no interfaces have a carrier
[ 63.362210][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.401692][ T5267] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 91.776257][ T822] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts.
2026/06/15 06:54:28 parsed 1 programs
[ 98.752255][ T5619] cgroup: Unknown subsys name 'net'
[ 98.995742][ T5619] cgroup: Unknown subsys name 'cpuset'
[ 99.067920][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 101.091338][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.184696][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.185729][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.185852][ T5660] bridge_slave_0: entered allmulticast mode
[ 107.192100][ T5660] bridge_slave_0: entered promiscuous mode
[ 107.221957][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.222043][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.222159][ T5660] bridge_slave_1: entered allmulticast mode
[ 107.224048][ T5660] bridge_slave_1: entered promiscuous mode
[ 107.372527][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.375619][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.429547][ T5660] team0: Port device team_slave_0 added
[ 107.433413][ T5660] team0: Port device team_slave_1 added
[ 107.471635][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.471649][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.471669][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.474357][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.474369][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 107.474390][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.603722][ T5660] hsr_slave_0: entered promiscuous mode
[ 107.604792][ T5660] hsr_slave_1: entered promiscuous mode
[ 107.987166][ T5660] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 108.047027][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 108.261640][ T5660] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 108.283001][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 108.285857][ T5660] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.308619][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 108.310187][ T5660] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.343033][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 108.470463][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.530582][ T5660] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.554115][ T148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.554408][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.598750][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.598912][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.081309][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.156058][ T5660] veth0_vlan: entered promiscuous mode
[ 109.176220][ T5660] veth1_vlan: entered promiscuous mode
[ 109.230133][ T5660] veth0_macvtap: entered promiscuous mode
[ 109.236376][ T5660] veth1_macvtap: entered promiscuous mode
[ 109.298227][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.315414][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.344693][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.367711][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.372870][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.379153][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.123130][ T3357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.691607][ T3357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.244549][ T3357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.545958][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.545986][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.617023][ T3393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.617045][ T3393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.849920][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 111.872645][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 111.881344][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 111.885916][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 111.892488][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.068599][ T3357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.958363][ T3357] bridge_slave_1: left allmulticast mode
[ 112.958578][ T3357] bridge_slave_1: left promiscuous mode
[ 112.965129][ T3357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.168703][ T3357] bridge_slave_0: left allmulticast mode
[ 113.168729][ T3357] bridge_slave_0: left promiscuous mode
[ 113.168963][ T3357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.168411][ T3357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 114.248126][ T3357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 114.269664][ T3357] bond0 (unregistering): Released all slaves
[ 114.315692][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1
[ 114.677384][ T3357] hsr_slave_0: left promiscuous mode
[ 114.717378][ T3357] hsr_slave_1: left promiscuous mode
[ 114.718687][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.722949][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.761640][ T3357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.761670][ T3357] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.869327][ T3357] veth1_macvtap: left promiscuous mode
[ 114.869590][ T3357] veth0_macvtap: left promiscuous mode
[ 114.869891][ T3357] veth1_vlan: left promiscuous mode
[ 114.870194][ T3357] veth0_vlan: left promiscuous mode
[ 115.678175][ T3357] team0 (unregistering): Port device team_slave_1 removed
[ 115.730843][ T3357] team0 (unregistering): Port device team_slave_0 removed
[ 115.958062][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3
[ 116.867968][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2
[ 118.282492][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4
2026/06/15 06:54:53 executed programs: 0
[ 119.319170][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 119.321596][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 119.322469][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 119.323591][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 119.324483][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 120.636388][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.636559][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.636683][ T5805] bridge_slave_0: entered allmulticast mode
[ 120.643824][ T5805] bridge_slave_0: entered promiscuous mode
[ 120.670682][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.670865][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.671958][ T5805] bridge_slave_1: entered allmulticast mode
[ 120.674550][ T5805] bridge_slave_1: entered promiscuous mode
[ 120.776752][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.788536][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.939800][ T5805] team0: Port device team_slave_0 added
[ 121.041015][ T5805] team0: Port device team_slave_1 added
[ 121.084976][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.084990][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.085010][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.086603][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.086614][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.086635][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.211923][ T5805] hsr_slave_0: entered promiscuous mode
[ 121.212853][ T5805] hsr_slave_1: entered promiscuous mode
[ 121.454635][ T4921] Bluetooth: hci0: command tx timeout
[ 123.528083][ T4921] Bluetooth: hci0: command tx timeout
[ 123.584814][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.625852][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 123.638498][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.687568][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 123.778234][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.823103][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 123.826721][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.885789][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 124.097868][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.146552][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.170274][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.170420][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.228210][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.231905][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.096021][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.199479][ T5805] veth0_vlan: entered promiscuous mode
[ 125.226013][ T5805] veth1_vlan: entered promiscuous mode
[ 125.284613][ T5805] veth0_macvtap: entered promiscuous mode
[ 125.300121][ T5805] veth1_macvtap: entered promiscuous mode
[ 125.400736][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.421661][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.462104][ T3357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.463506][ T3357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.464382][ T3357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.464427][ T3357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.609285][ T4921] Bluetooth: hci0: command tx timeout
[ 126.058536][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.058561][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.164471][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.164494][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/15 06:55:00 executed programs: 2
[ 126.800721][ T5946] loop0: detected capacity change from 0 to 32768
[ 126.820088][ T5946] =======================================================
[ 126.820088][ T5946] WARNING: The mand mount option has been deprecated and
[ 126.820088][ T5946] and is ignored by this kernel. Remove the mand
[ 126.820088][ T5946] option from the mount to silence this warning.
[ 126.820088][ T5946] =======================================================
[ 127.687290][ T4921] Bluetooth: hci0: command tx timeout
[ 127.818430][ T5963] loop0: detected capacity change from 0 to 32768
[ 128.425395][ T5964] loop0: detected capacity change from 0 to 32768
[ 129.106084][ T5967] loop0: detected capacity change from 0 to 32768
[ 129.700190][ T5971] loop0: detected capacity change from 0 to 32768
[ 130.326558][ T5972] loop0: detected capacity change from 0 to 32768
[ 130.935694][ T5974] loop0: detected capacity change from 0 to 32768
[ 131.533742][ T5975] loop0: detected capacity change from 0 to 32768
2026/06/15 06:55:05 executed programs: 10
[ 132.130682][ T5976] loop0: detected capacity change from 0 to 32768
[ 132.728002][ T5977] loop0: detected capacity change from 0 to 32768
[ 132.735971][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.736070][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.341629][ T5978] loop0: detected capacity change from 0 to 32768
[ 133.971583][ T5979] loop0: detected capacity change from 0 to 32768
[ 134.561739][ T5980] loop0: detected capacity change from 0 to 32768
[ 135.152002][ T5981] loop0: detected capacity change from 0 to 32768
[ 135.744756][ T5982] loop0: detected capacity change from 0 to 32768
[ 136.364241][ T5983] loop0: detected capacity change from 0 to 32768
[ 136.922582][ T5984] loop0: detected capacity change from 0 to 32768
2026/06/15 06:55:10 executed programs: 19
[ 137.563863][ T5985] loop0: detected capacity change from 0 to 32768
[ 138.136488][ T5986] loop0: detected capacity change from 0 to 32768
[ 138.752323][ T5987] loop0: detected capacity change from 0 to 32768
[ 139.340186][ T5988] loop0: detected capacity change from 0 to 32768
[ 139.938830][ T5989] loop0: detected capacity change from 0 to 32768
[ 140.558631][ T5990] loop0: detected capacity change from 0 to 32768
[ 141.168023][ T5991] loop0: detected capacity change from 0 to 32768
[ 141.760692][ T5992] loop0: detected capacity change from 0 to 32768
2026/06/15 06:55:16 executed programs: 28
[ 142.377708][ T5993] loop0: detected capacity change from 0 to 32768
[ 142.981036][ T5994] loop0: detected capacity change from 0 to 32768
[ 143.057120][ T3357] ==================================================================
[ 143.057149][ T3357] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.057205][ T3357] Read of size 4096 at addr ffff88805e75d000 by task kworker/u8:14/3357
[ 143.057224][ T3357]
[ 143.057248][ T3357] CPU: 0 UID: 0 PID: 3357 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 143.057273][ T3357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 143.057288][ T3357] Workqueue: loop0 loop_workfn
[ 143.057332][ T3357] Call Trace:
[ 143.057340][ T3357]
[ 143.057349][ T3357] dump_stack_lvl+0xe8/0x150
[ 143.057376][ T3357] print_address_description+0x55/0x1e0
[ 143.057401][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.057432][ T3357] print_report+0x58/0x70
[ 143.057454][ T3357] kasan_report+0x117/0x150
[ 143.057482][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.057519][ T3357] kasan_check_range+0x264/0x2c0
[ 143.057545][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.057578][ T3357] __asan_memcpy+0x29/0x70
[ 143.057598][ T3357] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.057642][ T3357] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 143.057674][ T3357] ? rcu_is_watching+0x15/0xb0
[ 143.057709][ T3357] ? shmem_write_begin+0x1ce/0x320
[ 143.057739][ T3357] generic_perform_write+0x5a8/0x8b0
[ 143.057781][ T3357] ? __pfx_generic_perform_write+0x10/0x10
[ 143.057808][ T3357] ? __mark_inode_dirty+0x4e7/0x13b0
[ 143.057837][ T3357] ? preempt_count_add+0x91/0x190
[ 143.057860][ T3357] ? mnt_put_write_access_file+0xbf/0x100
[ 143.057889][ T3357] ? file_update_time_flags+0x406/0x4b0
[ 143.057916][ T3357] shmem_file_write_iter+0xfb/0x120
[ 143.057951][ T3357] lo_rw_aio+0xdcf/0x1080
[ 143.057984][ T3357] ? __pfx_lo_rw_aio+0x10/0x10
[ 143.058014][ T3357] ? kthread_associate_blkcg+0x490/0x600
[ 143.058045][ T3357] ? rt_spin_unlock+0x160/0x200
[ 143.058072][ T3357] loop_process_work+0x638/0x11d0
[ 143.058107][ T3357] ? __pfx_loop_process_work+0x10/0x10
[ 143.058132][ T3357] ? __lock_acquire+0x683/0x2cc0
[ 143.058160][ T3357] ? look_up_lock_class+0x57/0x110
[ 143.058192][ T3357] ? register_lock_class+0x31/0x2e0
[ 143.058222][ T3357] ? __lock_acquire+0x683/0x2cc0
[ 143.058251][ T3357] ? trace_irq_disable+0x3b/0x140
[ 143.058283][ T3357] ? do_raw_spin_lock+0x12b/0x2f0
[ 143.058305][ T3357] ? lock_acquire+0x106/0x350
[ 143.058334][ T3357] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 143.058359][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.058382][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.058407][ T3357] ? rcu_is_watching+0x15/0xb0
[ 143.058440][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.058463][ T3357] process_scheduled_works+0xa8e/0x14e0
[ 143.058499][ T3357] ? __pfx_process_scheduled_works+0x10/0x10
[ 143.058525][ T3357] ? assign_work+0x3cf/0x5d0
[ 143.058548][ T3357] worker_thread+0xa47/0xfb0
[ 143.058586][ T3357] kthread+0x388/0x470
[ 143.058614][ T3357] ? __pfx_worker_thread+0x10/0x10
[ 143.058637][ T3357] ? __pfx_kthread+0x10/0x10
[ 143.058667][ T3357] ret_from_fork+0x514/0xb70
[ 143.058692][ T3357] ? __pfx_ret_from_fork+0x10/0x10
[ 143.058715][ T3357] ? __switch_to+0xc89/0x1420
[ 143.058749][ T3357] ? __pfx_kthread+0x10/0x10
[ 143.058786][ T3357] ret_from_fork_asm+0x1a/0x30
[ 143.058821][ T3357]
[ 143.058828][ T3357]
[ 143.058833][ T3357] The buggy address belongs to the physical page:
[ 143.058854][ T3357] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e75d000 pfn:0x5e75d
[ 143.058875][ T3357] flags: 0x80000000000000(node=0|zone=1)
[ 143.058900][ T3357] raw: 0080000000000000 ffffea0000d1a808 ffffea0000d27a48 0000000000000000
[ 143.058919][ T3357] raw: ffff88805e75d000 0000000000000000 00000000ffffffff 0000000000000000
[ 143.058930][ T3357] page dumped because: kasan: bad access detected
[ 143.058945][ T3357] page_owner tracks the page as freed
[ 143.058953][ T3357] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5994, tgid 5994 (syz.0.43), ts 142985085834, free_ts 143057073485
[ 143.058985][ T3357] post_alloc_hook+0x22d/0x280
[ 143.059008][ T3357] get_page_from_freelist+0x2877/0x28f0
[ 143.059034][ T3357] __alloc_frozen_pages_noprof+0x18d/0x380
[ 143.059061][ T3357] alloc_pages_mpol+0xce/0x280
[ 143.059086][ T3357] alloc_pages_noprof+0xd2/0x2f0
[ 143.059112][ T3357] lmLogInit+0x357/0x1a20
[ 143.059140][ T3357] lmLogOpen+0x4e3/0xf90
[ 143.059167][ T3357] jfs_mount_rw+0xf3/0x670
[ 143.059194][ T3357] jfs_fill_super+0x772/0xd90
[ 143.059216][ T3357] get_tree_bdev_flags+0x430/0x4f0
[ 143.059240][ T3357] vfs_get_tree+0x92/0x2a0
[ 143.059262][ T3357] do_new_mount+0x319/0xdc0
[ 143.059293][ T3357] __se_sys_mount+0x31d/0x420
[ 143.059324][ T3357] do_syscall_64+0x174/0x580
[ 143.059353][ T3357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.059373][ T3357] page last free pid 5805 tgid 5805 stack trace:
[ 143.059385][ T3357] __free_frozen_pages+0x1019/0x1100
[ 143.059408][ T3357] lmLogShutdown+0x44e/0x850
[ 143.059437][ T3357] lmLogClose+0x28c/0x530
[ 143.059467][ T3357] jfs_umount+0x2da/0x3b0
[ 143.059494][ T3357] jfs_put_super+0x8c/0x190
[ 143.059515][ T3357] generic_shutdown_super+0x13d/0x2d0
[ 143.059535][ T3357] kill_block_super+0x44/0x90
[ 143.059558][ T3357] deactivate_locked_super+0xbc/0x130
[ 143.059576][ T3357] cleanup_mnt+0x3d3/0x460
[ 143.059596][ T3357] task_work_run+0x1d9/0x270
[ 143.059624][ T3357] exit_to_user_mode_loop+0x193/0x6b0
[ 143.059650][ T3357] do_syscall_64+0x353/0x580
[ 143.059679][ T3357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.059699][ T3357]
[ 143.059704][ T3357] Memory state around the buggy address:
[ 143.059715][ T3357] ffff88805e75cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 143.059730][ T3357] ffff88805e75cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 143.059744][ T3357] >ffff88805e75d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 143.059754][ T3357] ^
[ 143.059772][ T3357] ffff88805e75d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 143.059786][ T3357] ffff88805e75d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 143.059797][ T3357] ==================================================================
[ 143.060034][ T3357] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.060052][ T3357] CPU: 0 UID: 0 PID: 3357 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 143.060079][ T3357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 143.060093][ T3357] Workqueue: loop0 loop_workfn
[ 143.060120][ T3357] Call Trace:
[ 143.060128][ T3357]
[ 143.060137][ T3357] vpanic+0x56c/0xa60
[ 143.060165][ T3357] ? __pfx_vpanic+0x10/0x10
[ 143.060196][ T3357] panic+0xc5/0xd0
[ 143.060221][ T3357] ? __pfx_panic+0x10/0x10
[ 143.060248][ T3357] ? preempt_schedule_thunk+0x16/0x30
[ 143.060283][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060311][ T3357] ? preempt_schedule_thunk+0x16/0x30
[ 143.060339][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060365][ T3357] check_panic_on_warn+0x89/0xb0
[ 143.060391][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060417][ T3357] end_report+0x73/0x170
[ 143.060439][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060471][ T3357] kasan_report+0x128/0x150
[ 143.060533][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060646][ T3357] kasan_check_range+0x264/0x2c0
[ 143.060723][ T3357] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060823][ T3357] __asan_memcpy+0x29/0x70
[ 143.060876][ T3357] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 143.060989][ T3357] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 143.061082][ T3357] ? rcu_is_watching+0x15/0xb0
[ 143.061166][ T3357] ? shmem_write_begin+0x1ce/0x320
[ 143.061242][ T3357] generic_perform_write+0x5a8/0x8b0
[ 143.061337][ T3357] ? __pfx_generic_perform_write+0x10/0x10
[ 143.061408][ T3357] ? __mark_inode_dirty+0x4e7/0x13b0
[ 143.061481][ T3357] ? preempt_count_add+0x91/0x190
[ 143.061537][ T3357] ? mnt_put_write_access_file+0xbf/0x100
[ 143.061608][ T3357] ? file_update_time_flags+0x406/0x4b0
[ 143.061680][ T3357] shmem_file_write_iter+0xfb/0x120
[ 143.061770][ T3357] lo_rw_aio+0xdcf/0x1080
[ 143.061853][ T3357] ? __pfx_lo_rw_aio+0x10/0x10
[ 143.061927][ T3357] ? kthread_associate_blkcg+0x490/0x600
[ 143.062029][ T3357] ? rt_spin_unlock+0x160/0x200
[ 143.062119][ T3357] loop_process_work+0x638/0x11d0
[ 143.062205][ T3357] ? __pfx_loop_process_work+0x10/0x10
[ 143.062272][ T3357] ? __lock_acquire+0x683/0x2cc0
[ 143.062337][ T3357] ? look_up_lock_class+0x57/0x110
[ 143.062412][ T3357] ? register_lock_class+0x31/0x2e0
[ 143.062486][ T3357] ? __lock_acquire+0x683/0x2cc0
[ 143.062566][ T3357] ? trace_irq_disable+0x3b/0x140
[ 143.062639][ T3357] ? do_raw_spin_lock+0x12b/0x2f0
[ 143.062701][ T3357] ? lock_acquire+0x106/0x350
[ 143.062784][ T3357] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 143.062847][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.062907][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.062978][ T3357] ? rcu_is_watching+0x15/0xb0
[ 143.063054][ T3357] ? process_scheduled_works+0xa20/0x14e0
[ 143.063114][ T3357] process_scheduled_works+0xa8e/0x14e0
[ 143.063214][ T3357] ? __pfx_process_scheduled_works+0x10/0x10
[ 143.063282][ T3357] ? assign_work+0x3cf/0x5d0
[ 143.063343][ T3357] worker_thread+0xa47/0xfb0
[ 143.063456][ T3357] kthread+0x388/0x470
[ 143.063542][ T3357] ? __pfx_worker_thread+0x10/0x10
[ 143.063602][ T3357] ? __pfx_kthread+0x10/0x10
[ 143.063683][ T3357] ret_from_fork+0x514/0xb70
[ 143.063745][ T3357] ? __pfx_ret_from_fork+0x10/0x10
[ 143.063806][ T3357] ? __switch_to+0xc89/0x1420
[ 143.063891][ T3357] ? __pfx_kthread+0x10/0x10
[ 143.063969][ T3357] ret_from_fork_asm+0x1a/0x30
[ 143.064063][ T3357]
[ 143.069152][ T3357] Kernel Offset: disabled