[ 87.468812][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts.
2026/10/18 22:37:00 parsed 1 programs
2026/10/18 22:37:00 serving rpc on tcp://35459
[ 92.792052][ T5599] cgroup: Unknown subsys name 'net'
[ 93.044130][ T5599] cgroup: Unknown subsys name 'cpuset'
[ 93.088313][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 94.885746][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 98.274208][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 101.860142][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.860174][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.927452][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.927475][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.341447][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 103.344196][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 103.376331][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 103.754740][ T10] rxe_eth0 speed is unknown, defaulting to 1000
[ 103.754873][ T5676] infiniband rxe0: set active
[ 103.754889][ T5676] infiniband rxe0: added rxe_eth0
[ 103.815838][ T5676] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 103.815884][ T5676] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 103.815928][ T5676] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 103.969780][ T5676] RDS/IB: rxe0: added
[ 103.970149][ T5676] smc: adding ib device rxe0 with port count 1
[ 103.970295][ T5676] smc: ib device rxe0 port 1 has no pnetid
[ 104.252107][ T36] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.272803][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.290494][ T30] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.692903][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.911042][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 105.070882][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 105.239805][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 105.482892][ T5676] rxe_eth0 speed is unknown, defaulting to 1000
[ 106.557396][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.559255][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.559450][ T5676] bridge_slave_0: entered allmulticast mode
[ 106.567299][ T5676] bridge_slave_0: entered promiscuous mode
[ 106.575774][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.575896][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.576086][ T5676] bridge_slave_1: entered allmulticast mode
[ 106.608818][ T5676] bridge_slave_1: entered promiscuous mode
[ 106.730583][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.735892][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.838105][ T5676] team0: Port device team_slave_0 added
[ 106.841890][ T5676] team0: Port device team_slave_1 added
[ 106.951081][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.951110][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 106.951137][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 106.956169][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 106.956199][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 106.956225][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.150532][ T5676] hsr_slave_0: entered promiscuous mode
[ 107.151541][ T5676] hsr_slave_1: entered promiscuous mode
[ 107.374373][ T5676] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.422270][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 107.743671][ T5676] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.783514][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 107.784793][ T5676] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.820431][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 107.821699][ T5676] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.864401][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 107.980497][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.025051][ T5676] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.049881][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.052312][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.111627][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.111733][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.495597][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.600848][ T5676] veth0_vlan: entered promiscuous mode
[ 108.626000][ T5676] veth1_vlan: entered promiscuous mode
[ 108.680903][ T5676] veth0_macvtap: entered promiscuous mode
[ 108.685793][ T5676] veth1_macvtap: entered promiscuous mode
[ 108.713244][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.737292][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.771225][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.087939][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.107896][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.107944][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.354637][ T4902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 109.369765][ T4902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 109.371239][ T4902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 109.380936][ T4902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 109.384107][ T4902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.683736][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.731460][ T5732] rxe_eth0 speed is unknown, defaulting to 1000
[ 109.969771][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.253469][ T5740] rxe_eth0 speed is unknown, defaulting to 1000
2026/10/18 22:37:20 executed programs: 0
[ 110.862939][ T4902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.865293][ T4902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.866274][ T4902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.867306][ T4902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.888294][ T4902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 111.210282][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.296108][ T5744] rxe_eth0 speed is unknown, defaulting to 1000
[ 111.699036][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.699294][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.699527][ T5744] bridge_slave_0: entered allmulticast mode
[ 111.702893][ T5744] bridge_slave_0: entered promiscuous mode
[ 111.717792][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.717909][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.718127][ T5744] bridge_slave_1: entered allmulticast mode
[ 111.729664][ T5744] bridge_slave_1: entered promiscuous mode
[ 111.786234][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 111.790192][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 111.825226][ T5744] team0: Port device team_slave_0 added
[ 111.827412][ T5744] team0: Port device team_slave_1 added
[ 111.861714][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 111.861732][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.861754][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 111.863129][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 111.863143][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 111.863166][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.948720][ T5744] hsr_slave_0: entered promiscuous mode
[ 111.950028][ T5744] hsr_slave_1: entered promiscuous mode
[ 111.951188][ T5744] debugfs: 'hsr0' already exists in 'hsr'
[ 111.951306][ T5744] Cannot create hsr debugfs directory
[ 112.307042][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.950748][ T49] bridge_slave_1: left allmulticast mode
[ 112.950829][ T49] bridge_slave_1: left promiscuous mode
[ 112.956560][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.980038][ T61] Bluetooth: hci0: command tx timeout
[ 113.078842][ T49] bridge_slave_0: left allmulticast mode
[ 113.078870][ T49] bridge_slave_0: left promiscuous mode
[ 113.079034][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.820226][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 113.868666][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 113.899854][ T49] bond0 (unregistering): Released all slaves
[ 114.544758][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1
[ 114.707884][ T49] hsr_slave_0: left promiscuous mode
[ 114.747878][ T49] hsr_slave_1: left promiscuous mode
[ 114.748957][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.749025][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.789698][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.789724][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.850164][ T49] veth1_macvtap: left promiscuous mode
[ 114.850338][ T49] veth0_macvtap: left promiscuous mode
[ 114.850500][ T49] veth1_vlan: left promiscuous mode
[ 114.854183][ T49] veth0_vlan: left promiscuous mode
[ 115.067725][ T61] Bluetooth: hci0: command tx timeout
[ 115.539359][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 115.578281][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 116.674585][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.733604][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.738070][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.772084][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.773549][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.842808][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.851827][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.883263][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.962314][ T30] rxe_eth0 speed is unknown, defaulting to 1000
[ 117.039920][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.077386][ T5744] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.104777][ T65] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.104991][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.137753][ T61] Bluetooth: hci0: command tx timeout
[ 117.145683][ T65] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.145787][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.680760][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.840202][ T5744] veth0_vlan: entered promiscuous mode
[ 118.876606][ T5744] veth1_vlan: entered promiscuous mode
[ 118.930988][ T5744] veth0_macvtap: entered promiscuous mode
[ 118.946917][ T5744] veth1_macvtap: entered promiscuous mode
[ 118.999227][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.026724][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.197837][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.197881][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.197910][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.197938][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.218114][ T61] Bluetooth: hci0: command tx timeout
[ 119.490792][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.490838][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.543139][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.543162][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/10/18 22:37:29 executed programs: 2
[ 119.886775][ T5862] loop0: detected capacity change from 0 to 32768
[ 120.590924][ T5863] loop0: detected capacity change from 0 to 32768
[ 121.027323][ T5864] loop0: detected capacity change from 0 to 32768
[ 121.421095][ T5865] loop0: detected capacity change from 0 to 32768
[ 121.824771][ T5866] loop0: detected capacity change from 0 to 32768
[ 122.217002][ T5867] loop0: detected capacity change from 0 to 32768
[ 122.600096][ T5868] loop0: detected capacity change from 0 to 32768
[ 122.970151][ T5869] loop0: detected capacity change from 0 to 32768
[ 123.336214][ T5870] loop0: detected capacity change from 0 to 32768
[ 123.701323][ T5871] loop0: detected capacity change from 0 to 32768
2026/10/18 22:37:34 executed programs: 15
[ 125.132295][ T5875] set_capacity_and_notify: 3 callbacks suppressed
[ 125.132310][ T5875] loop0: detected capacity change from 0 to 32768
[ 125.541466][ T5876] loop0: detected capacity change from 0 to 32768
[ 125.945007][ T5877] loop0: detected capacity change from 0 to 32768
[ 126.336542][ T5881] loop0: detected capacity change from 0 to 32768
[ 126.739874][ T5883] loop0: detected capacity change from 0 to 32768
[ 127.158915][ T5885] loop0: detected capacity change from 0 to 32768
[ 127.498630][ T5887] loop0: detected capacity change from 0 to 32768
[ 127.870997][ T5888] loop0: detected capacity change from 0 to 32768
[ 128.208290][ T5889] loop0: detected capacity change from 0 to 32768
[ 128.532562][ T5890] loop0: detected capacity change from 0 to 32768
2026/10/18 22:37:40 executed programs: 29
[ 130.391768][ T5895] set_capacity_and_notify: 4 callbacks suppressed
[ 130.391783][ T5895] loop0: detected capacity change from 0 to 32768
[ 130.806386][ T5896] loop0: detected capacity change from 0 to 32768
[ 131.162070][ T5897] loop0: detected capacity change from 0 to 32768
[ 131.520125][ T5898] loop0: detected capacity change from 0 to 32768
[ 131.895367][ T5899] loop0: detected capacity change from 0 to 32768
[ 132.279575][ T5900] loop0: detected capacity change from 0 to 32768
[ 132.623584][ T5901] loop0: detected capacity change from 0 to 32768
[ 133.035247][ T5902] loop0: detected capacity change from 0 to 32768
[ 133.417354][ T5903] loop0: detected capacity change from 0 to 32768
[ 133.553611][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.553701][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.779392][ T5904] loop0: detected capacity change from 0 to 32768
2026/10/18 22:37:45 executed programs: 43
[ 135.666979][ T5909] set_capacity_and_notify: 4 callbacks suppressed
[ 135.666992][ T5909] loop0: detected capacity change from 0 to 32768
[ 136.023720][ T5910] loop0: detected capacity change from 0 to 32768
[ 136.372632][ T5911] loop0: detected capacity change from 0 to 32768
[ 136.746532][ T5912] loop0: detected capacity change from 0 to 32768
[ 137.101988][ T5913] loop0: detected capacity change from 0 to 32768
[ 137.461360][ T5914] loop0: detected capacity change from 0 to 32768
[ 137.793695][ T5915] loop0: detected capacity change from 0 to 32768
[ 138.179670][ T5916] loop0: detected capacity change from 0 to 32768
[ 138.569921][ T5917] loop0: detected capacity change from 0 to 32768
[ 138.934620][ T5918] loop0: detected capacity change from 0 to 32768
2026/10/18 22:37:50 executed programs: 57
[ 140.734321][ T5923] set_capacity_and_notify: 4 callbacks suppressed
[ 140.734334][ T5923] loop0: detected capacity change from 0 to 32768
[ 141.121652][ T5924] loop0: detected capacity change from 0 to 32768
[ 141.476251][ T5925] loop0: detected capacity change from 0 to 32768
[ 141.856053][ T5926] loop0: detected capacity change from 0 to 32768
[ 141.928287][ T65] ==================================================================
[ 141.928305][ T65] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 141.928339][ T65] Read of size 4096 at addr ffff888035c9f000 by task kworker/u8:4/65
[ 141.928354][ T65]
[ 141.928426][ T65] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 141.928446][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 141.928458][ T65] Workqueue: loop0 loop_workfn
[ 141.928494][ T65] Call Trace:
[ 141.928502][ T65]
[ 141.928510][ T65] dump_stack_lvl+0xe8/0x150
[ 141.928537][ T65] print_address_description+0x55/0x1e0
[ 141.928562][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 141.928635][ T65] print_report+0x58/0x70
[ 141.928660][ T65] kasan_report+0x117/0x150
[ 141.928681][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 141.928703][ T65] kasan_check_range+0x264/0x2c0
[ 141.928719][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 141.928738][ T65] __asan_memcpy+0x29/0x70
[ 141.928763][ T65] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 141.928791][ T65] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 141.928809][ T65] ? rcu_is_watching+0x16/0xb0
[ 141.928829][ T65] ? shmem_write_begin+0x1ce/0x320
[ 141.928856][ T65] generic_perform_write+0x5a8/0x8b0
[ 141.928884][ T65] ? __pfx_generic_perform_write+0x10/0x10
[ 141.928907][ T65] ? __mark_inode_dirty+0x4e7/0x13b0
[ 141.928935][ T65] ? preempt_count_add+0x6a/0x140
[ 141.928958][ T65] ? mnt_put_write_access_file+0xc2/0x100
[ 141.928984][ T65] ? file_update_time_flags+0x3b1/0x450
[ 141.929011][ T65] shmem_file_write_iter+0xfb/0x120
[ 141.929030][ T65] lo_rw_aio+0xc78/0xf30
[ 141.929057][ T65] ? lock_acquire+0x115/0x350
[ 141.929080][ T65] ? __pfx_lo_rw_aio+0x10/0x10
[ 141.929105][ T65] ? kthread_associate_blkcg+0x490/0x600
[ 141.929126][ T65] ? rt_spin_unlock+0x165/0x200
[ 141.929148][ T65] loop_process_work+0x638/0x11d0
[ 141.929172][ T65] ? __lock_acquire+0x747/0x2de0
[ 141.929201][ T65] ? __pfx_loop_process_work+0x10/0x10
[ 141.929225][ T65] ? look_up_lock_class+0x57/0x110
[ 141.929249][ T65] ? register_lock_class+0x31/0x2e0
[ 141.929273][ T65] ? __lock_acquire+0x747/0x2de0
[ 141.929298][ T65] ? sched_clock+0x41/0x60
[ 141.929326][ T65] ? do_raw_spin_lock+0x12b/0x2f0
[ 141.929349][ T65] ? lock_acquire+0x115/0x350
[ 141.929382][ T65] ? rcu_is_watching+0x16/0xb0
[ 141.929400][ T65] ? process_scheduled_works+0x97a/0x1630
[ 141.929423][ T65] process_scheduled_works+0xc3d/0x1630
[ 141.929460][ T65] ? __pfx_process_scheduled_works+0x10/0x10
[ 141.929487][ T65] ? assign_work+0x3cf/0x5d0
[ 141.929512][ T65] worker_thread+0xa47/0xfb0
[ 141.929554][ T65] kthread+0x38b/0x470
[ 141.929576][ T65] ? __pfx_worker_thread+0x10/0x10
[ 141.929600][ T65] ? __pfx_kthread+0x10/0x10
[ 141.929618][ T65] ret_from_fork+0x514/0xb70
[ 141.929639][ T65] ? __pfx_ret_from_fork+0x10/0x10
[ 141.929657][ T65] ? __switch_to+0xc89/0x1420
[ 141.929681][ T65] ? __pfx_kthread+0x10/0x10
[ 141.929698][ T65] ret_from_fork_asm+0x1a/0x30
[ 141.929721][ T65]
[ 141.929729][ T65]
[ 141.929734][ T65] The buggy address belongs to the physical page:
[ 141.929751][ T65] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035c9f000 pfn:0x35c9f
[ 141.929770][ T65] flags: 0x80000000000000(node=0|zone=1)
[ 141.929794][ T65] raw: 0080000000000000 ffffea00010b73c8 ffffea0000b39b88 0000000000000000
[ 141.929809][ T65] raw: ffff888035c9f000 0000000000000000 00000000ffffffff 0000000000000000
[ 141.929822][ T65] page dumped because: kasan: bad access detected
[ 141.929835][ T65] page_owner tracks the page as freed
[ 141.929841][ T65] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5926, tgid 5926 (syz.0.75), ts 141870691864
[ 141.929865][ T65] post_alloc_hook+0x1f9/0x250
[ 141.929884][ T65] get_page_from_freelist+0x2591/0x2600
[ 141.929898][ T65] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 141.929912][ T65] alloc_pages_mpol+0xd4/0x280
[ 141.929930][ T65] alloc_pages_noprof+0xd2/0x2f0
[ 141.929946][ T65] lmLogInit+0x357/0x1a20
[ 141.929962][ T65] lmLogOpen+0x4e3/0xf90
[ 141.929977][ T65] jfs_mount_rw+0xf3/0x670
[ 141.929992][ T65] jfs_fill_super+0x769/0xda0
[ 141.930013][ T65] get_tree_bdev_flags+0x430/0x4f0
[ 141.930034][ T65] vfs_get_tree+0x92/0x2a0
[ 141.930055][ T65] do_new_mount+0x325/0xb00
[ 141.930071][ T65] __se_sys_mount+0x31d/0x420
[ 141.930089][ T65] do_syscall_64+0x166/0x520
[ 141.930111][ T65] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.930128][ T65] page last free pid 5744 tgid 5744 ts 141919680987 stack trace:
[ 141.930140][ T65] __free_frozen_pages+0xf8e/0x1070
[ 141.930161][ T65] lmLogShutdown+0x44e/0x850
[ 141.930176][ T65] lmLogClose+0x28c/0x530
[ 141.930193][ T65] jfs_umount+0x2da/0x3b0
[ 141.930208][ T65] jfs_put_super+0x8c/0x190
[ 141.930227][ T65] generic_shutdown_super+0x13d/0x2d0
[ 141.930246][ T65] kill_block_super+0x44/0xa0
[ 141.930265][ T65] deactivate_locked_super+0xbe/0x110
[ 141.930281][ T65] cleanup_mnt+0x204/0x2a0
[ 141.930300][ T65] task_work_run+0x1d9/0x270
[ 141.930316][ T65] exit_to_user_mode_loop+0x204/0x770
[ 141.930338][ T65] do_syscall_64+0x328/0x520
[ 141.930367][ T65] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.930383][ T65]
[ 141.930387][ T65] Memory state around the buggy address:
[ 141.930396][ T65] ffff888035c9ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 141.930406][ T65] ffff888035c9ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 141.930417][ T65] >ffff888035c9f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 141.930425][ T65] ^
[ 141.930435][ T65] ffff888035c9f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 141.930446][ T65] ffff888035c9f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 141.930453][ T65] ==================================================================
[ 141.932071][ T65] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 142.655875][ T65] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 142.667434][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 142.679959][ T65] Workqueue: loop0 loop_workfn
[ 142.687702][ T65] Call Trace:
[ 142.693805][ T65]
[ 142.699814][ T65] vpanic+0x56d/0xa60
[ 142.706842][ T65] ? rcu_is_watching+0x16/0xb0
[ 142.712943][ T65] ? __pfx_vpanic+0x10/0x10
[ 142.719704][ T65] panic+0xc5/0xd0
[ 142.723970][ T65] ? __pfx_panic+0x10/0x10
[ 142.728622][ T65] ? preempt_schedule_thunk+0x16/0x40
[ 142.739152][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.747435][ T65] ? preempt_schedule_thunk+0x16/0x40
[ 142.754808][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.762475][ T65] check_panic_on_warn+0x89/0xb0
[ 142.769797][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.777918][ T65] end_report+0x73/0x170
[ 142.782821][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.792395][ T65] kasan_report+0x128/0x150
[ 142.799070][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.808397][ T65] kasan_check_range+0x264/0x2c0
[ 142.816433][ T65] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.824748][ T65] __asan_memcpy+0x29/0x70
[ 142.829909][ T65] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 142.837323][ T65] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 142.844711][ T65] ? rcu_is_watching+0x16/0xb0
[ 142.851162][ T65] ? shmem_write_begin+0x1ce/0x320
[ 142.857617][ T65] generic_perform_write+0x5a8/0x8b0
[ 142.864752][ T65] ? __pfx_generic_perform_write+0x10/0x10
[ 142.872848][ T65] ? __mark_inode_dirty+0x4e7/0x13b0
[ 142.879753][ T65] ? preempt_count_add+0x6a/0x140
[ 142.886403][ T65] ? mnt_put_write_access_file+0xc2/0x100
[ 142.894991][ T65] ? file_update_time_flags+0x3b1/0x450
[ 142.901275][ T65] shmem_file_write_iter+0xfb/0x120
[ 142.908027][ T65] lo_rw_aio+0xc78/0xf30
[ 142.914051][ T65] ? lock_acquire+0x115/0x350
[ 142.919048][ T65] ? __pfx_lo_rw_aio+0x10/0x10
[ 142.923980][ T65] ? kthread_associate_blkcg+0x490/0x600
[ 142.931847][ T65] ? rt_spin_unlock+0x165/0x200
[ 142.937422][ T65] loop_process_work+0x638/0x11d0
[ 142.942757][ T65] ? __lock_acquire+0x747/0x2de0
[ 142.949690][ T65] ? __pfx_loop_process_work+0x10/0x10
[ 142.960311][ T65] ? look_up_lock_class+0x57/0x110
[ 142.967022][ T65] ? register_lock_class+0x31/0x2e0
[ 142.975509][ T65] ? __lock_acquire+0x747/0x2de0
[ 142.981434][ T65] ? sched_clock+0x41/0x60
[ 142.986453][ T65] ? do_raw_spin_lock+0x12b/0x2f0
[ 142.992394][ T65] ? lock_acquire+0x115/0x350
[ 142.997967][ T65] ? rcu_is_watching+0x16/0xb0
[ 143.003115][ T65] ? process_scheduled_works+0x97a/0x1630
[ 143.010074][ T65] process_scheduled_works+0xc3d/0x1630
[ 143.017229][ T65] ? __pfx_process_scheduled_works+0x10/0x10
[ 143.023427][ T65] ? assign_work+0x3cf/0x5d0
[ 143.028209][ T65] worker_thread+0xa47/0xfb0
[ 143.033865][ T65] kthread+0x38b/0x470
[ 143.038353][ T65] ? __pfx_worker_thread+0x10/0x10
[ 143.043867][ T65] ? __pfx_kthread+0x10/0x10
[ 143.048486][ T65] ret_from_fork+0x514/0xb70
[ 143.054338][ T65] ? __pfx_ret_from_fork+0x10/0x10
[ 143.060166][ T65] ? __switch_to+0xc89/0x1420
[ 143.065049][ T65] ? __pfx_kthread+0x10/0x10
[ 143.070250][ T65] ret_from_fork_asm+0x1a/0x30
[ 143.075271][ T65]
[ 143.079062][ T65] Kernel Offset: disabled
[ 143.085357][ T65] Rebooting in 86400 seconds..