Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. 2026/06/20 08:19:27 parsed 1 programs 2026/06/20 08:19:27 serving rpc on tcp://43393 [ 55.867595][ T5605] cgroup: Unknown subsys name 'net' [ 56.098694][ T5605] cgroup: Unknown subsys name 'cpuset' [ 56.176750][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.328799][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.833717][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.833807][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.833872][ T5619] bridge_slave_0: entered allmulticast mode [ 59.834549][ T5619] bridge_slave_0: entered promiscuous mode [ 59.835714][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.835797][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.835852][ T5619] bridge_slave_1: entered allmulticast mode [ 59.836714][ T5619] bridge_slave_1: entered promiscuous mode [ 59.856668][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.858731][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.877800][ T5619] team0: Port device team_slave_0 added [ 59.879753][ T5619] team0: Port device team_slave_1 added [ 59.897836][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.897848][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.897869][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.899216][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.899225][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.899246][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.930076][ T5619] hsr_slave_0: entered promiscuous mode [ 59.930817][ T5619] hsr_slave_1: entered promiscuous mode [ 60.119695][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.148162][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.148692][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.197884][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.198465][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.228601][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.229393][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.269264][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.289026][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.289100][ T5619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.289229][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.289269][ T5619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.344366][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.386626][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.426630][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.589106][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.607140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.607181][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.610270][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.610340][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.629369][ T5619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.629381][ T5619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.813147][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.844446][ T5619] veth0_vlan: entered promiscuous mode [ 60.848812][ T5619] veth1_vlan: entered promiscuous mode [ 60.864582][ T5619] veth0_macvtap: entered promiscuous mode [ 60.867121][ T5619] veth1_macvtap: entered promiscuous mode [ 60.876200][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.879750][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.920395][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.920760][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.968054][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.970001][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.307358][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.597354][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.877696][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.630299][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.077505][ T5710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.078189][ T5710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.078427][ T5710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.079118][ T5710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.079523][ T5710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.312550][ T3843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.312570][ T3843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.344323][ T3213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.344338][ T3213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/20 08:19:37 executed programs: 0 [ 64.046779][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.047712][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.048891][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.049567][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.050062][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.136802][ T12] bridge_slave_1: left allmulticast mode [ 64.136826][ T12] bridge_slave_1: left promiscuous mode [ 64.136994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.286871][ T12] bridge_slave_0: left allmulticast mode [ 64.286887][ T12] bridge_slave_0: left promiscuous mode [ 64.286984][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.896816][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.956768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.997360][ T12] bond0 (unregistering): Released all slaves [ 65.019100][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.416542][ T12] hsr_slave_0: left promiscuous mode [ 65.456514][ T12] hsr_slave_1: left promiscuous mode [ 65.457077][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.457089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.479770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.479787][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.556776][ T12] veth1_macvtap: left promiscuous mode [ 65.556832][ T12] veth0_macvtap: left promiscuous mode [ 65.556898][ T12] veth1_vlan: left promiscuous mode [ 65.556943][ T12] veth0_vlan: left promiscuous mode [ 66.006759][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.047286][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.096516][ T5710] Bluetooth: hci0: command tx timeout [ 66.120370][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.177685][ T1345] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.177733][ T1345] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.278244][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.278317][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.278422][ T5734] bridge_slave_0: entered allmulticast mode [ 66.281105][ T5734] bridge_slave_0: entered promiscuous mode [ 66.283562][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.283687][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.283788][ T5734] bridge_slave_1: entered allmulticast mode [ 66.285027][ T5734] bridge_slave_1: entered promiscuous mode [ 66.362046][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.364558][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.404388][ T5734] team0: Port device team_slave_0 added [ 66.412176][ T5734] team0: Port device team_slave_1 added [ 66.437746][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.437759][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.437780][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.438981][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.438991][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.439011][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.467239][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.499568][ T5734] hsr_slave_0: entered promiscuous mode [ 66.500309][ T5734] hsr_slave_1: entered promiscuous mode [ 68.176464][ T5710] Bluetooth: hci0: command tx timeout [ 68.213699][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.241787][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.242581][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.278798][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.279594][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.321885][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.322963][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.359325][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.421406][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.439165][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.444055][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.444127][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.474301][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.474370][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.698264][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.721227][ T5734] veth0_vlan: entered promiscuous mode [ 68.724397][ T5734] veth1_vlan: entered promiscuous mode [ 68.742785][ T5734] veth0_macvtap: entered promiscuous mode [ 68.744808][ T5734] veth1_macvtap: entered promiscuous mode [ 68.753891][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.759621][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.764695][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.764819][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.764846][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.764872][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.892292][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.892309][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.918285][ T5859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.918302][ T5859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/20 08:19:42 executed programs: 3 [ 69.111125][ T5911] loop0: detected capacity change from 0 to 32768 [ 69.324839][ T5912] loop0: detected capacity change from 0 to 32768 [ 69.543701][ T5913] loop0: detected capacity change from 0 to 32768 [ 69.760881][ T5914] loop0: detected capacity change from 0 to 32768 [ 69.989004][ T5915] loop0: detected capacity change from 0 to 32768 [ 70.202608][ T5916] loop0: detected capacity change from 0 to 32768 [ 70.256851][ T5710] Bluetooth: hci0: command tx timeout [ 70.431347][ T5917] loop0: detected capacity change from 0 to 32768 [ 70.637391][ T5918] loop0: detected capacity change from 0 to 32768 [ 70.838806][ T5919] loop0: detected capacity change from 0 to 32768 [ 71.043683][ T5920] loop0: detected capacity change from 0 to 32768 [ 72.336542][ T5710] Bluetooth: hci0: command tx timeout [ 74.142642][ T5935] set_capacity_and_notify: 14 callbacks suppressed [ 74.142653][ T5935] loop0: detected capacity change from 0 to 32768 2026/06/20 08:19:47 executed programs: 27 [ 74.381059][ T5936] loop0: detected capacity change from 0 to 32768 [ 74.645731][ T5937] loop0: detected capacity change from 0 to 32768 [ 74.848548][ T5938] loop0: detected capacity change from 0 to 32768 [ 75.049581][ T5939] loop0: detected capacity change from 0 to 32768 [ 75.263676][ T5940] loop0: detected capacity change from 0 to 32768 [ 75.482320][ T5941] loop0: detected capacity change from 0 to 32768 [ 75.697657][ T5942] loop0: detected capacity change from 0 to 32768 [ 75.903598][ T5943] loop0: detected capacity change from 0 to 32768 [ 76.118805][ T5944] loop0: detected capacity change from 0 to 32768 [ 76.380633][ T5864] ================================================================== [ 76.380647][ T5864] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.380676][ T5864] Read of size 4096 at addr ffff888025987000 by task kworker/u8:22/5864 [ 76.380690][ T5864] [ 76.380707][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 76.380727][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.380737][ T5864] Workqueue: loop0 loop_workfn [ 76.380770][ T5864] Call Trace: [ 76.380776][ T5864] [ 76.380783][ T5864] dump_stack_lvl+0xe8/0x150 [ 76.380803][ T5864] print_address_description+0x55/0x1e0 [ 76.380822][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.380837][ T5864] print_report+0x58/0x70 [ 76.380853][ T5864] kasan_report+0x117/0x150 [ 76.380875][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.380895][ T5864] kasan_check_range+0x264/0x2c0 [ 76.380915][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.380931][ T5864] __asan_memcpy+0x29/0x70 [ 76.380949][ T5864] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.380974][ T5864] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 76.380990][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381021][ T5864] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 76.381044][ T5864] ? shmem_write_begin+0x1ce/0x320 [ 76.381066][ T5864] generic_perform_write+0x5a8/0x8b0 [ 76.381089][ T5864] ? __pfx_generic_perform_write+0x10/0x10 [ 76.381107][ T5864] ? generic_write_checks_count+0x426/0x530 [ 76.381128][ T5864] ? file_update_time_flags+0x3b9/0x4b0 [ 76.381151][ T5864] shmem_file_write_iter+0xfb/0x120 [ 76.381174][ T5864] lo_rw_aio+0xc78/0xf30 [ 76.381198][ T5864] ? kthread_associate_blkcg+0x30f/0x600 [ 76.381216][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381239][ T5864] ? __pfx_lo_rw_aio+0x10/0x10 [ 76.381258][ T5864] ? kthread_associate_blkcg+0x30f/0x600 [ 76.381279][ T5864] ? kthread_associate_blkcg+0x490/0x600 [ 76.381296][ T5864] ? rt_spin_unlock+0x160/0x200 [ 76.381316][ T5864] loop_process_work+0x638/0x11d0 [ 76.381342][ T5864] ? __pfx_loop_process_work+0x10/0x10 [ 76.381362][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.381379][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381402][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381423][ T5864] ? trace_hrtimer_start+0x82/0x200 [ 76.381441][ T5864] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 76.381466][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.381481][ T5864] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.381496][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381517][ T5864] ? process_scheduled_works+0xa20/0x14e0 [ 76.381539][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381560][ T5864] ? lock_acquire+0x5f/0x350 [ 76.381581][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.381603][ T5864] ? process_scheduled_works+0xa20/0x14e0 [ 76.381624][ T5864] process_scheduled_works+0xa8e/0x14e0 [ 76.381655][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.381676][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.381695][ T5864] ? assign_work+0x3cf/0x5d0 [ 76.381717][ T5864] worker_thread+0xa47/0xfb0 [ 76.381742][ T5864] ? __kthread_parkme+0x71/0x1f0 [ 76.381767][ T5864] kthread+0x388/0x470 [ 76.381784][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 76.381805][ T5864] ? __pfx_kthread+0x10/0x10 [ 76.381822][ T5864] ret_from_fork+0x514/0xb70 [ 76.381841][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 76.381858][ T5864] ? __switch_to+0xc89/0x1420 [ 76.381881][ T5864] ? __pfx_kthread+0x10/0x10 [ 76.381897][ T5864] ret_from_fork_asm+0x1a/0x30 [ 76.381926][ T5864] [ 76.381933][ T5864] [ 76.381937][ T5864] The buggy address belongs to the physical page: [ 76.381956][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x25987 [ 76.381971][ T5864] flags: 0x80000000000000(node=0|zone=1) [ 76.381991][ T5864] raw: 0080000000000000 ffffea0000de7148 ffffea0000f29148 0000000000000000 [ 76.382011][ T5864] raw: 000000000000002d 0000000000000000 00000000ffffffff 0000000000000000 [ 76.382019][ T5864] page dumped because: kasan: bad access detected [ 76.382030][ T5864] page_owner tracks the page as freed [ 76.382036][ T5864] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5945, tgid 5945 (syz.0.51), ts 76340941844, free_ts 76379144210 [ 76.382066][ T5864] post_alloc_hook+0x1f9/0x250 [ 76.382084][ T5864] get_page_from_freelist+0x262a/0x26a0 [ 76.382104][ T5864] __alloc_frozen_pages_noprof+0x18d/0x380 [ 76.382123][ T5864] alloc_pages_mpol+0xce/0x280 [ 76.382142][ T5864] alloc_pages_noprof+0xd2/0x2f0 [ 76.382161][ T5864] lmLogInit+0x357/0x1a20 [ 76.382182][ T5864] lmLogOpen+0x4e3/0xf90 [ 76.382200][ T5864] jfs_mount_rw+0xf3/0x670 [ 76.382219][ T5864] jfs_fill_super+0x769/0xda0 [ 76.382235][ T5864] get_tree_bdev_flags+0x430/0x4f0 [ 76.382255][ T5864] vfs_get_tree+0x92/0x2a0 [ 76.382273][ T5864] do_new_mount+0x319/0xdc0 [ 76.382289][ T5864] __se_sys_mount+0x31d/0x420 [ 76.382304][ T5864] do_syscall_64+0x174/0x580 [ 76.382318][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.382334][ T5864] page last free pid 5734 tgid 5734 stack trace: [ 76.382343][ T5864] __free_frozen_pages+0x10e7/0x11c0 [ 76.382360][ T5864] lmLogShutdown+0x44e/0x850 [ 76.382380][ T5864] lmLogClose+0x28c/0x530 [ 76.382400][ T5864] jfs_umount+0x2da/0x3b0 [ 76.382419][ T5864] jfs_put_super+0x8c/0x190 [ 76.382435][ T5864] generic_shutdown_super+0x13d/0x2d0 [ 76.382452][ T5864] kill_block_super+0x44/0x90 [ 76.382472][ T5864] deactivate_locked_super+0xbc/0x130 [ 76.382489][ T5864] cleanup_mnt+0x3d3/0x460 [ 76.382507][ T5864] task_work_run+0x1d9/0x270 [ 76.382522][ T5864] exit_to_user_mode_loop+0x1fa/0x730 [ 76.382539][ T5864] do_syscall_64+0x353/0x580 [ 76.382553][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.382568][ T5864] [ 76.382572][ T5864] Memory state around the buggy address: [ 76.382580][ T5864] ffff888025986f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.382591][ T5864] ffff888025986f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.382601][ T5864] >ffff888025987000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.382609][ T5864] ^ [ 76.382617][ T5864] ffff888025987080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.382628][ T5864] ffff888025987100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.382635][ T5864] ================================================================== [ 76.384520][ T5864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.384538][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 76.384558][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.384567][ T5864] Workqueue: loop0 loop_workfn [ 76.384592][ T5864] Call Trace: [ 76.384599][ T5864] [ 76.384605][ T5864] vpanic+0x56c/0xa60 [ 76.384625][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.384647][ T5864] ? __pfx_vpanic+0x10/0x10 [ 76.384666][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.384690][ T5864] panic+0xc5/0xd0 [ 76.384709][ T5864] ? __pfx_panic+0x10/0x10 [ 76.384727][ T5864] ? preempt_schedule_thunk+0x16/0x40 [ 76.384752][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384768][ T5864] ? preempt_schedule_thunk+0x16/0x40 [ 76.384792][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384808][ T5864] check_panic_on_warn+0x89/0xb0 [ 76.384828][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384844][ T5864] end_report+0x73/0x170 [ 76.384864][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384879][ T5864] kasan_report+0x128/0x150 [ 76.384900][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384919][ T5864] kasan_check_range+0x264/0x2c0 [ 76.384940][ T5864] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.384957][ T5864] __asan_memcpy+0x29/0x70 [ 76.384974][ T5864] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 76.385005][ T5864] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 76.385021][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385043][ T5864] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 76.385067][ T5864] ? shmem_write_begin+0x1ce/0x320 [ 76.385088][ T5864] generic_perform_write+0x5a8/0x8b0 [ 76.385111][ T5864] ? __pfx_generic_perform_write+0x10/0x10 [ 76.385129][ T5864] ? generic_write_checks_count+0x426/0x530 [ 76.385150][ T5864] ? file_update_time_flags+0x3b9/0x4b0 [ 76.385174][ T5864] shmem_file_write_iter+0xfb/0x120 [ 76.385197][ T5864] lo_rw_aio+0xc78/0xf30 [ 76.385220][ T5864] ? kthread_associate_blkcg+0x30f/0x600 [ 76.385237][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385260][ T5864] ? __pfx_lo_rw_aio+0x10/0x10 [ 76.385280][ T5864] ? kthread_associate_blkcg+0x30f/0x600 [ 76.385301][ T5864] ? kthread_associate_blkcg+0x490/0x600 [ 76.385318][ T5864] ? rt_spin_unlock+0x160/0x200 [ 76.385339][ T5864] loop_process_work+0x638/0x11d0 [ 76.385364][ T5864] ? __pfx_loop_process_work+0x10/0x10 [ 76.385385][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.385402][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385424][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385445][ T5864] ? trace_hrtimer_start+0x82/0x200 [ 76.385463][ T5864] ? hrtimer_start_range_ns_common+0x841/0xb90 [ 76.385488][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.385506][ T5864] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.385522][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385544][ T5864] ? process_scheduled_works+0xa20/0x14e0 [ 76.385565][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385587][ T5864] ? lock_acquire+0x5f/0x350 [ 76.385607][ T5864] ? rcu_is_watching+0x15/0xb0 [ 76.385629][ T5864] ? process_scheduled_works+0xa20/0x14e0 [ 76.385649][ T5864] process_scheduled_works+0xa8e/0x14e0 [ 76.385681][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.385701][ T5864] ? do_raw_spin_lock+0x12b/0x2f0 [ 76.385720][ T5864] ? assign_work+0x3cf/0x5d0 [ 76.385743][ T5864] worker_thread+0xa47/0xfb0 [ 76.385769][ T5864] ? __kthread_parkme+0x71/0x1f0 [ 76.385795][ T5864] kthread+0x388/0x470 [ 76.385812][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 76.385833][ T5864] ? __pfx_kthread+0x10/0x10 [ 76.385850][ T5864] ret_from_fork+0x514/0xb70 [ 76.385870][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 76.385887][ T5864] ? __switch_to+0xc89/0x1420 [ 76.385914][ T5864] ? __pfx_kthread+0x10/0x10 [ 76.385931][ T5864] ret_from_fork_asm+0x1a/0x30 [ 76.385957][ T5864] [ 76.386210][ T5864] Kernel Offset: disabled