Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts.
[ 81.684656][ T820] cfg80211: failed to load regulatory.db
2026/06/21 03:54:18 parsed 1 programs
2026/06/21 03:54:18 serving rpc on tcp://45091
[ 85.905302][ T5606] cgroup: Unknown subsys name 'net'
[ 86.147123][ T5606] cgroup: Unknown subsys name 'cpuset'
[ 86.224287][ T5606] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 87.519949][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.909444][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.909546][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.909628][ T5614] bridge_slave_0: entered allmulticast mode
[ 89.910540][ T5614] bridge_slave_0: entered promiscuous mode
[ 89.911999][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.912063][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.912141][ T5614] bridge_slave_1: entered allmulticast mode
[ 89.913111][ T5614] bridge_slave_1: entered promiscuous mode
[ 89.972859][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.977059][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.002399][ T5614] team0: Port device team_slave_0 added
[ 90.004767][ T5614] team0: Port device team_slave_1 added
[ 90.026331][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.026341][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.026360][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.027363][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.027372][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.027389][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.096677][ T5614] hsr_slave_0: entered promiscuous mode
[ 90.098866][ T5614] hsr_slave_1: entered promiscuous mode
[ 90.217001][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.246338][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 90.247009][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.269844][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.270534][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.305855][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.306703][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.346429][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 90.368153][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.368333][ T5614] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.368563][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.368698][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.421749][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.464707][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 90.504250][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 90.667299][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.684712][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.684764][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.688470][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.688550][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.946068][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.975849][ T5614] veth0_vlan: entered promiscuous mode
[ 90.979503][ T5614] veth1_vlan: entered promiscuous mode
[ 91.005541][ T5614] veth0_macvtap: entered promiscuous mode
[ 91.007962][ T5614] veth1_macvtap: entered promiscuous mode
[ 91.018602][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.035514][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.039773][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.039938][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.039971][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.039999][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.526177][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.815167][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.105454][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.385423][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.240933][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.241215][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.241425][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.242087][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.242549][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.016070][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.016097][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.062726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.062744][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.354377][ T154] bridge_slave_1: left allmulticast mode
[ 94.354404][ T154] bridge_slave_1: left promiscuous mode
[ 94.354577][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.514614][ T154] bridge_slave_0: left allmulticast mode
[ 94.514638][ T154] bridge_slave_0: left promiscuous mode
[ 94.514838][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.184453][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 95.245097][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 95.265207][ T154] bond0 (unregistering): Released all slaves
[ 95.308093][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1
[ 95.654073][ T154] hsr_slave_0: left promiscuous mode
[ 95.694047][ T154] hsr_slave_1: left promiscuous mode
[ 95.695014][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 95.695027][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 95.734705][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 95.734730][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 95.824420][ T154] veth1_macvtap: left promiscuous mode
[ 95.824461][ T154] veth0_macvtap: left promiscuous mode
[ 95.824543][ T154] veth1_vlan: left promiscuous mode
[ 95.824601][ T154] veth0_vlan: left promiscuous mode
[ 96.324515][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 96.344388][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 96.446182][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2
[ 96.823320][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3
2026/06/21 03:54:33 executed programs: 0
[ 97.233351][ T4906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.233587][ T4906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.233818][ T4906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.235290][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.236435][ T4906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.298909][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4
[ 98.031208][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.031283][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.031374][ T5786] bridge_slave_0: entered allmulticast mode
[ 98.041518][ T5786] bridge_slave_0: entered promiscuous mode
[ 98.053101][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.053277][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.053485][ T5786] bridge_slave_1: entered allmulticast mode
[ 98.066185][ T5786] bridge_slave_1: entered promiscuous mode
[ 98.119665][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.123042][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.162214][ T5786] team0: Port device team_slave_0 added
[ 98.163716][ T5786] team0: Port device team_slave_1 added
[ 98.190598][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.190614][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.190630][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.191554][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.191564][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.191600][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.271713][ T5786] hsr_slave_0: entered promiscuous mode
[ 98.273600][ T5786] hsr_slave_1: entered promiscuous mode
[ 99.284037][ T60] Bluetooth: hci0: command tx timeout
[ 99.929912][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.966865][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 99.967792][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.016941][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 100.017836][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.056690][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 100.057444][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.097913][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 100.172837][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.191542][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.201699][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.201813][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.217701][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.217865][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.581012][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.620407][ T5786] veth0_vlan: entered promiscuous mode
[ 100.628728][ T5786] veth1_vlan: entered promiscuous mode
[ 100.658056][ T5786] veth0_macvtap: entered promiscuous mode
[ 100.661295][ T5786] veth1_macvtap: entered promiscuous mode
[ 100.687601][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.695536][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.710048][ T5805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.710195][ T5805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.710228][ T5805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.710259][ T5805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.879507][ T5812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.879525][ T5812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.915650][ T5812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.915666][ T5812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.153685][ T5943] loop0: detected capacity change from 0 to 32768
[ 101.364108][ T60] Bluetooth: hci0: command tx timeout
[ 101.416087][ T5944] loop0: detected capacity change from 0 to 32768
[ 101.671804][ T5945] loop0: detected capacity change from 0 to 32768
[ 101.925246][ T5946] loop0: detected capacity change from 0 to 32768
[ 102.221067][ T5947] loop0: detected capacity change from 0 to 32768
2026/06/21 03:54:38 executed programs: 7
[ 102.481255][ T5948] loop0: detected capacity change from 0 to 32768
[ 102.739874][ T5950] loop0: detected capacity change from 0 to 32768
[ 102.971875][ T5951] loop0: detected capacity change from 0 to 32768
[ 103.230721][ T5952] loop0: detected capacity change from 0 to 32768
[ 103.289131][ T5811] ==================================================================
[ 103.289148][ T5811] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.289189][ T5811] Read of size 4096 at addr ffff8880355c0000 by task kworker/u8:17/5811
[ 103.289208][ T5811]
[ 103.289228][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 103.289253][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 103.289267][ T5811] Workqueue: loop0 loop_workfn
[ 103.289312][ T5811] Call Trace:
[ 103.289321][ T5811]
[ 103.289330][ T5811] dump_stack_lvl+0xe8/0x150
[ 103.289357][ T5811] print_address_description+0x55/0x1e0
[ 103.289383][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.289404][ T5811] print_report+0x58/0x70
[ 103.289425][ T5811] kasan_report+0x117/0x150
[ 103.289453][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.289477][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.289504][ T5811] kasan_check_range+0x264/0x2c0
[ 103.289533][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.289556][ T5811] __asan_memcpy+0x29/0x70
[ 103.289578][ T5811] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.289611][ T5811] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 103.289633][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.289665][ T5811] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 103.289697][ T5811] ? shmem_write_begin+0x1ce/0x320
[ 103.289727][ T5811] generic_perform_write+0x5a8/0x8b0
[ 103.289759][ T5811] ? __pfx_generic_perform_write+0x10/0x10
[ 103.289784][ T5811] ? generic_write_checks_count+0x426/0x530
[ 103.289810][ T5811] ? file_update_time_flags+0x3b9/0x4b0
[ 103.289843][ T5811] shmem_file_write_iter+0xfb/0x120
[ 103.289877][ T5811] lo_rw_aio+0xc78/0xf30
[ 103.289911][ T5811] ? kthread_associate_blkcg+0x30f/0x600
[ 103.289935][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.289988][ T5811] ? __pfx_lo_rw_aio+0x10/0x10
[ 103.290017][ T5811] ? kthread_associate_blkcg+0x30f/0x600
[ 103.290047][ T5811] ? kthread_associate_blkcg+0x490/0x600
[ 103.290071][ T5811] ? rt_spin_unlock+0x160/0x200
[ 103.290102][ T5811] loop_process_work+0x638/0x11d0
[ 103.290150][ T5811] ? __pfx_loop_process_work+0x10/0x10
[ 103.290188][ T5811] ? kvm_sched_clock_read+0x11/0x20
[ 103.290223][ T5811] ? sched_clock+0x3f/0x60
[ 103.290247][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.290271][ T5811] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 103.290293][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.290324][ T5811] ? process_scheduled_works+0xa20/0x14e0
[ 103.290354][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.290385][ T5811] ? lock_acquire+0x5f/0x350
[ 103.290418][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.290451][ T5811] ? process_scheduled_works+0xa20/0x14e0
[ 103.290481][ T5811] process_scheduled_works+0xa8e/0x14e0
[ 103.290531][ T5811] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.290561][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.290586][ T5811] ? assign_work+0x3cf/0x5d0
[ 103.290618][ T5811] worker_thread+0xa47/0xfb0
[ 103.290662][ T5811] kthread+0x388/0x470
[ 103.290686][ T5811] ? __pfx_worker_thread+0x10/0x10
[ 103.290716][ T5811] ? __pfx_kthread+0x10/0x10
[ 103.290740][ T5811] ret_from_fork+0x514/0xb70
[ 103.290765][ T5811] ? __pfx_ret_from_fork+0x10/0x10
[ 103.290789][ T5811] ? __switch_to+0xc89/0x1420
[ 103.290824][ T5811] ? __pfx_kthread+0x10/0x10
[ 103.290849][ T5811] ret_from_fork_asm+0x1a/0x30
[ 103.290884][ T5811]
[ 103.290892][ T5811]
[ 103.290898][ T5811] The buggy address belongs to the physical page:
[ 103.290922][ T5811] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x355c0
[ 103.290941][ T5811] flags: 0x80000000000000(node=0|zone=1)
[ 103.290977][ T5811] raw: 0080000000000000 ffffea0000962208 ffffea0000f0fbc8 0000000000000000
[ 103.290995][ T5811] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 103.291006][ T5811] page dumped because: kasan: bad access detected
[ 103.291020][ T5811] page_owner tracks the page as freed
[ 103.291028][ T5811] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5952, tgid 5952 (syz.0.25), ts 103241863446, free_ts 103289099388
[ 103.291060][ T5811] post_alloc_hook+0x1f9/0x250
[ 103.291085][ T5811] get_page_from_freelist+0x262a/0x26a0
[ 103.291114][ T5811] __alloc_frozen_pages_noprof+0x18d/0x380
[ 103.291142][ T5811] alloc_pages_mpol+0xce/0x280
[ 103.291170][ T5811] alloc_pages_noprof+0xd2/0x2f0
[ 103.291197][ T5811] lmLogInit+0x357/0x1a20
[ 103.291227][ T5811] lmLogOpen+0x4e3/0xf90
[ 103.291257][ T5811] jfs_mount_rw+0xf3/0x670
[ 103.291285][ T5811] jfs_fill_super+0x769/0xda0
[ 103.291306][ T5811] get_tree_bdev_flags+0x430/0x4f0
[ 103.291335][ T5811] vfs_get_tree+0x92/0x2a0
[ 103.291362][ T5811] do_new_mount+0x319/0xdc0
[ 103.291384][ T5811] __se_sys_mount+0x31d/0x420
[ 103.291407][ T5811] do_syscall_64+0x174/0x580
[ 103.291425][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.291445][ T5811] page last free pid 5786 tgid 5786 stack trace:
[ 103.291457][ T5811] __free_frozen_pages+0x10e7/0x11c0
[ 103.291482][ T5811] lmLogShutdown+0x44e/0x850
[ 103.291500][ T5811] lmLogClose+0x28c/0x530
[ 103.291516][ T5811] jfs_umount+0x2da/0x3b0
[ 103.291552][ T5811] jfs_put_super+0x8c/0x190
[ 103.291575][ T5811] generic_shutdown_super+0x13d/0x2d0
[ 103.291601][ T5811] kill_block_super+0x44/0x90
[ 103.291631][ T5811] deactivate_locked_super+0xbc/0x130
[ 103.291657][ T5811] cleanup_mnt+0x3d3/0x460
[ 103.291684][ T5811] task_work_run+0x1d9/0x270
[ 103.291708][ T5811] exit_to_user_mode_loop+0x1fa/0x730
[ 103.291733][ T5811] do_syscall_64+0x353/0x580
[ 103.291751][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.291771][ T5811]
[ 103.291776][ T5811] Memory state around the buggy address:
[ 103.291787][ T5811] ffff8880355bff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.291802][ T5811] ffff8880355bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.291818][ T5811] >ffff8880355c0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 103.291829][ T5811] ^
[ 103.291839][ T5811] ffff8880355c0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 103.291853][ T5811] ffff8880355c0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 103.291864][ T5811] ==================================================================
[ 103.291893][ T5811] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 103.291909][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 103.291933][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 103.291954][ T5811] Workqueue: loop0 loop_workfn
[ 103.291986][ T5811] Call Trace:
[ 103.291994][ T5811]
[ 103.292002][ T5811] vpanic+0x56c/0xa60
[ 103.292030][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.292062][ T5811] ? __pfx_vpanic+0x10/0x10
[ 103.292090][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.292125][ T5811] panic+0xc5/0xd0
[ 103.292152][ T5811] ? __pfx_panic+0x10/0x10
[ 103.292180][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292208][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292231][ T5811] check_panic_on_warn+0x89/0xb0
[ 103.292258][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292279][ T5811] end_report+0x73/0x170
[ 103.292310][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292331][ T5811] kasan_report+0x128/0x150
[ 103.292360][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.292383][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292411][ T5811] kasan_check_range+0x264/0x2c0
[ 103.292440][ T5811] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292463][ T5811] __asan_memcpy+0x29/0x70
[ 103.292486][ T5811] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 103.292520][ T5811] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 103.292543][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.292575][ T5811] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 103.292608][ T5811] ? shmem_write_begin+0x1ce/0x320
[ 103.292637][ T5811] generic_perform_write+0x5a8/0x8b0
[ 103.292670][ T5811] ? __pfx_generic_perform_write+0x10/0x10
[ 103.292696][ T5811] ? generic_write_checks_count+0x426/0x530
[ 103.292723][ T5811] ? file_update_time_flags+0x3b9/0x4b0
[ 103.292757][ T5811] shmem_file_write_iter+0xfb/0x120
[ 103.292791][ T5811] lo_rw_aio+0xc78/0xf30
[ 103.292825][ T5811] ? kthread_associate_blkcg+0x30f/0x600
[ 103.292849][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.292882][ T5811] ? __pfx_lo_rw_aio+0x10/0x10
[ 103.292912][ T5811] ? kthread_associate_blkcg+0x30f/0x600
[ 103.292940][ T5811] ? kthread_associate_blkcg+0x490/0x600
[ 103.292973][ T5811] ? rt_spin_unlock+0x160/0x200
[ 103.293002][ T5811] loop_process_work+0x638/0x11d0
[ 103.293043][ T5811] ? __pfx_loop_process_work+0x10/0x10
[ 103.293081][ T5811] ? kvm_sched_clock_read+0x11/0x20
[ 103.293114][ T5811] ? sched_clock+0x3f/0x60
[ 103.293136][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.293160][ T5811] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 103.293182][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.293214][ T5811] ? process_scheduled_works+0xa20/0x14e0
[ 103.293242][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.293283][ T5811] ? lock_acquire+0x5f/0x350
[ 103.293312][ T5811] ? rcu_is_watching+0x15/0xb0
[ 103.293345][ T5811] ? process_scheduled_works+0xa20/0x14e0
[ 103.293375][ T5811] process_scheduled_works+0xa8e/0x14e0
[ 103.293419][ T5811] ? __pfx_process_scheduled_works+0x10/0x10
[ 103.293447][ T5811] ? do_raw_spin_lock+0x12b/0x2f0
[ 103.293473][ T5811] ? assign_work+0x3cf/0x5d0
[ 103.293505][ T5811] worker_thread+0xa47/0xfb0
[ 103.293557][ T5811] kthread+0x388/0x470
[ 103.293579][ T5811] ? __pfx_worker_thread+0x10/0x10
[ 103.293610][ T5811] ? __pfx_kthread+0x10/0x10
[ 103.293633][ T5811] ret_from_fork+0x514/0xb70
[ 103.293657][ T5811] ? __pfx_ret_from_fork+0x10/0x10
[ 103.293681][ T5811] ? __switch_to+0xc89/0x1420
[ 103.293716][ T5811] ? __pfx_kthread+0x10/0x10
[ 103.293739][ T5811] ret_from_fork_asm+0x1a/0x30
[ 103.293774][ T5811]
[ 103.294479][ T5811] Kernel Offset: disabled