Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts.
2026/07/07 05:57:26 parsed 1 programs
2026/07/07 05:57:26 serving rpc on tcp://40717
[ 83.478479][ T5610] cgroup: Unknown subsys name 'net'
[ 83.740719][ T5610] cgroup: Unknown subsys name 'cpuset'
[ 83.813491][ T5610] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 85.591308][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.799723][ T822] cfg80211: failed to load regulatory.db
[ 91.173251][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.175037][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.184694][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.186144][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.189713][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.985337][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.985360][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.050356][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.050376][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.522253][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.522404][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.522588][ T5695] bridge_slave_0: entered allmulticast mode
[ 94.527338][ T5695] bridge_slave_0: entered promiscuous mode
[ 94.537081][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.537201][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.537426][ T5695] bridge_slave_1: entered allmulticast mode
[ 94.544452][ T5695] bridge_slave_1: entered promiscuous mode
[ 94.594645][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.598677][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.689157][ T5695] team0: Port device team_slave_0 added
[ 94.692312][ T5695] team0: Port device team_slave_1 added
[ 94.866897][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.866914][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.866938][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.872123][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.872138][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.872162][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.942203][ T5695] hsr_slave_0: entered promiscuous mode
[ 94.944132][ T5695] hsr_slave_1: entered promiscuous mode
[ 95.170159][ T5695] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.211598][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 95.225594][ T5695] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.266489][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 95.269476][ T5695] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.318016][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 95.320148][ T5695] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.362447][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 95.886793][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.218088][ T5695] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.233703][ T3428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.233814][ T3428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.277866][ T3428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.277981][ T3428] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.781956][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.857496][ T5695] veth0_vlan: entered promiscuous mode
[ 96.899893][ T5695] veth1_vlan: entered promiscuous mode
[ 96.981426][ T5695] veth0_macvtap: entered promiscuous mode
[ 97.000109][ T5695] veth1_macvtap: entered promiscuous mode
[ 97.046427][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.057097][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.081548][ T98] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.092653][ T98] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.092689][ T98] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.101983][ T98] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.727822][ T3428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.047267][ T3428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/07 05:57:44 executed programs: 0
[ 98.326417][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.351380][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.352608][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.361978][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.362869][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.475997][ T3428] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.818031][ T3428] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.124483][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.124597][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.124733][ T5737] bridge_slave_0: entered allmulticast mode
[ 99.126145][ T5737] bridge_slave_0: entered promiscuous mode
[ 99.128793][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.128869][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.129129][ T5737] bridge_slave_1: entered allmulticast mode
[ 99.130548][ T5737] bridge_slave_1: entered promiscuous mode
[ 99.180333][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.185365][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.233288][ T5737] team0: Port device team_slave_0 added
[ 99.240318][ T5737] team0: Port device team_slave_1 added
[ 99.330542][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.330552][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.330566][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.379357][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.379367][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.379381][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.511223][ T5737] hsr_slave_0: entered promiscuous mode
[ 99.512219][ T5737] hsr_slave_1: entered promiscuous mode
[ 99.513495][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[ 99.513595][ T5737] Cannot create hsr debugfs directory
[ 99.633449][ T3428] bridge_slave_1: left allmulticast mode
[ 99.633626][ T3428] bridge_slave_1: left promiscuous mode
[ 99.641279][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.803936][ T3428] bridge_slave_0: left allmulticast mode
[ 99.803960][ T3428] bridge_slave_0: left promiscuous mode
[ 99.804115][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.384676][ T4915] Bluetooth: hci0: command tx timeout
[ 100.523425][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.584878][ T3428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.630396][ T3428] bond0 (unregistering): Released all slaves
[ 101.312964][ T3428] hsr_slave_0: left promiscuous mode
[ 101.352926][ T3428] hsr_slave_1: left promiscuous mode
[ 101.354080][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.354166][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.414485][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.414515][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.484058][ T3428] veth1_macvtap: left promiscuous mode
[ 101.485256][ T3428] veth0_macvtap: left promiscuous mode
[ 101.485433][ T3428] veth1_vlan: left promiscuous mode
[ 101.485643][ T3428] veth0_vlan: left promiscuous mode
[ 102.173443][ T3428] team0 (unregistering): Port device team_slave_1 removed
[ 102.213429][ T3428] team0 (unregistering): Port device team_slave_0 removed
[ 102.460794][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1
[ 102.474056][ T4915] Bluetooth: hci0: command tx timeout
[ 103.832509][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.868014][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.868867][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.925565][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.929085][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.958551][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 104.033017][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.058056][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 104.172348][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.208175][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.225119][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.225311][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.249198][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.249302][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.544101][ T4915] Bluetooth: hci0: command tx timeout
[ 104.599687][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.648913][ T5737] veth0_vlan: entered promiscuous mode
[ 104.668490][ T5737] veth1_vlan: entered promiscuous mode
[ 104.707530][ T5737] veth0_macvtap: entered promiscuous mode
[ 104.718923][ T5737] veth1_macvtap: entered promiscuous mode
[ 104.737820][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.760221][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.779650][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.791907][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.792529][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.796946][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.162002][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.162023][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.210882][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.210902][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/07 05:57:51 executed programs: 2
[ 105.554365][ T5826] loop0: detected capacity change from 0 to 32768
[ 106.214385][ T5827] loop0: detected capacity change from 0 to 32768
[ 106.623172][ T4915] Bluetooth: hci0: command tx timeout
[ 106.677201][ T5828] loop0: detected capacity change from 0 to 32768
[ 107.097167][ T5829] loop0: detected capacity change from 0 to 32768
[ 107.496020][ T5830] loop0: detected capacity change from 0 to 32768
[ 107.863207][ T5831] loop0: detected capacity change from 0 to 32768
[ 108.242160][ T5832] loop0: detected capacity change from 0 to 32768
[ 108.624994][ T5833] loop0: detected capacity change from 0 to 32768
[ 108.993113][ T5834] loop0: detected capacity change from 0 to 32768
[ 109.371507][ T5835] loop0: detected capacity change from 0 to 32768
2026/07/07 05:57:56 executed programs: 15
[ 110.788999][ T5839] set_capacity_and_notify: 3 callbacks suppressed
[ 110.789011][ T5839] loop0: detected capacity change from 0 to 32768
[ 111.110371][ T5840] loop0: detected capacity change from 0 to 32768
[ 111.454539][ T5841] loop0: detected capacity change from 0 to 32768
[ 111.800724][ T5842] loop0: detected capacity change from 0 to 32768
[ 112.151618][ T5843] loop0: detected capacity change from 0 to 32768
[ 112.523649][ T5844] loop0: detected capacity change from 0 to 32768
[ 112.889452][ T5845] loop0: detected capacity change from 0 to 32768
[ 113.252229][ T5846] loop0: detected capacity change from 0 to 32768
[ 113.602485][ T5847] loop0: detected capacity change from 0 to 32768
[ 113.939506][ T5848] loop0: detected capacity change from 0 to 32768
[ 114.383212][ T3350] ==================================================================
[ 114.383226][ T3350] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.383269][ T3350] Read of size 4096 at addr ffff88803e522000 by task kworker/u8:17/3350
[ 114.383292][ T3350]
[ 114.383314][ T3350] CPU: 0 UID: 0 PID: 3350 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.383339][ T3350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 114.383350][ T3350] Workqueue: loop0 loop_workfn
[ 114.383392][ T3350] Call Trace:
[ 114.383399][ T3350]
[ 114.383406][ T3350] dump_stack_lvl+0xe8/0x150
[ 114.383433][ T3350] print_address_description+0x55/0x1e0
[ 114.383458][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.383481][ T3350] print_report+0x58/0x70
[ 114.383502][ T3350] kasan_report+0x117/0x150
[ 114.383522][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.383549][ T3350] kasan_check_range+0x264/0x2c0
[ 114.383567][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.383592][ T3350] __asan_memcpy+0x29/0x70
[ 114.383615][ T3350] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.383649][ T3350] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 114.383672][ T3350] ? rcu_is_watching+0x15/0xb0
[ 114.383694][ T3350] ? shmem_write_begin+0x1ce/0x320
[ 114.383713][ T3350] generic_perform_write+0x5a8/0x8b0
[ 114.383744][ T3350] ? __pfx_generic_perform_write+0x10/0x10
[ 114.383768][ T3350] ? __mark_inode_dirty+0x4e7/0x13b0
[ 114.383790][ T3350] ? preempt_count_add+0x91/0x190
[ 114.383809][ T3350] ? mnt_put_write_access_file+0xbf/0x100
[ 114.383830][ T3350] ? file_update_time_flags+0x406/0x4b0
[ 114.383851][ T3350] shmem_file_write_iter+0xfb/0x120
[ 114.383873][ T3350] lo_rw_aio+0xc78/0xf30
[ 114.383901][ T3350] ? __pfx_lo_rw_aio+0x10/0x10
[ 114.383925][ T3350] ? kthread_associate_blkcg+0x490/0x600
[ 114.383949][ T3350] ? rt_spin_unlock+0x163/0x200
[ 114.383969][ T3350] loop_process_work+0x638/0x11d0
[ 114.383999][ T3350] ? __pfx_loop_process_work+0x10/0x10
[ 114.384021][ T3350] ? look_up_lock_class+0x57/0x110
[ 114.384043][ T3350] ? register_lock_class+0x31/0x2e0
[ 114.384061][ T3350] ? __lock_acquire+0x683/0x2ce0
[ 114.384084][ T3350] ? do_raw_spin_unlock+0xf5/0x210
[ 114.384110][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.384129][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.384150][ T3350] ? rcu_is_watching+0x15/0xb0
[ 114.384170][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.384188][ T3350] process_scheduled_works+0xa8e/0x14e0
[ 114.384217][ T3350] ? __pfx_process_scheduled_works+0x10/0x10
[ 114.384243][ T3350] ? assign_work+0x3cf/0x5d0
[ 114.384262][ T3350] worker_thread+0xa47/0xfb0
[ 114.384299][ T3350] kthread+0x388/0x470
[ 114.384322][ T3350] ? __pfx_worker_thread+0x10/0x10
[ 114.384340][ T3350] ? __pfx_kthread+0x10/0x10
[ 114.384362][ T3350] ret_from_fork+0x514/0xb70
[ 114.384387][ T3350] ? __pfx_ret_from_fork+0x10/0x10
[ 114.384408][ T3350] ? __switch_to+0xc89/0x1420
[ 114.384425][ T3350] ? __pfx_kthread+0x10/0x10
[ 114.384441][ T3350] ret_from_fork_asm+0x1a/0x30
[ 114.384459][ T3350]
[ 114.384464][ T3350]
[ 114.384468][ T3350] The buggy address belongs to the physical page:
[ 114.384485][ T3350] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803e522640 pfn:0x3e522
[ 114.384499][ T3350] flags: 0x80000000000000(node=0|zone=1)
[ 114.384520][ T3350] raw: 0080000000000000 ffffea0000d4bd88 ffffea0000f92408 0000000000000000
[ 114.384531][ T3350] raw: ffff88803e522640 0000000000000000 00000000ffffffff 0000000000000000
[ 114.384538][ T3350] page dumped because: kasan: bad access detected
[ 114.384547][ T3350] page_owner tracks the page as freed
[ 114.384552][ T3350] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5849, tgid 5849 (syz.0.40), ts 114321559821, free_ts 114378230989
[ 114.384572][ T3350] post_alloc_hook+0x1f9/0x250
[ 114.384593][ T3350] get_page_from_freelist+0x262a/0x26a0
[ 114.384606][ T3350] __alloc_frozen_pages_noprof+0x18d/0x380
[ 114.384619][ T3350] alloc_pages_mpol+0xce/0x280
[ 114.384637][ T3350] alloc_pages_noprof+0xd2/0x2f0
[ 114.384649][ T3350] lmLogInit+0x357/0x1a20
[ 114.384664][ T3350] lmLogOpen+0x4e3/0xf90
[ 114.384678][ T3350] jfs_mount_rw+0xf3/0x670
[ 114.384692][ T3350] jfs_fill_super+0x769/0xda0
[ 114.384704][ T3350] get_tree_bdev_flags+0x430/0x4f0
[ 114.384718][ T3350] vfs_get_tree+0x92/0x2a0
[ 114.384731][ T3350] do_new_mount+0x319/0xdc0
[ 114.384749][ T3350] __se_sys_mount+0x31d/0x420
[ 114.384760][ T3350] do_syscall_64+0x174/0x580
[ 114.384777][ T3350] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.384795][ T3350] page last free pid 5737 tgid 5737 stack trace:
[ 114.384803][ T3350] __free_frozen_pages+0x10e7/0x11c0
[ 114.384815][ T3350] lmLogShutdown+0x44e/0x850
[ 114.384831][ T3350] lmLogClose+0x28c/0x530
[ 114.384846][ T3350] jfs_umount+0x2da/0x3b0
[ 114.384859][ T3350] jfs_put_super+0x8c/0x190
[ 114.384870][ T3350] generic_shutdown_super+0x13d/0x2d0
[ 114.384881][ T3350] kill_block_super+0x44/0x90
[ 114.384893][ T3350] deactivate_locked_super+0xbc/0x130
[ 114.384904][ T3350] cleanup_mnt+0x3d3/0x460
[ 114.384916][ T3350] task_work_run+0x1d9/0x270
[ 114.384933][ T3350] exit_to_user_mode_loop+0x1fa/0x730
[ 114.384945][ T3350] do_syscall_64+0x353/0x580
[ 114.384960][ T3350] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.384973][ T3350]
[ 114.384977][ T3350] Memory state around the buggy address:
[ 114.384985][ T3350] ffff88803e521f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 114.384994][ T3350] ffff88803e521f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 114.385003][ T3350] >ffff88803e522000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 114.385010][ T3350] ^
[ 114.385017][ T3350] ffff88803e522080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 114.385025][ T3350] ffff88803e522100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 114.385031][ T3350] ==================================================================
[ 114.387642][ T3350] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.387658][ T3350] CPU: 0 UID: 0 PID: 3350 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.387675][ T3350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 114.387684][ T3350] Workqueue: loop0 loop_workfn
[ 114.387708][ T3350] Call Trace:
[ 114.387715][ T3350]
[ 114.387721][ T3350] vpanic+0x56c/0xa60
[ 114.387738][ T3350] ? rcu_is_watching+0x15/0xb0
[ 114.387754][ T3350] ? __pfx_vpanic+0x10/0x10
[ 114.387770][ T3350] panic+0xc5/0xd0
[ 114.387784][ T3350] ? __pfx_panic+0x10/0x10
[ 114.387798][ T3350] ? preempt_schedule_thunk+0x16/0x40
[ 114.387815][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.387838][ T3350] ? preempt_schedule_thunk+0x16/0x40
[ 114.387857][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.387878][ T3350] check_panic_on_warn+0x89/0xb0
[ 114.387902][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.387924][ T3350] end_report+0x73/0x170
[ 114.387941][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.387963][ T3350] kasan_report+0x128/0x150
[ 114.387982][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.388008][ T3350] kasan_check_range+0x264/0x2c0
[ 114.388026][ T3350] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.388049][ T3350] __asan_memcpy+0x29/0x70
[ 114.388070][ T3350] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 114.388103][ T3350] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 114.388128][ T3350] ? rcu_is_watching+0x15/0xb0
[ 114.388150][ T3350] ? shmem_write_begin+0x1ce/0x320
[ 114.388165][ T3350] generic_perform_write+0x5a8/0x8b0
[ 114.388193][ T3350] ? __pfx_generic_perform_write+0x10/0x10
[ 114.388214][ T3350] ? __mark_inode_dirty+0x4e7/0x13b0
[ 114.388235][ T3350] ? preempt_count_add+0x91/0x190
[ 114.388254][ T3350] ? mnt_put_write_access_file+0xbf/0x100
[ 114.388284][ T3350] ? file_update_time_flags+0x406/0x4b0
[ 114.388305][ T3350] shmem_file_write_iter+0xfb/0x120
[ 114.388326][ T3350] lo_rw_aio+0xc78/0xf30
[ 114.388355][ T3350] ? __pfx_lo_rw_aio+0x10/0x10
[ 114.388380][ T3350] ? kthread_associate_blkcg+0x490/0x600
[ 114.388404][ T3350] ? rt_spin_unlock+0x163/0x200
[ 114.388423][ T3350] loop_process_work+0x638/0x11d0
[ 114.388453][ T3350] ? __pfx_loop_process_work+0x10/0x10
[ 114.388474][ T3350] ? look_up_lock_class+0x57/0x110
[ 114.388495][ T3350] ? register_lock_class+0x31/0x2e0
[ 114.388513][ T3350] ? __lock_acquire+0x683/0x2ce0
[ 114.388534][ T3350] ? do_raw_spin_unlock+0xf5/0x210
[ 114.388558][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.388577][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.388598][ T3350] ? rcu_is_watching+0x15/0xb0
[ 114.388618][ T3350] ? process_scheduled_works+0xa20/0x14e0
[ 114.388637][ T3350] process_scheduled_works+0xa8e/0x14e0
[ 114.388666][ T3350] ? __pfx_process_scheduled_works+0x10/0x10
[ 114.388687][ T3350] ? assign_work+0x3cf/0x5d0
[ 114.388707][ T3350] worker_thread+0xa47/0xfb0
[ 114.388736][ T3350] kthread+0x388/0x470
[ 114.388758][ T3350] ? __pfx_worker_thread+0x10/0x10
[ 114.388775][ T3350] ? __pfx_kthread+0x10/0x10
[ 114.388797][ T3350] ret_from_fork+0x514/0xb70
[ 114.388821][ T3350] ? __pfx_ret_from_fork+0x10/0x10
[ 114.388845][ T3350] ? __switch_to+0xc89/0x1420
[ 114.388866][ T3350] ? __pfx_kthread+0x10/0x10
[ 114.388887][ T3350] ret_from_fork_asm+0x1a/0x30
[ 114.388909][ T3350]
[ 114.389186][ T3350] Kernel Offset: disabled