Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts.
2026/07/27 23:02:56 parsed 1 programs
2026/07/27 23:02:56 serving rpc on tcp://33857
[ 77.879779][ T5605] cgroup: Unknown subsys name 'net'
[ 78.120614][ T5605] cgroup: Unknown subsys name 'cpuset'
[ 78.176176][ T5605] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 79.803045][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 81.531103][ T10] cfg80211: failed to load regulatory.db
[ 84.737213][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 84.744343][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 84.744980][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 84.757898][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 84.759002][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.777212][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.778448][ T5671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.778597][ T5671] bridge_slave_0: entered allmulticast mode
[ 86.780379][ T5671] bridge_slave_0: entered promiscuous mode
[ 86.784348][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.784471][ T5671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.784553][ T5671] bridge_slave_1: entered allmulticast mode
[ 86.787273][ T5671] bridge_slave_1: entered promiscuous mode
[ 86.829840][ T5671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.833332][ T5671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.868962][ T5671] team0: Port device team_slave_0 added
[ 86.870862][ T5671] team0: Port device team_slave_1 added
[ 86.907801][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 86.907814][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.907836][ T5671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 86.910235][ T5671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 86.910246][ T5671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 86.910259][ T5671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 86.978240][ T5671] hsr_slave_0: entered promiscuous mode
[ 86.979622][ T5671] hsr_slave_1: entered promiscuous mode
[ 87.189941][ T5671] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.241685][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 87.249113][ T5671] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.289128][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.291659][ T5671] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.329623][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.334560][ T5671] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.372486][ T5671] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.432934][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.433044][ T5671] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.433667][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.433747][ T5671] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.564151][ T5671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.616899][ T66] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.656713][ T66] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.004947][ T5671] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.033194][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.033335][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.086313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.086385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.472031][ T5671] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.538922][ T5671] veth0_vlan: entered promiscuous mode
[ 88.560784][ T5671] veth1_vlan: entered promiscuous mode
[ 88.611237][ T5671] veth0_macvtap: entered promiscuous mode
[ 88.615063][ T5671] veth1_macvtap: entered promiscuous mode
[ 88.650947][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.667129][ T5671] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.690275][ T1197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.696485][ T1197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.697971][ T1197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.699944][ T1197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.612421][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.039114][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.123601][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.123614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.279006][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.342738][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.342755][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.742352][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/27 23:03:12 executed programs: 0
[ 90.922008][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.935879][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.942764][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.945329][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.957952][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.506479][ T56] bridge_slave_1: left allmulticast mode
[ 91.508094][ T56] bridge_slave_1: left promiscuous mode
[ 91.513161][ T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.616747][ T56] bridge_slave_0: left allmulticast mode
[ 91.616768][ T56] bridge_slave_0: left promiscuous mode
[ 91.616905][ T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.266264][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 92.346322][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.387607][ T56] bond0 (unregistering): Released all slaves
[ 92.755892][ T56] hsr_slave_0: left promiscuous mode
[ 92.795867][ T56] hsr_slave_1: left promiscuous mode
[ 92.796949][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 92.797019][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 92.859811][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 92.859835][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.033914][ T59] Bluetooth: hci0: command tx timeout
[ 93.038467][ T56] veth1_macvtap: left promiscuous mode
[ 93.038727][ T56] veth0_macvtap: left promiscuous mode
[ 93.039952][ T56] veth1_vlan: left promiscuous mode
[ 93.040575][ T56] veth0_vlan: left promiscuous mode
[ 93.796264][ T56] team0 (unregistering): Port device team_slave_1 removed
[ 93.836497][ T56] team0 (unregistering): Port device team_slave_0 removed
[ 94.010375][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1
[ 94.171470][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.171662][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.171810][ T5728] bridge_slave_0: entered allmulticast mode
[ 94.174293][ T5728] bridge_slave_0: entered promiscuous mode
[ 94.178033][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.178210][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.178362][ T5728] bridge_slave_1: entered allmulticast mode
[ 94.180848][ T5728] bridge_slave_1: entered promiscuous mode
[ 94.232267][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.245279][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.310393][ T5728] team0: Port device team_slave_0 added
[ 94.313783][ T5728] team0: Port device team_slave_1 added
[ 94.355273][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.355289][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.355313][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.428686][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.428701][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.428724][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.552843][ T5728] hsr_slave_0: entered promiscuous mode
[ 94.554191][ T5728] hsr_slave_1: entered promiscuous mode
[ 94.825057][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2
[ 95.105844][ T59] Bluetooth: hci0: command tx timeout
[ 95.332964][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3
[ 96.712476][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.752344][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 96.753911][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.807850][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 96.808979][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.860388][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.147525][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.186226][ T59] Bluetooth: hci0: command tx timeout
[ 97.205667][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.344989][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.615400][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.695578][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.695715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.721251][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.721354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.119290][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.171596][ T5728] veth0_vlan: entered promiscuous mode
[ 98.184079][ T5728] veth1_vlan: entered promiscuous mode
[ 98.250006][ T5728] veth0_macvtap: entered promiscuous mode
[ 98.272302][ T5728] veth1_macvtap: entered promiscuous mode
[ 98.304844][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.325643][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.340893][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.341136][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.341173][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.341205][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.700477][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.700497][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.753614][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.753630][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/27 23:03:20 executed programs: 2
[ 99.110521][ T5850] loop0: detected capacity change from 0 to 32768
[ 99.277841][ T59] Bluetooth: hci0: command tx timeout
[ 99.659566][ T5851] loop0: detected capacity change from 0 to 32768
[ 100.149553][ T5852] loop0: detected capacity change from 0 to 32768
[ 100.549195][ T5853] loop0: detected capacity change from 0 to 32768
[ 100.933945][ T5854] loop0: detected capacity change from 0 to 32768
[ 101.305149][ T5855] loop0: detected capacity change from 0 to 32768
[ 101.656213][ T5856] loop0: detected capacity change from 0 to 32768
[ 102.028230][ T5857] loop0: detected capacity change from 0 to 32768
[ 102.364470][ T5858] loop0: detected capacity change from 0 to 32768
[ 102.730154][ T5859] loop0: detected capacity change from 0 to 32768
2026/07/27 23:03:25 executed programs: 15
[ 104.216839][ T5863] set_capacity_and_notify: 3 callbacks suppressed
[ 104.216850][ T5863] loop0: detected capacity change from 0 to 32768
[ 104.581683][ T5864] loop0: detected capacity change from 0 to 32768
[ 104.949628][ T5865] loop0: detected capacity change from 0 to 32768
[ 105.290336][ T5866] loop0: detected capacity change from 0 to 32768
[ 105.641468][ T5867] loop0: detected capacity change from 0 to 32768
[ 106.009043][ T5868] loop0: detected capacity change from 0 to 32768
[ 106.372813][ T5869] loop0: detected capacity change from 0 to 32768
[ 106.702250][ T5870] loop0: detected capacity change from 0 to 32768
[ 107.040758][ T5871] loop0: detected capacity change from 0 to 32768
[ 107.388668][ T5872] loop0: detected capacity change from 0 to 32768
[ 107.819276][ T1197] ==================================================================
[ 107.819291][ T1197] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.819329][ T1197] Read of size 4096 at addr ffff88802b021000 by task kworker/u8:9/1197
[ 107.819345][ T1197]
[ 107.819366][ T1197] CPU: 1 UID: 0 PID: 1197 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.819392][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 107.819404][ T1197] Workqueue: loop0 loop_workfn
[ 107.819441][ T1197] Call Trace:
[ 107.819448][ T1197]
[ 107.819456][ T1197] dump_stack_lvl+0xe8/0x150
[ 107.819485][ T1197] print_address_description+0x55/0x1e0
[ 107.819514][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.819534][ T1197] print_report+0x58/0x70
[ 107.819558][ T1197] kasan_report+0x117/0x150
[ 107.819582][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.819606][ T1197] kasan_check_range+0x264/0x2c0
[ 107.819627][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.819648][ T1197] __asan_memcpy+0x29/0x70
[ 107.819676][ T1197] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.819705][ T1197] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 107.819726][ T1197] ? rcu_is_watching+0x15/0xb0
[ 107.819752][ T1197] ? shmem_write_begin+0x1ce/0x320
[ 107.819775][ T1197] generic_perform_write+0x5a8/0x8b0
[ 107.819799][ T1197] ? __pfx_generic_perform_write+0x10/0x10
[ 107.819817][ T1197] ? __mark_inode_dirty+0x4e7/0x13b0
[ 107.819843][ T1197] ? preempt_count_add+0x91/0x190
[ 107.819866][ T1197] ? mnt_put_write_access_file+0xbf/0x100
[ 107.819893][ T1197] ? file_update_time_flags+0x406/0x4b0
[ 107.819928][ T1197] shmem_file_write_iter+0xfb/0x120
[ 107.819953][ T1197] lo_rw_aio+0xc78/0xf30
[ 107.819987][ T1197] ? __pfx_lo_rw_aio+0x10/0x10
[ 107.820019][ T1197] ? kthread_associate_blkcg+0x490/0x600
[ 107.820049][ T1197] ? rt_spin_unlock+0x163/0x200
[ 107.820079][ T1197] loop_process_work+0x638/0x11d0
[ 107.820115][ T1197] ? __pfx_loop_process_work+0x10/0x10
[ 107.820143][ T1197] ? look_up_lock_class+0x57/0x110
[ 107.820166][ T1197] ? register_lock_class+0x31/0x2e0
[ 107.820187][ T1197] ? __lock_acquire+0x683/0x2ce0
[ 107.820208][ T1197] ? lapic_next_event+0x11/0x20
[ 107.820226][ T1197] ? clockevents_program_event+0x491/0x630
[ 107.820255][ T1197] ? do_raw_spin_lock+0x12b/0x2f0
[ 107.820283][ T1197] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 107.820311][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.820334][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.820359][ T1197] ? rcu_is_watching+0x15/0xb0
[ 107.820383][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.820404][ T1197] process_scheduled_works+0xa8e/0x14e0
[ 107.820438][ T1197] ? __pfx_process_scheduled_works+0x10/0x10
[ 107.820463][ T1197] ? assign_work+0x3cf/0x5d0
[ 107.820486][ T1197] worker_thread+0xa47/0xfb0
[ 107.820521][ T1197] kthread+0x388/0x470
[ 107.820548][ T1197] ? __pfx_worker_thread+0x10/0x10
[ 107.820569][ T1197] ? __pfx_kthread+0x10/0x10
[ 107.820597][ T1197] ret_from_fork+0x514/0xb70
[ 107.820627][ T1197] ? __pfx_ret_from_fork+0x10/0x10
[ 107.820655][ T1197] ? __switch_to+0xc89/0x1420
[ 107.820683][ T1197] ? __pfx_kthread+0x10/0x10
[ 107.820710][ T1197] ret_from_fork_asm+0x1a/0x30
[ 107.820735][ T1197]
[ 107.820742][ T1197]
[ 107.820747][ T1197] The buggy address belongs to the physical page:
[ 107.820765][ T1197] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b021
[ 107.820782][ T1197] flags: 0x80000000000000(node=0|zone=1)
[ 107.820808][ T1197] raw: 0080000000000000 ffffea0000faa7c8 ffffea00012a3c48 0000000000000000
[ 107.820823][ T1197] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 107.820832][ T1197] page dumped because: kasan: bad access detected
[ 107.820845][ T1197] page_owner tracks the page as freed
[ 107.820851][ T1197] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5873, tgid 5873 (syz.0.40), ts 107765117223, free_ts 107817417478
[ 107.820880][ T1197] post_alloc_hook+0x1f9/0x250
[ 107.820897][ T1197] get_page_from_freelist+0x262a/0x26a0
[ 107.820924][ T1197] __alloc_frozen_pages_noprof+0x18d/0x380
[ 107.820944][ T1197] alloc_pages_mpol+0xce/0x280
[ 107.820964][ T1197] alloc_pages_noprof+0xd2/0x2f0
[ 107.820983][ T1197] lmLogInit+0x357/0x1a20
[ 107.821008][ T1197] lmLogOpen+0x4e3/0xf90
[ 107.821032][ T1197] jfs_mount_rw+0xf3/0x670
[ 107.821055][ T1197] jfs_fill_super+0x769/0xda0
[ 107.821074][ T1197] get_tree_bdev_flags+0x430/0x4f0
[ 107.821096][ T1197] vfs_get_tree+0x92/0x2a0
[ 107.821116][ T1197] do_new_mount+0x319/0xdc0
[ 107.821132][ T1197] __se_sys_mount+0x31d/0x420
[ 107.821148][ T1197] do_syscall_64+0x174/0x580
[ 107.821168][ T1197] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.821185][ T1197] page last free pid 5728 tgid 5728 stack trace:
[ 107.821195][ T1197] __free_frozen_pages+0x10e7/0x11c0
[ 107.821212][ T1197] lmLogShutdown+0x44e/0x850
[ 107.821227][ T1197] lmLogClose+0x28c/0x530
[ 107.821252][ T1197] jfs_umount+0x2da/0x3b0
[ 107.821274][ T1197] jfs_put_super+0x8c/0x190
[ 107.821292][ T1197] generic_shutdown_super+0x13d/0x2d0
[ 107.821311][ T1197] kill_block_super+0x44/0x90
[ 107.821331][ T1197] deactivate_locked_super+0xbc/0x130
[ 107.821350][ T1197] cleanup_mnt+0x3d3/0x460
[ 107.821369][ T1197] task_work_run+0x1d9/0x270
[ 107.821385][ T1197] exit_to_user_mode_loop+0x1fa/0x730
[ 107.821401][ T1197] do_syscall_64+0x353/0x580
[ 107.821420][ T1197] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.821436][ T1197]
[ 107.821440][ T1197] Memory state around the buggy address:
[ 107.821449][ T1197] ffff88802b020f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.821461][ T1197] ffff88802b020f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 107.821472][ T1197] >ffff88802b021000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.821480][ T1197] ^
[ 107.821489][ T1197] ffff88802b021080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.821501][ T1197] ffff88802b021100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.821509][ T1197] ==================================================================
[ 107.823221][ T1197] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.823238][ T1197] CPU: 1 UID: 0 PID: 1197 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.823260][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 107.823272][ T1197] Workqueue: loop0 loop_workfn
[ 107.823302][ T1197] Call Trace:
[ 107.823309][ T1197]
[ 107.823316][ T1197] vpanic+0x56c/0xa60
[ 107.823337][ T1197] ? rcu_is_watching+0x15/0xb0
[ 107.823360][ T1197] ? __pfx_vpanic+0x10/0x10
[ 107.823382][ T1197] panic+0xc5/0xd0
[ 107.823399][ T1197] ? __pfx_panic+0x10/0x10
[ 107.823416][ T1197] ? preempt_schedule_thunk+0x16/0x40
[ 107.823441][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823461][ T1197] ? preempt_schedule_thunk+0x16/0x40
[ 107.823484][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823504][ T1197] check_panic_on_warn+0x89/0xb0
[ 107.823522][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823540][ T1197] end_report+0x73/0x170
[ 107.823561][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823578][ T1197] kasan_report+0x128/0x150
[ 107.823599][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823623][ T1197] kasan_check_range+0x264/0x2c0
[ 107.823643][ T1197] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823663][ T1197] __asan_memcpy+0x29/0x70
[ 107.823690][ T1197] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 107.823718][ T1197] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 107.823739][ T1197] ? rcu_is_watching+0x15/0xb0
[ 107.823762][ T1197] ? shmem_write_begin+0x1ce/0x320
[ 107.823783][ T1197] generic_perform_write+0x5a8/0x8b0
[ 107.823807][ T1197] ? __pfx_generic_perform_write+0x10/0x10
[ 107.823826][ T1197] ? __mark_inode_dirty+0x4e7/0x13b0
[ 107.823851][ T1197] ? preempt_count_add+0x91/0x190
[ 107.823874][ T1197] ? mnt_put_write_access_file+0xbf/0x100
[ 107.823899][ T1197] ? file_update_time_flags+0x406/0x4b0
[ 107.823931][ T1197] shmem_file_write_iter+0xfb/0x120
[ 107.823955][ T1197] lo_rw_aio+0xc78/0xf30
[ 107.823986][ T1197] ? __pfx_lo_rw_aio+0x10/0x10
[ 107.824016][ T1197] ? kthread_associate_blkcg+0x490/0x600
[ 107.824044][ T1197] ? rt_spin_unlock+0x163/0x200
[ 107.824074][ T1197] loop_process_work+0x638/0x11d0
[ 107.824108][ T1197] ? __pfx_loop_process_work+0x10/0x10
[ 107.824136][ T1197] ? look_up_lock_class+0x57/0x110
[ 107.824158][ T1197] ? register_lock_class+0x31/0x2e0
[ 107.824179][ T1197] ? __lock_acquire+0x683/0x2ce0
[ 107.824200][ T1197] ? lapic_next_event+0x11/0x20
[ 107.824219][ T1197] ? clockevents_program_event+0x491/0x630
[ 107.824247][ T1197] ? do_raw_spin_lock+0x12b/0x2f0
[ 107.824275][ T1197] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 107.824304][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.824326][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.824350][ T1197] ? rcu_is_watching+0x15/0xb0
[ 107.824373][ T1197] ? process_scheduled_works+0xa20/0x14e0
[ 107.824395][ T1197] process_scheduled_works+0xa8e/0x14e0
[ 107.824430][ T1197] ? __pfx_process_scheduled_works+0x10/0x10
[ 107.824455][ T1197] ? assign_work+0x3cf/0x5d0
[ 107.824477][ T1197] worker_thread+0xa47/0xfb0
[ 107.824512][ T1197] kthread+0x388/0x470
[ 107.824539][ T1197] ? __pfx_worker_thread+0x10/0x10
[ 107.824561][ T1197] ? __pfx_kthread+0x10/0x10
[ 107.824588][ T1197] ret_from_fork+0x514/0xb70
[ 107.824619][ T1197] ? __pfx_ret_from_fork+0x10/0x10
[ 107.824647][ T1197] ? __switch_to+0xc89/0x1420
[ 107.824672][ T1197] ? __pfx_kthread+0x10/0x10
[ 107.824700][ T1197] ret_from_fork_asm+0x1a/0x30
[ 107.824725][ T1197]
[ 107.824975][ T1197] Kernel Offset: disabled