[ 92.189110][ T1260] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. 2026/05/23 12:48:52 parsed 1 programs [ 99.203327][ T5633] cgroup: Unknown subsys name 'net' [ 99.444349][ T5633] cgroup: Unknown subsys name 'cpuset' [ 99.499527][ T5633] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.552013][ T5633] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.892002][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.894834][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.895143][ T5672] bridge_slave_0: entered allmulticast mode [ 107.931555][ T5672] bridge_slave_0: entered promiscuous mode [ 108.222641][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.222978][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.223261][ T5672] bridge_slave_1: entered allmulticast mode [ 108.226261][ T5672] bridge_slave_1: entered promiscuous mode [ 108.481818][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.494745][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.575931][ T5672] team0: Port device team_slave_0 added [ 108.592591][ T5672] team0: Port device team_slave_1 added [ 108.649082][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.649098][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.649118][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.654070][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.654084][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.654105][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.898866][ T5672] hsr_slave_0: entered promiscuous mode [ 108.901105][ T5672] hsr_slave_1: entered promiscuous mode [ 109.474460][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.530644][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.533816][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.574666][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.576063][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.615240][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.624701][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.656950][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.826156][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.922311][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.957437][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.958371][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.037452][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.037683][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.630414][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.748828][ T5672] veth0_vlan: entered promiscuous mode [ 110.773476][ T5672] veth1_vlan: entered promiscuous mode [ 110.846549][ T5672] veth0_macvtap: entered promiscuous mode [ 110.862529][ T5672] veth1_macvtap: entered promiscuous mode [ 110.902732][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.933385][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.969034][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.997867][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.015061][ T246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.015878][ T246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.724965][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.769965][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.771346][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.773353][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.774083][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.975566][ T246] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.601342][ T246] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.856501][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.856530][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.992978][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.993001][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.156961][ T246] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.488036][ T246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.301010][ T246] bridge_slave_1: left allmulticast mode [ 114.301221][ T246] bridge_slave_1: left promiscuous mode [ 114.331399][ T246] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.520362][ T246] bridge_slave_0: left allmulticast mode [ 114.520403][ T246] bridge_slave_0: left promiscuous mode [ 114.520683][ T246] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.379370][ T246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.459388][ T246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.501611][ T246] bond0 (unregistering): Released all slaves [ 115.537933][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 116.011075][ T246] hsr_slave_0: left promiscuous mode [ 116.048636][ T246] hsr_slave_1: left promiscuous mode [ 116.053667][ T246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.053792][ T246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.090829][ T246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.090861][ T246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.200620][ T246] veth1_macvtap: left promiscuous mode [ 116.202217][ T246] veth0_macvtap: left promiscuous mode [ 116.202572][ T246] veth1_vlan: left promiscuous mode [ 116.202940][ T246] veth0_vlan: left promiscuous mode [ 116.999342][ T246] team0 (unregistering): Port device team_slave_1 removed [ 117.059445][ T246] team0 (unregistering): Port device team_slave_0 removed [ 117.283525][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 118.204561][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 119.742898][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 2026/05/23 12:49:19 executed programs: 0 [ 121.364340][ T4938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.367184][ T4938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.368250][ T4938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.410248][ T4938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.411328][ T4938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.861848][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.862160][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.862352][ T5822] bridge_slave_0: entered allmulticast mode [ 122.866496][ T5822] bridge_slave_0: entered promiscuous mode [ 122.879856][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.881044][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.881961][ T5822] bridge_slave_1: entered allmulticast mode [ 122.907717][ T5822] bridge_slave_1: entered promiscuous mode [ 122.972340][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.978199][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.036499][ T5822] team0: Port device team_slave_0 added [ 123.045626][ T5822] team0: Port device team_slave_1 added [ 123.095854][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.095868][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.095889][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.101113][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.101128][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.101148][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.249655][ T5822] hsr_slave_0: entered promiscuous mode [ 123.255315][ T5822] hsr_slave_1: entered promiscuous mode [ 123.521317][ T60] Bluetooth: hci0: command tx timeout [ 125.599026][ T60] Bluetooth: hci0: command tx timeout [ 126.156708][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.211343][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.212619][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.262161][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.263474][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.307757][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.421846][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.478187][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.763819][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.867415][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.906317][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.906570][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.950766][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.956178][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.679098][ T60] Bluetooth: hci0: command tx timeout [ 127.814588][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.011150][ T5822] veth0_vlan: entered promiscuous mode [ 128.060278][ T5822] veth1_vlan: entered promiscuous mode [ 128.155543][ T5822] veth0_macvtap: entered promiscuous mode [ 128.196980][ T5822] veth1_macvtap: entered promiscuous mode [ 128.304329][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.405679][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.501272][ T772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.502728][ T772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.502777][ T772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.502815][ T772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.164973][ T3180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.164996][ T3180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.271303][ T3180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.271327][ T3180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/23 12:49:27 executed programs: 2 [ 129.766181][ T60] Bluetooth: hci0: command tx timeout [ 129.891833][ T5976] loop0: detected capacity change from 0 to 32768 [ 130.736139][ T5986] loop0: detected capacity change from 0 to 32768 [ 131.234073][ T5987] loop0: detected capacity change from 0 to 32768 [ 131.726933][ T5988] loop0: detected capacity change from 0 to 32768 [ 132.372298][ T5989] loop0: detected capacity change from 0 to 32768 [ 132.827522][ T5990] loop0: detected capacity change from 0 to 32768 [ 133.127830][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127961][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.333332][ T5991] loop0: detected capacity change from 0 to 32768 [ 133.909666][ T5992] loop0: detected capacity change from 0 to 32768 [ 134.405825][ T5993] loop0: detected capacity change from 0 to 32768 2026/05/23 12:49:32 executed programs: 11 [ 134.915228][ T5994] loop0: detected capacity change from 0 to 32768 [ 135.372471][ T5995] loop0: detected capacity change from 0 to 32768 [ 135.824798][ T5996] loop0: detected capacity change from 0 to 32768 [ 136.236852][ T5997] loop0: detected capacity change from 0 to 32768 [ 136.696911][ T5998] loop0: detected capacity change from 0 to 32768 [ 137.136875][ T5999] loop0: detected capacity change from 0 to 32768 [ 137.576391][ T6000] loop0: detected capacity change from 0 to 32768 [ 138.165615][ T6001] loop0: detected capacity change from 0 to 32768 [ 138.620055][ T6002] loop0: detected capacity change from 0 to 32768 [ 139.117004][ T6003] loop0: detected capacity change from 0 to 32768 [ 139.185020][ T3180] ================================================================== [ 139.185039][ T3180] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.185082][ T3180] Read of size 4096 at addr ffff88802ff4c000 by task kworker/u8:14/3180 [ 139.185101][ T3180] [ 139.185127][ T3180] CPU: 0 UID: 0 PID: 3180 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.185153][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.185168][ T3180] Workqueue: loop0 loop_workfn [ 139.185206][ T3180] Call Trace: [ 139.185215][ T3180] [ 139.185228][ T3180] dump_stack_lvl+0xe8/0x150 [ 139.185257][ T3180] print_address_description+0x55/0x1e0 [ 139.185287][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.185320][ T3180] print_report+0x58/0x70 [ 139.185354][ T3180] kasan_report+0x117/0x150 [ 139.185384][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.185422][ T3180] kasan_check_range+0x264/0x2c0 [ 139.185449][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.185483][ T3180] __asan_memcpy+0x29/0x70 [ 139.185504][ T3180] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.185549][ T3180] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 139.185583][ T3180] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 139.185616][ T3180] ? shmem_write_begin+0x1ce/0x320 [ 139.185645][ T3180] generic_perform_write+0x5b1/0x8b0 [ 139.185684][ T3180] ? __pfx_generic_perform_write+0x10/0x10 [ 139.185720][ T3180] ? file_update_time_flags+0x3b9/0x4b0 [ 139.185751][ T3180] shmem_file_write_iter+0xfb/0x120 [ 139.185784][ T3180] lo_rw_aio+0xc80/0xf00 [ 139.185815][ T3180] ? __pfx_lo_rw_aio+0x10/0x10 [ 139.185842][ T3180] ? kthread_associate_blkcg+0x490/0x600 [ 139.185870][ T3180] ? rt_spin_unlock+0x160/0x200 [ 139.185900][ T3180] loop_process_work+0x637/0x11b0 [ 139.185931][ T3180] ? pick_next_task_fair+0x1a68/0x1ab0 [ 139.185953][ T3180] ? __pfx_loop_process_work+0x10/0x10 [ 139.185978][ T3180] ? look_up_lock_class+0x57/0x110 [ 139.185999][ T3180] ? register_lock_class+0x31/0x2e0 [ 139.186038][ T3180] ? __lock_acquire+0x6b5/0x2d10 [ 139.186070][ T3180] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.186094][ T3180] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.186118][ T3180] ? process_one_work+0x8be/0x1630 [ 139.186151][ T3180] ? process_one_work+0x8be/0x1630 [ 139.186189][ T3180] ? process_one_work+0x8be/0x1630 [ 139.186225][ T3180] process_one_work+0x98b/0x1630 [ 139.186270][ T3180] ? __pfx_process_one_work+0x10/0x10 [ 139.186301][ T3180] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.186332][ T3180] worker_thread+0xb49/0x1140 [ 139.186373][ T3180] kthread+0x388/0x470 [ 139.186398][ T3180] ? __pfx_worker_thread+0x10/0x10 [ 139.186417][ T3180] ? __pfx_kthread+0x10/0x10 [ 139.186442][ T3180] ret_from_fork+0x514/0xb70 [ 139.186471][ T3180] ? __pfx_ret_from_fork+0x10/0x10 [ 139.186500][ T3180] ? __switch_to+0xc79/0x1410 [ 139.186524][ T3180] ? __pfx_kthread+0x10/0x10 [ 139.186551][ T3180] ret_from_fork_asm+0x1a/0x30 [ 139.186591][ T3180] [ 139.186599][ T3180] [ 139.186605][ T3180] The buggy address belongs to the physical page: [ 139.186632][ T3180] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ff4cf00 pfn:0x2ff4c [ 139.186657][ T3180] flags: 0x80000000000000(node=0|zone=1) [ 139.186687][ T3180] raw: 0080000000000000 ffffea0000e5a208 ffffea0000bfd2c8 0000000000000000 [ 139.186706][ T3180] raw: ffff88802ff4cf00 0000000000000000 00000000ffffffff 0000000000000000 [ 139.186718][ T3180] page dumped because: kasan: bad access detected [ 139.186732][ T3180] page_owner tracks the page as freed [ 139.186740][ T3180] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 6003, tgid 6003 (syz.0.35), ts 139133020587, free_ts 139184958978 [ 139.186774][ T3180] post_alloc_hook+0x1f9/0x250 [ 139.186797][ T3180] get_page_from_freelist+0x265c/0x26e0 [ 139.186825][ T3180] __alloc_frozen_pages_noprof+0x18d/0x380 [ 139.186852][ T3180] alloc_pages_mpol+0xd1/0x380 [ 139.186878][ T3180] alloc_pages_noprof+0xd2/0x2f0 [ 139.186905][ T3180] lmLogInit+0x357/0x1a00 [ 139.186927][ T3180] lmLogOpen+0x4e1/0xfa0 [ 139.186950][ T3180] jfs_mount_rw+0xee/0x670 [ 139.186974][ T3180] jfs_fill_super+0x75a/0xd70 [ 139.186990][ T3180] get_tree_bdev_flags+0x431/0x4f0 [ 139.187017][ T3180] vfs_get_tree+0x92/0x2a0 [ 139.187043][ T3180] do_new_mount+0x341/0xd30 [ 139.187061][ T3180] __se_sys_mount+0x31d/0x420 [ 139.187080][ T3180] do_syscall_64+0x15f/0x560 [ 139.187100][ T3180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.187121][ T3180] page last free pid 5822 tgid 5822 stack trace: [ 139.187134][ T3180] __free_frozen_pages+0x10af/0x1190 [ 139.187156][ T3180] lmLogShutdown+0x44e/0x850 [ 139.187182][ T3180] lmLogClose+0x28a/0x520 [ 139.187207][ T3180] jfs_umount+0x2fb/0x3d0 [ 139.187230][ T3180] jfs_put_super+0x8c/0x190 [ 139.187246][ T3180] generic_shutdown_super+0x13d/0x2d0 [ 139.187269][ T3180] kill_block_super+0x44/0x90 [ 139.187295][ T3180] deactivate_locked_super+0xbc/0x130 [ 139.187317][ T3180] cleanup_mnt+0x437/0x4d0 [ 139.187348][ T3180] task_work_run+0x1d9/0x270 [ 139.187374][ T3180] exit_to_user_mode_loop+0xf3/0x4d0 [ 139.187399][ T3180] do_syscall_64+0x33e/0x560 [ 139.187418][ T3180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.187437][ T3180] [ 139.187443][ T3180] Memory state around the buggy address: [ 139.187455][ T3180] ffff88802ff4bf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 139.187469][ T3180] ffff88802ff4bf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 139.187484][ T3180] >ffff88802ff4c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 139.187496][ T3180] ^ [ 139.187507][ T3180] ffff88802ff4c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 139.187521][ T3180] ffff88802ff4c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 139.187533][ T3180] ================================================================== [ 139.187566][ T3180] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.187589][ T3180] CPU: 0 UID: 0 PID: 3180 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.187614][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.187629][ T3180] Workqueue: loop0 loop_workfn [ 139.187655][ T3180] Call Trace: [ 139.187663][ T3180] [ 139.187672][ T3180] vpanic+0x56c/0xa60 [ 139.187704][ T3180] ? __pfx_vpanic+0x10/0x10 [ 139.187739][ T3180] panic+0xc5/0xd0 [ 139.187768][ T3180] ? __pfx_panic+0x10/0x10 [ 139.187798][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.187838][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.187871][ T3180] check_panic_on_warn+0x89/0xb0 [ 139.187900][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.187950][ T3180] end_report+0x73/0x170 [ 139.187977][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.188009][ T3180] kasan_report+0x128/0x150 [ 139.188038][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.188077][ T3180] kasan_check_range+0x264/0x2c0 [ 139.188105][ T3180] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.188139][ T3180] __asan_memcpy+0x29/0x70 [ 139.188160][ T3180] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 139.188206][ T3180] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 139.188242][ T3180] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 139.188275][ T3180] ? shmem_write_begin+0x1ce/0x320 [ 139.188303][ T3180] generic_perform_write+0x5b1/0x8b0 [ 139.188349][ T3180] ? __pfx_generic_perform_write+0x10/0x10 [ 139.188386][ T3180] ? file_update_time_flags+0x3b9/0x4b0 [ 139.188420][ T3180] shmem_file_write_iter+0xfb/0x120 [ 139.188452][ T3180] lo_rw_aio+0xc80/0xf00 [ 139.188484][ T3180] ? __pfx_lo_rw_aio+0x10/0x10 [ 139.188514][ T3180] ? kthread_associate_blkcg+0x490/0x600 [ 139.188540][ T3180] ? rt_spin_unlock+0x160/0x200 [ 139.188571][ T3180] loop_process_work+0x637/0x11b0 [ 139.188601][ T3180] ? pick_next_task_fair+0x1a68/0x1ab0 [ 139.188625][ T3180] ? __pfx_loop_process_work+0x10/0x10 [ 139.188650][ T3180] ? look_up_lock_class+0x57/0x110 [ 139.188671][ T3180] ? register_lock_class+0x31/0x2e0 [ 139.188700][ T3180] ? __lock_acquire+0x6b5/0x2d10 [ 139.188733][ T3180] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.188757][ T3180] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.188781][ T3180] ? process_one_work+0x8be/0x1630 [ 139.188824][ T3180] ? process_one_work+0x8be/0x1630 [ 139.188864][ T3180] ? process_one_work+0x8be/0x1630 [ 139.188895][ T3180] process_one_work+0x98b/0x1630 [ 139.188939][ T3180] ? __pfx_process_one_work+0x10/0x10 [ 139.188970][ T3180] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.189017][ T3180] worker_thread+0xb49/0x1140 [ 139.189051][ T3180] kthread+0x388/0x470 [ 139.189077][ T3180] ? __pfx_worker_thread+0x10/0x10 [ 139.189095][ T3180] ? __pfx_kthread+0x10/0x10 [ 139.189120][ T3180] ret_from_fork+0x514/0xb70 [ 139.189150][ T3180] ? __pfx_ret_from_fork+0x10/0x10 [ 139.189178][ T3180] ? __switch_to+0xc79/0x1410 [ 139.189203][ T3180] ? __pfx_kthread+0x10/0x10 [ 139.189228][ T3180] ret_from_fork_asm+0x1a/0x30 [ 139.189267][ T3180] [ 139.189873][ T3180] Kernel Offset: disabled