Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. 2026/07/12 16:27:59 parsed 1 programs 2026/07/12 16:27:59 serving rpc on tcp://41675 [ 174.262934][ T5629] cgroup: Unknown subsys name 'net' [ 174.504128][ T5629] cgroup: Unknown subsys name 'cpuset' [ 174.558202][ T5629] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 176.592307][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 181.040731][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.069812][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.071446][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.072650][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.073633][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.482362][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.483421][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.483544][ T5691] bridge_slave_0: entered allmulticast mode [ 184.485496][ T5691] bridge_slave_0: entered promiscuous mode [ 184.506081][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.506175][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.506313][ T5691] bridge_slave_1: entered allmulticast mode [ 184.512668][ T5691] bridge_slave_1: entered promiscuous mode [ 184.578412][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.581604][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.633027][ T5691] team0: Port device team_slave_0 added [ 184.635649][ T5691] team0: Port device team_slave_1 added [ 184.674336][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.674347][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.674366][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.676939][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.676950][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.676969][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.821008][ T5691] hsr_slave_0: entered promiscuous mode [ 184.822173][ T5691] hsr_slave_1: entered promiscuous mode [ 185.293798][ T5691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.332212][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.334806][ T5691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.373940][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.590244][ T5691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.611232][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.614874][ T5691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.642268][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.830996][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.874615][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.911869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.912060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.946211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.947986][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.420235][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.495753][ T5691] veth0_vlan: entered promiscuous mode [ 186.513276][ T5691] veth1_vlan: entered promiscuous mode [ 186.592951][ T5691] veth0_macvtap: entered promiscuous mode [ 186.609785][ T5691] veth1_macvtap: entered promiscuous mode [ 186.648692][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.670137][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.701189][ T1505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.704028][ T1505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.705256][ T1505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.736542][ T1505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.453643][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.115926][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.701287][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.764009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.764039][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.024105][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.024125][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.336042][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.050084][ T36] bridge_slave_1: left allmulticast mode [ 190.050201][ T36] bridge_slave_1: left promiscuous mode [ 190.073479][ T36] bridge0: port 2(bridge_slave_1) entered disabled state 2026/07/12 16:28:18 executed programs: 0 [ 190.272502][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.287369][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.302982][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.317983][ T36] bridge_slave_0: left allmulticast mode [ 190.318019][ T36] bridge_slave_0: left promiscuous mode [ 190.318018][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.318721][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.320854][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.158467][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.238430][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.260189][ T36] bond0 (unregistering): Released all slaves [ 191.323446][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 191.777667][ T36] hsr_slave_0: left promiscuous mode [ 191.817654][ T36] hsr_slave_1: left promiscuous mode [ 191.818945][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.820877][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.873972][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.874001][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.969772][ T36] veth1_macvtap: left promiscuous mode [ 191.970075][ T36] veth0_macvtap: left promiscuous mode [ 191.970374][ T36] veth1_vlan: left promiscuous mode [ 191.971881][ T36] veth0_vlan: left promiscuous mode [ 192.389893][ T59] Bluetooth: hci0: command tx timeout [ 192.708417][ T36] team0 (unregistering): Port device team_slave_1 removed [ 192.768296][ T36] team0 (unregistering): Port device team_slave_0 removed [ 192.972233][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.702962][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.703173][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.703345][ T5754] bridge_slave_0: entered allmulticast mode [ 193.706237][ T5754] bridge_slave_0: entered promiscuous mode [ 193.748719][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 193.749358][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.749484][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.749642][ T5754] bridge_slave_1: entered allmulticast mode [ 193.754489][ T5754] bridge_slave_1: entered promiscuous mode [ 193.837056][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.858668][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.916181][ T5754] team0: Port device team_slave_0 added [ 193.924690][ T5754] team0: Port device team_slave_1 added [ 194.099475][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.099494][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.099525][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.104430][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.104444][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.104466][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.304760][ T5754] hsr_slave_0: entered promiscuous mode [ 194.306439][ T5754] hsr_slave_1: entered promiscuous mode [ 194.328715][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328811][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.467576][ T59] Bluetooth: hci0: command tx timeout [ 194.827767][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 196.547615][ T59] Bluetooth: hci0: command tx timeout [ 197.292945][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.341111][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.343914][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.388581][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.394228][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.429350][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.431001][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.473997][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.651828][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.734494][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.764387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.782133][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.825731][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.825915][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.542123][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.629096][ T59] Bluetooth: hci0: command tx timeout [ 198.716407][ T5754] veth0_vlan: entered promiscuous mode [ 198.747713][ T5754] veth1_vlan: entered promiscuous mode [ 198.805747][ T5754] veth0_macvtap: entered promiscuous mode [ 198.832913][ T5754] veth1_macvtap: entered promiscuous mode [ 198.864022][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.894284][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.922058][ T1545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.923730][ T1545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.924613][ T1545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.924856][ T1545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.379727][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.379747][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.452933][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.452956][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/12 16:28:28 executed programs: 2 [ 199.901424][ T5924] loop0: detected capacity change from 0 to 32768 [ 200.591837][ T5925] loop0: detected capacity change from 0 to 32768 [ 201.054349][ T5926] loop0: detected capacity change from 0 to 32768 [ 201.525298][ T5927] loop0: detected capacity change from 0 to 32768 [ 201.985427][ T5928] loop0: detected capacity change from 0 to 32768 [ 202.494908][ T5929] loop0: detected capacity change from 0 to 32768 [ 202.923465][ T5930] loop0: detected capacity change from 0 to 32768 [ 203.342059][ T5931] loop0: detected capacity change from 0 to 32768 [ 203.744026][ T5932] loop0: detected capacity change from 0 to 32768 [ 204.191442][ T5933] loop0: detected capacity change from 0 to 32768 2026/07/12 16:28:33 executed programs: 13 [ 205.095651][ T5935] set_capacity_and_notify: 1 callbacks suppressed [ 205.095665][ T5935] loop0: detected capacity change from 0 to 32768 [ 205.546928][ T5936] loop0: detected capacity change from 0 to 32768 [ 205.940146][ T5937] loop0: detected capacity change from 0 to 32768 [ 206.380407][ T5938] loop0: detected capacity change from 0 to 32768 [ 206.795500][ T5939] loop0: detected capacity change from 0 to 32768 [ 207.188104][ T5940] loop0: detected capacity change from 0 to 32768 [ 207.622736][ T5941] loop0: detected capacity change from 0 to 32768 [ 208.026124][ T5942] loop0: detected capacity change from 0 to 32768 [ 208.424701][ T5943] loop0: detected capacity change from 0 to 32768 [ 208.851128][ T5944] loop0: detected capacity change from 0 to 32768 2026/07/12 16:28:38 executed programs: 25 [ 210.241370][ T5947] set_capacity_and_notify: 2 callbacks suppressed [ 210.241384][ T5947] loop0: detected capacity change from 0 to 32768 [ 210.342835][ T144] ================================================================== [ 210.342853][ T144] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic[ 210.342853][ T144] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.342907][ T144] Read of size 4096 at addr ffff888034053000 by task kworker/u8:5/144 [ 210.342926][ T144] [ 210.342951][ T144] CPU: 1 UID: 0 PID: 144 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.342980][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.342994][ T144] Workqueue: loop0 loop_workfn [ 210.343044][ T144] Call Trace: [ 210.343054][ T144] [ 210.343063][ T144] dump_stack_lvl+0xe8/0x150 [ 210.343099][ T144] print_address_description+0x55/0x1e0 [ 210.343133][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.343168][ T144] print_report+0x58/0x70 [ 210.343199][ T144] kasan_report+0x117/0x150 [ 210.343225][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.343272][ T144] kasan_check_range+0x264/0x2c0 [ 210.343296][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.343333][ T144] __asan_memcpy+0x29/0x70 [ 210.343375][ T144] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.343421][ T144] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 210.343460][ T144] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 210.343489][ T144] ? shmem_write_begin+0x1ce/0x320 [ 210.343512][ T144] generic_perform_write+0x5a8/0x8b0 [ 210.343557][ T144] ? __pfx_generic_perform_write+0x10/0x10 [ 210.343590][ T144] ? generic_write_checks_count+0x426/0x530 [ 210.343627][ T144] ? file_update_time_flags+0x3b9/0x4b0 [ 210.343655][ T144] shmem_file_write_iter+0xfb/0x120 [ 210.343682][ T144] lo_rw_aio+0xc78/0xf30 [ 210.343720][ T144] ? __pfx_lo_rw_aio+0x10/0x10 [ 210.343757][ T144] ? kthread_associate_blkcg+0x490/0x600 [ 210.343790][ T144] ? rt_spin_unlock+0x163/0x200 [ 210.343817][ T144] loop_process_work+0x638/0x11d0 [ 210.343857][ T144] ? __pfx_loop_process_work+0x10/0x10 [ 210.343889][ T144] ? look_up_lock_class+0x57/0x110 [ 210.343921][ T144] ? register_lock_class+0x31/0x2e0 [ 210.343945][ T144] ? __lock_acquire+0x683/0x2ce0 [ 210.343966][ T144] ? rcu_is_watching+0x15/0xb0 [ 210.343991][ T144] ? trace_hrtimer_start+0x82/0x200 [ 210.344026][ T144] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.344058][ T144] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.344090][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.344116][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.344144][ T144] ? rcu_is_watching+0x15/0xb0 [ 210.344171][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.344195][ T144] process_scheduled_works+0xa8e/0x14e0 [ 210.344235][ T144] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.344265][ T144] ? assign_work+0x3cf/0x5d0 [ 210.344291][ T144] worker_thread+0xa47/0xfb0 [ 210.344332][ T144] kthread+0x388/0x470 [ 210.344372][ T144] ? __pfx_worker_thread+0x10/0x10 [ 210.344396][ T144] ? __pfx_kthread+0x10/0x10 [ 210.344428][ T144] ret_from_fork+0x514/0xb70 [ 210.344462][ T144] ? __pfx_ret_from_fork+0x10/0x10 [ 210.344495][ T144] ? __switch_to+0xc89/0x1420 [ 210.344524][ T144] ? __pfx_kthread+0x10/0x10 [ 210.344557][ T144] ret_from_fork_asm+0x1a/0x30 [ 210.344587][ T144] [ 210.344596][ T144] [ 210.344601][ T144] The buggy address belongs to the physical page: [ 210.344624][ T144] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf86 pfn:0x34053 [ 210.344644][ T144] flags: 0x80000000000000(node=0|zone=1) [ 210.344675][ T144] raw: 0080000000000000 ffffea0000dcbc08 ffffea0000c67a08 0000000000000000 [ 210.344693][ T144] raw: 0000000000000f86 0000000000000000 00000000ffffffff 0000000000000000 [ 210.344704][ T144] page dumped because: kasan: bad access detected [ 210.344718][ T144] page_owner tracks the page as freed [ 210.344726][ T144] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5947, tgid 5947 (syz.0.40), ts 210268082555, free_ts 210341253321 [ 210.344759][ T144] post_alloc_hook+0x1f9/0x250 [ 210.344792][ T144] get_page_from_freelist+0x262a/0x26a0 [ 210.344815][ T144] __alloc_frozen_pages_noprof+0x18d/0x380 [ 210.344837][ T144] alloc_pages_mpol+0xce/0x280 [ 210.344859][ T144] alloc_pages_noprof+0xd2/0x2f0 [ 210.344883][ T144] lmLogInit+0x357/0x1a20 [ 210.344910][ T144] lmLogOpen+0x4e3/0xf90 [ 210.344936][ T144] jfs_mount_rw+0xf3/0x670 [ 210.344962][ T144] jfs_fill_super+0x769/0xda0 [ 210.344982][ T144] get_tree_bdev_flags+0x430/0x4f0 [ 210.345006][ T144] vfs_get_tree+0x92/0x2a0 [ 210.345029][ T144] do_new_mount+0x319/0xdc0 [ 210.345060][ T144] __se_sys_mount+0x31d/0x420 [ 210.345078][ T144] do_syscall_64+0x174/0x580 [ 210.345108][ T144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.345129][ T144] page last free pid 5754 tgid 5754 stack trace: [ 210.345141][ T144] __free_frozen_pages+0x10e7/0x11c0 [ 210.345160][ T144] lmLogShutdown+0x44e/0x850 [ 210.345188][ T144] lmLogClose+0x28c/0x530 [ 210.345215][ T144] jfs_umount+0x2da/0x3b0 [ 210.345242][ T144] jfs_put_super+0x8c/0x190 [ 210.345262][ T144] generic_shutdown_super+0x13d/0x2d0 [ 210.345281][ T144] kill_block_super+0x44/0x90 [ 210.345306][ T144] deactivate_locked_super+0xbc/0x130 [ 210.345325][ T144] cleanup_mnt+0x3d3/0x460 [ 210.345347][ T144] task_work_run+0x1d9/0x270 [ 210.345372][ T144] exit_to_user_mode_loop+0x1fa/0x730 [ 210.345391][ T144] do_syscall_64+0x353/0x580 [ 210.345420][ T144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.345452][ T144] [ 210.345458][ T144] Memory state around the buggy address: [ 210.345470][ T144] ffff888034052f00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 210.345485][ T144] ffff888034052f80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 210.345500][ T144] >ffff888034053000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.345511][ T144] ^ [ 210.345522][ T144] ffff888034053080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.345537][ T144] ffff888034053100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 210.345548][ T144] ================================================================== [ 210.357801][ T144] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.357857][ T144] CPU: 1 UID: 0 PID: 144 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.357933][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.357966][ T144] Workqueue: loop0 loop_workfn [ 210.358059][ T144] Call Trace: [ 210.358087][ T144] [ 210.358108][ T144] vpanic+0x56c/0xa60 [ 210.358169][ T144] ? rcu_is_watching+0x15/0xb0 [ 210.358240][ T144] ? __pfx_vpanic+0x10/0x10 [ 210.358305][ T144] panic+0xc5/0xd0 [ 210.358366][ T144] ? __pfx_panic+0x10/0x10 [ 210.358422][ T144] ? preempt_schedule_thunk+0x16/0x40 [ 210.358495][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.358562][ T144] ? preempt_schedule_thunk+0x16/0x40 [ 210.358640][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.358745][ T144] check_panic_on_warn+0x89/0xb0 [ 210.358838][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.358917][ T144] end_report+0x73/0x170 [ 210.358980][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.359064][ T144] kasan_report+0x128/0x150 [ 210.359133][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.359228][ T144] kasan_check_range+0x264/0x2c0 [ 210.359289][ T144] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.359391][ T144] __asan_memcpy+0x29/0x70 [ 210.359473][ T144] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 210.359590][ T144] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 210.359687][ T144] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 210.359761][ T144] ? shmem_write_begin+0x1ce/0x320 [ 210.359823][ T144] generic_perform_write+0x5a8/0x8b0 [ 210.359934][ T144] ? __pfx_generic_perform_write+0x10/0x10 [ 210.360053][ T144] ? generic_write_checks_count+0x426/0x530 [ 210.360153][ T144] ? file_update_time_flags+0x3b9/0x4b0 [ 210.360228][ T144] shmem_file_write_iter+0xfb/0x120 [ 210.360304][ T144] lo_rw_aio+0xc78/0xf30 [ 210.360411][ T144] ? __pfx_lo_rw_aio+0x10/0x10 [ 210.360499][ T144] ? kthread_associate_blkcg+0x490/0x600 [ 210.360584][ T144] ? rt_spin_unlock+0x163/0x200 [ 210.360660][ T144] loop_process_work+0x638/0x11d0 [ 210.360764][ T144] ? __pfx_loop_process_work+0x10/0x10 [ 210.360839][ T144] ? look_up_lock_class+0x57/0x110 [ 210.360910][ T144] ? register_lock_class+0x31/0x2e0 [ 210.360974][ T144] ? __lock_acquire+0x683/0x2ce0 [ 210.361027][ T144] ? rcu_is_watching+0x15/0xb0 [ 210.361090][ T144] ? trace_hrtimer_start+0x82/0x200 [ 210.361190][ T144] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.361273][ T144] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.361372][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.361462][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.361533][ T144] ? rcu_is_watching+0x15/0xb0 [ 210.361604][ T144] ? process_scheduled_works+0xa20/0x14e0 [ 210.361670][ T144] process_scheduled_works+0xa8e/0x14e0 [ 210.361778][ T144] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.361853][ T144] ? assign_work+0x3cf/0x5d0 [ 210.361918][ T144] worker_thread+0xa47/0xfb0 [ 210.362026][ T144] kthread+0x388/0x470 [ 210.362110][ T144] ? __pfx_worker_thread+0x10/0x10 [ 210.362173][ T144] ? __pfx_kthread+0x10/0x10 [ 210.362253][ T144] ret_from_fork+0x514/0xb70 [ 210.362344][ T144] ? __pfx_ret_from_fork+0x10/0x10 [ 210.362428][ T144] ? __switch_to+0xc89/0x1420 [ 210.362504][ T144] ? __pfx_kthread+0x10/0x10 [ 210.362587][ T144] ret_from_fork_asm+0x1a/0x30 [ 210.362666][ T144] [ 210.363286][ T144] Kernel Offset: disabled