[ 92.267302][ T964] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. 2026/06/25 22:20:19 parsed 1 programs 2026/06/25 22:20:19 serving rpc on tcp://44713 [ 103.163429][ T5620] cgroup: Unknown subsys name 'net' [ 103.431125][ T5620] cgroup: Unknown subsys name 'cpuset' [ 103.495576][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.788549][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.316197][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.333564][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.343983][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.352377][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.356974][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.810879][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.815481][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.816548][ T5686] bridge_slave_0: entered allmulticast mode [ 115.826027][ T5686] bridge_slave_0: entered promiscuous mode [ 115.858299][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.858522][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.858802][ T5686] bridge_slave_1: entered allmulticast mode [ 115.862273][ T5686] bridge_slave_1: entered promiscuous mode [ 115.953102][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.966895][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.032547][ T5686] team0: Port device team_slave_0 added [ 116.041459][ T5686] team0: Port device team_slave_1 added [ 116.101807][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.101822][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.101841][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.117386][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.117432][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.117507][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.334899][ T5686] hsr_slave_0: entered promiscuous mode [ 116.337690][ T5686] hsr_slave_1: entered promiscuous mode [ 117.099197][ T5686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.172190][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.173581][ T5686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.213860][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.225803][ T5686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.259013][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.260278][ T5686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.286716][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.523267][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.619120][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.658446][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.658662][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.714140][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.714307][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.368338][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.507323][ T5686] veth0_vlan: entered promiscuous mode [ 118.528657][ T5686] veth1_vlan: entered promiscuous mode [ 118.623490][ T5686] veth0_macvtap: entered promiscuous mode [ 118.639873][ T5686] veth1_macvtap: entered promiscuous mode [ 118.692077][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.749867][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.837519][ T1395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.859490][ T1395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.877557][ T1395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.895111][ T1395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.760720][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.007962][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.007994][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.149250][ T1395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.149273][ T1395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.753758][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.169761][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.750721][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/25 22:20:43 executed programs: 0 [ 122.274349][ T4920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.291922][ T4920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.321314][ T4920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.328424][ T4920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.341610][ T4920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.975817][ T148] bridge_slave_1: left allmulticast mode [ 122.976065][ T148] bridge_slave_1: left promiscuous mode [ 122.988446][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.188851][ T148] bridge_slave_0: left allmulticast mode [ 123.188888][ T148] bridge_slave_0: left promiscuous mode [ 123.189324][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.085472][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.145593][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.188542][ T148] bond0 (unregistering): Released all slaves [ 124.247734][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.468555][ T60] Bluetooth: hci0: command tx timeout [ 124.694753][ T148] hsr_slave_0: left promiscuous mode [ 124.735056][ T148] hsr_slave_1: left promiscuous mode [ 124.761939][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.762042][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.809661][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.809692][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.947385][ T148] veth1_macvtap: left promiscuous mode [ 124.947746][ T148] veth0_macvtap: left promiscuous mode [ 124.948125][ T148] veth1_vlan: left promiscuous mode [ 124.948502][ T148] veth0_vlan: left promiscuous mode [ 125.735493][ T148] team0 (unregistering): Port device team_slave_1 removed [ 125.795405][ T148] team0 (unregistering): Port device team_slave_0 removed [ 126.029780][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.544587][ T60] Bluetooth: hci0: command tx timeout [ 126.730502][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.730970][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.731369][ T5747] bridge_slave_0: entered allmulticast mode [ 126.756942][ T5747] bridge_slave_0: entered promiscuous mode [ 126.760972][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.761548][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.762080][ T5747] bridge_slave_1: entered allmulticast mode [ 126.803198][ T5747] bridge_slave_1: entered promiscuous mode [ 126.938460][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.956816][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.050048][ T5747] team0: Port device team_slave_0 added [ 127.066018][ T5747] team0: Port device team_slave_1 added [ 127.247432][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.247445][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.247464][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.251783][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.259713][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.259819][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.259897][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.428102][ T5747] hsr_slave_0: entered promiscuous mode [ 127.430749][ T5747] hsr_slave_1: entered promiscuous mode [ 128.343515][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 128.625884][ T60] Bluetooth: hci0: command tx timeout [ 130.705347][ T60] Bluetooth: hci0: command tx timeout [ 131.206869][ T5747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.244271][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.253095][ T5747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.293281][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.310794][ T5747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.357286][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.359157][ T5747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.396916][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.708273][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.788097][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.818953][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.835239][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.893823][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.894013][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.098937][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.191728][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191876][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358366][ T5747] veth0_vlan: entered promiscuous mode [ 133.423533][ T5747] veth1_vlan: entered promiscuous mode [ 133.579871][ T5747] veth0_macvtap: entered promiscuous mode [ 133.598650][ T5747] veth1_macvtap: entered promiscuous mode [ 133.662412][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.692957][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.734838][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.737327][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.773442][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.788840][ T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.427021][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.427050][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.579502][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.579525][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/25 22:20:55 executed programs: 2 [ 135.020260][ T5943] loop0: detected capacity change from 0 to 32768 [ 135.229303][ T5943] [ 135.229303][ T5943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.229303][ T5943] [ 135.343729][ T5747] [ 135.343729][ T5747] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.343729][ T5747] [ 135.391250][ T5747] [ 135.391250][ T5747] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.391250][ T5747] [ 135.439071][ T5813] ================================================================== [ 135.439157][ T5813] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.439194][ T5813] Read of size 4096 at addr ffff888043ac8000 by task kworker/u8:13/5813 [ 135.439211][ T5813] [ 135.439240][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.439265][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.439278][ T5813] Workqueue: loop0 loop_workfn [ 135.439330][ T5813] Call Trace: [ 135.439341][ T5813] [ 135.439349][ T5813] dump_stack_lvl+0xe8/0x150 [ 135.439380][ T5813] print_address_description+0x55/0x1e0 [ 135.439408][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.439432][ T5813] print_report+0x58/0x70 [ 135.439456][ T5813] kasan_report+0x117/0x150 [ 135.439480][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.439501][ T5813] kasan_check_range+0x264/0x2c0 [ 135.439522][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.439543][ T5813] __asan_memcpy+0x29/0x70 [ 135.439562][ T5813] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.439674][ T5813] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 135.439716][ T5813] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 135.439754][ T5813] ? shmem_write_begin+0x1ce/0x320 [ 135.439779][ T5813] generic_perform_write+0x5a8/0x8b0 [ 135.439836][ T5813] ? __pfx_generic_perform_write+0x10/0x10 [ 135.439883][ T5813] ? generic_write_checks_count+0x426/0x530 [ 135.439910][ T5813] ? file_update_time_flags+0x3b9/0x4b0 [ 135.439939][ T5813] shmem_file_write_iter+0xfb/0x120 [ 135.439967][ T5813] lo_rw_aio+0xc78/0xf30 [ 135.440007][ T5813] ? __pfx_lo_rw_aio+0x10/0x10 [ 135.440040][ T5813] ? kthread_associate_blkcg+0x490/0x600 [ 135.440064][ T5813] ? rt_spin_unlock+0x163/0x200 [ 135.440091][ T5813] loop_process_work+0x638/0x11d0 [ 135.440126][ T5813] ? __pfx_loop_process_work+0x10/0x10 [ 135.440158][ T5813] ? look_up_lock_class+0x57/0x110 [ 135.440178][ T5813] ? register_lock_class+0x31/0x2e0 [ 135.440208][ T5813] ? rcu_is_watching+0x15/0xb0 [ 135.440231][ T5813] ? __lock_acquire+0x683/0x2ce0 [ 135.440268][ T5813] ? __pfx___schedule+0x10/0x10 [ 135.440299][ T5813] ? irqentry_exit+0x218/0x8f0 [ 135.440321][ T5813] ? irqentry_exit+0x218/0x8f0 [ 135.440341][ T5813] ? trace_irq_disable+0x3b/0x140 [ 135.440370][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.440406][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.440443][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.440475][ T5813] ? rcu_is_watching+0x15/0xb0 [ 135.440491][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.440519][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.440546][ T5813] process_one_work+0x93a/0x12b0 [ 135.440582][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 135.440609][ T5813] ? do_raw_spin_lock+0x26c/0x2f0 [ 135.440634][ T5813] ? assign_work+0x3cf/0x5d0 [ 135.440663][ T5813] worker_thread+0xb05/0x10d0 [ 135.440685][ T5813] ? __kthread_parkme+0x71/0x1f0 [ 135.440707][ T5813] kthread+0x388/0x470 [ 135.440729][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 135.440745][ T5813] ? __pfx_kthread+0x10/0x10 [ 135.440766][ T5813] ret_from_fork+0x514/0xb70 [ 135.440792][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 135.440814][ T5813] ? __switch_to+0xc89/0x1420 [ 135.440834][ T5813] ? __pfx_kthread+0x10/0x10 [ 135.440866][ T5813] ret_from_fork_asm+0x1a/0x30 [ 135.440902][ T5813] [ 135.440916][ T5813] [ 135.440934][ T5813] The buggy address belongs to the physical page: [ 135.440948][ T5813] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888043ac8000 pfn:0x43ac8 [ 135.440971][ T5813] flags: 0x80000000000000(node=0|zone=1) [ 135.441004][ T5813] raw: 0080000000000000 ffffea000107a3c8 ffffea00010eb108 0000000000000000 [ 135.441020][ T5813] raw: ffff888043ac8000 0000000000000000 00000000ffffffff 0000000000000000 [ 135.441029][ T5813] page dumped because: kasan: bad access detected [ 135.441042][ T5813] page_owner tracks the page as freed [ 135.441052][ T5813] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5943, tgid 5942 (syz.0.17), ts 135155686945, free_ts 135438283052 [ 135.441081][ T5813] post_alloc_hook+0x1f9/0x250 [ 135.441100][ T5813] get_page_from_freelist+0x2639/0x26b0 [ 135.441121][ T5813] __alloc_frozen_pages_noprof+0x18d/0x380 [ 135.441142][ T5813] alloc_pages_mpol+0xce/0x280 [ 135.441164][ T5813] alloc_pages_noprof+0xd2/0x2f0 [ 135.441185][ T5813] lmLogInit+0x357/0x1a20 [ 135.441213][ T5813] lmLogOpen+0x4e3/0xf90 [ 135.441238][ T5813] jfs_mount_rw+0xf3/0x670 [ 135.441264][ T5813] jfs_fill_super+0x769/0xda0 [ 135.441283][ T5813] get_tree_bdev_flags+0x430/0x4f0 [ 135.441307][ T5813] vfs_get_tree+0x92/0x2a0 [ 135.441329][ T5813] do_new_mount+0x319/0xdc0 [ 135.441345][ T5813] __se_sys_mount+0x31d/0x420 [ 135.441364][ T5813] do_syscall_64+0x174/0x580 [ 135.441379][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.441396][ T5813] page last free pid 5747 tgid 5747 stack trace: [ 135.441406][ T5813] __free_frozen_pages+0x10de/0x11c0 [ 135.441424][ T5813] lmLogShutdown+0x44e/0x850 [ 135.441439][ T5813] lmLogClose+0x28c/0x530 [ 135.441453][ T5813] jfs_umount+0x2da/0x3b0 [ 135.441477][ T5813] jfs_put_super+0x8c/0x190 [ 135.441496][ T5813] generic_shutdown_super+0x13d/0x2d0 [ 135.441515][ T5813] kill_block_super+0x44/0x90 [ 135.441537][ T5813] deactivate_locked_super+0xbc/0x130 [ 135.441557][ T5813] cleanup_mnt+0x3d3/0x460 [ 135.441578][ T5813] task_work_run+0x1d9/0x270 [ 135.441600][ T5813] exit_to_user_mode_loop+0x1fa/0x730 [ 135.441624][ T5813] do_syscall_64+0x353/0x580 [ 135.441639][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.441655][ T5813] [ 135.441659][ T5813] Memory state around the buggy address: [ 135.441668][ T5813] ffff888043ac7f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.441680][ T5813] ffff888043ac7f80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 135.441692][ T5813] >ffff888043ac8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.441701][ T5813] ^ [ 135.441709][ T5813] ffff888043ac8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.441721][ T5813] ffff888043ac8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.441747][ T5813] ================================================================== [ 135.441814][ T5813] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.441836][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.441869][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.441885][ T5813] Workqueue: loop0 loop_workfn [ 135.441919][ T5813] Call Trace: [ 135.441928][ T5813] [ 135.441937][ T5813] vpanic+0x56c/0xa60 [ 135.441971][ T5813] ? __pfx_vpanic+0x10/0x10 [ 135.442008][ T5813] panic+0xc5/0xd0 [ 135.442038][ T5813] ? __pfx_panic+0x10/0x10 [ 135.442068][ T5813] ? preempt_schedule_thunk+0x16/0x40 [ 135.442092][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442115][ T5813] ? preempt_schedule_thunk+0x16/0x40 [ 135.442140][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442162][ T5813] check_panic_on_warn+0x89/0xb0 [ 135.442192][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442215][ T5813] end_report+0x73/0x170 [ 135.442244][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442267][ T5813] kasan_report+0x128/0x150 [ 135.442295][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442322][ T5813] kasan_check_range+0x264/0x2c0 [ 135.442351][ T5813] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442375][ T5813] __asan_memcpy+0x29/0x70 [ 135.442397][ T5813] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 135.442434][ T5813] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 135.442458][ T5813] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 135.442505][ T5813] ? shmem_write_begin+0x1ce/0x320 [ 135.442537][ T5813] generic_perform_write+0x5a8/0x8b0 [ 135.442575][ T5813] ? __pfx_generic_perform_write+0x10/0x10 [ 135.442606][ T5813] ? generic_write_checks_count+0x426/0x530 [ 135.442632][ T5813] ? file_update_time_flags+0x3b9/0x4b0 [ 135.442664][ T5813] shmem_file_write_iter+0xfb/0x120 [ 135.442695][ T5813] lo_rw_aio+0xc78/0xf30 [ 135.442737][ T5813] ? __pfx_lo_rw_aio+0x10/0x10 [ 135.442775][ T5813] ? kthread_associate_blkcg+0x490/0x600 [ 135.442804][ T5813] ? rt_spin_unlock+0x163/0x200 [ 135.442835][ T5813] loop_process_work+0x638/0x11d0 [ 135.442889][ T5813] ? __pfx_loop_process_work+0x10/0x10 [ 135.442922][ T5813] ? look_up_lock_class+0x57/0x110 [ 135.442944][ T5813] ? register_lock_class+0x31/0x2e0 [ 135.442974][ T5813] ? rcu_is_watching+0x15/0xb0 [ 135.442997][ T5813] ? __lock_acquire+0x683/0x2ce0 [ 135.443057][ T5813] ? __pfx___schedule+0x10/0x10 [ 135.443089][ T5813] ? irqentry_exit+0x218/0x8f0 [ 135.443110][ T5813] ? irqentry_exit+0x218/0x8f0 [ 135.443130][ T5813] ? trace_irq_disable+0x3b/0x140 [ 135.443162][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.443194][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.443230][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.443264][ T5813] ? rcu_is_watching+0x15/0xb0 [ 135.443284][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.443319][ T5813] ? process_one_work+0x8cd/0x12b0 [ 135.443352][ T5813] process_one_work+0x93a/0x12b0 [ 135.443397][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 135.443431][ T5813] ? do_raw_spin_lock+0x26c/0x2f0 [ 135.443461][ T5813] ? assign_work+0x3cf/0x5d0 [ 135.443498][ T5813] worker_thread+0xb05/0x10d0 [ 135.443525][ T5813] ? __kthread_parkme+0x71/0x1f0 [ 135.443553][ T5813] kthread+0x388/0x470 [ 135.443580][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 135.443599][ T5813] ? __pfx_kthread+0x10/0x10 [ 135.443626][ T5813] ret_from_fork+0x514/0xb70 [ 135.443656][ T5813] ? __pfx_ret_from_fork+0x10/0x10 [ 135.443684][ T5813] ? __switch_to+0xc89/0x1420 [ 135.443708][ T5813] ? __pfx_kthread+0x10/0x10 [ 135.443736][ T5813] ret_from_fork_asm+0x1a/0x30 [ 135.443770][ T5813] [ 135.446052][ T5813] Kernel Offset: disabled