[ 91.993629][ T11] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts.
2026/06/25 15:31:15 parsed 1 programs
2026/06/25 15:31:15 serving rpc on tcp://39701
[ 100.491306][ T5615] cgroup: Unknown subsys name 'net'
[ 100.735420][ T5615] cgroup: Unknown subsys name 'cpuset'
[ 100.807031][ T5615] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.779490][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 108.210301][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.210328][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.448353][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.448377][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.567543][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.568604][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.569118][ T5671] bridge_slave_0: entered allmulticast mode
[ 111.571121][ T5671] bridge_slave_0: entered promiscuous mode
[ 111.575944][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.576092][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.576199][ T5671] bridge_slave_1: entered allmulticast mode
[ 111.584519][ T5671] bridge_slave_1: entered promiscuous mode
[ 111.661891][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.665175][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.715578][ T5671] team0: Port device team_slave_0 added
[ 111.724471][ T5671] team0: Port device team_slave_1 added
[ 111.759369][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.759382][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.759402][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.761904][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.761922][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.761941][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.902861][ T5671] hsr_slave_0: entered promiscuous mode
[ 111.903978][ T5671] hsr_slave_1: entered promiscuous mode
[ 112.634039][ T5671] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.673143][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 112.675080][ T5671] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 112.704254][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 112.721344][ T5671] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 112.760636][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 112.764792][ T5671] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.800648][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 112.921021][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.961775][ T5671] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.985889][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.001545][ T1413] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.040456][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.040566][ T1413] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.504505][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.579538][ T5671] veth0_vlan: entered promiscuous mode
[ 113.620751][ T5671] veth1_vlan: entered promiscuous mode
[ 113.681810][ T5671] veth0_macvtap: entered promiscuous mode
[ 113.697843][ T5671] veth1_macvtap: entered promiscuous mode
[ 113.728210][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.752174][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.778763][ T1413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.781366][ T1413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.804310][ T1413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.822098][ T1413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.467418][ T1192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.750081][ T1192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.094283][ T1192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.104547][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.107895][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.129924][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.131006][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.132452][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.480165][ T1192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/25 15:31:36 executed programs: 0
[ 117.512916][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.538369][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.539973][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.541128][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.541853][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.609383][ T1192] bridge_slave_1: left allmulticast mode
[ 117.609492][ T1192] bridge_slave_1: left promiscuous mode
[ 117.635311][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.819595][ T1192] bridge_slave_0: left allmulticast mode
[ 117.819630][ T1192] bridge_slave_0: left promiscuous mode
[ 117.819873][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.627519][ T1192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 118.708909][ T1192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 118.751546][ T1192] bond0 (unregistering): Released all slaves
[ 118.779751][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 119.246483][ T1192] hsr_slave_0: left promiscuous mode
[ 119.286487][ T1192] hsr_slave_1: left promiscuous mode
[ 119.287484][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 119.287552][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 119.338602][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 119.338633][ T1192] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 119.443367][ T1192] veth1_macvtap: left promiscuous mode
[ 119.444122][ T1192] veth0_macvtap: left promiscuous mode
[ 119.444467][ T1192] veth1_vlan: left promiscuous mode
[ 119.444791][ T1192] veth0_vlan: left promiscuous mode
[ 119.678985][ T59] Bluetooth: hci0: command tx timeout
[ 120.217353][ T1192] team0 (unregistering): Port device team_slave_1 removed
[ 120.277497][ T1192] team0 (unregistering): Port device team_slave_0 removed
[ 120.471171][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[ 121.106184][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.116513][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.116750][ T5745] bridge_slave_0: entered allmulticast mode
[ 121.122295][ T5745] bridge_slave_0: entered promiscuous mode
[ 121.155589][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.158814][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.159413][ T5745] bridge_slave_1: entered allmulticast mode
[ 121.176717][ T5745] bridge_slave_1: entered promiscuous mode
[ 121.236533][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 121.242447][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 121.330874][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
[ 121.344833][ T5745] team0: Port device team_slave_0 added
[ 121.363023][ T5745] team0: Port device team_slave_1 added
[ 121.407583][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.407600][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.407628][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.412555][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.412570][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.412599][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.746381][ T59] Bluetooth: hci0: command tx timeout
[ 121.783948][ T5745] hsr_slave_0: entered promiscuous mode
[ 121.785417][ T5745] hsr_slave_1: entered promiscuous mode
[ 122.379308][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
[ 123.836392][ T59] Bluetooth: hci0: command tx timeout
[ 124.471560][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 124.514650][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 124.516213][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 124.564197][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 124.566165][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 124.604762][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 124.608169][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 124.654150][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 124.880881][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.935139][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.952013][ T83] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.952815][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.013124][ T83] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.013253][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.614900][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.678143][ T5745] veth0_vlan: entered promiscuous mode
[ 125.698150][ T5745] veth1_vlan: entered promiscuous mode
[ 125.736057][ T5745] veth0_macvtap: entered promiscuous mode
[ 125.749318][ T5745] veth1_macvtap: entered promiscuous mode
[ 125.784178][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.801833][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.822850][ T3354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.823111][ T3354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.823164][ T3354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.823203][ T3354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.906409][ T59] Bluetooth: hci0: command tx timeout
[ 126.189883][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.189905][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.259679][ T3293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.259700][ T3293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/25 15:31:45 executed programs: 2
[ 126.683480][ T5898] loop0: detected capacity change from 0 to 32768
[ 127.529014][ T5899] loop0: detected capacity change from 0 to 32768
[ 128.008590][ T5901] loop0: detected capacity change from 0 to 32768
[ 128.481215][ T5902] loop0: detected capacity change from 0 to 32768
[ 129.033160][ T5904] loop0: detected capacity change from 0 to 32768
[ 129.491094][ T5907] loop0: detected capacity change from 0 to 32768
[ 130.192694][ T5908] loop0: detected capacity change from 0 to 32768
[ 130.624330][ T5909] loop0: detected capacity change from 0 to 32768
[ 131.338645][ T5910] loop0: detected capacity change from 0 to 32768
2026/06/25 15:31:50 executed programs: 11
[ 132.060402][ T5911] loop0: detected capacity change from 0 to 32768
[ 132.487586][ T5912] loop0: detected capacity change from 0 to 32768
[ 132.956156][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.956252][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.243786][ T5913] loop0: detected capacity change from 0 to 32768
[ 133.664510][ T5914] loop0: detected capacity change from 0 to 32768
[ 134.109556][ T5915] loop0: detected capacity change from 0 to 32768
[ 134.794661][ T5916] loop0: detected capacity change from 0 to 32768
[ 135.502931][ T5917] loop0: detected capacity change from 0 to 32768
[ 136.234686][ T5918] loop0: detected capacity change from 0 to 32768
[ 136.914031][ T5919] loop0: detected capacity change from 0 to 32768
2026/06/25 15:31:55 executed programs: 20
[ 137.349346][ T5920] loop0: detected capacity change from 0 to 32768
[ 137.775656][ T5921] loop0: detected capacity change from 0 to 32768
[ 138.183014][ T5922] loop0: detected capacity change from 0 to 32768
[ 138.888450][ T5923] loop0: detected capacity change from 0 to 32768
[ 139.327212][ T5924] loop0: detected capacity change from 0 to 32768
[ 140.015401][ T5925] loop0: detected capacity change from 0 to 32768
[ 140.433888][ T5926] loop0: detected capacity change from 0 to 32768
[ 140.852931][ T5927] loop0: detected capacity change from 0 to 32768
[ 141.572584][ T5928] loop0: detected capacity change from 0 to 32768
[ 142.012129][ T5929] loop0: detected capacity change from 0 to 32768
2026/06/25 15:32:00 executed programs: 30
[ 142.983626][ T5930] loop0: detected capacity change from 0 to 32768
[ 143.681966][ T5931] loop0: detected capacity change from 0 to 32768
[ 144.657633][ T5932] loop0: detected capacity change from 0 to 32768
[ 145.622073][ T5933] loop0: detected capacity change from 0 to 32768
[ 146.054367][ T5934] loop0: detected capacity change from 0 to 32768
[ 147.011024][ T5935] loop0: detected capacity change from 0 to 32768
[ 147.714624][ T5936] loop0: detected capacity change from 0 to 32768
2026/06/25 15:32:06 executed programs: 37
[ 148.423286][ T5937] loop0: detected capacity change from 0 to 32768
[ 149.453824][ T5938] loop0: detected capacity change from 0 to 32768
[ 149.862376][ T5939] loop0: detected capacity change from 0 to 32768
[ 150.272480][ T5940] loop0: detected capacity change from 0 to 32768
[ 150.701766][ T5941] loop0: detected capacity change from 0 to 32768
[ 151.399322][ T5942] loop0: detected capacity change from 0 to 32768
[ 151.983770][ T3293] ==================================================================
[ 151.983787][ T3293] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.983834][ T3293] Read of size 4096 at addr ffff888031fba000 by task kworker/u8:12/3293
[ 151.983853][ T3293]
[ 151.983873][ T3293] CPU: 1 UID: 0 PID: 3293 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 151.983897][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 151.983912][ T3293] Workqueue: loop0 loop_workfn
[ 151.983950][ T3293] Call Trace:
[ 151.983959][ T3293]
[ 151.983968][ T3293] dump_stack_lvl+0xe8/0x150
[ 151.984005][ T3293] print_address_description+0x55/0x1e0
[ 151.984032][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.984058][ T3293] print_report+0x58/0x70
[ 151.984081][ T3293] kasan_report+0x117/0x150
[ 151.984113][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.984144][ T3293] kasan_check_range+0x264/0x2c0
[ 151.984175][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.984206][ T3293] __asan_memcpy+0x29/0x70
[ 151.984230][ T3293] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.984268][ T3293] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 151.984295][ T3293] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 151.984331][ T3293] ? shmem_write_begin+0x1ce/0x320
[ 151.984361][ T3293] generic_perform_write+0x5a8/0x8b0
[ 151.984395][ T3293] ? __pfx_generic_perform_write+0x10/0x10
[ 151.984420][ T3293] ? generic_write_checks_count+0x426/0x530
[ 151.984449][ T3293] ? file_update_time_flags+0x3b9/0x4b0
[ 151.984482][ T3293] shmem_file_write_iter+0xfb/0x120
[ 151.984515][ T3293] lo_rw_aio+0xc78/0xf30
[ 151.984549][ T3293] ? __pfx_lo_rw_aio+0x10/0x10
[ 151.984573][ T3293] ? kthread_associate_blkcg+0x490/0x600
[ 151.984599][ T3293] ? rt_spin_unlock+0x163/0x200
[ 151.984640][ T3293] loop_process_work+0x638/0x11d0
[ 151.984671][ T3293] ? __pfx_loop_process_work+0x10/0x10
[ 151.984693][ T3293] ? look_up_lock_class+0x57/0x110
[ 151.984725][ T3293] ? register_lock_class+0x31/0x2e0
[ 151.984754][ T3293] ? __lock_acquire+0x683/0x2ce0
[ 151.984790][ T3293] ? do_raw_spin_lock+0x12b/0x2f0
[ 151.984813][ T3293] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 151.984838][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.984871][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.984905][ T3293] ? rcu_is_watching+0x15/0xb0
[ 151.984938][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.984968][ T3293] process_scheduled_works+0xa8e/0x14e0
[ 151.985010][ T3293] ? __pfx_process_scheduled_works+0x10/0x10
[ 151.985037][ T3293] ? assign_work+0x3cf/0x5d0
[ 151.985062][ T3293] worker_thread+0xa47/0xfb0
[ 151.985098][ T3293] kthread+0x388/0x470
[ 151.985116][ T3293] ? __pfx_worker_thread+0x10/0x10
[ 151.985140][ T3293] ? __pfx_kthread+0x10/0x10
[ 151.985158][ T3293] ret_from_fork+0x514/0xb70
[ 151.985180][ T3293] ? __pfx_ret_from_fork+0x10/0x10
[ 151.985199][ T3293] ? __switch_to+0xc89/0x1420
[ 151.985216][ T3293] ? __pfx_kthread+0x10/0x10
[ 151.985234][ T3293] ret_from_fork_asm+0x1a/0x30
[ 151.985263][ T3293]
[ 151.985269][ T3293]
[ 151.985273][ T3293] The buggy address belongs to the physical page:
[ 151.985286][ T3293] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x36 pfn:0x31fba
[ 151.985302][ T3293] flags: 0x80000000000000(node=0|zone=1)
[ 151.985327][ T3293] raw: 0080000000000000 ffffea0001053a88 ffffea0001050f88 0000000000000000
[ 151.985342][ T3293] raw: 0000000000000036 0000000000000000 00000000ffffffff 0000000000000000
[ 151.985350][ T3293] page dumped because: kasan: bad access detected
[ 151.985362][ T3293] page_owner tracks the page as freed
[ 151.985368][ T3293] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5942, tgid 5942 (syz.0.57), ts 151413311335, free_ts 151983729675
[ 151.985394][ T3293] post_alloc_hook+0x1f9/0x250
[ 151.985414][ T3293] get_page_from_freelist+0x262a/0x26a0
[ 151.985436][ T3293] __alloc_frozen_pages_noprof+0x18d/0x380
[ 151.985458][ T3293] alloc_pages_mpol+0xce/0x280
[ 151.985480][ T3293] alloc_pages_noprof+0xd2/0x2f0
[ 151.985504][ T3293] lmLogInit+0x357/0x1a20
[ 151.985518][ T3293] lmLogOpen+0x4e3/0xf90
[ 151.985531][ T3293] jfs_mount_rw+0xf3/0x670
[ 151.985554][ T3293] jfs_fill_super+0x769/0xda0
[ 151.985573][ T3293] get_tree_bdev_flags+0x430/0x4f0
[ 151.985596][ T3293] vfs_get_tree+0x92/0x2a0
[ 151.985619][ T3293] do_new_mount+0x319/0xdc0
[ 151.985636][ T3293] __se_sys_mount+0x31d/0x420
[ 151.985654][ T3293] do_syscall_64+0x174/0x580
[ 151.985678][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 151.985694][ T3293] page last free pid 5745 tgid 5745 stack trace:
[ 151.985703][ T3293] __free_frozen_pages+0x10e7/0x11c0
[ 151.985722][ T3293] lmLogShutdown+0x44e/0x850
[ 151.985737][ T3293] lmLogClose+0x28c/0x530
[ 151.985751][ T3293] jfs_umount+0x2da/0x3b0
[ 151.985763][ T3293] jfs_put_super+0x8c/0x190
[ 151.985782][ T3293] generic_shutdown_super+0x13d/0x2d0
[ 151.985802][ T3293] kill_block_super+0x44/0x90
[ 151.985825][ T3293] deactivate_locked_super+0xbc/0x130
[ 151.985845][ T3293] cleanup_mnt+0x3d3/0x460
[ 151.985866][ T3293] task_work_run+0x1d9/0x270
[ 151.985885][ T3293] exit_to_user_mode_loop+0x1fa/0x730
[ 151.985905][ T3293] do_syscall_64+0x353/0x580
[ 151.985928][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 151.985943][ T3293]
[ 151.985947][ T3293] Memory state around the buggy address:
[ 151.985956][ T3293] ffff888031fb9f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 151.985967][ T3293] ffff888031fb9f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 151.985978][ T3293] >ffff888031fba000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 151.985986][ T3293] ^
[ 151.986001][ T3293] ffff888031fba080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 151.986011][ T3293] ffff888031fba100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 151.986020][ T3293] ==================================================================
[ 151.986049][ T3293] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 151.986065][ T3293] CPU: 1 UID: 0 PID: 3293 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 151.986088][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 151.986101][ T3293] Workqueue: loop0 loop_workfn
[ 151.986122][ T3293] Call Trace:
[ 151.986130][ T3293]
[ 151.986138][ T3293] vpanic+0x56c/0xa60
[ 151.986167][ T3293] ? rcu_is_watching+0x15/0xb0
[ 151.986199][ T3293] ? __pfx_vpanic+0x10/0x10
[ 151.986231][ T3293] panic+0xc5/0xd0
[ 151.986261][ T3293] ? __pfx_panic+0x10/0x10
[ 151.986288][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986317][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986341][ T3293] check_panic_on_warn+0x89/0xb0
[ 151.986361][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986391][ T3293] end_report+0x73/0x170
[ 151.986412][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986430][ T3293] kasan_report+0x128/0x150
[ 151.986452][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986474][ T3293] kasan_check_range+0x264/0x2c0
[ 151.986499][ T3293] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986518][ T3293] __asan_memcpy+0x29/0x70
[ 151.986538][ T3293] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 151.986568][ T3293] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 151.986591][ T3293] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 151.986620][ T3293] ? shmem_write_begin+0x1ce/0x320
[ 151.986645][ T3293] generic_perform_write+0x5a8/0x8b0
[ 151.986672][ T3293] ? __pfx_generic_perform_write+0x10/0x10
[ 151.986693][ T3293] ? generic_write_checks_count+0x426/0x530
[ 151.986718][ T3293] ? file_update_time_flags+0x3b9/0x4b0
[ 151.986749][ T3293] shmem_file_write_iter+0xfb/0x120
[ 151.986782][ T3293] lo_rw_aio+0xc78/0xf30
[ 151.986806][ T3293] ? __pfx_lo_rw_aio+0x10/0x10
[ 151.986824][ T3293] ? kthread_associate_blkcg+0x490/0x600
[ 151.986843][ T3293] ? rt_spin_unlock+0x163/0x200
[ 151.986863][ T3293] loop_process_work+0x638/0x11d0
[ 151.986886][ T3293] ? __pfx_loop_process_work+0x10/0x10
[ 151.986920][ T3293] ? look_up_lock_class+0x57/0x110
[ 151.986948][ T3293] ? register_lock_class+0x31/0x2e0
[ 151.986971][ T3293] ? __lock_acquire+0x683/0x2ce0
[ 151.987007][ T3293] ? do_raw_spin_lock+0x12b/0x2f0
[ 151.987030][ T3293] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 151.987051][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.987079][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.987108][ T3293] ? rcu_is_watching+0x15/0xb0
[ 151.987140][ T3293] ? process_scheduled_works+0xa20/0x14e0
[ 151.987168][ T3293] process_scheduled_works+0xa8e/0x14e0
[ 151.987209][ T3293] ? __pfx_process_scheduled_works+0x10/0x10
[ 151.987242][ T3293] ? assign_work+0x3cf/0x5d0
[ 151.987274][ T3293] worker_thread+0xa47/0xfb0
[ 151.987318][ T3293] kthread+0x388/0x470
[ 151.987336][ T3293] ? __pfx_worker_thread+0x10/0x10
[ 151.987359][ T3293] ? __pfx_kthread+0x10/0x10
[ 151.987377][ T3293] ret_from_fork+0x514/0xb70
[ 151.987398][ T3293] ? __pfx_ret_from_fork+0x10/0x10
[ 151.987417][ T3293] ? __switch_to+0xc89/0x1420
[ 151.987434][ T3293] ? __pfx_kthread+0x10/0x10
[ 151.987453][ T3293] ret_from_fork_asm+0x1a/0x30
[ 151.987482][ T3293]
[ 151.989176][ T3293] Kernel Offset: disabled