Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. 2026/10/10 11:30:53 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 164.348291][ T6115] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 172.654919][ T4905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.684470][ T4905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.685359][ T4905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.689549][ T4905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.703625][ T4905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.757853][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.757877][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.854931][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.854956][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.008516][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.008679][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.008820][ T6189] bridge_slave_0: entered allmulticast mode [ 175.010762][ T6189] bridge_slave_0: entered promiscuous mode [ 175.013152][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.013321][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.013433][ T6189] bridge_slave_1: entered allmulticast mode [ 175.022074][ T6189] bridge_slave_1: entered promiscuous mode [ 175.114954][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.128972][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.174601][ T6189] team0: Port device team_slave_0 added [ 175.181800][ T6189] team0: Port device team_slave_1 added [ 175.220662][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.220682][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.220712][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.224025][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.224038][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.224058][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.372923][ T6189] hsr_slave_0: entered promiscuous mode [ 175.384091][ T6189] hsr_slave_1: entered promiscuous mode [ 178.019611][ T6189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.073420][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.074923][ T6189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.110428][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.113264][ T6189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.151654][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.153358][ T6189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.199532][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.367404][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.413913][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.437484][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.439222][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.487205][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.487455][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.293186][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.404092][ T6189] veth0_vlan: entered promiscuous mode [ 179.429022][ T6189] veth1_vlan: entered promiscuous mode [ 179.499083][ T6189] veth0_macvtap: entered promiscuous mode [ 179.513824][ T6189] veth1_macvtap: entered promiscuous mode [ 179.563571][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.596536][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.826341][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.951140][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.069774][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.069830][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.612313][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.478648][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/10 11:31:17 executed programs: 0 [ 181.726904][ T4905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.757541][ T4905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.759230][ T4905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.761276][ T4905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.764014][ T4905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.010355][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.443416][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.276587][ T13] bridge_slave_1: left allmulticast mode [ 183.276628][ T13] bridge_slave_1: left promiscuous mode [ 183.276907][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.450903][ T13] bridge_slave_0: left allmulticast mode [ 183.450952][ T13] bridge_slave_0: left promiscuous mode [ 183.451689][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.865917][ T4905] Bluetooth: hci0: command tx timeout [ 184.476751][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.556693][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.579323][ T13] bond0 (unregistering): Released all slaves [ 184.768520][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.768756][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.768921][ T6341] bridge_slave_0: entered allmulticast mode [ 184.772676][ T6341] bridge_slave_0: entered promiscuous mode [ 184.804626][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.804857][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.805062][ T6341] bridge_slave_1: entered allmulticast mode [ 184.829243][ T6341] bridge_slave_1: entered promiscuous mode [ 184.887913][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.892087][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.086015][ T13] hsr_slave_0: left promiscuous mode [ 185.125959][ T13] hsr_slave_1: left promiscuous mode [ 185.127272][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.127306][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.187209][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.187241][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.267645][ T13] veth1_macvtap: left promiscuous mode [ 185.267769][ T13] veth0_macvtap: left promiscuous mode [ 185.268038][ T13] veth1_vlan: left promiscuous mode [ 185.268229][ T13] veth0_vlan: left promiscuous mode [ 185.935880][ T4905] Bluetooth: hci0: command tx timeout [ 186.008087][ T13] team0 (unregistering): Port device team_slave_1 removed [ 186.056626][ T13] team0 (unregistering): Port device team_slave_0 removed [ 186.294267][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 186.384940][ T6341] team0: Port device team_slave_0 added [ 186.397681][ T6341] team0: Port device team_slave_1 added [ 186.438866][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.438884][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.438907][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.441186][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.441202][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.441228][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.609132][ T6341] hsr_slave_0: entered promiscuous mode [ 186.610484][ T6341] hsr_slave_1: entered promiscuous mode [ 187.401342][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 188.015863][ T4905] Bluetooth: hci0: command tx timeout [ 188.558488][ T6341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.597665][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.599478][ T6341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.651129][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.655384][ T6341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.691086][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.694969][ T6341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.731826][ T6341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.942517][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.995165][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.014894][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.015039][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.053707][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.053895][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.633730][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.694903][ T6341] veth0_vlan: entered promiscuous mode [ 189.722567][ T6341] veth1_vlan: entered promiscuous mode [ 189.770354][ T6341] veth0_macvtap: entered promiscuous mode [ 189.775492][ T6341] veth1_macvtap: entered promiscuous mode [ 189.806271][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.815384][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.896330][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.086581][ T1474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.086635][ T1474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.086676][ T1474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.111181][ T4905] Bluetooth: hci0: command tx timeout [ 190.215124][ T1474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.215149][ T1474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.274966][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.274991][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/10 11:31:25 executed programs: 2 [ 190.670328][ T6504] loop0: detected capacity change from 0 to 32768 [ 190.828784][ T6504] Bad index:0 in slot in dtroot [ 190.828784][ T6504] [ 190.828816][ T6504] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 190.828816][ T6504] [ 190.829219][ T6504] ERROR: (device loop0): remounting filesystem as read-only [ 191.381208][ T6506] loop0: detected capacity change from 0 to 32768 [ 191.410854][ T6506] Bad index:0 in slot in dtroot [ 191.410854][ T6506] [ 191.410877][ T6506] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 191.410877][ T6506] [ 191.411229][ T6506] ERROR: (device loop0): remounting filesystem as read-only [ 191.839400][ T6508] loop0: detected capacity change from 0 to 32768 [ 191.872507][ T6508] Bad index:0 in slot in dtroot [ 191.872507][ T6508] [ 191.872527][ T6508] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 191.872527][ T6508] [ 191.873417][ T6508] ERROR: (device loop0): remounting filesystem as read-only [ 192.331454][ T6510] loop0: detected capacity change from 0 to 32768 [ 192.354866][ T6510] Bad index:0 in slot in dtroot [ 192.354866][ T6510] [ 192.354888][ T6510] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 192.354888][ T6510] [ 192.357964][ T6510] ERROR: (device loop0): remounting filesystem as read-only [ 192.741666][ T6512] loop0: detected capacity change from 0 to 32768 [ 192.771805][ T6512] Bad index:0 in slot in dtroot [ 192.771805][ T6512] [ 192.771826][ T6512] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 192.771826][ T6512] [ 192.772582][ T6512] ERROR: (device loop0): remounting filesystem as read-only [ 193.194556][ T6514] loop0: detected capacity change from 0 to 32768 [ 193.245026][ T6514] Bad index:0 in slot in dtroot [ 193.245026][ T6514] [ 193.245048][ T6514] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 193.245048][ T6514] [ 193.245337][ T6514] ERROR: (device loop0): remounting filesystem as read-only [ 193.655504][ T6516] loop0: detected capacity change from 0 to 32768 [ 193.689663][ T6516] Bad index:0 in slot in dtroot [ 193.689663][ T6516] [ 193.689684][ T6516] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 193.689684][ T6516] [ 193.689909][ T6516] ERROR: (device loop0): remounting filesystem as read-only [ 194.090345][ T6518] loop0: detected capacity change from 0 to 32768 [ 194.104764][ T6518] Bad index:0 in slot in dtroot [ 194.104764][ T6518] [ 194.104784][ T6518] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 194.104784][ T6518] [ 194.105089][ T6518] ERROR: (device loop0): remounting filesystem as read-only [ 194.541372][ T6520] loop0: detected capacity change from 0 to 32768 [ 194.585437][ T6520] Bad index:0 in slot in dtroot [ 194.585437][ T6520] [ 194.585457][ T6520] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 194.585457][ T6520] [ 194.595899][ T6520] ERROR: (device loop0): remounting filesystem as read-only [ 194.658621][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658697][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.029927][ T6522] loop0: detected capacity change from 0 to 32768 [ 195.054802][ T6522] Bad index:0 in slot in dtroot [ 195.054802][ T6522] [ 195.054823][ T6522] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 195.054823][ T6522] [ 195.055208][ T6522] ERROR: (device loop0): remounting filesystem as read-only [ 195.535328][ T6524] Bad index:0 in slot in dtroot [ 195.535328][ T6524] [ 195.535349][ T6524] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 195.535349][ T6524] [ 195.552746][ T6524] ERROR: (device loop0): remounting filesystem as read-only 2026/10/10 11:31:31 executed programs: 13 [ 195.989990][ T6526] set_capacity_and_notify: 1 callbacks suppressed [ 195.990006][ T6526] loop0: detected capacity change from 0 to 32768 [ 196.026004][ T6526] Bad index:0 in slot in dtroot [ 196.026004][ T6526] [ 196.026023][ T6526] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 196.026023][ T6526] [ 196.026316][ T6526] ERROR: (device loop0): remounting filesystem as read-only [ 196.418116][ T6528] loop0: detected capacity change from 0 to 32768 [ 196.451348][ T6528] Bad index:0 in slot in dtroot [ 196.451348][ T6528] [ 196.451370][ T6528] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 196.451370][ T6528] [ 196.451923][ T6528] ERROR: (device loop0): remounting filesystem as read-only [ 196.853771][ T6530] loop0: detected capacity change from 0 to 32768 [ 196.871354][ T6530] Bad index:0 in slot in dtroot [ 196.871354][ T6530] [ 196.871374][ T6530] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 196.871374][ T6530] [ 196.871675][ T6530] ERROR: (device loop0): remounting filesystem as read-only [ 197.280609][ T6532] loop0: detected capacity change from 0 to 32768 [ 197.302247][ T6532] Bad index:0 in slot in dtroot [ 197.302247][ T6532] [ 197.302267][ T6532] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 197.302267][ T6532] [ 197.302679][ T6532] ERROR: (device loop0): remounting filesystem as read-only [ 197.685157][ T6534] loop0: detected capacity change from 0 to 32768 [ 197.712371][ T6534] Bad index:0 in slot in dtroot [ 197.712371][ T6534] [ 197.712390][ T6534] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 197.712390][ T6534] [ 197.712675][ T6534] ERROR: (device loop0): remounting filesystem as read-only [ 198.117846][ T6536] loop0: detected capacity change from 0 to 32768 [ 198.144916][ T6536] Bad index:0 in slot in dtroot [ 198.144916][ T6536] [ 198.144936][ T6536] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 198.144936][ T6536] [ 198.145367][ T6536] ERROR: (device loop0): remounting filesystem as read-only [ 198.562209][ T6538] loop0: detected capacity change from 0 to 32768 [ 198.592470][ T6538] Bad index:0 in slot in dtroot [ 198.592470][ T6538] [ 198.592490][ T6538] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 198.592490][ T6538] [ 198.593487][ T6538] ERROR: (device loop0): remounting filesystem as read-only [ 199.040534][ T6542] loop0: detected capacity change from 0 to 32768 [ 199.053235][ T6542] Bad index:0 in slot in dtroot [ 199.053235][ T6542] [ 199.053254][ T6542] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 199.053254][ T6542] [ 199.053572][ T6542] ERROR: (device loop0): remounting filesystem as read-only [ 199.469804][ T6545] loop0: detected capacity change from 0 to 32768 [ 199.480004][ T6545] Bad index:0 in slot in dtroot [ 199.480004][ T6545] [ 199.480055][ T6545] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 199.480055][ T6545] [ 199.480891][ T6545] ERROR: (device loop0): remounting filesystem as read-only [ 199.514500][ T67] ========================================= ** replaying previous printk message ** [ 199.514500][ T67] ================================================================== [ 199.514518][ T67] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 199.514550][ T67] Read of size 4096 at addr ffff88804209f000 by task kworker/u8:4/67 [ 199.514569][ T67] [ 199.514598][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.514624][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.514638][ T67] Workqueue: loop0 loop_workfn [ 199.514680][ T67] Call Trace: [ 199.514689][ T67] [ 199.514699][ T67] dump_stack_lvl+0xe8/0x150 [ 199.514735][ T67] print_address_description+0x55/0x1e0 [ 199.514768][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 199.514790][ T67] print_report+0x58/0x70 [ 199.514820][ T67] kasan_report+0x117/0x150 [ 199.514846][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 199.514874][ T67] kasan_check_range+0x264/0x2c0 [ 199.514899][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 199.514922][ T67] __asan_memcpy+0x29/0x70 [ 199.514954][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 199.514989][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 199.515013][ T67] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 199.515052][ T67] ? shmem_write_begin+0x1ce/0x320 [ 199.515088][ T67] generic_perform_write+0x5a8/0x8b0 [ 199.515127][ T67] ? __pfx_generic_perform_write+0x10/0x10 [ 199.515157][ T67] ? generic_write_checks_count+0x426/0x530 [ 199.515183][ T67] ? file_update_time_flags+0x2db/0x450 [ 199.515219][ T67] shmem_file_write_iter+0xfb/0x120 [ 199.515244][ T67] lo_rw_aio+0xc78/0xf30 [ 199.515279][ T67] ? lock_acquire+0x115/0x350 [ 199.515312][ T67] ? __pfx_lo_rw_aio+0x10/0x10 [ 199.515348][ T67] ? kthread_associate_blkcg+0x490/0x600 [ 199.515373][ T67] ? rt_spin_unlock+0x165/0x200 [ 199.515400][ T67] loop_process_work+0x638/0x11d0 [ 199.515443][ T67] ? __pfx_loop_process_work+0x10/0x10 [ 199.515482][ T67] ? look_up_lock_class+0x57/0x110 [ 199.515515][ T67] ? register_lock_class+0x31/0x2e0 [ 199.515548][ T67] ? __lock_acquire+0x747/0x2de0 [ 199.515582][ T67] ? trace_hrtimer_start+0x82/0x200 [ 199.515613][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.515644][ T67] ? lock_acquire+0x115/0x350 [ 199.515682][ T67] ? rcu_is_watching+0x16/0xb0 [ 199.515703][ T67] ? process_scheduled_works+0x97a/0x1630 [ 199.515733][ T67] process_scheduled_works+0xc3d/0x1630 [ 199.515780][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.515814][ T67] ? assign_work+0x3cf/0x5d0 [ 199.515844][ T67] worker_thread+0xa47/0xfb0 [ 199.515881][ T67] ? __kthread_parkme+0x71/0x1f0 [ 199.515917][ T67] kthread+0x38b/0x470 [ 199.515939][ T67] ? __pfx_worker_thread+0x10/0x10 [ 199.515967][ T67] ? __pfx_kthread+0x10/0x10 [ 199.515990][ T67] ret_from_fork+0x514/0xb70 [ 199.516012][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 199.516033][ T67] ? __switch_to+0xc89/0x1420 [ 199.516065][ T67] ? __pfx_kthread+0x10/0x10 [ 199.516087][ T67] ret_from_fork_asm+0x1a/0x30 [ 199.516117][ T67] [ 199.516125][ T67] [ 199.516131][ T67] The buggy address belongs to the physical page: [ 199.516151][ T67] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804209fe00 pfn:0x4209f [ 199.516173][ T67] flags: 0x80000000000000(node=0|zone=1) [ 199.516204][ T67] raw: 0080000000000000 ffffea000119fac8 ffffea00004bc948 0000000000000000 [ 199.516224][ T67] raw: ffff88804209fe00 0000000000000000 00000000ffffffff 0000000000000000 [ 199.516240][ T67] page dumped because: kasan: bad access detected [ 199.516255][ T67] page_owner tracks the page as freed [ 199.516263][ T67] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 6545, tgid 6544 (syz.0.36), ts 199475399321 [ 199.516295][ T67] post_alloc_hook+0x1f9/0x250 [ 199.516324][ T67] get_page_from_freelist+0x2591/0x2600 [ 199.516346][ T67] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 199.516366][ T67] alloc_pages_mpol+0xd4/0x280 [ 199.516387][ T67] alloc_pages_noprof+0xd2/0x2f0 [ 199.516409][ T67] lmLogInit+0x357/0x1a20 [ 199.516430][ T67] lmLogOpen+0x4e3/0xf90 [ 199.516449][ T67] jfs_mount_rw+0xf3/0x670 [ 199.516475][ T67] jfs_fill_super+0x769/0xda0 [ 199.516501][ T67] get_tree_bdev_flags+0x430/0x4f0 [ 199.516528][ T67] vfs_get_tree+0x92/0x2a0 [ 199.516554][ T67] do_new_mount+0x325/0xb00 [ 199.516575][ T67] __se_sys_mount+0x31d/0x420 [ 199.516597][ T67] do_syscall_64+0x166/0x520 [ 199.516626][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.516646][ T67] page last free pid 6545 tgid 6544 ts 199512811901 stack trace: [ 199.516661][ T67] __free_frozen_pages+0xf8e/0x1070 [ 199.516689][ T67] lmLogShutdown+0x44e/0x850 [ 199.516710][ T67] lmLogClose+0x28c/0x530 [ 199.516730][ T67] jfs_umount+0x2da/0x3b0 [ 199.516749][ T67] jfs_fill_super+0x9e7/0xda0 [ 199.516774][ T67] get_tree_bdev_flags+0x430/0x4f0 [ 199.516802][ T67] vfs_get_tree+0x92/0x2a0 [ 199.516827][ T67] do_new_mount+0x325/0xb00 [ 199.516849][ T67] __se_sys_mount+0x31d/0x420 [ 199.516871][ T67] do_syscall_64+0x166/0x520 [ 199.516900][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.516920][ T67] [ 199.516926][ T67] Memory state around the buggy address: [ 199.516938][ T67] ffff88804209ef00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 199.516952][ T67] ffff88804209ef80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 199.516967][ T67] >ffff88804209f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 199.516978][ T67] ^ [ 199.516989][ T67] ffff88804209f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 199.517004][ T67] ffff88804209f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 199.517015][ T67] ================================================================== [ 199.521716][ T67] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.101848][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.111784][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.121968][ T67] Workqueue: loop0 loop_workfn [ 200.126774][ T67] Call Trace: [ 200.130095][ T67] [ 200.133135][ T67] vpanic+0x56d/0xa60 [ 200.137155][ T67] ? rcu_is_watching+0x16/0xb0 [ 200.142434][ T67] ? __pfx_vpanic+0x10/0x10 [ 200.146991][ T67] panic+0xc5/0xd0 [ 200.151036][ T67] ? __pfx_panic+0x10/0x10 [ 200.155669][ T67] ? preempt_schedule_thunk+0x16/0x40 [ 200.161279][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.167810][ T67] ? preempt_schedule_thunk+0x16/0x40 [ 200.173388][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.179484][ T67] check_panic_on_warn+0x89/0xb0 [ 200.184533][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.190655][ T67] end_report+0x73/0x170 [ 200.195014][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.201118][ T67] kasan_report+0x128/0x150 [ 200.205648][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.211925][ T67] kasan_check_range+0x264/0x2c0 [ 200.216905][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.223017][ T67] __asan_memcpy+0x29/0x70 [ 200.227482][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 200.233512][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 200.239965][ T67] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 200.246240][ T67] ? shmem_write_begin+0x1ce/0x320 [ 200.251433][ T67] generic_perform_write+0x5a8/0x8b0 [ 200.256937][ T67] ? __pfx_generic_perform_write+0x10/0x10 [ 200.262888][ T67] ? generic_write_checks_count+0x426/0x530 [ 200.268828][ T67] ? file_update_time_flags+0x2db/0x450 [ 200.274526][ T67] shmem_file_write_iter+0xfb/0x120 [ 200.279795][ T67] lo_rw_aio+0xc78/0xf30 [ 200.284073][ T67] ? lock_acquire+0x115/0x350 [ 200.288789][ T67] ? __pfx_lo_rw_aio+0x10/0x10 [ 200.293598][ T67] ? kthread_associate_blkcg+0x490/0x600 [ 200.299442][ T67] ? rt_spin_unlock+0x165/0x200 [ 200.304321][ T67] loop_process_work+0x638/0x11d0 [ 200.309501][ T67] ? __pfx_loop_process_work+0x10/0x10 [ 200.314997][ T67] ? look_up_lock_class+0x57/0x110 [ 200.320344][ T67] ? register_lock_class+0x31/0x2e0 [ 200.325879][ T67] ? __lock_acquire+0x747/0x2de0 [ 200.330886][ T67] ? trace_hrtimer_start+0x82/0x200 [ 200.336146][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.341764][ T67] ? lock_acquire+0x115/0x350 [ 200.347054][ T67] ? rcu_is_watching+0x16/0xb0 [ 200.352493][ T67] ? process_scheduled_works+0x97a/0x1630 [ 200.358846][ T67] process_scheduled_works+0xc3d/0x1630 [ 200.364647][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.370682][ T67] ? assign_work+0x3cf/0x5d0 [ 200.375311][ T67] worker_thread+0xa47/0xfb0 [ 200.380131][ T67] ? __kthread_parkme+0x71/0x1f0 [ 200.385108][ T67] kthread+0x38b/0x470 [ 200.389376][ T67] ? __pfx_worker_thread+0x10/0x10 [ 200.394697][ T67] ? __pfx_kthread+0x10/0x10 [ 200.399332][ T67] ret_from_fork+0x514/0xb70 [ 200.404216][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 200.409351][ T67] ? __switch_to+0xc89/0x1420 [ 200.414091][ T67] ? __pfx_kthread+0x10/0x10 [ 200.418753][ T67] ret_from_fork_asm+0x1a/0x30 [ 200.423661][ T67] [ 200.427443][ T67] Kernel Offset: disabled [ 200.431934][ T67] Rebooting in 86400 seconds..