Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts.
2026/08/11 03:12:00 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 163.134924][ T6110] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 167.739191][ T6127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.739344][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 167.739454][ T6127] bridge_slave_0: entered allmulticast mode
[ 167.741363][ T6127] bridge_slave_0: entered promiscuous mode
[ 167.744397][ T6127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.744548][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 167.744658][ T6127] bridge_slave_1: entered allmulticast mode
[ 167.750478][ T6127] bridge_slave_1: entered promiscuous mode
[ 167.844802][ T6127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 167.858130][ T6127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 167.968997][ T6127] team0: Port device team_slave_0 added
[ 167.972090][ T6127] team0: Port device team_slave_1 added
[ 168.018394][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 168.018407][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 168.018426][ T6127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 168.020040][ T6127] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 168.020056][ T6127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 168.020075][ T6127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 168.145074][ T6127] hsr_slave_0: entered promiscuous mode
[ 168.155446][ T6127] hsr_slave_1: entered promiscuous mode
[ 170.524601][ T6127] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.553691][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 170.555265][ T6127] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.602785][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 170.604184][ T6127] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.655429][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 170.667864][ T6127] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 170.711624][ T6127] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 170.925379][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.978024][ T6127] 8021q: adding VLAN 0 to HW filter on device team0
[ 171.000282][ T40] bridge0: port 1(bridge_slave_0) entered blocking state
[ 171.001337][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 171.031167][ T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 171.031385][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 171.789942][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 171.914418][ T6127] veth0_vlan: entered promiscuous mode
[ 171.969134][ T6127] veth1_vlan: entered promiscuous mode
[ 172.040599][ T6127] veth0_macvtap: entered promiscuous mode
[ 172.063234][ T6127] veth1_macvtap: entered promiscuous mode
[ 172.102246][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 172.139208][ T6127] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 172.206709][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.206758][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.206797][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.400159][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.040903][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 173.733474][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 174.340612][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 174.632022][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 174.737821][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 174.737843][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 174.845901][ T3369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 174.845924][ T3369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 175.497295][ T40] bridge_slave_1: left allmulticast mode
[ 175.497334][ T40] bridge_slave_1: left promiscuous mode
[ 175.497611][ T40] bridge0: port 2(bridge_slave_1) entered disabled state
[ 175.690128][ T40] bridge_slave_0: left allmulticast mode
[ 175.690166][ T40] bridge_slave_0: left promiscuous mode
[ 175.690442][ T40] bridge0: port 1(bridge_slave_0) entered disabled state
[ 176.617348][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 176.697530][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 176.740103][ T40] bond0 (unregistering): Released all slaves
[ 177.148851][ T40] hsr_slave_0: left promiscuous mode
[ 177.188515][ T40] hsr_slave_1: left promiscuous mode
[ 177.189536][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 177.189563][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 177.258746][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 177.258777][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 177.358224][ T40] veth1_macvtap: left promiscuous mode
[ 177.358340][ T40] veth0_macvtap: left promiscuous mode
[ 177.358615][ T40] veth1_vlan: left promiscuous mode
[ 177.358818][ T40] veth0_vlan: left promiscuous mode
[ 178.232134][ T40] team0 (unregistering): Port device team_slave_1 removed
[ 178.287312][ T40] team0 (unregistering): Port device team_slave_0 removed
[ 178.484374][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1
[ 179.457637][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2
[ 180.201514][ T4899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 180.223439][ T4899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 180.225187][ T4899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 180.266221][ T4899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 180.269569][ T4899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 180.809565][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3
[ 181.735343][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4
2026/08/11 03:12:28 executed programs: 0
[ 184.065576][ T5720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 184.089675][ T5720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 184.094616][ T5720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 184.095812][ T5720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 184.103932][ T5720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 185.112809][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state
[ 185.112940][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 185.113055][ T6459] bridge_slave_0: entered allmulticast mode
[ 185.114971][ T6459] bridge_slave_0: entered promiscuous mode
[ 185.122963][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state
[ 185.123755][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 185.124279][ T6459] bridge_slave_1: entered allmulticast mode
[ 185.155636][ T6459] bridge_slave_1: entered promiscuous mode
[ 185.227839][ T6459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 185.231011][ T6459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 185.306337][ T6459] team0: Port device team_slave_0 added
[ 185.313995][ T6459] team0: Port device team_slave_1 added
[ 185.364838][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 185.364861][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 185.364881][ T6459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 185.369926][ T6459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 185.369976][ T6459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 185.370051][ T6459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 185.502654][ T6459] hsr_slave_0: entered promiscuous mode
[ 185.503604][ T6459] hsr_slave_1: entered promiscuous mode
[ 186.166662][ T4899] Bluetooth: hci0: command tx timeout
[ 187.659476][ T6459] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 187.704796][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 187.722208][ T6459] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 187.764643][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 187.776072][ T6459] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 187.827140][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 187.829807][ T6459] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 187.870579][ T6459] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 188.058341][ T6459] 8021q: adding VLAN 0 to HW filter on device bond0
[ 188.090292][ T6459] 8021q: adding VLAN 0 to HW filter on device team0
[ 188.109500][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 188.109710][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 188.135592][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 188.135855][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 188.246564][ T4899] Bluetooth: hci0: command tx timeout
[ 188.940337][ T6459] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 189.088318][ T6459] veth0_vlan: entered promiscuous mode
[ 189.104242][ T6459] veth1_vlan: entered promiscuous mode
[ 189.175704][ T6459] veth0_macvtap: entered promiscuous mode
[ 189.198797][ T6459] veth1_macvtap: entered promiscuous mode
[ 189.236947][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 189.268113][ T6459] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 189.706968][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 189.707019][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 189.707058][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 189.707096][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 189.847817][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 189.847840][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 189.951014][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 189.951039][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/11 03:12:34 executed programs: 2
[ 190.326591][ T4899] Bluetooth: hci0: command tx timeout
[ 190.608804][ T6591] loop0: detected capacity change from 0 to 32768
[ 190.927237][ T6591] Bad index:0 in slot in dtroot
[ 190.927237][ T6591]
[ 190.927262][ T6591] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 190.927262][ T6591]
[ 190.963692][ T6591] ERROR: (device loop0): remounting filesystem as read-only
[ 191.564431][ T6613] loop0: detected capacity change from 0 to 32768
[ 191.635747][ T6613] Bad index:0 in slot in dtroot
[ 191.635747][ T6613]
[ 191.635767][ T6613] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 191.635767][ T6613]
[ 191.636083][ T6613] ERROR: (device loop0): remounting filesystem as read-only
[ 192.042994][ T6615] loop0: detected capacity change from 0 to 32768
[ 192.070354][ T6615] Bad index:0 in slot in dtroot
[ 192.070354][ T6615]
[ 192.070374][ T6615] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 192.070374][ T6615]
[ 192.070682][ T6615] ERROR: (device loop0): remounting filesystem as read-only
[ 192.406850][ T4899] Bluetooth: hci0: command tx timeout
[ 192.479197][ T6617] loop0: detected capacity change from 0 to 32768
[ 192.523804][ T6617] Bad index:0 in slot in dtroot
[ 192.523804][ T6617]
[ 192.523820][ T6617] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 192.523820][ T6617]
[ 192.524466][ T6617] ERROR: (device loop0): remounting filesystem as read-only
[ 192.927215][ T6619] loop0: detected capacity change from 0 to 32768
[ 192.955016][ T6619] Bad index:0 in slot in dtroot
[ 192.955016][ T6619]
[ 192.955034][ T6619] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot
[ 192.955034][ T6619]
[ 192.955438][ T6619] ERROR: (device loop0): remounting filesystem as read-only
[ 193.001157][ T67] ==================================================================
[ 193.001157][ T67] ==================================================================
[ 193.001177][ T67] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.001222][ T67] Read of size 4096 at addr ffff888030b1d000 by task kworker/u8:4/67
[ 193.001240][ T67]
[ 193.001265][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 193.001294][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 193.001308][ T67] Workqueue: loop0 loop_workfn
[ 193.001358][ T67] Call Trace:
[ 193.001367][ T67]
[ 193.001376][ T67] dump_stack_lvl+0xe8/0x150
[ 193.001409][ T67] print_address_description+0x55/0x1e0
[ 193.001441][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.001473][ T67] print_report+0x58/0x70
[ 193.001501][ T67] kasan_report+0x117/0x150
[ 193.001532][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.001570][ T67] kasan_check_range+0x264/0x2c0
[ 193.001593][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.001628][ T67] __asan_memcpy+0x29/0x70
[ 193.001659][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.001705][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 193.001739][ T67] ? rcu_is_watching+0x15/0xb0
[ 193.001772][ T67] ? shmem_write_begin+0x1ce/0x320
[ 193.001808][ T67] generic_perform_write+0x5a8/0x8b0
[ 193.001849][ T67] ? __pfx_generic_perform_write+0x10/0x10
[ 193.001880][ T67] ? __mark_inode_dirty+0x4e7/0x13b0
[ 193.001908][ T67] ? preempt_count_add+0x91/0x190
[ 193.001932][ T67] ? mnt_put_write_access_file+0xbf/0x100
[ 193.001964][ T67] ? file_update_time_flags+0x406/0x4b0
[ 193.001990][ T67] shmem_file_write_iter+0xfb/0x120
[ 193.002016][ T67] lo_rw_aio+0xc78/0xf30
[ 193.002054][ T67] ? __pfx_lo_rw_aio+0x10/0x10
[ 193.002087][ T67] ? kthread_associate_blkcg+0x490/0x600
[ 193.002119][ T67] ? rt_spin_unlock+0x163/0x200
[ 193.002145][ T67] loop_process_work+0x638/0x11d0
[ 193.002181][ T67] ? do_raw_spin_unlock+0xf5/0x210
[ 193.002213][ T67] ? __pfx_loop_process_work+0x10/0x10
[ 193.002244][ T67] ? look_up_lock_class+0x57/0x110
[ 193.002275][ T67] ? register_lock_class+0x31/0x2e0
[ 193.002313][ T67] ? __lock_acquire+0x683/0x2ce0
[ 193.002339][ T67] ? do_raw_spin_lock+0x12b/0x2f0
[ 193.002370][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 193.002401][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.002424][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.002450][ T67] ? rcu_is_watching+0x15/0xb0
[ 193.002474][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.002497][ T67] process_scheduled_works+0xa8e/0x14e0
[ 193.002543][ T67] ? __pfx_process_scheduled_works+0x10/0x10
[ 193.002570][ T67] ? assign_work+0x3cf/0x5d0
[ 193.002593][ T67] worker_thread+0xa47/0xfb0
[ 193.002630][ T67] kthread+0x388/0x470
[ 193.002658][ T67] ? __pfx_worker_thread+0x10/0x10
[ 193.002681][ T67] ? __pfx_kthread+0x10/0x10
[ 193.002709][ T67] ret_from_fork+0x514/0xb70
[ 193.002741][ T67] ? __pfx_ret_from_fork+0x10/0x10
[ 193.002770][ T67] ? __switch_to+0xc89/0x1420
[ 193.002797][ T67] ? __pfx_kthread+0x10/0x10
[ 193.002825][ T67] ret_from_fork_asm+0x1a/0x30
[ 193.002867][ T67]
[ 193.002875][ T67]
[ 193.002881][ T67] The buggy address belongs to the physical page:
[ 193.002914][ T67] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b1d640 pfn:0x30b1d
[ 193.002937][ T67] flags: 0x80000000000000(node=0|zone=1)
[ 193.002966][ T67] raw: 0080000000000000 ffffea0001016648 ffffea0000aa49c8 0000000000000000
[ 193.002984][ T67] raw: ffff888030b1d640 0000000000000000 00000000ffffffff 0000000000000000
[ 193.002994][ T67] page dumped because: kasan: bad access detected
[ 193.003008][ T67] page_owner tracks the page as freed
[ 193.003015][ T67] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 6619, tgid 6618 (syz.0.21), ts 192950327089, free_ts 193000729583
[ 193.003048][ T67] post_alloc_hook+0x1f9/0x250
[ 193.003080][ T67] get_page_from_freelist+0x262a/0x26a0
[ 193.003107][ T67] __alloc_frozen_pages_noprof+0x18d/0x380
[ 193.003128][ T67] alloc_pages_mpol+0xce/0x280
[ 193.003149][ T67] alloc_pages_noprof+0xd2/0x2f0
[ 193.003170][ T67] lmLogInit+0x357/0x1a20
[ 193.003193][ T67] lmLogOpen+0x4e3/0xf90
[ 193.003214][ T67] jfs_mount_rw+0xf3/0x670
[ 193.003234][ T67] jfs_fill_super+0x769/0xda0
[ 193.003265][ T67] get_tree_bdev_flags+0x430/0x4f0
[ 193.003288][ T67] vfs_get_tree+0x92/0x2a0
[ 193.003310][ T67] do_new_mount+0x319/0xdc0
[ 193.003340][ T67] __se_sys_mount+0x31d/0x420
[ 193.003356][ T67] do_syscall_64+0x174/0x580
[ 193.003385][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 193.003405][ T67] page last free pid 6619 tgid 6618 stack trace:
[ 193.003417][ T67] __free_frozen_pages+0x10e7/0x11c0
[ 193.003447][ T67] lmLogShutdown+0x44e/0x850
[ 193.003472][ T67] lmLogClose+0x28c/0x530
[ 193.003496][ T67] jfs_umount+0x2da/0x3b0
[ 193.003528][ T67] jfs_fill_super+0x9e7/0xda0
[ 193.003558][ T67] get_tree_bdev_flags+0x430/0x4f0
[ 193.003580][ T67] vfs_get_tree+0x92/0x2a0
[ 193.003603][ T67] do_new_mount+0x319/0xdc0
[ 193.003631][ T67] __se_sys_mount+0x31d/0x420
[ 193.003648][ T67] do_syscall_64+0x174/0x580
[ 193.003674][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 193.003693][ T67]
[ 193.003698][ T67] Memory state around the buggy address:
[ 193.003710][ T67] ffff888030b1cf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 193.003724][ T67] ffff888030b1cf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 193.003738][ T67] >ffff888030b1d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 193.003749][ T67] ^
[ 193.003759][ T67] ffff888030b1d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 193.003773][ T67] ffff888030b1d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 193.003784][ T67] ==================================================================
[ 193.010557][ T67] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 193.010623][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 193.010691][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 193.010736][ T67] Workqueue: loop0 loop_workfn
[ 193.010834][ T67] Call Trace:
[ 193.010857][ T67]
[ 193.010880][ T67] vpanic+0x56c/0xa60
[ 193.010970][ T67] ? rcu_is_watching+0x15/0xb0
[ 193.011023][ T67] ? __pfx_vpanic+0x10/0x10
[ 193.011126][ T67] panic+0xc5/0xd0
[ 193.011205][ T67] ? __pfx_panic+0x10/0x10
[ 193.011293][ T67] ? preempt_schedule_thunk+0x16/0x40
[ 193.011362][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.011459][ T67] ? preempt_schedule_thunk+0x16/0x40
[ 193.011529][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.011625][ T67] check_panic_on_warn+0x89/0xb0
[ 193.011705][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.011835][ T67] end_report+0x73/0x170
[ 193.011906][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.011995][ T67] kasan_report+0x128/0x150
[ 193.012046][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.012154][ T67] kasan_check_range+0x264/0x2c0
[ 193.012212][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.012301][ T67] __asan_memcpy+0x29/0x70
[ 193.012388][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 193.012502][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 193.012599][ T67] ? rcu_is_watching+0x15/0xb0
[ 193.012667][ T67] ? shmem_write_begin+0x1ce/0x320
[ 193.012759][ T67] generic_perform_write+0x5a8/0x8b0
[ 193.012861][ T67] ? __pfx_generic_perform_write+0x10/0x10
[ 193.012950][ T67] ? __mark_inode_dirty+0x4e7/0x13b0
[ 193.013032][ T67] ? preempt_count_add+0x91/0x190
[ 193.013097][ T67] ? mnt_put_write_access_file+0xbf/0x100
[ 193.013175][ T67] ? file_update_time_flags+0x406/0x4b0
[ 193.013259][ T67] shmem_file_write_iter+0xfb/0x120
[ 193.013357][ T67] lo_rw_aio+0xc78/0xf30
[ 193.013464][ T67] ? __pfx_lo_rw_aio+0x10/0x10
[ 193.013555][ T67] ? kthread_associate_blkcg+0x490/0x600
[ 193.013635][ T67] ? rt_spin_unlock+0x163/0x200
[ 193.013702][ T67] loop_process_work+0x638/0x11d0
[ 193.013801][ T67] ? do_raw_spin_unlock+0xf5/0x210
[ 193.013882][ T67] ? __pfx_loop_process_work+0x10/0x10
[ 193.013968][ T67] ? look_up_lock_class+0x57/0x110
[ 193.014040][ T67] ? register_lock_class+0x31/0x2e0
[ 193.014137][ T67] ? __lock_acquire+0x683/0x2ce0
[ 193.014214][ T67] ? do_raw_spin_lock+0x12b/0x2f0
[ 193.014292][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 193.014371][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.014438][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.014506][ T67] ? rcu_is_watching+0x15/0xb0
[ 193.014589][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 193.014670][ T67] process_scheduled_works+0xa8e/0x14e0
[ 193.014778][ T67] ? __pfx_process_scheduled_works+0x10/0x10
[ 193.014846][ T67] ? assign_work+0x3cf/0x5d0
[ 193.014914][ T67] worker_thread+0xa47/0xfb0
[ 193.015015][ T67] kthread+0x388/0x470
[ 193.015086][ T67] ? __pfx_worker_thread+0x10/0x10
[ 193.015151][ T67] ? __pfx_kthread+0x10/0x10
[ 193.015230][ T67] ret_from_fork+0x514/0xb70
[ 193.015319][ T67] ? __pfx_ret_from_fork+0x10/0x10
[ 193.015398][ T67] ? __switch_to+0xc89/0x1420
[ 193.015468][ T67] ? __pfx_kthread+0x10/0x10
[ 193.015560][ T67] ret_from_fork_asm+0x1a/0x30
[ 193.015665][ T67]
[ 193.015875][ T67] Kernel Offset: disabled