no interfaces have a carrier [ 52.376145][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.393481][ T5247] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 2026/08/31 15:18:59 parsed 1 programs 2026/08/31 15:18:59 serving rpc on tcp://44807 syzkaller login: [ 84.188772][ T5597] cgroup: Unknown subsys name 'net' [ 84.400863][ T5597] cgroup: Unknown subsys name 'cpuset' [ 84.446062][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.281177][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.731011][ T1244] cfg80211: failed to load regulatory.db [ 93.566203][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.567589][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.568785][ T5668] bridge_slave_0: entered allmulticast mode [ 93.571320][ T5668] bridge_slave_0: entered promiscuous mode [ 93.581514][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.581698][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.581850][ T5668] bridge_slave_1: entered allmulticast mode [ 93.584337][ T5668] bridge_slave_1: entered promiscuous mode [ 93.629427][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.634238][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.668779][ T5668] team0: Port device team_slave_0 added [ 93.672086][ T5668] team0: Port device team_slave_1 added [ 93.698283][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.698333][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.698357][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.702077][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.702090][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.702114][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.810346][ T5668] hsr_slave_0: entered promiscuous mode [ 93.812365][ T5668] hsr_slave_1: entered promiscuous mode [ 94.273988][ T5668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.308280][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.314878][ T5668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.339147][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.343549][ T5668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.380102][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.381947][ T5668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.419856][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.927453][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.959535][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.969858][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.970888][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.005625][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.006053][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.409769][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.476569][ T5668] veth0_vlan: entered promiscuous mode [ 95.498715][ T5668] veth1_vlan: entered promiscuous mode [ 95.542230][ T5668] veth0_macvtap: entered promiscuous mode [ 95.548260][ T5668] veth1_macvtap: entered promiscuous mode [ 95.584463][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.624291][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.945537][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949575][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949616][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949650][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.290164][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.433267][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437320][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.538482][ T3345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.538551][ T3345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.849887][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.863617][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.886513][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.894479][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.896171][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.080444][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.792625][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/31 15:19:16 executed programs: 0 [ 98.023816][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.038796][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.048984][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.052509][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.053168][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.613889][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.733391][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.733607][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.733791][ T5722] bridge_slave_0: entered allmulticast mode [ 98.738125][ T5722] bridge_slave_0: entered promiscuous mode [ 98.741077][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.741282][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.741816][ T5722] bridge_slave_1: entered allmulticast mode [ 98.744172][ T5722] bridge_slave_1: entered promiscuous mode [ 98.793500][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.798203][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.834219][ T5722] team0: Port device team_slave_0 added [ 98.842588][ T5722] team0: Port device team_slave_1 added [ 98.881885][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.881945][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.881970][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.884131][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.884143][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.884167][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.988977][ T5722] hsr_slave_0: entered promiscuous mode [ 98.990165][ T5722] hsr_slave_1: entered promiscuous mode [ 98.991139][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 98.991247][ T5722] Cannot create hsr debugfs directory [ 99.447419][ T66] bridge_slave_1: left allmulticast mode [ 99.455521][ T66] bridge_slave_1: left promiscuous mode [ 99.485608][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.716161][ T66] bridge_slave_0: left allmulticast mode [ 99.716230][ T66] bridge_slave_0: left promiscuous mode [ 99.716454][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.147265][ T4901] Bluetooth: hci0: command tx timeout [ 100.475743][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.555771][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.577305][ T66] bond0 (unregistering): Released all slaves [ 100.920158][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.045220][ T66] hsr_slave_0: left promiscuous mode [ 101.065225][ T66] hsr_slave_1: left promiscuous mode [ 101.066716][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.066818][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.109495][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.109559][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.168042][ T66] veth1_macvtap: left promiscuous mode [ 101.169075][ T66] veth0_macvtap: left promiscuous mode [ 101.169340][ T66] veth1_vlan: left promiscuous mode [ 101.169619][ T66] veth0_vlan: left promiscuous mode [ 101.797158][ T66] team0 (unregistering): Port device team_slave_1 removed [ 101.835682][ T66] team0 (unregistering): Port device team_slave_0 removed [ 102.225126][ T4901] Bluetooth: hci0: command tx timeout [ 102.528287][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.827015][ T5722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.863848][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.865828][ T5722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.899961][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.901936][ T5722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.941530][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.944349][ T5722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.979535][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.067246][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.106521][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.127176][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.143003][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.166408][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.166592][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.305185][ T4901] Bluetooth: hci0: command tx timeout [ 104.562178][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.611966][ T5722] veth0_vlan: entered promiscuous mode [ 104.633913][ T5722] veth1_vlan: entered promiscuous mode [ 104.664803][ T5722] veth0_macvtap: entered promiscuous mode [ 104.931892][ T5722] veth1_macvtap: entered promiscuous mode [ 104.953648][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.980116][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.530125][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.622780][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.634226][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.673165][ T2185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.682892][ T2185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.796497][ T3408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.815876][ T2185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.815961][ T2185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/31 15:19:24 executed programs: 2 [ 106.123433][ T5812] loop0: detected capacity change from 0 to 32768 [ 106.388594][ T4901] Bluetooth: hci0: command tx timeout [ 106.743483][ T5813] loop0: detected capacity change from 0 to 32768 [ 107.163720][ T5814] loop0: detected capacity change from 0 to 32768 [ 107.558828][ T5815] loop0: detected capacity change from 0 to 32768 [ 107.961650][ T5816] loop0: detected capacity change from 0 to 32768 [ 108.330140][ T5817] loop0: detected capacity change from 0 to 32768 [ 108.729414][ T5818] loop0: detected capacity change from 0 to 32768 [ 109.099183][ T5819] loop0: detected capacity change from 0 to 32768 [ 109.485427][ T5820] loop0: detected capacity change from 0 to 32768 [ 109.846985][ T5821] loop0: detected capacity change from 0 to 32768 2026/08/31 15:19:29 executed programs: 15 [ 111.272978][ T5825] set_capacity_and_notify: 3 callbacks suppressed [ 111.273054][ T5825] loop0: detected capacity change from 0 to 32768 [ 111.637459][ T5826] loop0: detected capacity change from 0 to 32768 [ 111.985801][ T5827] loop0: detected capacity change from 0 to 32768 [ 112.350424][ T5828] loop0: detected capacity change from 0 to 32768 [ 112.710654][ T5829] loop0: detected capacity change from 0 to 32768 [ 113.079202][ T5830] loop0: detected capacity change from 0 to 32768 [ 113.429197][ T5831] loop0: detected capacity change from 0 to 32768 [ 113.795007][ T5832] loop0: detected capacity change from 0 to 32768 [ 114.180215][ T5833] loop0: detected capacity change from 0 to 32768 [ 114.541591][ T5834] loop0: detected capacity change from 0 to 32768 2026/08/31 15:19:34 executed programs: 29 [ 116.357930][ T5839] set_capacity_and_notify: 4 callbacks suppressed [ 116.357995][ T5839] loop0: detected capacity change from 0 to 32768 [ 116.707521][ T5840] loop0: detected capacity change from 0 to 32768 [ 117.070069][ T5842] loop0: detected capacity change from 0 to 32768 [ 117.441748][ T5844] loop0: detected capacity change from 0 to 32768 [ 117.796213][ T5846] loop0: detected capacity change from 0 to 32768 [ 118.152722][ T5850] loop0: detected capacity change from 0 to 32768 [ 118.474940][ T5851] loop0: detected capacity change from 0 to 32768 [ 118.541326][ T2185] ================================================================== [ 118.541341][ ** replaying previous printk message ** [ 118.541341][ T2185] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.541381][ T2185] Read of size 4096 at addr ffff88803f054000 by task kworker/u8:12/2185 [ 118.541397][ T2185] [ 118.541414][ T2185] CPU: 1 UID: 0 PID: 2185 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.541434][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.541444][ T2185] Workqueue: loop0 loop_workfn [ 118.541489][ T2185] Call Trace: [ 118.541497][ T2185] [ 118.541504][ T2185] dump_stack_lvl+0xe8/0x150 [ 118.541531][ T2185] print_address_description+0x55/0x1e0 [ 118.541557][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.541575][ T2185] print_report+0x58/0x70 [ 118.541597][ T2185] kasan_report+0x117/0x150 [ 118.541624][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.541646][ T2185] kasan_check_range+0x264/0x2c0 [ 118.541680][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.541700][ T2185] __asan_memcpy+0x29/0x70 [ 118.541721][ T2185] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.541750][ T2185] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 118.541771][ T2185] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 118.541798][ T2185] ? shmem_write_begin+0x1ce/0x320 [ 118.541821][ T2185] generic_perform_write+0x5a8/0x8b0 [ 118.541846][ T2185] ? __pfx_generic_perform_write+0x10/0x10 [ 118.541865][ T2185] ? generic_write_checks_count+0x426/0x530 [ 118.541891][ T2185] ? file_update_time_flags+0x2db/0x450 [ 118.541912][ T2185] shmem_file_write_iter+0xfb/0x120 [ 118.541937][ T2185] lo_rw_aio+0xc78/0xf30 [ 118.541963][ T2185] ? lock_acquire+0x115/0x350 [ 118.541987][ T2185] ? __pfx_lo_rw_aio+0x10/0x10 [ 118.542015][ T2185] ? kthread_associate_blkcg+0x490/0x600 [ 118.542034][ T2185] ? rt_spin_unlock+0x165/0x200 [ 118.542061][ T2185] loop_process_work+0x638/0x11d0 [ 118.542095][ T2185] ? __pfx_loop_process_work+0x10/0x10 [ 118.542120][ T2185] ? look_up_lock_class+0x57/0x110 [ 118.542140][ T2185] ? register_lock_class+0x31/0x2e0 [ 118.542163][ T2185] ? __lock_acquire+0x6df/0x2e40 [ 118.542184][ T2185] ? rcu_is_watching+0x16/0xb0 [ 118.542209][ T2185] ? trace_hrtimer_start+0x82/0x200 [ 118.542231][ T2185] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.542253][ T2185] ? lock_acquire+0x115/0x350 [ 118.542277][ T2185] ? rcu_is_watching+0x16/0xb0 [ 118.542301][ T2185] ? process_scheduled_works+0x97a/0x1630 [ 118.542324][ T2185] process_scheduled_works+0xc3d/0x1630 [ 118.542360][ T2185] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.542386][ T2185] ? assign_work+0x3cf/0x5d0 [ 118.542410][ T2185] worker_thread+0xa47/0xfb0 [ 118.542440][ T2185] ? __kthread_parkme+0x71/0x1f0 [ 118.542469][ T2185] kthread+0x38b/0x470 [ 118.542486][ T2185] ? __pfx_worker_thread+0x10/0x10 [ 118.542511][ T2185] ? __pfx_kthread+0x10/0x10 [ 118.542529][ T2185] ret_from_fork+0x514/0xb70 [ 118.542548][ T2185] ? __pfx_ret_from_fork+0x10/0x10 [ 118.542565][ T2185] ? __switch_to+0xc89/0x1420 [ 118.542590][ T2185] ? __pfx_kthread+0x10/0x10 [ 118.542608][ T2185] ret_from_fork_asm+0x1a/0x30 [ 118.542632][ T2185] [ 118.542639][ T2185] [ 118.542643][ T2185] The buggy address belongs to the physical page: [ 118.542659][ T2185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x33 pfn:0x3f054 [ 118.542707][ T2185] flags: 0x80000000000000(node=0|zone=1) [ 118.542733][ T2185] raw: 0080000000000000 ffffea0000a8bcc8 ffffea0000ab1708 0000000000000000 [ 118.542748][ T2185] raw: 0000000000000033 0000000000000000 00000000ffffffff 0000000000000000 [ 118.542757][ T2185] page dumped because: kasan: bad access detected [ 118.542770][ T2185] page_owner tracks the page as freed [ 118.542776][ T2185] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5851, tgid 5851 (syz.0.50), ts 118489476929 [ 118.542802][ T2185] post_alloc_hook+0x1f9/0x250 [ 118.542823][ T2185] get_page_from_freelist+0x2591/0x2600 [ 118.542845][ T2185] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 118.542867][ T2185] alloc_pages_mpol+0xd4/0x280 [ 118.542891][ T2185] alloc_pages_noprof+0xd2/0x2f0 [ 118.542912][ T2185] lmLogInit+0x357/0x1a20 [ 118.542929][ T2185] lmLogOpen+0x4e3/0xf90 [ 118.542946][ T2185] jfs_mount_rw+0xf3/0x670 [ 118.542963][ T2185] jfs_fill_super+0x769/0xda0 [ 118.542984][ T2185] get_tree_bdev_flags+0x430/0x4f0 [ 118.543003][ T2185] vfs_get_tree+0x92/0x2a0 [ 118.543020][ T2185] do_new_mount+0x319/0xdc0 [ 118.543044][ T2185] __se_sys_mount+0x31d/0x420 [ 118.543057][ T2185] do_syscall_64+0x166/0x520 [ 118.543074][ T2185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.543091][ T2185] page last free pid 5722 tgid 5722 ts 118539793051 stack trace: [ 118.543102][ T2185] __free_frozen_pages+0xf8e/0x1070 [ 118.543119][ T2185] lmLogShutdown+0x44e/0x850 [ 118.543138][ T2185] lmLogClose+0x28c/0x530 [ 118.543157][ T2185] jfs_umount+0x2da/0x3b0 [ 118.543173][ T2185] jfs_put_super+0x8c/0x190 [ 118.543195][ T2185] generic_shutdown_super+0x13d/0x2d0 [ 118.543219][ T2185] kill_block_super+0x44/0xa0 [ 118.543235][ T2185] deactivate_locked_super+0xbc/0x110 [ 118.543256][ T2185] cleanup_mnt+0x3d3/0x460 [ 118.543272][ T2185] task_work_run+0x1d9/0x270 [ 118.543288][ T2185] exit_to_user_mode_loop+0x204/0x770 [ 118.543308][ T2185] do_syscall_64+0x328/0x520 [ 118.543325][ T2185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.543347][ T2185] [ 118.543351][ T2185] Memory state around the buggy address: [ 118.543360][ T2185] ffff88803f053f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 118.543373][ T2185] ffff88803f053f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 118.543384][ T2185] >ffff88803f054000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.543393][ T2185] ^ [ 118.543403][ T2185] ffff88803f054080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.543414][ T2185] ffff88803f054100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.543423][ T2185] ================================================================== [ 118.552244][ T2185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.127689][ T2185] CPU: 1 UID: 0 PID: 2185 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.137752][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.147818][ T2185] Workqueue: loop0 loop_workfn [ 119.152626][ T2185] Call Trace: [ 119.155908][ T2185] [ 119.158845][ T2185] vpanic+0x56d/0xa60 [ 119.162830][ T2185] ? rcu_is_watching+0x16/0xb0 [ 119.167606][ T2185] ? __pfx_vpanic+0x10/0x10 [ 119.172099][ T2185] panic+0xc5/0xd0 [ 119.175812][ T2185] ? __pfx_panic+0x10/0x10 [ 119.180216][ T2185] ? preempt_schedule_thunk+0x16/0x40 [ 119.185581][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.191642][ T2185] ? preempt_schedule_thunk+0x16/0x40 [ 119.196999][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.203049][ T2185] check_panic_on_warn+0x89/0xb0 [ 119.207975][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.214032][ T2185] end_report+0x73/0x170 [ 119.218277][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.224331][ T2185] kasan_report+0x128/0x150 [ 119.228821][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.234871][ T2185] kasan_check_range+0x264/0x2c0 [ 119.239798][ T2185] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.245850][ T2185] __asan_memcpy+0x29/0x70 [ 119.250254][ T2185] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 119.256136][ T2185] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 119.262450][ T2185] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 119.268504][ T2185] ? shmem_write_begin+0x1ce/0x320 [ 119.273602][ T2185] generic_perform_write+0x5a8/0x8b0 [ 119.278875][ T2185] ? __pfx_generic_perform_write+0x10/0x10 [ 119.284671][ T2185] ? generic_write_checks_count+0x426/0x530 [ 119.290560][ T2185] ? file_update_time_flags+0x2db/0x450 [ 119.296097][ T2185] shmem_file_write_iter+0xfb/0x120 [ 119.301285][ T2185] lo_rw_aio+0xc78/0xf30 [ 119.305541][ T2185] ? lock_acquire+0x115/0x350 [ 119.310236][ T2185] ? __pfx_lo_rw_aio+0x10/0x10 [ 119.315009][ T2185] ? kthread_associate_blkcg+0x490/0x600 [ 119.320683][ T2185] ? rt_spin_unlock+0x165/0x200 [ 119.325551][ T2185] loop_process_work+0x638/0x11d0 [ 119.330605][ T2185] ? __pfx_loop_process_work+0x10/0x10 [ 119.336057][ T2185] ? look_up_lock_class+0x57/0x110 [ 119.341162][ T2185] ? register_lock_class+0x31/0x2e0 [ 119.346355][ T2185] ? __lock_acquire+0x6df/0x2e40 [ 119.351284][ T2185] ? rcu_is_watching+0x16/0xb0 [ 119.356044][ T2185] ? trace_hrtimer_start+0x82/0x200 [ 119.361246][ T2185] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.366274][ T2185] ? lock_acquire+0x115/0x350 [ 119.370968][ T2185] ? rcu_is_watching+0x16/0xb0 [ 119.375737][ T2185] ? process_scheduled_works+0x97a/0x1630 [ 119.381448][ T2185] process_scheduled_works+0xc3d/0x1630 [ 119.386995][ T2185] ? __pfx_process_scheduled_works+0x10/0x10 [ 119.392965][ T2185] ? assign_work+0x3cf/0x5d0 [ 119.397548][ T2185] worker_thread+0xa47/0xfb0 [ 119.402137][ T2185] ? __kthread_parkme+0x71/0x1f0 [ 119.407077][ T2185] kthread+0x38b/0x470 [ 119.411150][ T2185] ? __pfx_worker_thread+0x10/0x10 [ 119.416276][ T2185] ? __pfx_kthread+0x10/0x10 [ 119.420856][ T2185] ret_from_fork+0x514/0xb70 [ 119.425441][ T2185] ? __pfx_ret_from_fork+0x10/0x10 [ 119.430539][ T2185] ? __switch_to+0xc89/0x1420 [ 119.435212][ T2185] ? __pfx_kthread+0x10/0x10 [ 119.439880][ T2185] ret_from_fork_asm+0x1a/0x30 [ 119.444641][ T2185] [ 119.447910][ T2185] Kernel Offset: disabled [ 119.452231][ T2185] Rebooting in 86400 seconds..