Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. 2026/07/12 12:34:29 parsed 1 programs 2026/07/12 12:34:29 serving rpc on tcp://45295 [ 124.811342][ T5616] cgroup: Unknown subsys name 'net' [ 125.069540][ T5616] cgroup: Unknown subsys name 'cpuset' [ 125.133490][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 128.445465][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 133.196043][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.196652][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.498931][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.525175][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.527688][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.554397][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.558572][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.848478][ T5673] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.850336][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.850512][ T5673] bridge_slave_0: entered allmulticast mode [ 139.864118][ T5673] bridge_slave_0: entered promiscuous mode [ 139.906063][ T5673] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.906294][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.906471][ T5673] bridge_slave_1: entered allmulticast mode [ 139.909546][ T5673] bridge_slave_1: entered promiscuous mode [ 140.035865][ T5673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.043889][ T5673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.159139][ T5673] team0: Port device team_slave_0 added [ 140.174518][ T5673] team0: Port device team_slave_1 added [ 140.222435][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.222452][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.222473][ T5673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.227267][ T5673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.227288][ T5673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.227308][ T5673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.605171][ T5673] hsr_slave_0: entered promiscuous mode [ 140.607066][ T5673] hsr_slave_1: entered promiscuous mode [ 141.033791][ T5673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.107300][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.109983][ T5673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.144703][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.146086][ T5673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.207197][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.225260][ T5673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.266268][ T5673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.706440][ T5673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.990555][ T5673] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.065633][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.065853][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.127503][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.127716][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.637767][ T5673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.835946][ T5673] veth0_vlan: entered promiscuous mode [ 143.899298][ T5673] veth1_vlan: entered promiscuous mode [ 144.094447][ T5673] veth0_macvtap: entered promiscuous mode [ 144.134229][ T5673] veth1_macvtap: entered promiscuous mode [ 144.188410][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.317413][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.415345][ T1404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.451911][ T1404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.456285][ T1404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.486627][ T1404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.230170][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.895953][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.373997][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.728512][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.122233][ T13] bridge_slave_1: left allmulticast mode [ 149.122471][ T13] bridge_slave_1: left promiscuous mode [ 149.161255][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.392725][ T13] bridge_slave_0: left allmulticast mode [ 149.394287][ T13] bridge_slave_0: left promiscuous mode [ 149.394595][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.512428][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.582471][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.624328][ T13] bond0 (unregistering): Released all slaves [ 150.705249][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.391312][ T13] hsr_slave_0: left promiscuous mode [ 151.459007][ T13] hsr_slave_1: left promiscuous mode [ 151.460315][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.508078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.613259][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.613311][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.059235][ T13] veth1_macvtap: left promiscuous mode [ 152.059526][ T13] veth0_macvtap: left promiscuous mode [ 152.080934][ T13] veth1_vlan: left promiscuous mode [ 152.094919][ T13] veth0_vlan: left promiscuous mode [ 153.392404][ T13] team0 (unregistering): Port device team_slave_1 removed [ 153.462004][ T13] team0 (unregistering): Port device team_slave_0 removed [ 153.825817][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 154.762467][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.762501][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.352692][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.408470][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.408490][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.404398][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 2026/07/12 12:35:10 executed programs: 0 [ 158.860546][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.991029][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.047985][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.127611][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.147231][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.296867][ T59] Bluetooth: hci0: command tx timeout [ 162.311577][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.311906][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.312131][ T5805] bridge_slave_0: entered allmulticast mode [ 162.325063][ T5805] bridge_slave_0: entered promiscuous mode [ 162.419696][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.419857][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.420013][ T5805] bridge_slave_1: entered allmulticast mode [ 162.486180][ T5805] bridge_slave_1: entered promiscuous mode [ 162.797963][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.844782][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.155517][ T5805] team0: Port device team_slave_0 added [ 163.187510][ T5805] team0: Port device team_slave_1 added [ 163.403012][ T59] Bluetooth: hci0: command tx timeout [ 163.502258][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.502273][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.502294][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.504262][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.504284][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.504304][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.787285][ T5805] hsr_slave_0: entered promiscuous mode [ 163.789703][ T5805] hsr_slave_1: entered promiscuous mode [ 165.431277][ T59] Bluetooth: hci0: command tx timeout [ 166.498375][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.547255][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.550555][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.656106][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.657949][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.740561][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.750571][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.822696][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.106287][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.177859][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.198990][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.199242][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.275490][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.275634][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.521227][ T59] Bluetooth: hci0: command tx timeout [ 168.217957][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.433921][ T5805] veth0_vlan: entered promiscuous mode [ 168.462905][ T5805] veth1_vlan: entered promiscuous mode [ 168.580512][ T5805] veth0_macvtap: entered promiscuous mode [ 168.610121][ T5805] veth1_macvtap: entered promiscuous mode [ 168.654997][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.692401][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.745398][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.747187][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.748402][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.748632][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.444109][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.444132][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.577961][ T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.577985][ T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/12 12:35:21 executed programs: 2 [ 170.243872][ T5940] loop0: detected capacity change from 0 to 32768 [ 171.450821][ T5963] loop0: detected capacity change from 0 to 32768 [ 172.025391][ T5968] loop0: detected capacity change from 0 to 32768 [ 172.564690][ T5969] loop0: detected capacity change from 0 to 32768 [ 173.049212][ T5970] loop0: detected capacity change from 0 to 32768 [ 173.575718][ T5971] loop0: detected capacity change from 0 to 32768 [ 174.030993][ T5972] loop0: detected capacity change from 0 to 32768 [ 174.707791][ T5973] loop0: detected capacity change from 0 to 32768 2026/07/12 12:35:26 executed programs: 10 [ 175.195647][ T5974] loop0: detected capacity change from 0 to 32768 [ 175.707685][ T5975] loop0: detected capacity change from 0 to 32768 [ 176.240573][ T5976] loop0: detected capacity change from 0 to 32768 [ 176.666279][ T5977] loop0: detected capacity change from 0 to 32768 [ 177.166306][ T5978] loop0: detected capacity change from 0 to 32768 [ 177.729165][ T5979] loop0: detected capacity change from 0 to 32768 [ 178.318317][ T5980] loop0: detected capacity change from 0 to 32768 [ 178.890986][ T5981] loop0: detected capacity change from 0 to 32768 [ 179.567928][ T5982] loop0: detected capacity change from 0 to 32768 [ 180.255349][ T5983] loop0: detected capacity change from 0 to 32768 2026/07/12 12:35:32 executed programs: 20 [ 181.068902][ T5984] loop0: detected capacity change from 0 to 32768 [ 181.659445][ T5985] loop0: detected capacity change from 0 to 32768 [ 182.210929][ T5986] loop0: detected capacity change from 0 to 32768 [ 182.932134][ T5987] loop0: detected capacity change from 0 to 32768 [ 183.476954][ T5988] loop0: detected capacity change from 0 to 32768 [ 183.945510][ T5989] loop0: detected capacity change from 0 to 32768 [ 184.488983][ T5990] loop0: detected capacity change from 0 to 32768 [ 184.940984][ T5991] loop0: detected capacity change from 0 to 32768 [ 185.387973][ T5992] loop0: detected capacity change from 0 to 32768 2026/07/12 12:35:37 executed programs: 29 [ 185.863413][ T5993] loop0: detected capacity change from 0 to 32768 [ 186.296622][ T5994] loop0: detected capacity change from 0 to 32768 [ 186.754520][ T5995] loop0: detected capacity change from 0 to 32768 [ 187.198936][ T5996] loop0: detected capacity change from 0 to 32768 [ 187.280504][ T3336] ================================================================== [ 187.280523][ T3336] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.280577][ T3336] Read of size 4096 at addr ffff8880264fc000 by task kworker/u8:13/3336 [ 187.280596][ T3336] [ 187.280621][ T3336] CPU: 1 UID: 0 PID: 3336 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.280651][ T3336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.280665][ T3336] Workqueue: loop0 loop_workfn [ 187.280714][ T3336] Call Trace: [ 187.280723][ T3336] [ 187.280732][ T3336] dump_stack_lvl+0xe8/0x150 [ 187.280772][ T3336] print_address_description+0x55/0x1e0 [ 187.280811][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.280845][ T3336] print_report+0x58/0x70 [ 187.280876][ T3336] kasan_report+0x117/0x150 [ 187.280902][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.280943][ T3336] kasan_check_range+0x264/0x2c0 [ 187.280973][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.281009][ T3336] __asan_memcpy+0x29/0x70 [ 187.281045][ T3336] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.281089][ T3336] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 187.281089][ T3336] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 187.281126][ T3336] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 187.281154][ T3336] ? shmem_write_begin+0x1ce/0x320 [ 187.281178][ T3336] generic_perform_write+0x5a8/0x8b0 [ 187.281219][ T3336] ? __pfx_generic_perform_write+0x10/0x10 [ 187.281261][ T3336] ? generic_write_checks_count+0x426/0x530 [ 187.281297][ T3336] ? file_update_time_flags+0x3b9/0x4b0 [ 187.281327][ T3336] shmem_file_write_iter+0xfb/0x120 [ 187.281355][ T3336] lo_rw_aio+0xc78/0xf30 [ 187.281394][ T3336] ? __pfx_lo_rw_aio+0x10/0x10 [ 187.281430][ T3336] ? kthread_associate_blkcg+0x490/0x600 [ 187.281464][ T3336] ? rt_spin_unlock+0x163/0x200 [ 187.281493][ T3336] loop_process_work+0x638/0x11d0 [ 187.281533][ T3336] ? __pfx_loop_process_work+0x10/0x10 [ 187.281565][ T3336] ? look_up_lock_class+0x57/0x110 [ 187.281599][ T3336] ? register_lock_class+0x31/0x2e0 [ 187.281623][ T3336] ? __lock_acquire+0x683/0x2ce0 [ 187.281650][ T3336] ? rcu_is_watching+0x15/0xb0 [ 187.281676][ T3336] ? trace_hrtimer_start+0x82/0x200 [ 187.281713][ T3336] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.281746][ T3336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.281780][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.281806][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.281835][ T3336] ? rcu_is_watching+0x15/0xb0 [ 187.281862][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.281888][ T3336] process_scheduled_works+0xa8e/0x14e0 [ 187.281928][ T3336] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.281958][ T3336] ? assign_work+0x3cf/0x5d0 [ 187.281985][ T3336] worker_thread+0xa47/0xfb0 [ 187.282025][ T3336] kthread+0x388/0x470 [ 187.282057][ T3336] ? __pfx_worker_thread+0x10/0x10 [ 187.282082][ T3336] ? __pfx_kthread+0x10/0x10 [ 187.282115][ T3336] ret_from_fork+0x514/0xb70 [ 187.282149][ T3336] ? __pfx_ret_from_fork+0x10/0x10 [ 187.282182][ T3336] ? __switch_to+0xc89/0x1420 [ 187.282212][ T3336] ? __pfx_kthread+0x10/0x10 [ 187.282249][ T3336] ret_from_fork_asm+0x1a/0x30 [ 187.282280][ T3336] [ 187.282288][ T3336] [ 187.282293][ T3336] The buggy address belongs to the physical page: [ 187.282317][ T3336] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880264fcb40 pfn:0x264fc [ 187.282339][ T3336] flags: 0x80000000000000(node=0|zone=1) [ 187.282369][ T3336] raw: 0080000000000000 ffffea0000dbf2c8 ffffea00009941c8 0000000000000000 [ 187.282387][ T3336] raw: ffff8880264fcb40 0000000000000000 00000000ffffffff 0000000000000000 [ 187.282398][ T3336] page dumped because: kasan: bad access detected [ 187.282413][ T3336] page_owner tracks the page as freed [ 187.282420][ T3336] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5996, tgid 5996 (syz.0.47), ts 187215064213, free_ts 187277495939 [ 187.282454][ T3336] post_alloc_hook+0x1f9/0x250 [ 187.282485][ T3336] get_page_from_freelist+0x262a/0x26a0 [ 187.282507][ T3336] __alloc_frozen_pages_noprof+0x18d/0x380 [ 187.282529][ T3336] alloc_pages_mpol+0xce/0x280 [ 187.282551][ T3336] alloc_pages_noprof+0xd2/0x2f0 [ 187.282578][ T3336] lmLogInit+0x357/0x1a20 [ 187.282606][ T3336] lmLogOpen+0x4e3/0xf90 [ 187.282632][ T3336] jfs_mount_rw+0xf3/0x670 [ 187.282658][ T3336] jfs_fill_super+0x769/0xda0 [ 187.282679][ T3336] get_tree_bdev_flags+0x430/0x4f0 [ 187.282703][ T3336] vfs_get_tree+0x92/0x2a0 [ 187.282733][ T3336] do_new_mount+0x319/0xdc0 [ 187.282765][ T3336] __se_sys_mount+0x31d/0x420 [ 187.282783][ T3336] do_syscall_64+0x174/0x580 [ 187.282813][ T3336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.282833][ T3336] page last free pid 5805 tgid 5805 stack trace: [ 187.282846][ T3336] __free_frozen_pages+0x10e7/0x11c0 [ 187.282864][ T3336] lmLogShutdown+0x44e/0x850 [ 187.282892][ T3336] lmLogClose+0x28c/0x530 [ 187.282926][ T3336] jfs_umount+0x2da/0x3b0 [ 187.282953][ T3336] jfs_put_super+0x8c/0x190 [ 187.282972][ T3336] generic_shutdown_super+0x13d/0x2d0 [ 187.282993][ T3336] kill_block_super+0x44/0x90 [ 187.283015][ T3336] deactivate_locked_super+0xbc/0x130 [ 187.283035][ T3336] cleanup_mnt+0x3d3/0x460 [ 187.283056][ T3336] task_work_run+0x1d9/0x270 [ 187.283073][ T3336] exit_to_user_mode_loop+0x1fa/0x730 [ 187.283093][ T3336] do_syscall_64+0x353/0x580 [ 187.283122][ T3336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.283149][ T3336] [ 187.283154][ T3336] Memory state around the buggy address: [ 187.283166][ T3336] ffff8880264fbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 187.283180][ T3336] ffff8880264fbf80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 187.283195][ T3336] >ffff8880264fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 187.283207][ T3336] ^ [ 187.283217][ T3336] ffff8880264fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 187.283232][ T3336] ffff8880264fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 187.283250][ T3336] ================================================================== [ 187.405924][ T3336] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.405945][ T3336] CPU: 1 UID: 0 PID: 3336 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.405968][ T3336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.405981][ T3336] Workqueue: loop0 loop_workfn [ 187.406012][ T3336] Call Trace: [ 187.406022][ T3336] [ 187.406032][ T3336] vpanic+0x56c/0xa60 [ 187.406054][ T3336] ? __pfx_vpanic+0x10/0x10 [ 187.406077][ T3336] panic+0xc5/0xd0 [ 187.406091][ T3336] ? __pfx_panic+0x10/0x10 [ 187.406107][ T3336] ? preempt_schedule_thunk+0x16/0x40 [ 187.406129][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406158][ T3336] ? preempt_schedule_thunk+0x16/0x40 [ 187.406179][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406209][ T3336] check_panic_on_warn+0x89/0xb0 [ 187.406238][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406267][ T3336] end_report+0x73/0x170 [ 187.406286][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406312][ T3336] kasan_report+0x128/0x150 [ 187.406332][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406362][ T3336] kasan_check_range+0x264/0x2c0 [ 187.406381][ T3336] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406410][ T3336] __asan_memcpy+0x29/0x70 [ 187.406435][ T3336] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 187.406473][ T3336] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 187.406505][ T3336] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 187.406529][ T3336] ? shmem_write_begin+0x1ce/0x320 [ 187.406548][ T3336] generic_perform_write+0x5a8/0x8b0 [ 187.406582][ T3336] ? __pfx_generic_perform_write+0x10/0x10 [ 187.406620][ T3336] ? generic_write_checks_count+0x426/0x530 [ 187.406649][ T3336] ? file_update_time_flags+0x3b9/0x4b0 [ 187.406676][ T3336] shmem_file_write_iter+0xfb/0x120 [ 187.406711][ T3336] lo_rw_aio+0xc78/0xf30 [ 187.406748][ T3336] ? __pfx_lo_rw_aio+0x10/0x10 [ 187.406781][ T3336] ? kthread_associate_blkcg+0x490/0x600 [ 187.406813][ T3336] ? rt_spin_unlock+0x163/0x200 [ 187.406840][ T3336] loop_process_work+0x638/0x11d0 [ 187.406885][ T3336] ? __pfx_loop_process_work+0x10/0x10 [ 187.406914][ T3336] ? look_up_lock_class+0x57/0x110 [ 187.406949][ T3336] ? register_lock_class+0x31/0x2e0 [ 187.406972][ T3336] ? __lock_acquire+0x683/0x2ce0 [ 187.406993][ T3336] ? rcu_is_watching+0x15/0xb0 [ 187.407019][ T3336] ? trace_hrtimer_start+0x82/0x200 [ 187.407055][ T3336] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.407088][ T3336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.407120][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.407145][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.407173][ T3336] ? rcu_is_watching+0x15/0xb0 [ 187.407199][ T3336] ? process_scheduled_works+0xa20/0x14e0 [ 187.407225][ T3336] process_scheduled_works+0xa8e/0x14e0 [ 187.407265][ T3336] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.407299][ T3336] ? assign_work+0x3cf/0x5d0 [ 187.407326][ T3336] worker_thread+0xa47/0xfb0 [ 187.407366][ T3336] kthread+0x388/0x470 [ 187.407396][ T3336] ? __pfx_worker_thread+0x10/0x10 [ 187.407421][ T3336] ? __pfx_kthread+0x10/0x10 [ 187.407457][ T3336] ret_from_fork+0x514/0xb70 [ 187.407491][ T3336] ? __pfx_ret_from_fork+0x10/0x10 [ 187.407523][ T3336] ? __switch_to+0xc89/0x1420 [ 187.407552][ T3336] ? __pfx_kthread+0x10/0x10 [ 187.407581][ T3336] ret_from_fork_asm+0x1a/0x30 [ 187.407610][ T3336] [ 187.407800][ T3336] Kernel Offset: disabled