[ 91.975734][ T11] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts.
2026/07/10 12:16:43 parsed 1 programs
2026/07/10 12:16:43 serving rpc on tcp://38767
[ 100.774937][ T5611] cgroup: Unknown subsys name 'net'
[ 101.016331][ T5611] cgroup: Unknown subsys name 'cpuset'
[ 101.069972][ T5611] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 103.081828][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 108.289901][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 108.292119][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 108.292899][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.294216][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.295263][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.546961][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.548523][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.548672][ T5656] bridge_slave_0: entered allmulticast mode
[ 109.555769][ T5656] bridge_slave_0: entered promiscuous mode
[ 109.581441][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.581624][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.581743][ T5656] bridge_slave_1: entered allmulticast mode
[ 109.584290][ T5656] bridge_slave_1: entered promiscuous mode
[ 109.644627][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.647654][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.692294][ T5656] team0: Port device team_slave_0 added
[ 109.694902][ T5656] team0: Port device team_slave_1 added
[ 109.747479][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.747493][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.747512][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.753888][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.753938][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 109.753999][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.968902][ T5656] hsr_slave_0: entered promiscuous mode
[ 109.974195][ T5656] hsr_slave_1: entered promiscuous mode
[ 110.239876][ T5656] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.299101][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 110.308979][ T5656] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.344354][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 110.345478][ T5656] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.388070][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 110.630408][ T5656] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.673855][ T5656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 110.814316][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.861589][ T5656] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.888239][ T3199] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.888406][ T3199] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.925399][ T3199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.925699][ T3199] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.408532][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.494136][ T5656] veth0_vlan: entered promiscuous mode
[ 111.513720][ T5656] veth1_vlan: entered promiscuous mode
[ 111.565196][ T5656] veth0_macvtap: entered promiscuous mode
[ 111.595616][ T5656] veth1_macvtap: entered promiscuous mode
[ 111.640328][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.683156][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.708038][ T1428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.724727][ T1428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.727378][ T1428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.728018][ T1428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.795623][ T1230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.765804][ T1230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.777729][ T1230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.105044][ T1230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.760356][ T1230] bridge_slave_1: left allmulticast mode
[ 115.760564][ T1230] bridge_slave_1: left promiscuous mode
[ 115.769016][ T1230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.963781][ T1230] bridge_slave_0: left allmulticast mode
[ 115.963819][ T1230] bridge_slave_0: left promiscuous mode
[ 115.964091][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.760020][ T1230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 116.840300][ T1230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 116.864874][ T1230] bond0 (unregistering): Released all slaves
[ 116.915466][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1
[ 117.114107][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.114142][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.319854][ T1230] hsr_slave_0: left promiscuous mode
[ 117.359440][ T1230] hsr_slave_1: left promiscuous mode
[ 117.360738][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 117.363600][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 117.420676][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 117.420704][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 117.521289][ T1230] veth1_macvtap: left promiscuous mode
[ 117.521552][ T1230] veth0_macvtap: left promiscuous mode
[ 117.521853][ T1230] veth1_vlan: left promiscuous mode
[ 117.522176][ T1230] veth0_vlan: left promiscuous mode
[ 118.250145][ T1230] team0 (unregistering): Port device team_slave_1 removed
[ 118.309965][ T1230] team0 (unregistering): Port device team_slave_0 removed
[ 118.526308][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2
[ 118.607078][ T3199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.607100][ T3199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.557299][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3
2026/07/10 12:17:07 executed programs: 0
[ 120.800607][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 120.821068][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 120.821980][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 120.826278][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 120.827541][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 121.231556][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4
[ 122.038297][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.038448][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.038565][ T5796] bridge_slave_0: entered allmulticast mode
[ 122.048045][ T5796] bridge_slave_0: entered promiscuous mode
[ 122.080096][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.080314][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.080471][ T5796] bridge_slave_1: entered allmulticast mode
[ 122.083247][ T5796] bridge_slave_1: entered promiscuous mode
[ 122.170555][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 122.173793][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 122.227378][ T5796] team0: Port device team_slave_0 added
[ 122.235849][ T5796] team0: Port device team_slave_1 added
[ 122.282413][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.282427][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.282447][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.284083][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 122.284094][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.284112][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 122.428056][ T5796] hsr_slave_0: entered promiscuous mode
[ 122.429081][ T5796] hsr_slave_1: entered promiscuous mode
[ 122.931754][ T4912] Bluetooth: hci0: command tx timeout
[ 125.009915][ T4912] Bluetooth: hci0: command tx timeout
[ 125.231328][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 125.270993][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 125.272703][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 125.316475][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 125.319150][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 125.386531][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 125.388139][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 125.437433][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 125.592124][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.651714][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.667657][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.667793][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.715860][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.716037][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.695828][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 126.894228][ T5796] veth0_vlan: entered promiscuous mode
[ 126.915000][ T5796] veth1_vlan: entered promiscuous mode
[ 127.012685][ T5796] veth0_macvtap: entered promiscuous mode
[ 127.059087][ T5796] veth1_macvtap: entered promiscuous mode
[ 127.088073][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.089316][ T4912] Bluetooth: hci0: command tx timeout
[ 127.122742][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.167478][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.180691][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.182048][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.182326][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.655562][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.655583][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.763966][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.763987][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/10 12:17:14 executed programs: 2
[ 128.393185][ T5947] loop0: detected capacity change from 0 to 32768
[ 129.052206][ T5955] loop0: detected capacity change from 0 to 32768
[ 129.169317][ T4912] Bluetooth: hci0: command tx timeout
[ 129.544897][ T5956] loop0: detected capacity change from 0 to 32768
[ 130.032686][ T5957] loop0: detected capacity change from 0 to 32768
[ 130.452671][ T5958] loop0: detected capacity change from 0 to 32768
[ 130.960807][ T5961] loop0: detected capacity change from 0 to 32768
[ 131.398286][ T5963] loop0: detected capacity change from 0 to 32768
[ 131.852013][ T5965] loop0: detected capacity change from 0 to 32768
[ 132.248027][ T5966] loop0: detected capacity change from 0 to 32768
[ 132.706309][ T5967] loop0: detected capacity change from 0 to 32768
[ 132.952795][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.952895][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
2026/07/10 12:17:20 executed programs: 13
[ 133.626791][ T5970] set_capacity_and_notify: 1 callbacks suppressed
[ 133.626806][ T5970] loop0: detected capacity change from 0 to 32768
[ 134.057297][ T5972] loop0: detected capacity change from 0 to 32768
[ 134.479009][ T5973] loop0: detected capacity change from 0 to 32768
[ 134.893591][ T5974] loop0: detected capacity change from 0 to 32768
[ 135.354686][ T5975] loop0: detected capacity change from 0 to 32768
[ 135.786436][ T5976] loop0: detected capacity change from 0 to 32768
[ 136.202812][ T5977] loop0: detected capacity change from 0 to 32768
[ 136.618627][ T5978] loop0: detected capacity change from 0 to 32768
[ 137.056424][ T5979] loop0: detected capacity change from 0 to 32768
[ 137.462146][ T5980] loop0: detected capacity change from 0 to 32768
2026/07/10 12:17:25 executed programs: 25
[ 138.732828][ T5983] set_capacity_and_notify: 2 callbacks suppressed
[ 138.732847][ T5983] loop0: detected capacity change from 0 to 32768
[ 139.155417][ T5984] loop0: detected capacity change from 0 to 32768
[ 139.574578][ T5985] loop0: detected capacity change from 0 to 32768
[ 139.959554][ T5986] loop0: detected capacity change from 0 to 32768
[ 140.403074][ T5987] loop0: detected capacity change from 0 to 32768
[ 140.495665][ T5792] ==================================================================
[ 140.495682][ T5792] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.495743][ T5792] Read of size 4096 at addr ffff88802567b000 by task kworker/u8:18/5792
[ 140.495764][ T5792]
[ 140.495791][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.495824][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 140.495840][ T5792] Workqueue: loop0 loop_workfn
[ 140.495894][ T5792] Call Trace:
[ 140.495903][ T5792]
[ 140.495913][ T5792] dump_stack_lvl+0xe8/0x150
[ 140.495950][ T5792] print_address_description+0x55/0x1e0
[ 140.496004][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.496042][ T5792] print_report+0x58/0x70
[ 140.496109][ T5792] kasan_report+0x117/0x150
[ 140.496139][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.496182][ T5792] kasan_check_range+0x264/0x2c0
[ 140.496208][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.496248][ T5792] __asan_memcpy+0x29/0x70
[ 140.496296][ T5792] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.496348][ T5792] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 140.496388][ T5792] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 140.496417][ T5792] ? shmem_write_begin+0x1ce/0x320
[ 140.496443][ T5792] generic_perform_write+0x5a8/0x8b0
[ 140.496486][ T5792] ? __pfx_generic_perform_write+0x10/0x10
[ 140.496523][ T5792] ? generic_write_checks_count+0x426/0x530
[ 140.496562][ T5792] ? file_update_time_flags+0x3b9/0x4b0
[ 140.496593][ T5792] shmem_file_write_iter+0xfb/0x120
[ 140.496642][ T5792] lo_rw_aio+0xc78/0xf30
[ 140.496683][ T5792] ? __pfx_lo_rw_aio+0x10/0x10
[ 140.496722][ T5792] ? kthread_associate_blkcg+0x490/0x600
[ 140.496760][ T5792] ? rt_spin_unlock+0x163/0x200
[ 140.496791][ T5792] loop_process_work+0x638/0x11d0
[ 140.496833][ T5792] ? do_raw_spin_unlock+0xf5/0x210
[ 140.496880][ T5792] ? __pfx_loop_process_work+0x10/0x10
[ 140.496914][ T5792] ? look_up_lock_class+0x57/0x110
[ 140.496951][ T5792] ? register_lock_class+0x31/0x2e0
[ 140.496977][ T5792] ? __lock_acquire+0x683/0x2ce0
[ 140.497009][ T5792] ? do_raw_spin_lock+0x12b/0x2f0
[ 140.497046][ T5792] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 140.497092][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.497121][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.497152][ T5792] ? rcu_is_watching+0x15/0xb0
[ 140.497181][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.497209][ T5792] process_scheduled_works+0xa8e/0x14e0
[ 140.497253][ T5792] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.497285][ T5792] ? assign_work+0x3cf/0x5d0
[ 140.497315][ T5792] worker_thread+0xa47/0xfb0
[ 140.497352][ T5792] ? __kthread_parkme+0x71/0x1f0
[ 140.497387][ T5792] kthread+0x388/0x470
[ 140.497422][ T5792] ? __pfx_worker_thread+0x10/0x10
[ 140.497448][ T5792] ? __pfx_kthread+0x10/0x10
[ 140.497485][ T5792] ret_from_fork+0x514/0xb70
[ 140.497523][ T5792] ? __pfx_ret_from_fork+0x10/0x10
[ 140.497560][ T5792] ? __switch_to+0xc89/0x1420
[ 140.497593][ T5792] ? __pfx_kthread+0x10/0x10
[ 140.497630][ T5792] ret_from_fork_asm+0x1a/0x30
[ 140.497664][ T5792]
[ 140.497673][ T5792]
[ 140.497679][ T5792] The buggy address belongs to the physical page:
[ 140.497704][ T5792] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x28 pfn:0x2567b
[ 140.497727][ T5792] flags: 0x80000000000000(node=0|zone=1)
[ 140.497760][ T5792] raw: 0080000000000000 ffffea0000fcf788 ffffea0000ab6ac8 0000000000000000
[ 140.497780][ T5792] raw: 0000000000000028 0000000000000000 00000000ffffffff 0000000000000000
[ 140.497791][ T5792] page dumped because: kasan: bad access detected
[ 140.497807][ T5792] page_owner tracks the page as freed
[ 140.497815][ T5792] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5987, tgid 5987 (syz.0.44), ts 140428696059, free_ts 140494146486
[ 140.497851][ T5792] post_alloc_hook+0x1f9/0x250
[ 140.497886][ T5792] get_page_from_freelist+0x262a/0x26a0
[ 140.497910][ T5792] __alloc_frozen_pages_noprof+0x18d/0x380
[ 140.497934][ T5792] alloc_pages_mpol+0xce/0x280
[ 140.497959][ T5792] alloc_pages_noprof+0xd2/0x2f0
[ 140.497983][ T5792] lmLogInit+0x357/0x1a20
[ 140.498013][ T5792] lmLogOpen+0x4e3/0xf90
[ 140.498042][ T5792] jfs_mount_rw+0xf3/0x670
[ 140.498081][ T5792] jfs_fill_super+0x769/0xda0
[ 140.498103][ T5792] get_tree_bdev_flags+0x430/0x4f0
[ 140.498128][ T5792] vfs_get_tree+0x92/0x2a0
[ 140.498153][ T5792] do_new_mount+0x319/0xdc0
[ 140.498187][ T5792] __se_sys_mount+0x31d/0x420
[ 140.498206][ T5792] do_syscall_64+0x174/0x580
[ 140.498239][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.498268][ T5792] page last free pid 5796 tgid 5796 stack trace:
[ 140.498282][ T5792] __free_frozen_pages+0x10e7/0x11c0
[ 140.498302][ T5792] lmLogShutdown+0x44e/0x850
[ 140.498333][ T5792] lmLogClose+0x28c/0x530
[ 140.498362][ T5792] jfs_umount+0x2da/0x3b0
[ 140.498391][ T5792] jfs_put_super+0x8c/0x190
[ 140.498413][ T5792] generic_shutdown_super+0x13d/0x2d0
[ 140.498448][ T5792] kill_block_super+0x44/0x90
[ 140.498474][ T5792] deactivate_locked_super+0xbc/0x130
[ 140.498495][ T5792] cleanup_mnt+0x3d3/0x460
[ 140.498519][ T5792] task_work_run+0x1d9/0x270
[ 140.498553][ T5792] exit_to_user_mode_loop+0x1fa/0x730
[ 140.498573][ T5792] do_syscall_64+0x353/0x580
[ 140.498606][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.498628][ T5792]
[ 140.498633][ T5792] Memory state around the buggy address:
[ 140.498646][ T5792] ffff88802567af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 140.498661][ T5792] ffff88802567af80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 140.498676][ T5792] >ffff88802567b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.498687][ T5792] ^
[ 140.498698][ T5792] ffff88802567b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.498714][ T5792] ffff88802567b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.498725][ T5792] ==================================================================
[ 140.505993][ T5792] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.506070][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.506143][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 140.506190][ T5792] Workqueue: loop0 loop_workfn
[ 140.506294][ T5792] Call Trace:
[ 140.506318][ T5792]
[ 140.506343][ T5792] vpanic+0x56c/0xa60
[ 140.506445][ T5792] ? rcu_is_watching+0x15/0xb0
[ 140.506522][ T5792] ? __pfx_vpanic+0x10/0x10
[ 140.506604][ T5792] panic+0xc5/0xd0
[ 140.506660][ T5792] ? __pfx_panic+0x10/0x10
[ 140.506719][ T5792] ? preempt_schedule_thunk+0x16/0x40
[ 140.506806][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.506898][ T5792] ? preempt_schedule_thunk+0x16/0x40
[ 140.506976][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507066][ T5792] check_panic_on_warn+0x89/0xb0
[ 140.507158][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507260][ T5792] end_report+0x73/0x170
[ 140.507347][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507421][ T5792] kasan_report+0x128/0x150
[ 140.507447][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507490][ T5792] kasan_check_range+0x264/0x2c0
[ 140.507516][ T5792] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507554][ T5792] __asan_memcpy+0x29/0x70
[ 140.507590][ T5792] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.507640][ T5792] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 140.507678][ T5792] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 140.507708][ T5792] ? shmem_write_begin+0x1ce/0x320
[ 140.507734][ T5792] generic_perform_write+0x5a8/0x8b0
[ 140.507789][ T5792] ? __pfx_generic_perform_write+0x10/0x10
[ 140.507826][ T5792] ? generic_write_checks_count+0x426/0x530
[ 140.507866][ T5792] ? file_update_time_flags+0x3b9/0x4b0
[ 140.507897][ T5792] shmem_file_write_iter+0xfb/0x120
[ 140.507926][ T5792] lo_rw_aio+0xc78/0xf30
[ 140.507966][ T5792] ? __pfx_lo_rw_aio+0x10/0x10
[ 140.508003][ T5792] ? kthread_associate_blkcg+0x490/0x600
[ 140.508038][ T5792] ? rt_spin_unlock+0x163/0x200
[ 140.508077][ T5792] loop_process_work+0x638/0x11d0
[ 140.508118][ T5792] ? do_raw_spin_unlock+0xf5/0x210
[ 140.508156][ T5792] ? __pfx_loop_process_work+0x10/0x10
[ 140.508189][ T5792] ? look_up_lock_class+0x57/0x110
[ 140.508224][ T5792] ? register_lock_class+0x31/0x2e0
[ 140.508250][ T5792] ? __lock_acquire+0x683/0x2ce0
[ 140.508282][ T5792] ? do_raw_spin_lock+0x12b/0x2f0
[ 140.508318][ T5792] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 140.508355][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.508384][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.508416][ T5792] ? rcu_is_watching+0x15/0xb0
[ 140.508446][ T5792] ? process_scheduled_works+0xa20/0x14e0
[ 140.508474][ T5792] process_scheduled_works+0xa8e/0x14e0
[ 140.508518][ T5792] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.508551][ T5792] ? assign_work+0x3cf/0x5d0
[ 140.508582][ T5792] worker_thread+0xa47/0xfb0
[ 140.508632][ T5792] ? __kthread_parkme+0x71/0x1f0
[ 140.508667][ T5792] kthread+0x388/0x470
[ 140.508701][ T5792] ? __pfx_worker_thread+0x10/0x10
[ 140.508727][ T5792] ? __pfx_kthread+0x10/0x10
[ 140.508761][ T5792] ret_from_fork+0x514/0xb70
[ 140.508798][ T5792] ? __pfx_ret_from_fork+0x10/0x10
[ 140.508833][ T5792] ? __switch_to+0xc89/0x1420
[ 140.508863][ T5792] ? __pfx_kthread+0x10/0x10
[ 140.508895][ T5792] ret_from_fork_asm+0x1a/0x30
[ 140.508938][ T5792]
[ 140.509126][ T5792] Kernel Offset: disabled