no interfaces have a carrier
[ 52.994986][ T5257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 53.029270][ T5257] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts.
2026/07/04 21:48:12 parsed 1 programs
2026/07/04 21:48:12 serving rpc on tcp://43397
syzkaller login: [ 81.715849][ T5608] cgroup: Unknown subsys name 'net'
[ 81.978792][ T5608] cgroup: Unknown subsys name 'cpuset'
[ 82.033060][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.737092][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.837746][ T202] cfg80211: failed to load regulatory.db
[ 87.484941][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.509599][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.510650][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.517005][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.517693][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.216408][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.216431][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.353395][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.353414][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.707196][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.708782][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.708905][ T5649] bridge_slave_0: entered allmulticast mode
[ 89.711709][ T5649] bridge_slave_0: entered promiscuous mode
[ 89.729426][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.729521][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.729682][ T5649] bridge_slave_1: entered allmulticast mode
[ 89.732125][ T5649] bridge_slave_1: entered promiscuous mode
[ 90.009725][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 90.033329][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 90.131407][ T5649] team0: Port device team_slave_0 added
[ 90.134968][ T5649] team0: Port device team_slave_1 added
[ 90.169512][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 90.169523][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.169535][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 90.171965][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 90.171986][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 90.172005][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 90.489748][ T5649] hsr_slave_0: entered promiscuous mode
[ 90.490681][ T5649] hsr_slave_1: entered promiscuous mode
[ 90.704620][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 90.768446][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 90.771174][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 90.805777][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 90.808218][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 90.848136][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 90.850719][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 90.885843][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 91.139020][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[ 91.271887][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[ 91.295018][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.295388][ T3121] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 91.341430][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.341504][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 91.722008][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.803230][ T5649] veth0_vlan: entered promiscuous mode
[ 91.831822][ T5649] veth1_vlan: entered promiscuous mode
[ 91.883589][ T5649] veth0_macvtap: entered promiscuous mode
[ 91.889197][ T5649] veth1_macvtap: entered promiscuous mode
[ 91.911161][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.946820][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.975150][ T162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.977581][ T162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.001035][ T162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.001078][ T162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.638350][ T162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.885725][ T162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.725310][ T162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.247660][ T162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.973060][ T162] bridge_slave_1: left allmulticast mode
[ 95.973263][ T162] bridge_slave_1: left promiscuous mode
[ 95.981083][ T162] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.194031][ T162] bridge_slave_0: left allmulticast mode
[ 96.194064][ T162] bridge_slave_0: left promiscuous mode
[ 96.194292][ T162] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.982924][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.062852][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.104323][ T162] bond0 (unregistering): Released all slaves
[ 97.129708][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1
[ 97.552381][ T162] hsr_slave_0: left promiscuous mode
[ 97.592345][ T162] hsr_slave_1: left promiscuous mode
[ 97.593540][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.593622][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.654368][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.654392][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.745186][ T162] veth1_macvtap: left promiscuous mode
[ 97.745388][ T162] veth0_macvtap: left promiscuous mode
[ 97.745552][ T162] veth1_vlan: left promiscuous mode
[ 97.745733][ T162] veth0_vlan: left promiscuous mode
[ 98.432829][ T162] team0 (unregistering): Port device team_slave_1 removed
[ 98.473855][ T162] team0 (unregistering): Port device team_slave_0 removed
[ 98.649476][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2
[ 99.306651][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3
2026/07/04 21:48:32 executed programs: 0
[ 99.828542][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.858115][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.873421][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.878074][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.880687][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.189145][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4
[ 101.294356][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.294479][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.294571][ T5785] bridge_slave_0: entered allmulticast mode
[ 101.295900][ T5785] bridge_slave_0: entered promiscuous mode
[ 101.297687][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.297799][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.297883][ T5785] bridge_slave_1: entered allmulticast mode
[ 101.299252][ T5785] bridge_slave_1: entered promiscuous mode
[ 101.387065][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.389479][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.422066][ T5785] team0: Port device team_slave_0 added
[ 101.425458][ T5785] team0: Port device team_slave_1 added
[ 101.458502][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.458516][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.458536][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.461648][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.461662][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.461678][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.545915][ T5785] hsr_slave_0: entered promiscuous mode
[ 101.547529][ T5785] hsr_slave_1: entered promiscuous mode
[ 102.024430][ T59] Bluetooth: hci0: command tx timeout
[ 103.862856][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.912025][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 103.920809][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.946882][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 103.961810][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.999125][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 104.001412][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.038081][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 104.094209][ T59] Bluetooth: hci0: command tx timeout
[ 104.201017][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.244189][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.251181][ T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.251370][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.287606][ T14] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.291469][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.178085][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.290562][ T5785] veth0_vlan: entered promiscuous mode
[ 105.322741][ T5785] veth1_vlan: entered promiscuous mode
[ 105.381094][ T5785] veth0_macvtap: entered promiscuous mode
[ 105.412673][ T5785] veth1_macvtap: entered promiscuous mode
[ 105.489819][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.498797][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.517418][ T192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.518753][ T192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.519025][ T192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.519060][ T192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.930663][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.930682][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.046659][ T5802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.046678][ T5802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/04 21:48:38 executed programs: 2
[ 106.173322][ T59] Bluetooth: hci0: command tx timeout
[ 106.718278][ T5943] loop0: detected capacity change from 0 to 32768
[ 107.305658][ T5955] loop0: detected capacity change from 0 to 32768
[ 107.714278][ T5956] loop0: detected capacity change from 0 to 32768
[ 108.107887][ T5957] loop0: detected capacity change from 0 to 32768
[ 108.252294][ T59] Bluetooth: hci0: command tx timeout
[ 108.465065][ T5958] loop0: detected capacity change from 0 to 32768
[ 108.850187][ T5959] loop0: detected capacity change from 0 to 32768
[ 109.215849][ T5960] loop0: detected capacity change from 0 to 32768
[ 109.586834][ T5961] loop0: detected capacity change from 0 to 32768
[ 109.967301][ T5962] loop0: detected capacity change from 0 to 32768
[ 110.350837][ T5963] loop0: detected capacity change from 0 to 32768
2026/07/04 21:48:44 executed programs: 15
[ 111.787029][ T5967] set_capacity_and_notify: 3 callbacks suppressed
[ 111.787058][ T5967] loop0: detected capacity change from 0 to 32768
[ 112.149870][ T5968] loop0: detected capacity change from 0 to 32768
[ 112.505721][ T5969] loop0: detected capacity change from 0 to 32768
[ 112.886636][ T5970] loop0: detected capacity change from 0 to 32768
[ 113.254477][ T5971] loop0: detected capacity change from 0 to 32768
[ 113.610627][ T5972] loop0: detected capacity change from 0 to 32768
[ 113.965762][ T5973] loop0: detected capacity change from 0 to 32768
[ 114.330572][ T5974] loop0: detected capacity change from 0 to 32768
[ 114.684271][ T5975] loop0: detected capacity change from 0 to 32768
[ 115.035078][ T5976] loop0: detected capacity change from 0 to 32768
[ 115.864320][ T55] ==================================================================
[ 115.864335][ T55] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.864378][ T55] Read of size 4096 at addr ffff888038bfc000 by task kworker/u8:3/55
[ 115.864396][ T55]
[ 115.864416][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 115.864435][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 115.864446][ T55] Workqueue: loop0 loop_workfn
[ 115.864484][ T55] Call Trace:
[ 115.864491][ T55]
[ 115.864497][ T55] dump_stack_lvl+0xe8/0x150
[ 115.864522][ T55] print_address_description+0x55/0x1e0
[ 115.864545][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.864569][ T55] print_report+0x58/0x70
[ 115.864589][ T55] kasan_report+0x117/0x150
[ 115.864609][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.864636][ T55] kasan_check_range+0x264/0x2c0
[ 115.864654][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.864677][ T55] __asan_memcpy+0x29/0x70
[ 115.864699][ T55] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.864739][ T55] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 115.864762][ T55] ? rcu_is_watching+0x15/0xb0
[ 115.864783][ T55] ? shmem_write_begin+0x1ce/0x320
[ 115.864801][ T55] generic_perform_write+0x5a8/0x8b0
[ 115.864830][ T55] ? __pfx_generic_perform_write+0x10/0x10
[ 115.864852][ T55] ? __mark_inode_dirty+0x4e7/0x13b0
[ 115.864872][ T55] ? preempt_count_add+0x91/0x190
[ 115.864891][ T55] ? mnt_put_write_access_file+0xbf/0x100
[ 115.864911][ T55] ? file_update_time_flags+0x406/0x4b0
[ 115.864932][ T55] shmem_file_write_iter+0xfb/0x120
[ 115.864952][ T55] lo_rw_aio+0xc78/0xf30
[ 115.864977][ T55] ? __pfx_lo_rw_aio+0x10/0x10
[ 115.865000][ T55] ? kthread_associate_blkcg+0x490/0x600
[ 115.865023][ T55] ? rt_spin_unlock+0x163/0x200
[ 115.865041][ T55] loop_process_work+0x638/0x11d0
[ 115.865068][ T55] ? __pfx_loop_process_work+0x10/0x10
[ 115.865088][ T55] ? look_up_lock_class+0x57/0x110
[ 115.865109][ T55] ? register_lock_class+0x31/0x2e0
[ 115.865126][ T55] ? __lock_acquire+0x683/0x2ce0
[ 115.865141][ T55] ? irqentry_exit+0x218/0x8f0
[ 115.865162][ T55] ? lockdep_hardirqs_on+0x7a/0x110
[ 115.865180][ T55] ? irqentry_exit+0x218/0x8f0
[ 115.865198][ T55] ? trace_irq_disable+0x3b/0x140
[ 115.865215][ T55] ? do_raw_spin_lock+0x12b/0x2f0
[ 115.865238][ T55] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 115.865259][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.865277][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.865296][ T55] ? rcu_is_watching+0x15/0xb0
[ 115.865315][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.865333][ T55] process_scheduled_works+0xa8e/0x14e0
[ 115.865362][ T55] ? __pfx_process_scheduled_works+0x10/0x10
[ 115.865381][ T55] ? assign_work+0x3cf/0x5d0
[ 115.865401][ T55] worker_thread+0xa47/0xfb0
[ 115.865423][ T55] ? __kthread_parkme+0x71/0x1f0
[ 115.865447][ T55] kthread+0x388/0x470
[ 115.865467][ T55] ? __pfx_worker_thread+0x10/0x10
[ 115.865485][ T55] ? __pfx_kthread+0x10/0x10
[ 115.865505][ T55] ret_from_fork+0x514/0xb70
[ 115.865528][ T55] ? __pfx_ret_from_fork+0x10/0x10
[ 115.865549][ T55] ? __switch_to+0xc89/0x1420
[ 115.865570][ T55] ? __pfx_kthread+0x10/0x10
[ 115.865592][ T55] ret_from_fork_asm+0x1a/0x30
[ 115.865613][ T55]
[ 115.865618][ T55]
[ 115.865622][ T55] The buggy address belongs to the physical page:
[ 115.865644][ T55] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038bfca00 pfn:0x38bfc
[ 115.865661][ T55] flags: 0x80000000000000(node=0|zone=1)
[ 115.865685][ T55] raw: 0080000000000000 ffffea0000fb4ec8 ffffea0000af4848 0000000000000000
[ 115.865699][ T55] raw: ffff888038bfca00 0000000000000000 00000000ffffffff 0000000000000000
[ 115.865707][ T55] page dumped because: kasan: bad access detected
[ 115.865725][ T55] page_owner tracks the page as freed
[ 115.865731][ T55] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5978, tgid 5978 (syz.0.41), ts 115817577726, free_ts 115861526343
[ 115.865756][ T55] post_alloc_hook+0x1f9/0x250
[ 115.865779][ T55] get_page_from_freelist+0x262a/0x26a0
[ 115.865796][ T55] __alloc_frozen_pages_noprof+0x18d/0x380
[ 115.865811][ T55] alloc_pages_mpol+0xce/0x280
[ 115.865828][ T55] alloc_pages_noprof+0xd2/0x2f0
[ 115.865844][ T55] lmLogInit+0x357/0x1a20
[ 115.865863][ T55] lmLogOpen+0x4e3/0xf90
[ 115.865881][ T55] jfs_mount_rw+0xf3/0x670
[ 115.865898][ T55] jfs_fill_super+0x769/0xda0
[ 115.865912][ T55] get_tree_bdev_flags+0x430/0x4f0
[ 115.865929][ T55] vfs_get_tree+0x92/0x2a0
[ 115.865944][ T55] do_new_mount+0x319/0xdc0
[ 115.865965][ T55] __se_sys_mount+0x31d/0x420
[ 115.865977][ T55] do_syscall_64+0x174/0x580
[ 115.865996][ T55] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.866011][ T55] page last free pid 5785 tgid 5785 stack trace:
[ 115.866020][ T55] __free_frozen_pages+0x10e7/0x11c0
[ 115.866034][ T55] lmLogShutdown+0x44e/0x850
[ 115.866053][ T55] lmLogClose+0x28c/0x530
[ 115.866071][ T55] jfs_umount+0x2da/0x3b0
[ 115.866088][ T55] jfs_put_super+0x8c/0x190
[ 115.866103][ T55] generic_shutdown_super+0x13d/0x2d0
[ 115.866118][ T55] kill_block_super+0x44/0x90
[ 115.866134][ T55] deactivate_locked_super+0xbc/0x130
[ 115.866148][ T55] cleanup_mnt+0x3d3/0x460
[ 115.866163][ T55] task_work_run+0x1d9/0x270
[ 115.866184][ T55] exit_to_user_mode_loop+0x1fa/0x730
[ 115.866197][ T55] do_syscall_64+0x353/0x580
[ 115.866215][ T55] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.866229][ T55]
[ 115.866233][ T55] Memory state around the buggy address:
[ 115.866242][ T55] ffff888038bfbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 115.866253][ T55] ffff888038bfbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 115.866263][ T55] >ffff888038bfc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 115.866271][ T55] ^
[ 115.866279][ T55] ffff888038bfc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 115.866289][ T55] ffff888038bfc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 115.866296][ T55] ==================================================================
[ 115.872325][ T55] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 115.872343][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 115.872360][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 115.872370][ T55] Workqueue: loop0 loop_workfn
[ 115.872396][ T55] Call Trace:
[ 115.872402][ T55]
[ 115.872409][ T55] vpanic+0x56c/0xa60
[ 115.872427][ T55] ? rcu_is_watching+0x15/0xb0
[ 115.872447][ T55] ? __pfx_vpanic+0x10/0x10
[ 115.872465][ T55] panic+0xc5/0xd0
[ 115.872480][ T55] ? __pfx_panic+0x10/0x10
[ 115.872494][ T55] ? preempt_schedule_thunk+0x16/0x40
[ 115.872520][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872543][ T55] ? preempt_schedule_thunk+0x16/0x40
[ 115.872560][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872582][ T55] check_panic_on_warn+0x89/0xb0
[ 115.872606][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872629][ T55] end_report+0x73/0x170
[ 115.872647][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872670][ T55] kasan_report+0x128/0x150
[ 115.872688][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872715][ T55] kasan_check_range+0x264/0x2c0
[ 115.872739][ T55] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872762][ T55] __asan_memcpy+0x29/0x70
[ 115.872785][ T55] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 115.872819][ T55] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 115.872844][ T55] ? rcu_is_watching+0x15/0xb0
[ 115.872865][ T55] ? shmem_write_begin+0x1ce/0x320
[ 115.872882][ T55] generic_perform_write+0x5a8/0x8b0
[ 115.872907][ T55] ? __pfx_generic_perform_write+0x10/0x10
[ 115.872928][ T55] ? __mark_inode_dirty+0x4e7/0x13b0
[ 115.872948][ T55] ? preempt_count_add+0x91/0x190
[ 115.872965][ T55] ? mnt_put_write_access_file+0xbf/0x100
[ 115.872984][ T55] ? file_update_time_flags+0x406/0x4b0
[ 115.873005][ T55] shmem_file_write_iter+0xfb/0x120
[ 115.873025][ T55] lo_rw_aio+0xc78/0xf30
[ 115.873053][ T55] ? __pfx_lo_rw_aio+0x10/0x10
[ 115.873076][ T55] ? kthread_associate_blkcg+0x490/0x600
[ 115.873100][ T55] ? rt_spin_unlock+0x163/0x200
[ 115.873119][ T55] loop_process_work+0x638/0x11d0
[ 115.873148][ T55] ? __pfx_loop_process_work+0x10/0x10
[ 115.873169][ T55] ? look_up_lock_class+0x57/0x110
[ 115.873191][ T55] ? register_lock_class+0x31/0x2e0
[ 115.873209][ T55] ? __lock_acquire+0x683/0x2ce0
[ 115.873223][ T55] ? irqentry_exit+0x218/0x8f0
[ 115.873244][ T55] ? lockdep_hardirqs_on+0x7a/0x110
[ 115.873264][ T55] ? irqentry_exit+0x218/0x8f0
[ 115.873284][ T55] ? trace_irq_disable+0x3b/0x140
[ 115.873302][ T55] ? do_raw_spin_lock+0x12b/0x2f0
[ 115.873325][ T55] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 115.873347][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.873367][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.873387][ T55] ? rcu_is_watching+0x15/0xb0
[ 115.873407][ T55] ? process_scheduled_works+0xa20/0x14e0
[ 115.873425][ T55] process_scheduled_works+0xa8e/0x14e0
[ 115.873454][ T55] ? __pfx_process_scheduled_works+0x10/0x10
[ 115.873475][ T55] ? assign_work+0x3cf/0x5d0
[ 115.873493][ T55] worker_thread+0xa47/0xfb0
[ 115.873515][ T55] ? __kthread_parkme+0x71/0x1f0
[ 115.873537][ T55] kthread+0x388/0x470
[ 115.873556][ T55] ? __pfx_worker_thread+0x10/0x10
[ 115.873571][ T55] ? __pfx_kthread+0x10/0x10
[ 115.873587][ T55] ret_from_fork+0x514/0xb70
[ 115.873609][ T55] ? __pfx_ret_from_fork+0x10/0x10
[ 115.873629][ T55] ? __switch_to+0xc89/0x1420
[ 115.873649][ T55] ? __pfx_kthread+0x10/0x10
[ 115.873669][ T55] ret_from_fork_asm+0x1a/0x30
[ 115.873687][ T55]
[ 115.873974][ T55] Kernel Offset: disabled