Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
[ 92.331441][ T32] cfg80211: failed to load regulatory.db
2026/04/16 10:18:29 parsed 1 programs
[ 97.848202][ T5831] cgroup: Unknown subsys name 'net'
[ 98.099635][ T5831] cgroup: Unknown subsys name 'cpuset'
[ 98.144679][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 100.296384][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.346238][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.347686][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.348455][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.349855][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.350565][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.502909][ T5907] chnl_net:caif_netlink_parms(): no params data found
[ 109.626901][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.628128][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.628318][ T5907] bridge_slave_0: entered allmulticast mode
[ 109.630412][ T5907] bridge_slave_0: entered promiscuous mode
[ 109.664404][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.664516][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.664693][ T5907] bridge_slave_1: entered allmulticast mode
[ 109.666839][ T5907] bridge_slave_1: entered promiscuous mode
[ 109.899909][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.903027][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.967009][ T5907] team0: Port device team_slave_0 added
[ 109.969519][ T5907] team0: Port device team_slave_1 added
[ 110.023101][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.023117][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.023138][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.057545][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.057605][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.057683][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.252111][ T5907] hsr_slave_0: entered promiscuous mode
[ 110.253267][ T5907] hsr_slave_1: entered promiscuous mode
[ 110.751488][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.796363][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 110.797178][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.833019][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 110.833828][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.868618][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 110.869419][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.908583][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 111.028588][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.061427][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.090398][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.091020][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.132329][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.132476][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.417845][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.490249][ T5907] veth0_vlan: entered promiscuous mode
[ 111.509085][ T5907] veth1_vlan: entered promiscuous mode
[ 111.578458][ T5907] veth0_macvtap: entered promiscuous mode
[ 111.582868][ T5907] veth1_macvtap: entered promiscuous mode
[ 111.628189][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.663343][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.712881][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.727991][ T1020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.728204][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.728244][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.669939][ T101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.991146][ T101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.259190][ T101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.437519][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.437542][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.595691][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.595714][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/16 10:18:50 executed programs: 0
[ 114.580466][ T101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.658429][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.660021][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.661015][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.662127][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.663048][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.973257][ T5945] chnl_net:caif_netlink_parms(): no params data found
[ 115.131418][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.131600][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.131786][ T5945] bridge_slave_0: entered allmulticast mode
[ 115.156305][ T5945] bridge_slave_0: entered promiscuous mode
[ 115.181871][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.182058][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.182222][ T5945] bridge_slave_1: entered allmulticast mode
[ 115.207086][ T5945] bridge_slave_1: entered promiscuous mode
[ 115.300721][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.311071][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.391306][ T5945] team0: Port device team_slave_0 added
[ 115.401917][ T5945] team0: Port device team_slave_1 added
[ 115.424927][ T101] bridge_slave_1: left allmulticast mode
[ 115.425124][ T101] bridge_slave_1: left promiscuous mode
[ 115.432325][ T101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.525563][ T101] bridge_slave_0: left allmulticast mode
[ 115.525588][ T101] bridge_slave_0: left promiscuous mode
[ 115.528086][ T101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.225104][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 116.285574][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 116.326410][ T101] bond0 (unregistering): Released all slaves
[ 116.522346][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.522378][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.522400][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.644205][ T101] hsr_slave_0: left promiscuous mode
[ 116.664183][ T101] hsr_slave_1: left promiscuous mode
[ 116.665421][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 116.665475][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 116.705673][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 116.705696][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 116.756174][ T5144] Bluetooth: hci0: command tx timeout
[ 116.785602][ T101] veth1_macvtap: left promiscuous mode
[ 116.787379][ T101] veth0_macvtap: left promiscuous mode
[ 116.787805][ T101] veth1_vlan: left promiscuous mode
[ 116.788003][ T101] veth0_vlan: left promiscuous mode
[ 117.564857][ T101] team0 (unregistering): Port device team_slave_1 removed
[ 117.604791][ T101] team0 (unregistering): Port device team_slave_0 removed
[ 117.817169][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.817184][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.817212][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 117.992824][ T5945] hsr_slave_0: entered promiscuous mode
[ 118.000935][ T5945] hsr_slave_1: entered promiscuous mode
[ 118.620412][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1
[ 118.836005][ T5144] Bluetooth: hci0: command tx timeout
[ 119.935812][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.981526][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 119.983884][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.066957][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 120.067895][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.132569][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 120.133551][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.182557][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 120.779393][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.803593][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.914246][ T5144] Bluetooth: hci0: command tx timeout
[ 121.072157][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.072301][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.098248][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.098390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.669338][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.739710][ T5945] veth0_vlan: entered promiscuous mode
[ 121.767394][ T5945] veth1_vlan: entered promiscuous mode
[ 121.807679][ T5945] veth0_macvtap: entered promiscuous mode
[ 121.812882][ T5945] veth1_macvtap: entered promiscuous mode
[ 121.852743][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.876832][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.900898][ T1460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.901941][ T1460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.902586][ T1460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.902629][ T1460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.316047][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.316072][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.381780][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.381803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/16 10:18:58 executed programs: 2
[ 122.820586][ T6018] loop0: detected capacity change from 0 to 32768
[ 122.994392][ T5144] Bluetooth: hci0: command tx timeout
[ 123.501889][ T6019] loop0: detected capacity change from 0 to 32768
[ 124.039627][ T6020] loop0: detected capacity change from 0 to 32768
[ 124.474421][ T6021] loop0: detected capacity change from 0 to 32768
[ 124.921477][ T6022] loop0: detected capacity change from 0 to 32768
[ 125.401812][ T6023] loop0: detected capacity change from 0 to 32768
[ 125.825078][ T6024] loop0: detected capacity change from 0 to 32768
[ 126.266583][ T6025] loop0: detected capacity change from 0 to 32768
[ 126.731699][ T6026] loop0: detected capacity change from 0 to 32768
[ 127.180543][ T6027] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:03 executed programs: 13
[ 127.981708][ T6029] set_capacity_and_notify: 1 callbacks suppressed
[ 127.981723][ T6029] loop0: detected capacity change from 0 to 32768
[ 128.400906][ T6030] loop0: detected capacity change from 0 to 32768
[ 128.815076][ T6031] loop0: detected capacity change from 0 to 32768
[ 129.217676][ T6032] loop0: detected capacity change from 0 to 32768
[ 129.633103][ T6033] loop0: detected capacity change from 0 to 32768
[ 130.033865][ T6034] loop0: detected capacity change from 0 to 32768
[ 130.531037][ T6035] loop0: detected capacity change from 0 to 32768
[ 130.961412][ T6037] loop0: detected capacity change from 0 to 32768
[ 131.455836][ T6039] loop0: detected capacity change from 0 to 32768
[ 131.868709][ T6044] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:08 executed programs: 25
[ 133.103799][ T6047] set_capacity_and_notify: 2 callbacks suppressed
[ 133.103814][ T6047] loop0: detected capacity change from 0 to 32768
[ 133.253287][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.253382][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.621579][ T6048] loop0: detected capacity change from 0 to 32768
[ 134.058882][ T6049] loop0: detected capacity change from 0 to 32768
[ 134.461316][ T6050] loop0: detected capacity change from 0 to 32768
[ 134.903469][ T6051] loop0: detected capacity change from 0 to 32768
[ 135.318818][ T6052] loop0: detected capacity change from 0 to 32768
[ 135.760201][ T6053] loop0: detected capacity change from 0 to 32768
[ 136.168720][ T6054] loop0: detected capacity change from 0 to 32768
[ 136.553271][ T6055] loop0: detected capacity change from 0 to 32768
[ 137.026200][ T6056] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:14 executed programs: 37
[ 138.268422][ T6059] set_capacity_and_notify: 2 callbacks suppressed
[ 138.268437][ T6059] loop0: detected capacity change from 0 to 32768
[ 138.698295][ T6060] loop0: detected capacity change from 0 to 32768
[ 139.107253][ T6061] loop0: detected capacity change from 0 to 32768
[ 139.540066][ T6062] loop0: detected capacity change from 0 to 32768
[ 139.968913][ T6063] loop0: detected capacity change from 0 to 32768
[ 140.392966][ T6064] loop0: detected capacity change from 0 to 32768
[ 140.842383][ T6065] loop0: detected capacity change from 0 to 32768
[ 141.250607][ T6066] loop0: detected capacity change from 0 to 32768
[ 141.695429][ T6067] loop0: detected capacity change from 0 to 32768
[ 142.085010][ T6068] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:19 executed programs: 49
[ 143.338167][ T6071] set_capacity_and_notify: 2 callbacks suppressed
[ 143.338181][ T6071] loop0: detected capacity change from 0 to 32768
[ 143.785654][ T6072] loop0: detected capacity change from 0 to 32768
[ 144.172806][ T6073] loop0: detected capacity change from 0 to 32768
[ 144.571152][ T6074] loop0: detected capacity change from 0 to 32768
[ 144.949821][ T6075] loop0: detected capacity change from 0 to 32768
[ 145.353211][ T6076] loop0: detected capacity change from 0 to 32768
[ 145.750679][ T6077] loop0: detected capacity change from 0 to 32768
[ 146.160041][ T6078] loop0: detected capacity change from 0 to 32768
[ 146.578514][ T6079] loop0: detected capacity change from 0 to 32768
[ 146.975340][ T6080] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:24 executed programs: 62
[ 148.559975][ T6084] set_capacity_and_notify: 3 callbacks suppressed
[ 148.559990][ T6084] loop0: detected capacity change from 0 to 32768
[ 148.994559][ T6085] loop0: detected capacity change from 0 to 32768
[ 149.390114][ T6086] loop0: detected capacity change from 0 to 32768
[ 149.767065][ T6087] loop0: detected capacity change from 0 to 32768
[ 150.161465][ T6088] loop0: detected capacity change from 0 to 32768
[ 150.566290][ T6089] loop0: detected capacity change from 0 to 32768
[ 150.972477][ T6090] loop0: detected capacity change from 0 to 32768
[ 151.362070][ T6091] loop0: detected capacity change from 0 to 32768
[ 151.777787][ T6092] loop0: detected capacity change from 0 to 32768
[ 152.234797][ T6093] loop0: detected capacity change from 0 to 32768
2026/04/16 10:19:29 executed programs: 75
[ 153.889453][ T6097] set_capacity_and_notify: 3 callbacks suppressed
[ 153.889474][ T6097] loop0: detected capacity change from 0 to 32768
[ 154.361265][ T6098] loop0: detected capacity change from 0 to 32768
[ 154.430462][ T1020] ==================================================================
[ 154.430479][ T1020] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.430533][ T1020] Read of size 4096 at addr ffff888037cb3000 by task kworker/u8:7/1020
[ 154.430553][ T1020]
[ 154.430589][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 154.430614][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 154.430633][ T1020] Workqueue: loop0 loop_workfn
[ 154.430676][ T1020] Call Trace:
[ 154.430688][ T1020]
[ 154.430697][ T1020] dump_stack_lvl+0xe8/0x150
[ 154.430724][ T1020] print_address_description+0x55/0x1e0
[ 154.430747][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.430779][ T1020] print_report+0x58/0x70
[ 154.430799][ T1020] kasan_report+0x117/0x150
[ 154.430832][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.430869][ T1020] kasan_check_range+0x264/0x2c0
[ 154.430903][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.430937][ T1020] __asan_memcpy+0x29/0x70
[ 154.430963][ T1020] copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.431008][ T1020] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 154.431051][ T1020] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 154.431086][ T1020] ? shmem_write_begin+0x1ce/0x320
[ 154.431120][ T1020] generic_perform_write+0x5b1/0x8b0
[ 154.431153][ T1020] ? __pfx_generic_perform_write+0x10/0x10
[ 154.431181][ T1020] ? file_update_time_flags+0x3b9/0x4b0
[ 154.431213][ T1020] shmem_file_write_iter+0xfb/0x120
[ 154.431238][ T1020] lo_rw_aio+0xc80/0xf00
[ 154.431269][ T1020] ? __pfx_lo_rw_aio+0x10/0x10
[ 154.431298][ T1020] ? kthread_associate_blkcg+0x490/0x600
[ 154.431328][ T1020] ? rt_spin_unlock+0x160/0x200
[ 154.431355][ T1020] loop_process_work+0x637/0x11b0
[ 154.431390][ T1020] ? __pfx_loop_process_work+0x10/0x10
[ 154.431414][ T1020] ? __lock_acquire+0x6b5/0x2cf0
[ 154.431442][ T1020] ? look_up_lock_class+0x57/0x110
[ 154.431474][ T1020] ? register_lock_class+0x31/0x2e0
[ 154.431504][ T1020] ? __lock_acquire+0x6b5/0x2cf0
[ 154.431534][ T1020] ? trace_hrtimer_start+0x82/0x200
[ 154.431560][ T1020] ? do_raw_spin_lock+0x12b/0x2f0
[ 154.431582][ T1020] ? lock_acquire+0x106/0x350
[ 154.431610][ T1020] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 154.431635][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.431664][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.431689][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.431711][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.431735][ T1020] process_scheduled_works+0xb68/0x1910
[ 154.431774][ T1020] ? __pfx_process_scheduled_works+0x10/0x10
[ 154.431800][ T1020] ? assign_work+0x3d5/0x5e0
[ 154.431824][ T1020] worker_thread+0xa90/0x1040
[ 154.431862][ T1020] kthread+0x388/0x470
[ 154.431889][ T1020] ? __pfx_worker_thread+0x10/0x10
[ 154.431911][ T1020] ? __pfx_kthread+0x10/0x10
[ 154.431939][ T1020] ret_from_fork+0x514/0xb70
[ 154.431964][ T1020] ? __pfx_ret_from_fork+0x10/0x10
[ 154.431986][ T1020] ? __switch_to+0xc79/0x1410
[ 154.432030][ T1020] ? __pfx_kthread+0x10/0x10
[ 154.432058][ T1020] ret_from_fork_asm+0x1a/0x30
[ 154.432092][ T1020]
[ 154.432100][ T1020]
[ 154.432106][ T1020] The buggy address belongs to the physical page:
[ 154.432127][ T1020] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x38 pfn:0x37cb3
[ 154.432146][ T1020] flags: 0x80000000000000(node=0|zone=1)
[ 154.432175][ T1020] raw: 0080000000000000 ffffea0000d17548 ffffea0001353448 0000000000000000
[ 154.432192][ T1020] raw: 0000000000000038 0000000000000000 00000000ffffffff 0000000000000000
[ 154.432202][ T1020] page dumped because: kasan: bad access detected
[ 154.432216][ T1020] page_owner tracks the page as freed
[ 154.432224][ T1020] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 6098, tgid 6098 (syz.0.91), ts 154383709391, free_ts 154428922615
[ 154.432255][ T1020] post_alloc_hook+0x231/0x280
[ 154.432282][ T1020] get_page_from_freelist+0x27d6/0x2850
[ 154.432315][ T1020] __alloc_frozen_pages_noprof+0x18d/0x380
[ 154.432346][ T1020] alloc_pages_mpol+0xd1/0x380
[ 154.432377][ T1020] alloc_pages_noprof+0xd2/0x2f0
[ 154.432408][ T1020] lmLogInit+0x357/0x1a00
[ 154.432438][ T1020] lmLogOpen+0x4e1/0xfa0
[ 154.432465][ T1020] jfs_mount_rw+0xee/0x670
[ 154.432493][ T1020] jfs_fill_super+0x754/0xd80
[ 154.432515][ T1020] get_tree_bdev_flags+0x431/0x4f0
[ 154.432546][ T1020] vfs_get_tree+0x92/0x2a0
[ 154.432575][ T1020] do_new_mount+0x341/0xd30
[ 154.432597][ T1020] __se_sys_mount+0x31d/0x420
[ 154.432619][ T1020] do_syscall_64+0x15f/0xf80
[ 154.432650][ T1020] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.432671][ T1020] page last free pid 5945 tgid 5945 stack trace:
[ 154.432683][ T1020] __free_frozen_pages+0xf9b/0x10f0
[ 154.432711][ T1020] lmLogShutdown+0x44e/0x850
[ 154.432742][ T1020] lmLogClose+0x28a/0x520
[ 154.432772][ T1020] jfs_umount+0x2fb/0x3d0
[ 154.432800][ T1020] jfs_put_super+0x8c/0x190
[ 154.432822][ T1020] generic_shutdown_super+0x13d/0x2d0
[ 154.432847][ T1020] kill_block_super+0x44/0x90
[ 154.432876][ T1020] deactivate_locked_super+0xbc/0x130
[ 154.432901][ T1020] cleanup_mnt+0x437/0x4d0
[ 154.432928][ T1020] task_work_run+0x1d9/0x270
[ 154.432957][ T1020] exit_to_user_mode_loop+0xed/0x480
[ 154.432982][ T1020] do_syscall_64+0x33e/0xf80
[ 154.433010][ T1020] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.433038][ T1020]
[ 154.433043][ T1020] Memory state around the buggy address:
[ 154.433054][ T1020] ffff888037cb2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 154.433068][ T1020] ffff888037cb2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 154.433082][ T1020] >ffff888037cb3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 154.433093][ T1020] ^
[ 154.433104][ T1020] ffff888037cb3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 154.433118][ T1020] ffff888037cb3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 154.433129][ T1020] ==================================================================
[ 154.446935][ T1020] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 154.447002][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 154.447087][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 154.447123][ T1020] Workqueue: loop0 loop_workfn
[ 154.447211][ T1020] Call Trace:
[ 154.447233][ T1020]
[ 154.447256][ T1020] vpanic+0x56c/0xa60
[ 154.447335][ T1020] ? __pfx_vpanic+0x10/0x10
[ 154.447442][ T1020] panic+0xc5/0xd0
[ 154.447520][ T1020] ? __pfx_panic+0x10/0x10
[ 154.447586][ T1020] ? preempt_schedule_thunk+0x16/0x30
[ 154.447682][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.447785][ T1020] ? preempt_schedule_thunk+0x16/0x30
[ 154.447872][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.447958][ T1020] check_panic_on_warn+0x89/0xb0
[ 154.448044][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.448137][ T1020] end_report+0x73/0x170
[ 154.448224][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.448312][ T1020] kasan_report+0x128/0x150
[ 154.448404][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.448503][ T1020] kasan_check_range+0x264/0x2c0
[ 154.448591][ T1020] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.448680][ T1020] __asan_memcpy+0x29/0x70
[ 154.448758][ T1020] copy_folio_from_iter_atomic+0xbb5/0x1ad0
[ 154.448911][ T1020] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 154.449003][ T1020] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 154.449101][ T1020] ? shmem_write_begin+0x1ce/0x320
[ 154.449199][ T1020] generic_perform_write+0x5b1/0x8b0
[ 154.449280][ T1020] ? __pfx_generic_perform_write+0x10/0x10
[ 154.449358][ T1020] ? file_update_time_flags+0x3b9/0x4b0
[ 154.449446][ T1020] shmem_file_write_iter+0xfb/0x120
[ 154.449511][ T1020] lo_rw_aio+0xc80/0xf00
[ 154.449592][ T1020] ? __pfx_lo_rw_aio+0x10/0x10
[ 154.449670][ T1020] ? kthread_associate_blkcg+0x490/0x600
[ 154.449758][ T1020] ? rt_spin_unlock+0x160/0x200
[ 154.449832][ T1020] loop_process_work+0x637/0x11b0
[ 154.449929][ T1020] ? __pfx_loop_process_work+0x10/0x10
[ 154.449995][ T1020] ? __lock_acquire+0x6b5/0x2cf0
[ 154.450072][ T1020] ? look_up_lock_class+0x57/0x110
[ 154.450144][ T1020] ? register_lock_class+0x31/0x2e0
[ 154.450172][ T1020] ? __lock_acquire+0x6b5/0x2cf0
[ 154.450201][ T1020] ? trace_hrtimer_start+0x82/0x200
[ 154.450226][ T1020] ? do_raw_spin_lock+0x12b/0x2f0
[ 154.450247][ T1020] ? lock_acquire+0x106/0x350
[ 154.450274][ T1020] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 154.450298][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.450337][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.450360][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.450380][ T1020] ? process_scheduled_works+0xa69/0x1910
[ 154.450401][ T1020] process_scheduled_works+0xb68/0x1910
[ 154.450438][ T1020] ? __pfx_process_scheduled_works+0x10/0x10
[ 154.450463][ T1020] ? assign_work+0x3d5/0x5e0
[ 154.450486][ T1020] worker_thread+0xa90/0x1040
[ 154.450522][ T1020] kthread+0x388/0x470
[ 154.450550][ T1020] ? __pfx_worker_thread+0x10/0x10
[ 154.450571][ T1020] ? __pfx_kthread+0x10/0x10
[ 154.450599][ T1020] ret_from_fork+0x514/0xb70
[ 154.450623][ T1020] ? __pfx_ret_from_fork+0x10/0x10
[ 154.450646][ T1020] ? __switch_to+0xc79/0x1410
[ 154.450680][ T1020] ? __pfx_kthread+0x10/0x10
[ 154.450708][ T1020] ret_from_fork_asm+0x1a/0x30
[ 154.450744][ T1020]
[ 154.450926][ T1020] Kernel Offset: disabled