[ 81.638343][ T197] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
2026/06/26 23:37:43 parsed 1 programs
2026/06/26 23:37:43 serving rpc on tcp://46103
[ 89.102635][ T5609] cgroup: Unknown subsys name 'net'
[ 89.345218][ T5609] cgroup: Unknown subsys name 'cpuset'
[ 89.398816][ T5609] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 91.071284][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.907326][ T2170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.907355][ T2170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.065350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.065370][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.767689][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.768429][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.768566][ T5682] bridge_slave_0: entered allmulticast mode
[ 99.771009][ T5682] bridge_slave_0: entered promiscuous mode
[ 99.797629][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.797737][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.797856][ T5682] bridge_slave_1: entered allmulticast mode
[ 99.801363][ T5682] bridge_slave_1: entered promiscuous mode
[ 99.858508][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.863849][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.904163][ T5682] team0: Port device team_slave_0 added
[ 99.906263][ T5682] team0: Port device team_slave_1 added
[ 99.938075][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.938086][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.938098][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.089494][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.089509][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.089522][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.171726][ T5682] hsr_slave_0: entered promiscuous mode
[ 100.172673][ T5682] hsr_slave_1: entered promiscuous mode
[ 100.475767][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.524258][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 100.526016][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.551483][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 100.552374][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.592092][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 100.595628][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.641091][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 100.901725][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.992997][ T5682] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.015989][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.017304][ T5697] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.042956][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.043066][ T5697] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.444763][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.509787][ T5682] veth0_vlan: entered promiscuous mode
[ 101.527739][ T5682] veth1_vlan: entered promiscuous mode
[ 101.594675][ T5682] veth0_macvtap: entered promiscuous mode
[ 101.610320][ T5682] veth1_macvtap: entered promiscuous mode
[ 101.691973][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.719403][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.736886][ T5697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.748303][ T5697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.768124][ T5697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.768210][ T5697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.316998][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.320858][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.324555][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.332652][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.333590][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.507215][ T5695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.786208][ T5695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/26 23:38:00 executed programs: 0
[ 103.689727][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.716424][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.730806][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.732432][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.741183][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.905181][ T5695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.364218][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.364344][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.364446][ T5734] bridge_slave_0: entered allmulticast mode
[ 104.365853][ T5734] bridge_slave_0: entered promiscuous mode
[ 104.367848][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.367962][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.372283][ T5734] bridge_slave_1: entered allmulticast mode
[ 104.377586][ T5734] bridge_slave_1: entered promiscuous mode
[ 104.434819][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.438042][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.474348][ T5734] team0: Port device team_slave_0 added
[ 104.477877][ T5734] team0: Port device team_slave_1 added
[ 104.508524][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.508535][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.508547][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.510319][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.510332][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.510344][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.572601][ T5734] hsr_slave_0: entered promiscuous mode
[ 104.576426][ T5734] hsr_slave_1: entered promiscuous mode
[ 104.577355][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[ 104.577456][ T5734] Cannot create hsr debugfs directory
[ 104.777861][ T5695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.482283][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1
[ 105.649247][ T5695] bridge_slave_1: left allmulticast mode
[ 105.649450][ T5695] bridge_slave_1: left promiscuous mode
[ 105.657911][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.780275][ T4906] Bluetooth: hci0: command tx timeout
[ 105.839986][ T5695] bridge_slave_0: left allmulticast mode
[ 105.840018][ T5695] bridge_slave_0: left promiscuous mode
[ 105.840248][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.608908][ T5695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 106.689185][ T5695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 106.710080][ T5695] bond0 (unregistering): Released all slaves
[ 106.873574][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2
[ 107.268351][ T5695] hsr_slave_0: left promiscuous mode
[ 107.308375][ T5695] hsr_slave_1: left promiscuous mode
[ 107.309290][ T5695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.309348][ T5695] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.351907][ T5695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.351933][ T5695] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 107.429576][ T5695] veth1_macvtap: left promiscuous mode
[ 107.430775][ T5695] veth0_macvtap: left promiscuous mode
[ 107.430955][ T5695] veth1_vlan: left promiscuous mode
[ 107.431149][ T5695] veth0_vlan: left promiscuous mode
[ 107.858913][ T4906] Bluetooth: hci0: command tx timeout
[ 108.108965][ T5695] team0 (unregistering): Port device team_slave_1 removed
[ 108.149112][ T5695] team0 (unregistering): Port device team_slave_0 removed
[ 109.443075][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 109.477700][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 109.482187][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 109.527687][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 109.534956][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 109.574065][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 109.575345][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 109.613782][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 109.938416][ T4906] Bluetooth: hci0: command tx timeout
[ 110.005422][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.030071][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.035070][ T67] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.035189][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.112432][ T67] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.112557][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.502124][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.631998][ T5734] veth0_vlan: entered promiscuous mode
[ 110.642614][ T5734] veth1_vlan: entered promiscuous mode
[ 110.691338][ T5734] veth0_macvtap: entered promiscuous mode
[ 110.694740][ T5734] veth1_macvtap: entered promiscuous mode
[ 110.713045][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.722599][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.768123][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.770344][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.777522][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.837275][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.119458][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.119477][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.166849][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.166868][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/26 23:38:07 executed programs: 2
[ 111.504793][ T5850] loop0: detected capacity change from 0 to 32768
[ 112.028495][ T4906] Bluetooth: hci0: command tx timeout
[ 112.117920][ T5851] loop0: detected capacity change from 0 to 32768
[ 112.571340][ T5853] loop0: detected capacity change from 0 to 32768
[ 112.996327][ T5854] loop0: detected capacity change from 0 to 32768
[ 113.391762][ T5855] loop0: detected capacity change from 0 to 32768
[ 113.787814][ T5857] loop0: detected capacity change from 0 to 32768
[ 114.153590][ T5858] loop0: detected capacity change from 0 to 32768
[ 114.517258][ T5859] loop0: detected capacity change from 0 to 32768
[ 114.912409][ T5860] loop0: detected capacity change from 0 to 32768
[ 115.283690][ T5862] loop0: detected capacity change from 0 to 32768
2026/06/26 23:38:12 executed programs: 15
[ 116.814294][ T5868] set_capacity_and_notify: 3 callbacks suppressed
[ 116.814307][ T5868] loop0: detected capacity change from 0 to 32768
[ 117.206994][ T5870] loop0: detected capacity change from 0 to 32768
[ 117.534954][ T5871] loop0: detected capacity change from 0 to 32768
[ 117.910638][ T5872] loop0: detected capacity change from 0 to 32768
[ 118.281948][ T5873] loop0: detected capacity change from 0 to 32768
[ 118.632703][ T5874] loop0: detected capacity change from 0 to 32768
[ 118.973301][ T5875] loop0: detected capacity change from 0 to 32768
[ 119.325438][ T5876] loop0: detected capacity change from 0 to 32768
[ 119.697430][ T5877] loop0: detected capacity change from 0 to 32768
[ 120.067473][ T5878] loop0: detected capacity change from 0 to 32768
2026/06/26 23:38:18 executed programs: 29
[ 121.862338][ T5883] set_capacity_and_notify: 4 callbacks suppressed
[ 121.862351][ T5883] loop0: detected capacity change from 0 to 32768
[ 122.231568][ T5884] loop0: detected capacity change from 0 to 32768
[ 122.569522][ T5885] loop0: detected capacity change from 0 to 32768
[ 122.924943][ T5886] loop0: detected capacity change from 0 to 32768
[ 123.275630][ T5887] loop0: detected capacity change from 0 to 32768
[ 123.629258][ T5888] loop0: detected capacity change from 0 to 32768
[ 123.981150][ T5889] loop0: detected capacity change from 0 to 32768
[ 124.361528][ T5890] loop0: detected capacity change from 0 to 32768
[ 124.706741][ T5891] loop0: detected capacity change from 0 to 32768
[ 125.063873][ T5892] loop0: detected capacity change from 0 to 32768
[ 125.810649][ T67] ==================================================================
[ 125.810663][ T67] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.810702][ T67] Read of size 4096 at addr ffff88803dea0000 by task kworker/u8:4/67
[ 125.810717][ T67]
[ 125.810734][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 125.810760][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 125.810771][ T67] Workqueue: loop0 loop_workfn
[ 125.810807][ T67] Call Trace:
[ 125.810814][ T67]
[ 125.810821][ T67] dump_stack_lvl+0xe8/0x150
[ 125.810842][ T67] print_address_description+0x55/0x1e0
[ 125.810862][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.810880][ T67] print_report+0x58/0x70
[ 125.810897][ T67] kasan_report+0x117/0x150
[ 125.810920][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.810943][ T67] kasan_check_range+0x264/0x2c0
[ 125.810964][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.810984][ T67] __asan_memcpy+0x29/0x70
[ 125.811002][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.811030][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 125.811051][ T67] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 125.811076][ T67] ? shmem_write_begin+0x1ce/0x320
[ 125.811096][ T67] generic_perform_write+0x5a8/0x8b0
[ 125.811120][ T67] ? __pfx_generic_perform_write+0x10/0x10
[ 125.811138][ T67] ? generic_write_checks_count+0x426/0x530
[ 125.811164][ T67] ? file_update_time_flags+0x3b9/0x4b0
[ 125.811188][ T67] shmem_file_write_iter+0xfb/0x120
[ 125.811212][ T67] lo_rw_aio+0xc78/0xf30
[ 125.811233][ T67] ? __pfx_lo_rw_aio+0x10/0x10
[ 125.811252][ T67] ? kthread_associate_blkcg+0x490/0x600
[ 125.811271][ T67] ? rt_spin_unlock+0x163/0x200
[ 125.811294][ T67] loop_process_work+0x638/0x11d0
[ 125.811311][ T67] ? __lock_acquire+0x683/0x2ce0
[ 125.811336][ T67] ? __pfx_loop_process_work+0x10/0x10
[ 125.811351][ T67] ? look_up_lock_class+0x57/0x110
[ 125.811367][ T67] ? register_lock_class+0x31/0x2e0
[ 125.811388][ T67] ? __lock_acquire+0x683/0x2ce0
[ 125.811412][ T67] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.811429][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.811445][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.811467][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.811489][ T67] ? rcu_is_watching+0x15/0xb0
[ 125.811514][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.811535][ T67] process_scheduled_works+0xa8e/0x14e0
[ 125.811566][ T67] ? __pfx_process_scheduled_works+0x10/0x10
[ 125.811590][ T67] ? assign_work+0x3cf/0x5d0
[ 125.811613][ T67] worker_thread+0xa47/0xfb0
[ 125.811646][ T67] kthread+0x388/0x470
[ 125.811664][ T67] ? __pfx_worker_thread+0x10/0x10
[ 125.811686][ T67] ? __pfx_kthread+0x10/0x10
[ 125.811703][ T67] ret_from_fork+0x514/0xb70
[ 125.811722][ T67] ? __pfx_ret_from_fork+0x10/0x10
[ 125.811740][ T67] ? __switch_to+0xc89/0x1420
[ 125.811765][ T67] ? __pfx_kthread+0x10/0x10
[ 125.811783][ T67] ret_from_fork_asm+0x1a/0x30
[ 125.811811][ T67]
[ 125.811817][ T67]
[ 125.811821][ T67] The buggy address belongs to the physical page:
[ 125.811836][ T67] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xfdf pfn:0x3dea0
[ 125.811849][ T67] flags: 0x80000000000000(node=0|zone=1)
[ 125.811870][ T67] raw: 0080000000000000 ffffea00010312c8 ffffea0000d15d88 0000000000000000
[ 125.811880][ T67] raw: 0000000000000fdf 0000000000000000 00000000ffffffff 0000000000000000
[ 125.811887][ T67] page dumped because: kasan: bad access detected
[ 125.811898][ T67] page_owner tracks the page as freed
[ 125.811903][ T67] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5894, tgid 5894 (syz.0.55), ts 125747703649, free_ts 125809167237
[ 125.811924][ T67] post_alloc_hook+0x1f9/0x250
[ 125.811939][ T67] get_page_from_freelist+0x262a/0x26a0
[ 125.811956][ T67] __alloc_frozen_pages_noprof+0x18d/0x380
[ 125.811971][ T67] alloc_pages_mpol+0xce/0x280
[ 125.811986][ T67] alloc_pages_noprof+0xd2/0x2f0
[ 125.812001][ T67] lmLogInit+0x357/0x1a20
[ 125.812012][ T67] lmLogOpen+0x4e3/0xf90
[ 125.812021][ T67] jfs_mount_rw+0xf3/0x670
[ 125.812031][ T67] jfs_fill_super+0x769/0xda0
[ 125.812045][ T67] get_tree_bdev_flags+0x430/0x4f0
[ 125.812061][ T67] vfs_get_tree+0x92/0x2a0
[ 125.812075][ T67] do_new_mount+0x319/0xdc0
[ 125.812088][ T67] __se_sys_mount+0x31d/0x420
[ 125.812100][ T67] do_syscall_64+0x174/0x580
[ 125.812112][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.812123][ T67] page last free pid 5734 tgid 5734 stack trace:
[ 125.812130][ T67] __free_frozen_pages+0x10e7/0x11c0
[ 125.812143][ T67] lmLogShutdown+0x44e/0x850
[ 125.812154][ T67] lmLogClose+0x28c/0x530
[ 125.812164][ T67] jfs_umount+0x2da/0x3b0
[ 125.812174][ T67] jfs_put_super+0x8c/0x190
[ 125.812187][ T67] generic_shutdown_super+0x13d/0x2d0
[ 125.812201][ T67] kill_block_super+0x44/0x90
[ 125.812216][ T67] deactivate_locked_super+0xbc/0x130
[ 125.812230][ T67] cleanup_mnt+0x3d3/0x460
[ 125.812245][ T67] task_work_run+0x1d9/0x270
[ 125.812261][ T67] exit_to_user_mode_loop+0x1fa/0x730
[ 125.812276][ T67] do_syscall_64+0x353/0x580
[ 125.812287][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.812299][ T67]
[ 125.812302][ T67] Memory state around the buggy address:
[ 125.812309][ T67] ffff88803de9ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 125.812318][ T67] ffff88803de9ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 125.812326][ T67] >ffff88803dea0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 125.812333][ T67] ^
[ 125.812340][ T67] ffff88803dea0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 125.812348][ T67] ffff88803dea0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 125.812355][ T67] ==================================================================
[ 125.813880][ T67] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 125.813895][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 125.813911][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 125.813919][ T67] Workqueue: loop0 loop_workfn
[ 125.813938][ T67] Call Trace:
[ 125.813943][ T67]
[ 125.813949][ T67] vpanic+0x56c/0xa60
[ 125.813968][ T67] ? rcu_is_watching+0x15/0xb0
[ 125.813987][ T67] ? __pfx_vpanic+0x10/0x10
[ 125.814005][ T67] panic+0xc5/0xd0
[ 125.814020][ T67] ? __pfx_panic+0x10/0x10
[ 125.814035][ T67] ? preempt_schedule_thunk+0x16/0x40
[ 125.814056][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814075][ T67] ? preempt_schedule_thunk+0x16/0x40
[ 125.814092][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814106][ T67] check_panic_on_warn+0x89/0xb0
[ 125.814122][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814136][ T67] end_report+0x73/0x170
[ 125.814153][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814167][ T67] kasan_report+0x128/0x150
[ 125.814186][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814204][ T67] kasan_check_range+0x264/0x2c0
[ 125.814222][ T67] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814236][ T67] __asan_memcpy+0x29/0x70
[ 125.814251][ T67] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 125.814273][ T67] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 125.814289][ T67] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 125.814308][ T67] ? shmem_write_begin+0x1ce/0x320
[ 125.814327][ T67] generic_perform_write+0x5a8/0x8b0
[ 125.814346][ T67] ? __pfx_generic_perform_write+0x10/0x10
[ 125.814360][ T67] ? generic_write_checks_count+0x426/0x530
[ 125.814377][ T67] ? file_update_time_flags+0x3b9/0x4b0
[ 125.814396][ T67] shmem_file_write_iter+0xfb/0x120
[ 125.814415][ T67] lo_rw_aio+0xc78/0xf30
[ 125.814434][ T67] ? __pfx_lo_rw_aio+0x10/0x10
[ 125.814449][ T67] ? kthread_associate_blkcg+0x490/0x600
[ 125.814464][ T67] ? rt_spin_unlock+0x163/0x200
[ 125.814483][ T67] loop_process_work+0x638/0x11d0
[ 125.814496][ T67] ? __lock_acquire+0x683/0x2ce0
[ 125.814518][ T67] ? __pfx_loop_process_work+0x10/0x10
[ 125.814534][ T67] ? look_up_lock_class+0x57/0x110
[ 125.814548][ T67] ? register_lock_class+0x31/0x2e0
[ 125.814564][ T67] ? __lock_acquire+0x683/0x2ce0
[ 125.814582][ T67] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.814596][ T67] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.814610][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.814627][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.814647][ T67] ? rcu_is_watching+0x15/0xb0
[ 125.814667][ T67] ? process_scheduled_works+0xa20/0x14e0
[ 125.814685][ T67] process_scheduled_works+0xa8e/0x14e0
[ 125.814709][ T67] ? __pfx_process_scheduled_works+0x10/0x10
[ 125.814728][ T67] ? assign_work+0x3cf/0x5d0
[ 125.814746][ T67] worker_thread+0xa47/0xfb0
[ 125.814783][ T67] kthread+0x388/0x470
[ 125.814797][ T67] ? __pfx_worker_thread+0x10/0x10
[ 125.814812][ T67] ? __pfx_kthread+0x10/0x10
[ 125.814826][ T67] ret_from_fork+0x514/0xb70
[ 125.814841][ T67] ? __pfx_ret_from_fork+0x10/0x10
[ 125.814855][ T67] ? __switch_to+0xc89/0x1420
[ 125.814868][ T67] ? __pfx_kthread+0x10/0x10
[ 125.814882][ T67] ret_from_fork_asm+0x1a/0x30
[ 125.814903][ T67]
[ 125.816635][ T67] Kernel Offset: disabled