+0x58/0x70 [ 119.972522][ T3411] kasan_report+0x117/0x150 [ 119.972547][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.972569][ T3411] kasan_check_range+0x264/0x2c0 [ 119.972592][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.972611][ T3411] __asan_memcpy+0x29/0x70 [ 119.972631][ T3411] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.972660][ T3411] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 119.972680][ T3411] ? rcu_is_watching+0x15/0xb0 [ 119.972708][ T3411] ? shmem_write_begin+0x1ce/0x320 [ 119.972732][ T3411] generic_perform_write+0x5a8/0x8b0 [ 119.972758][ T3411] ? __pfx_generic_perform_write+0x10/0x10 [ 119.972777][ T3411] ? __mark_inode_dirty+0x4e7/0x13b0 [ 119.972795][ T3411] ? preempt_count_add+0x91/0x190 [ 119.972821][ T3411] ? mnt_put_write_access_file+0xbf/0x100 [ 119.972854][ T3411] ? file_update_time_flags+0x406/0x4b0 [ 119.972880][ T3411] shmem_file_write_iter+0xfb/0x120 [ 119.972904][ T3411] lo_rw_aio+0xc78/0xf30 [ 119.972934][ T3411] ? __pfx_lo_rw_aio+0x10/0x10 [ 119.972961][ T3411] ? kthread_associate_blkcg+0x490/0x600 [ 119.972981][ T3411] ? rt_spin_unlock+0x163/0x200 [ 119.973003][ T3411] loop_process_work+0x638/0x11d0 [ 119.973035][ T3411] ? __pfx_loop_process_work+0x10/0x10 [ 119.973059][ T3411] ? look_up_lock_class+0x57/0x110 [ 119.973083][ T3411] ? register_lock_class+0x31/0x2e0 [ 119.973107][ T3411] ? __lock_acquire+0x683/0x2ce0 [ 119.973133][ T3411] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.973153][ T3411] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.973172][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.973198][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.973223][ T3411] ? rcu_is_watching+0x15/0xb0 [ 119.973247][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.973269][ T3411] process_scheduled_works+0xa8e/0x14e0 [ 119.973302][ T3411] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.973327][ T3411] ? assign_work+0x3cf/0x5d0 [ 119.973351][ T3411] worker_thread+0xa47/0xfb0 [ 119.973380][ T3411] ? __kthread_parkme+0x71/0x1f0 [ 119.973406][ T3411] kthread+0x388/0x470 [ 119.973424][ T3411] ? __pfx_worker_thread+0x10/0x10 [ 119.973446][ T3411] ? __pfx_kthread+0x10/0x10 [ 119.973464][ T3411] ret_from_fork+0x514/0xb70 [ 119.973484][ T3411] ? __pfx_ret_from_fork+0x10/0x10 [ 119.973499][ T3411] ? __switch_to+0xc89/0x1420 [ 119.973512][ T3411] ? __pfx_kthread+0x10/0x10 [ 119.973525][ T3411] ret_from_fork_asm+0x1a/0x30 [ 119.973546][ T3411] [ 119.973551][ T3411] [ 119.973554][ T3411] The buggy address belongs to the physical page: [ 119.973567][ T3411] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f7f23c0 pfn:0x3f7f2 [ 119.973581][ T3411] flags: 0x80000000000000(node=0|zone=1) [ 119.973605][ T3411] raw: 0080000000000000 ffffea0000aa3308 ffffea000072cac8 0000000000000000 [ 119.973616][ T3411] raw: ffff88803f7f23c0 0000000000000000 00000000ffffffff 0000000000000000 [ 119.973622][ T3411] page dumped because: kasan: bad access detected [ 119.973633][ T3411] page_owner tracks the page as freed [ 119.973638][ T3411] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5965, tgid 5965 (syz.0.34), ts 119904316159, free_ts 119970739633 [ 119.973660][ T3411] post_alloc_hook+0x1f9/0x250 [ 119.973678][ T3411] get_page_from_freelist+0x262a/0x26a0 [ 119.973695][ T3411] __alloc_frozen_pages_noprof+0x18d/0x380 [ 119.973710][ T3411] alloc_pages_mpol+0xce/0x280 [ 119.973729][ T3411] alloc_pages_noprof+0xd2/0x2f0 [ 119.973745][ T3411] lmLogInit+0x357/0x1a20 [ 119.973758][ T3411] lmLogOpen+0x4e3/0xf90 [ 119.973767][ T3411] jfs_mount_rw+0xf3/0x670 [ 119.973784][ T3411] jfs_fill_super+0x769/0xda0 [ 119.973797][ T3411] get_tree_bdev_flags+0x430/0x4f0 [ 119.973814][ T3411] vfs_get_tree+0x92/0x2a0 [ 119.973830][ T3411] do_new_mount+0x319/0xdc0 [ 119.973844][ T3411] __se_sys_mount+0x31d/0x420 [ 119.973857][ T3411] do_syscall_64+0x174/0x580 [ 119.973878][ T3411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.973892][ T3411] page last free pid 5781 tgid 5781 stack trace: [ 119.973901][ T3411] __free_frozen_pages+0x10e7/0x11c0 [ 119.973917][ T3411] lmLogShutdown+0x44e/0x850 [ 119.973928][ T3411] lmLogClose+0x28c/0x530 [ 119.973938][ T3411] jfs_umount+0x2da/0x3b0 [ 119.973955][ T3411] jfs_put_super+0x8c/0x190 [ 119.973969][ T3411] generic_shutdown_super+0x13d/0x2d0 [ 119.973986][ T3411] kill_block_super+0x44/0x90 [ 119.974004][ T3411] deactivate_locked_super+0xbc/0x130 [ 119.974019][ T3411] cleanup_mnt+0x3d3/0x460 [ 119.974038][ T3411] task_work_run+0x1d9/0x270 [ 119.974054][ T3411] exit_to_user_mode_loop+0x1fa/0x730 [ 119.974072][ T3411] do_syscall_64+0x353/0x580 [ 119.974090][ T3411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.974104][ T3411] [ 119.974108][ T3411] Memory state around the buggy address: [ 119.974116][ T3411] ffff88803f7f1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.974126][ T3411] ffff88803f7f1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 119.974135][ T3411] >ffff88803f7f2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 119.974143][ T3411] ^ [ 119.974151][ T3411] ffff88803f7f2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 119.974160][ T3411] ffff88803f7f2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 119.974166][ T3411] ================================================================== [ 119.978143][ T3411] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.978168][ T3411] CPU: 1 UID: 0 PID: 3411 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.978190][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.978203][ T3411] Workqueue: loop0 loop_workfn [ 119.978236][ T3411] Call Trace: [ 119.978244][ T3411] [ 119.978251][ T3411] vpanic+0x56c/0xa60 [ 119.978312][ T3411] ? __pfx_vpanic+0x10/0x10 [ 119.978338][ T3411] panic+0xc5/0xd0 [ 119.978358][ T3411] ? __pfx_panic+0x10/0x10 [ 119.978379][ T3411] ? preempt_schedule_thunk+0x16/0x40 [ 119.978414][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978458][ T3411] ? preempt_schedule_thunk+0x16/0x40 [ 119.978483][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978501][ T3411] check_panic_on_warn+0x89/0xb0 [ 119.978523][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978545][ T3411] end_report+0x73/0x170 [ 119.978569][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978588][ T3411] kasan_report+0x128/0x150 [ 119.978610][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978632][ T3411] kasan_check_range+0x264/0x2c0 [ 119.978653][ T3411] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978672][ T3411] __asan_memcpy+0x29/0x70 [ 119.978693][ T3411] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.978721][ T3411] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 119.978742][ T3411] ? rcu_is_watching+0x15/0xb0 [ 119.978770][ T3411] ? shmem_write_begin+0x1ce/0x320 [ 119.978793][ T3411] generic_perform_write+0x5a8/0x8b0 [ 119.978819][ T3411] ? __pfx_generic_perform_write+0x10/0x10 [ 119.978839][ T3411] ? __mark_inode_dirty+0x4e7/0x13b0 [ 119.978857][ T3411] ? preempt_count_add+0x91/0x190 [ 119.978898][ T3411] ? mnt_put_write_access_file+0xbf/0x100 [ 119.978926][ T3411] ? file_update_time_flags+0x406/0x4b0 [ 119.978952][ T3411] shmem_file_write_iter+0xfb/0x120 [ 119.978979][ T3411] lo_rw_aio+0xc78/0xf30 [ 119.979010][ T3411] ? __pfx_lo_rw_aio+0x10/0x10 [ 119.979037][ T3411] ? kthread_associate_blkcg+0x490/0x600 [ 119.979057][ T3411] ? rt_spin_unlock+0x163/0x200 [ 119.979078][ T3411] loop_process_work+0x638/0x11d0 [ 119.979110][ T3411] ? __pfx_loop_process_work+0x10/0x10 [ 119.979134][ T3411] ? look_up_lock_class+0x57/0x110 [ 119.979158][ T3411] ? register_lock_class+0x31/0x2e0 [ 119.979180][ T3411] ? __lock_acquire+0x683/0x2ce0 [ 119.979206][ T3411] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.979225][ T3411] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.979243][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.979265][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.979290][ T3411] ? rcu_is_watching+0x15/0xb0 [ 119.979314][ T3411] ? process_scheduled_works+0xa20/0x14e0 [ 119.979337][ T3411] process_scheduled_works+0xa8e/0x14e0 [ 119.979371][ T3411] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.979403][ T3411] ? assign_work+0x3cf/0x5d0 [ 119.979427][ T3411] worker_thread+0xa47/0xfb0 [ 119.979456][ T3411] ? __kthread_parkme+0x71/0x1f0 [ 119.979476][ T3411] kthread+0x388/0x470 [ 119.979494][ T3411] ? __pfx_worker_thread+0x10/0x10 [ 119.979516][ T3411] ? __pfx_kthread+0x10/0x10 [ 119.979534][ T3411] ret_from_fork+0x514/0xb70 [ 119.979557][ T3411] ? __pfx_ret_from_fork+0x10/0x10 [ 119.979575][ T3411] ? __switch_to+0xc89/0x1420 [ 119.979593][ T3411] ? __pfx_kthread+0x10/0x10 [ 119.979611][ T3411] ret_from_fork_asm+0x1a/0x30 [ 119.979637][ T3411] [ 119.979914][ T3411] Kernel Offset: disabled