Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts.
2026/07/16 03:46:52 parsed 1 programs
2026/07/16 03:46:52 serving rpc on tcp://41059
[ 103.432836][ T5619] cgroup: Unknown subsys name 'net'
[ 103.653949][ T5619] cgroup: Unknown subsys name 'cpuset'
[ 103.699015][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 105.815567][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 111.691317][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.691344][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.865221][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.865242][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.390570][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 112.396590][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 112.397978][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 112.431731][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 112.433095][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.076826][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.078105][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.099455][ T5691] bridge_slave_0: entered allmulticast mode
[ 115.103211][ T5691] bridge_slave_0: entered promiscuous mode
[ 115.121870][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.121974][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.141142][ T5691] bridge_slave_1: entered allmulticast mode
[ 115.151018][ T5691] bridge_slave_1: entered promiscuous mode
[ 115.233655][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.236858][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.301664][ T5691] team0: Port device team_slave_0 added
[ 115.304598][ T5691] team0: Port device team_slave_1 added
[ 115.634855][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.634874][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.634900][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.686039][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.686054][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.686077][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.819524][ T5691] hsr_slave_0: entered promiscuous mode
[ 115.820759][ T5691] hsr_slave_1: entered promiscuous mode
[ 116.439364][ T5691] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.486778][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.494859][ T5691] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.524843][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.526585][ T5691] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.547256][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.563430][ T5691] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.595022][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.823827][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.867358][ T5691] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.898728][ T1517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.898980][ T1517] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.949462][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.949609][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.477953][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.545055][ T5691] veth0_vlan: entered promiscuous mode
[ 117.590480][ T5691] veth1_vlan: entered promiscuous mode
[ 117.661608][ T5691] veth0_macvtap: entered promiscuous mode
[ 117.667599][ T5691] veth1_macvtap: entered promiscuous mode
[ 117.727073][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.747441][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.771594][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.774125][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.777763][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.821509][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.644068][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.382455][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.145313][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.514925][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/16 03:47:14 executed programs: 0
[ 121.314525][ T41] bridge_slave_1: left allmulticast mode
[ 121.314664][ T41] bridge_slave_1: left promiscuous mode
[ 121.332352][ T4919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 121.332377][ T41] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.366286][ T4919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 121.390439][ T4919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 121.394276][ T4919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 121.396518][ T4919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 121.620640][ T41] bridge_slave_0: left allmulticast mode
[ 121.620676][ T41] bridge_slave_0: left promiscuous mode
[ 121.620936][ T41] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.409446][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 122.489146][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 122.513978][ T41] bond0 (unregistering): Released all slaves
[ 122.559388][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1
[ 122.991063][ T41] hsr_slave_0: left promiscuous mode
[ 123.028451][ T41] hsr_slave_1: left promiscuous mode
[ 123.029796][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 123.029872][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 123.082470][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 123.082499][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 123.164905][ T41] veth1_macvtap: left promiscuous mode
[ 123.165168][ T41] veth0_macvtap: left promiscuous mode
[ 123.165471][ T41] veth1_vlan: left promiscuous mode
[ 123.165805][ T41] veth0_vlan: left promiscuous mode
[ 123.541389][ T59] Bluetooth: hci0: command tx timeout
[ 123.989217][ T41] team0 (unregistering): Port device team_slave_1 removed
[ 124.029135][ T41] team0 (unregistering): Port device team_slave_0 removed
[ 124.233888][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2
[ 124.927729][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.927923][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 124.928088][ T5754] bridge_slave_0: entered allmulticast mode
[ 124.961296][ T5754] bridge_slave_0: entered promiscuous mode
[ 124.967387][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.967621][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.967790][ T5754] bridge_slave_1: entered allmulticast mode
[ 125.007602][ T5754] bridge_slave_1: entered promiscuous mode
[ 125.029134][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3
[ 125.100958][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 125.107155][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 125.173597][ T5754] team0: Port device team_slave_0 added
[ 125.176866][ T5754] team0: Port device team_slave_1 added
[ 125.234332][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 125.234348][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.234375][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 125.286046][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 125.286063][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.286091][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 125.584753][ T5754] hsr_slave_0: entered promiscuous mode
[ 125.586111][ T5754] hsr_slave_1: entered promiscuous mode
[ 125.618281][ T59] Bluetooth: hci0: command tx timeout
[ 126.004195][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4
[ 127.698350][ T59] Bluetooth: hci0: command tx timeout
[ 128.113092][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 128.153889][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 128.156096][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 128.194619][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 128.196238][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 128.235200][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 128.236353][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 128.287264][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 128.475917][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.502951][ T5754] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.526815][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.527039][ T1400] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.557598][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.557741][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.278488][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.373697][ T5754] veth0_vlan: entered promiscuous mode
[ 129.395579][ T5754] veth1_vlan: entered promiscuous mode
[ 129.461048][ T5754] veth0_macvtap: entered promiscuous mode
[ 129.475846][ T5754] veth1_macvtap: entered promiscuous mode
[ 129.504121][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.531827][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.552361][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.553286][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.554410][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.554785][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.781970][ T59] Bluetooth: hci0: command tx timeout
[ 130.019047][ T1422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.019069][ T1422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.082493][ T1422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.082516][ T1422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/16 03:47:23 executed programs: 2
[ 130.587717][ T5908] loop0: detected capacity change from 0 to 32768
[ 131.333729][ T5909] loop0: detected capacity change from 0 to 32768
[ 131.852820][ T5910] loop0: detected capacity change from 0 to 32768
[ 132.343250][ T5911] loop0: detected capacity change from 0 to 32768
[ 132.855054][ T5916] loop0: detected capacity change from 0 to 32768
[ 133.063367][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.063464][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.321704][ T5917] loop0: detected capacity change from 0 to 32768
[ 133.774570][ T5918] loop0: detected capacity change from 0 to 32768
[ 134.241954][ T5920] loop0: detected capacity change from 0 to 32768
[ 134.706399][ T5921] loop0: detected capacity change from 0 to 32768
[ 135.122142][ T5922] loop0: detected capacity change from 0 to 32768
2026/07/16 03:47:28 executed programs: 13
[ 135.965555][ T5924] set_capacity_and_notify: 1 callbacks suppressed
[ 135.965570][ T5924] loop0: detected capacity change from 0 to 32768
[ 136.388850][ T5925] loop0: detected capacity change from 0 to 32768
[ 136.794062][ T5926] loop0: detected capacity change from 0 to 32768
[ 137.225597][ T5927] loop0: detected capacity change from 0 to 32768
[ 137.685392][ T5928] loop0: detected capacity change from 0 to 32768
[ 138.119867][ T5929] loop0: detected capacity change from 0 to 32768
[ 138.536592][ T5930] loop0: detected capacity change from 0 to 32768
[ 138.607124][ T3321] ==================================================================
[ 138.607148][ T3321] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607148][ T3321] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607204][ T3321] Read of size 4096 at addr ffff888033a9a000 by task kworker/u8:17/3321
[ 138.607221][ T3321]
[ 138.607241][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 138.607271][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 138.607285][ T3321] Workqueue: loop0 loop_workfn
[ 138.607333][ T3321] Call Trace:
[ 138.607341][ T3321]
[ 138.607349][ T3321] dump_stack_lvl+0xe8/0x150
[ 138.607385][ T3321] print_address_description+0x55/0x1e0
[ 138.607419][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607452][ T3321] print_report+0x58/0x70
[ 138.607482][ T3321] kasan_report+0x117/0x150
[ 138.607507][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607545][ T3321] kasan_check_range+0x264/0x2c0
[ 138.607570][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607604][ T3321] __asan_memcpy+0x29/0x70
[ 138.607636][ T3321] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.607682][ T3321] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 138.607716][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.607744][ T3321] ? shmem_write_begin+0x1ce/0x320
[ 138.607768][ T3321] generic_perform_write+0x5a8/0x8b0
[ 138.607809][ T3321] ? __pfx_generic_perform_write+0x10/0x10
[ 138.607843][ T3321] ? __mark_inode_dirty+0x4e7/0x13b0
[ 138.607871][ T3321] ? preempt_count_add+0x91/0x190
[ 138.607896][ T3321] ? mnt_put_write_access_file+0xbf/0x100
[ 138.607925][ T3321] ? file_update_time_flags+0x406/0x4b0
[ 138.607953][ T3321] shmem_file_write_iter+0xfb/0x120
[ 138.607979][ T3321] lo_rw_aio+0xc78/0xf30
[ 138.608017][ T3321] ? __pfx_lo_rw_aio+0x10/0x10
[ 138.608051][ T3321] ? kthread_associate_blkcg+0x490/0x600
[ 138.608084][ T3321] ? rt_spin_unlock+0x163/0x200
[ 138.608111][ T3321] loop_process_work+0x638/0x11d0
[ 138.608162][ T3321] ? __pfx_loop_process_work+0x10/0x10
[ 138.608191][ T3321] ? look_up_lock_class+0x57/0x110
[ 138.608223][ T3321] ? register_lock_class+0x31/0x2e0
[ 138.608245][ T3321] ? __lock_acquire+0x683/0x2ce0
[ 138.608265][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.608289][ T3321] ? trace_hrtimer_start+0x82/0x200
[ 138.608323][ T3321] ? do_raw_spin_lock+0x12b/0x2f0
[ 138.608355][ T3321] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 138.608387][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.608413][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.608441][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.608468][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.608491][ T3321] process_scheduled_works+0xa8e/0x14e0
[ 138.608530][ T3321] ? __pfx_process_scheduled_works+0x10/0x10
[ 138.608557][ T3321] ? assign_work+0x3cf/0x5d0
[ 138.608584][ T3321] worker_thread+0xa47/0xfb0
[ 138.608623][ T3321] kthread+0x388/0x470
[ 138.608654][ T3321] ? __pfx_worker_thread+0x10/0x10
[ 138.608679][ T3321] ? __pfx_kthread+0x10/0x10
[ 138.608711][ T3321] ret_from_fork+0x514/0xb70
[ 138.608745][ T3321] ? __pfx_ret_from_fork+0x10/0x10
[ 138.608777][ T3321] ? __switch_to+0xc89/0x1420
[ 138.608805][ T3321] ? __pfx_kthread+0x10/0x10
[ 138.608836][ T3321] ret_from_fork_asm+0x1a/0x30
[ 138.608865][ T3321]
[ 138.608873][ T3321]
[ 138.608879][ T3321] The buggy address belongs to the physical page:
[ 138.608901][ T3321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xfce pfn:0x33a9a
[ 138.608921][ T3321] flags: 0x80000000000000(node=0|zone=1)
[ 138.608950][ T3321] raw: 0080000000000000 ffffea0000fa6388 ffffea0000f0c188 0000000000000000
[ 138.608969][ T3321] raw: 0000000000000fce 0000000000000000 00000000ffffffff 0000000000000000
[ 138.608980][ T3321] page dumped because: kasan: bad access detected
[ 138.608994][ T3321] page_owner tracks the page as freed
[ 138.609002][ T3321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5930, tgid 5930 (syz.0.34), ts 138549968810, free_ts 138605573816
[ 138.609032][ T3321] post_alloc_hook+0x1f9/0x250
[ 138.609064][ T3321] get_page_from_freelist+0x262a/0x26a0
[ 138.609087][ T3321] __alloc_frozen_pages_noprof+0x18d/0x380
[ 138.609110][ T3321] alloc_pages_mpol+0xce/0x280
[ 138.609139][ T3321] alloc_pages_noprof+0xd2/0x2f0
[ 138.609161][ T3321] lmLogInit+0x357/0x1a20
[ 138.609188][ T3321] lmLogOpen+0x4e3/0xf90
[ 138.609214][ T3321] jfs_mount_rw+0xf3/0x670
[ 138.609240][ T3321] jfs_fill_super+0x769/0xda0
[ 138.609258][ T3321] get_tree_bdev_flags+0x430/0x4f0
[ 138.609283][ T3321] vfs_get_tree+0x92/0x2a0
[ 138.609306][ T3321] do_new_mount+0x319/0xdc0
[ 138.609337][ T3321] __se_sys_mount+0x31d/0x420
[ 138.609354][ T3321] do_syscall_64+0x174/0x580
[ 138.609385][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.609405][ T3321] page last free pid 5754 tgid 5754 stack trace:
[ 138.609416][ T3321] __free_frozen_pages+0x10e7/0x11c0
[ 138.609434][ T3321] lmLogShutdown+0x44e/0x850
[ 138.609462][ T3321] lmLogClose+0x28c/0x530
[ 138.609490][ T3321] jfs_umount+0x2da/0x3b0
[ 138.609514][ T3321] jfs_put_super+0x8c/0x190
[ 138.609534][ T3321] generic_shutdown_super+0x13d/0x2d0
[ 138.609554][ T3321] kill_block_super+0x44/0x90
[ 138.609576][ T3321] deactivate_locked_super+0xbc/0x130
[ 138.609595][ T3321] cleanup_mnt+0x3d3/0x460
[ 138.609617][ T3321] task_work_run+0x1d9/0x270
[ 138.609649][ T3321] exit_to_user_mode_loop+0x1fa/0x730
[ 138.609667][ T3321] do_syscall_64+0x353/0x580
[ 138.609696][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.609716][ T3321]
[ 138.609721][ T3321] Memory state around the buggy address:
[ 138.609732][ T3321] ffff888033a99f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 138.609746][ T3321] ffff888033a99f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 138.609760][ T3321] >ffff888033a9a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 138.609771][ T3321] ^
[ 138.609782][ T3321] ffff888033a9a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 138.609796][ T3321] ffff888033a9a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 138.609807][ T3321] ==================================================================
[ 138.622861][ T3321] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 138.622916][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 138.622986][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 138.623027][ T3321] Workqueue: loop0 loop_workfn
[ 138.623138][ T3321] Call Trace:
[ 138.623159][ T3321]
[ 138.623180][ T3321] vpanic+0x56c/0xa60
[ 138.623244][ T3321] ? __pfx_vpanic+0x10/0x10
[ 138.623325][ T3321] panic+0xc5/0xd0
[ 138.623391][ T3321] ? __pfx_panic+0x10/0x10
[ 138.623451][ T3321] ? preempt_schedule_thunk+0x16/0x40
[ 138.623532][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.623618][ T3321] ? preempt_schedule_thunk+0x16/0x40
[ 138.623684][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.623768][ T3321] check_panic_on_warn+0x89/0xb0
[ 138.623853][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.623937][ T3321] end_report+0x73/0x170
[ 138.624000][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.624084][ T3321] kasan_report+0x128/0x150
[ 138.624148][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.624244][ T3321] kasan_check_range+0x264/0x2c0
[ 138.624293][ T3321] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.624377][ T3321] __asan_memcpy+0x29/0x70
[ 138.624445][ T3321] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 138.624561][ T3321] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 138.624643][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.624728][ T3321] ? shmem_write_begin+0x1ce/0x320
[ 138.624805][ T3321] generic_perform_write+0x5a8/0x8b0
[ 138.624908][ T3321] ? __pfx_generic_perform_write+0x10/0x10
[ 138.624993][ T3321] ? __mark_inode_dirty+0x4e7/0x13b0
[ 138.625073][ T3321] ? preempt_count_add+0x91/0x190
[ 138.625138][ T3321] ? mnt_put_write_access_file+0xbf/0x100
[ 138.625212][ T3321] ? file_update_time_flags+0x406/0x4b0
[ 138.625285][ T3321] shmem_file_write_iter+0xfb/0x120
[ 138.625351][ T3321] lo_rw_aio+0xc78/0xf30
[ 138.625445][ T3321] ? __pfx_lo_rw_aio+0x10/0x10
[ 138.625530][ T3321] ? kthread_associate_blkcg+0x490/0x600
[ 138.625619][ T3321] ? rt_spin_unlock+0x163/0x200
[ 138.625685][ T3321] loop_process_work+0x638/0x11d0
[ 138.625782][ T3321] ? __pfx_loop_process_work+0x10/0x10
[ 138.625861][ T3321] ? look_up_lock_class+0x57/0x110
[ 138.625938][ T3321] ? register_lock_class+0x31/0x2e0
[ 138.626000][ T3321] ? __lock_acquire+0x683/0x2ce0
[ 138.626054][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.626137][ T3321] ? trace_hrtimer_start+0x82/0x200
[ 138.626243][ T3321] ? do_raw_spin_lock+0x12b/0x2f0
[ 138.626325][ T3321] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 138.626400][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.626470][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.626535][ T3321] ? rcu_is_watching+0x15/0xb0
[ 138.626598][ T3321] ? process_scheduled_works+0xa20/0x14e0
[ 138.626665][ T3321] process_scheduled_works+0xa8e/0x14e0
[ 138.626768][ T3321] ? __pfx_process_scheduled_works+0x10/0x10
[ 138.626840][ T3321] ? assign_work+0x3cf/0x5d0
[ 138.626904][ T3321] worker_thread+0xa47/0xfb0
[ 138.627000][ T3321] kthread+0x388/0x470
[ 138.627120][ T3321] ? __pfx_worker_thread+0x10/0x10
[ 138.627190][ T3321] ? __pfx_kthread+0x10/0x10
[ 138.627263][ T3321] ret_from_fork+0x514/0xb70
[ 138.627348][ T3321] ? __pfx_ret_from_fork+0x10/0x10
[ 138.627429][ T3321] ? __switch_to+0xc89/0x1420
[ 138.627482][ T3321] ? __pfx_kthread+0x10/0x10
[ 138.627511][ T3321] ret_from_fork_asm+0x1a/0x30
[ 138.627539][ T3321]
[ 138.628153][ T3321] Kernel Offset: disabled