Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. 2026/05/03 05:32:54 parsed 1 programs [ 104.038886][ T5619] cgroup: Unknown subsys name 'net' [ 104.301469][ T5619] cgroup: Unknown subsys name 'cpuset' [ 104.354579][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.484725][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.439415][ T4917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.477010][ T4917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.491303][ T4917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.506843][ T4917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.508291][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.743460][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.753463][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.754082][ T5659] bridge_slave_0: entered allmulticast mode [ 113.771410][ T5659] bridge_slave_0: entered promiscuous mode [ 113.792774][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.792930][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.793055][ T5659] bridge_slave_1: entered allmulticast mode [ 113.805388][ T5659] bridge_slave_1: entered promiscuous mode [ 113.865961][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.870166][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.923202][ T5659] team0: Port device team_slave_0 added [ 113.935738][ T5659] team0: Port device team_slave_1 added [ 113.972898][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.972912][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.972932][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.015783][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.015833][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.015904][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.112029][ T5659] hsr_slave_0: entered promiscuous mode [ 114.113190][ T5659] hsr_slave_1: entered promiscuous mode [ 114.413028][ T5659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.481567][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.486172][ T5659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.510961][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.706405][ T5659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.733767][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.738598][ T5659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.786035][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.977372][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.022324][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.057548][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.057887][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.091020][ T1518] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.091119][ T1518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.709820][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.809882][ T5659] veth0_vlan: entered promiscuous mode [ 115.839014][ T5659] veth1_vlan: entered promiscuous mode [ 115.941264][ T5659] veth0_macvtap: entered promiscuous mode [ 115.951683][ T5659] veth1_macvtap: entered promiscuous mode [ 115.984806][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.003123][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.046210][ T1537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.050547][ T1537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.066849][ T1537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.097526][ T1537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.881168][ T1518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.021284][ T1518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.139045][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.142421][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.236562][ T1537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.236581][ T1537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.049639][ T1518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.349766][ T1518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.394113][ T1518] bridge_slave_1: left allmulticast mode [ 120.394355][ T1518] bridge_slave_1: left promiscuous mode [ 120.400360][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.515072][ T1518] bridge_slave_0: left allmulticast mode [ 120.515101][ T1518] bridge_slave_0: left promiscuous mode [ 120.515368][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.264705][ T1518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.324670][ T1518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.367447][ T1518] bond0 (unregistering): Released all slaves [ 121.420124][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 121.814016][ T1518] hsr_slave_0: left promiscuous mode [ 121.853794][ T1518] hsr_slave_1: left promiscuous mode [ 121.856460][ T1518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.856531][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.905850][ T1518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.905878][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.037566][ T1518] veth1_macvtap: left promiscuous mode [ 122.037800][ T1518] veth0_macvtap: left promiscuous mode [ 122.038093][ T1518] veth1_vlan: left promiscuous mode [ 122.038398][ T1518] veth0_vlan: left promiscuous mode [ 122.891440][ T1518] team0 (unregistering): Port device team_slave_1 removed [ 122.934435][ T1518] team0 (unregistering): Port device team_slave_0 removed [ 123.161688][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 124.184902][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 125.567612][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 2026/05/03 05:33:20 executed programs: 0 [ 126.597727][ T4917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.643463][ T4917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.665284][ T4917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.701878][ T4917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.702992][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.160667][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.160821][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.160931][ T5806] bridge_slave_0: entered allmulticast mode [ 128.162805][ T5806] bridge_slave_0: entered promiscuous mode [ 128.185808][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.187473][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.194443][ T5806] bridge_slave_1: entered allmulticast mode [ 128.201120][ T5806] bridge_slave_1: entered promiscuous mode [ 128.289856][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.293090][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.351734][ T5806] team0: Port device team_slave_0 added [ 128.357728][ T5806] team0: Port device team_slave_1 added [ 128.390755][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.390773][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.390797][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.392426][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.392437][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.392455][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.522833][ T5806] hsr_slave_0: entered promiscuous mode [ 128.526326][ T5806] hsr_slave_1: entered promiscuous mode [ 128.807092][ T4917] Bluetooth: hci0: command tx timeout [ 130.713867][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.769554][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.771261][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.799671][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.801433][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.847587][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.849011][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.883758][ T4917] Bluetooth: hci0: command tx timeout [ 130.907945][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.102971][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.160355][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.190838][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.191469][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.264609][ T1537] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.264720][ T1537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.099702][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.239901][ T5806] veth0_vlan: entered promiscuous mode [ 132.271525][ T5806] veth1_vlan: entered promiscuous mode [ 132.331689][ T5806] veth0_macvtap: entered promiscuous mode [ 132.382362][ T5806] veth1_macvtap: entered promiscuous mode [ 132.450634][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.475911][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.500599][ T1518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.500675][ T1518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.527004][ T1518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.529424][ T1518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.966536][ T4917] Bluetooth: hci0: command tx timeout [ 133.037661][ T1518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.037684][ T1518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.137626][ T1518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.137666][ T1518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.212288][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.212388][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 2026/05/03 05:33:27 executed programs: 2 [ 133.838215][ T5937] loop0: detected capacity change from 0 to 32768 [ 134.923213][ T5964] loop0: detected capacity change from 0 to 32768 [ 135.043736][ T4917] Bluetooth: hci0: command tx timeout [ 135.446307][ T5967] loop0: detected capacity change from 0 to 32768 [ 135.918224][ T5968] loop0: detected capacity change from 0 to 32768 [ 136.407024][ T5969] loop0: detected capacity change from 0 to 32768 [ 136.907120][ T5970] loop0: detected capacity change from 0 to 32768 [ 137.374309][ T5971] loop0: detected capacity change from 0 to 32768 [ 137.791071][ T5972] loop0: detected capacity change from 0 to 32768 [ 138.295154][ T5973] loop0: detected capacity change from 0 to 32768 2026/05/03 05:33:32 executed programs: 11 [ 138.697442][ T5974] loop0: detected capacity change from 0 to 32768 [ 139.140973][ T5975] loop0: detected capacity change from 0 to 32768 [ 139.557859][ T5976] loop0: detected capacity change from 0 to 32768 [ 139.972701][ T5977] loop0: detected capacity change from 0 to 32768 [ 140.371634][ T5978] loop0: detected capacity change from 0 to 32768 [ 140.788355][ T5979] loop0: detected capacity change from 0 to 32768 [ 141.241345][ T5980] loop0: detected capacity change from 0 to 32768 [ 141.656608][ T5981] loop0: detected capacity change from 0 to 32768 [ 142.064512][ T5982] loop0: detected capacity change from 0 to 32768 [ 142.552615][ T5983] loop0: detected capacity change from 0 to 32768 [ 142.657902][ T3294] =========================[ 142.657902][ T3294] ================================================================== [ 142.657920][ T3294] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.657966][ T3294] Read of size 4096 at addr ffff8880251d5000 by task kworker/u8:17/3294 [ 142.657984][ T3294] [ 142.658016][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.658048][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.658063][ T3294] Workqueue: loop0 loop_workfn [ 142.658108][ T3294] Call Trace: [ 142.658116][ T3294] [ 142.658125][ T3294] dump_stack_lvl+0xe8/0x150 [ 142.658151][ T3294] print_address_description+0x55/0x1e0 [ 142.658177][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.658199][ T3294] print_report+0x58/0x70 [ 142.658222][ T3294] kasan_report+0x117/0x150 [ 142.658249][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.658309][ T3294] kasan_check_range+0x264/0x2c0 [ 142.658334][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.658357][ T3294] __asan_memcpy+0x29/0x70 [ 142.658389][ T3294] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.658423][ T3294] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 142.658448][ T3294] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 142.658482][ T3294] ? shmem_write_begin+0x1ce/0x320 [ 142.658511][ T3294] generic_perform_write+0x5b1/0x8b0 [ 142.658544][ T3294] ? __pfx_generic_perform_write+0x10/0x10 [ 142.658575][ T3294] ? file_update_time_flags+0x3b9/0x4b0 [ 142.658612][ T3294] shmem_file_write_iter+0xfb/0x120 [ 142.658645][ T3294] lo_rw_aio+0xc80/0xf00 [ 142.658682][ T3294] ? __pfx_lo_rw_aio+0x10/0x10 [ 142.658720][ T3294] ? kthread_associate_blkcg+0x490/0x600 [ 142.658752][ T3294] ? rt_spin_unlock+0x160/0x200 [ 142.658786][ T3294] loop_process_work+0x637/0x11b0 [ 142.658825][ T3294] ? __pfx_loop_process_work+0x10/0x10 [ 142.658854][ T3294] ? __lock_acquire+0x6b5/0x2cf0 [ 142.658882][ T3294] ? look_up_lock_class+0x57/0x110 [ 142.658907][ T3294] ? register_lock_class+0x31/0x2e0 [ 142.658938][ T3294] ? __lock_acquire+0x6b5/0x2cf0 [ 142.658969][ T3294] ? trace_hrtimer_start+0x82/0x200 [ 142.658996][ T3294] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.659020][ T3294] ? lock_acquire+0x106/0x350 [ 142.659049][ T3294] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.659076][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.659105][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.659132][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.659154][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.659178][ T3294] process_scheduled_works+0xb5d/0x1860 [ 142.659218][ T3294] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.659262][ T3294] ? assign_work+0x3d5/0x5e0 [ 142.659287][ T3294] worker_thread+0xa53/0xfc0 [ 142.659325][ T3294] kthread+0x388/0x470 [ 142.659354][ T3294] ? __pfx_worker_thread+0x10/0x10 [ 142.659378][ T3294] ? __pfx_kthread+0x10/0x10 [ 142.659408][ T3294] ret_from_fork+0x514/0xb70 [ 142.659434][ T3294] ? __pfx_ret_from_fork+0x10/0x10 [ 142.659458][ T3294] ? __switch_to+0xc79/0x1410 [ 142.659493][ T3294] ? __pfx_kthread+0x10/0x10 [ 142.659523][ T3294] ret_from_fork_asm+0x1a/0x30 [ 142.659559][ T3294] [ 142.659567][ T3294] [ 142.659572][ T3294] The buggy address belongs to the physical page: [ 142.659600][ T3294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880251d5640 pfn:0x251d5 [ 142.659621][ T3294] flags: 0x80000000000000(node=0|zone=1) [ 142.659650][ T3294] raw: 0080000000000000 ffffea0000ed35c8 ffffea0000e39e88 0000000000000000 [ 142.659668][ T3294] raw: ffff8880251d5640 0000000000000000 00000000ffffffff 0000000000000000 [ 142.659679][ T3294] page dumped because: kasan: bad access detected [ 142.659693][ T3294] page_owner tracks the page as freed [ 142.659700][ T3294] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5983, tgid 5983 (syz.0.35), ts 142579398793, free_ts 142656308658 [ 142.659731][ T3294] post_alloc_hook+0x231/0x280 [ 142.659754][ T3294] get_page_from_freelist+0x27c8/0x2840 [ 142.659781][ T3294] __alloc_frozen_pages_noprof+0x18d/0x380 [ 142.659807][ T3294] alloc_pages_mpol+0xd1/0x380 [ 142.659830][ T3294] alloc_pages_noprof+0xd2/0x2f0 [ 142.659853][ T3294] lmLogInit+0x357/0x1a00 [ 142.659877][ T3294] lmLogOpen+0x4e1/0xfa0 [ 142.659901][ T3294] jfs_mount_rw+0xee/0x670 [ 142.659923][ T3294] jfs_fill_super+0x754/0xd80 [ 142.659940][ T3294] get_tree_bdev_flags+0x431/0x4f0 [ 142.659963][ T3294] vfs_get_tree+0x92/0x2a0 [ 142.659985][ T3294] do_new_mount+0x341/0xd30 [ 142.660015][ T3294] __se_sys_mount+0x31d/0x420 [ 142.660044][ T3294] do_syscall_64+0x15f/0xf80 [ 142.660065][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.660086][ T3294] page last free pid 5806 tgid 5806 stack trace: [ 142.660098][ T3294] __free_frozen_pages+0xfa6/0x10f0 [ 142.660120][ T3294] lmLogShutdown+0x44e/0x850 [ 142.660145][ T3294] lmLogClose+0x28a/0x520 [ 142.660170][ T3294] jfs_umount+0x2fb/0x3d0 [ 142.660199][ T3294] jfs_put_super+0x8c/0x190 [ 142.660217][ T3294] generic_shutdown_super+0x13d/0x2d0 [ 142.660241][ T3294] kill_block_super+0x44/0x90 [ 142.660263][ T3294] deactivate_locked_super+0xbc/0x130 [ 142.660281][ T3294] cleanup_mnt+0x437/0x4d0 [ 142.660301][ T3294] task_work_run+0x1d9/0x270 [ 142.660330][ T3294] exit_to_user_mode_loop+0xed/0x480 [ 142.660356][ T3294] do_syscall_64+0x33e/0xf80 [ 142.660377][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.660403][ T3294] [ 142.660409][ T3294] Memory state around the buggy address: [ 142.660419][ T3294] ffff8880251d4f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.660434][ T3294] ffff8880251d4f80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 142.660448][ T3294] >ffff8880251d5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.660458][ T3294] ^ [ 142.660468][ T3294] ffff8880251d5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.660482][ T3294] ffff8880251d5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 142.660492][ T3294] ================================================================== [ 142.667402][ T3294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.667505][ T3294] CPU: 0 UID: 0 PID: 3294 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.667687][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.667745][ T3294] Workqueue: loop0 loop_workfn [ 142.667841][ T3294] Call Trace: [ 142.667865][ T3294] [ 142.667889][ T3294] vpanic+0x56c/0xa60 [ 142.667973][ T3294] ? __pfx_vpanic+0x10/0x10 [ 142.668059][ T3294] panic+0xc5/0xd0 [ 142.668129][ T3294] ? __pfx_panic+0x10/0x10 [ 142.668203][ T3294] ? preempt_schedule_thunk+0x16/0x30 [ 142.668295][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.668367][ T3294] ? preempt_schedule_thunk+0x16/0x30 [ 142.668461][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.668522][ T3294] check_panic_on_warn+0x89/0xb0 [ 142.668621][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.668688][ T3294] end_report+0x73/0x170 [ 142.668756][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.668786][ T3294] kasan_report+0x128/0x150 [ 142.668831][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.668867][ T3294] kasan_check_range+0x264/0x2c0 [ 142.668937][ T3294] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.669007][ T3294] __asan_memcpy+0x29/0x70 [ 142.669126][ T3294] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 142.669234][ T3294] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 142.669296][ T3294] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 142.669377][ T3294] ? shmem_write_begin+0x1ce/0x320 [ 142.669451][ T3294] generic_perform_write+0x5b1/0x8b0 [ 142.669546][ T3294] ? __pfx_generic_perform_write+0x10/0x10 [ 142.669637][ T3294] ? file_update_time_flags+0x3b9/0x4b0 [ 142.669710][ T3294] shmem_file_write_iter+0xfb/0x120 [ 142.669804][ T3294] lo_rw_aio+0xc80/0xf00 [ 142.669902][ T3294] ? __pfx_lo_rw_aio+0x10/0x10 [ 142.669991][ T3294] ? kthread_associate_blkcg+0x490/0x600 [ 142.670078][ T3294] ? rt_spin_unlock+0x160/0x200 [ 142.670167][ T3294] loop_process_work+0x637/0x11b0 [ 142.670262][ T3294] ? __pfx_loop_process_work+0x10/0x10 [ 142.670307][ T3294] ? __lock_acquire+0x6b5/0x2cf0 [ 142.670373][ T3294] ? look_up_lock_class+0x57/0x110 [ 142.670443][ T3294] ? register_lock_class+0x31/0x2e0 [ 142.670529][ T3294] ? __lock_acquire+0x6b5/0x2cf0 [ 142.670649][ T3294] ? trace_hrtimer_start+0x82/0x200 [ 142.670738][ T3294] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.670801][ T3294] ? lock_acquire+0x106/0x350 [ 142.670877][ T3294] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.670950][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.671021][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.671093][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.671155][ T3294] ? process_scheduled_works+0xa70/0x1860 [ 142.671177][ T3294] process_scheduled_works+0xb5d/0x1860 [ 142.671216][ T3294] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.671242][ T3294] ? assign_work+0x3d5/0x5e0 [ 142.671267][ T3294] worker_thread+0xa53/0xfc0 [ 142.671331][ T3294] kthread+0x388/0x470 [ 142.671361][ T3294] ? __pfx_worker_thread+0x10/0x10 [ 142.671383][ T3294] ? __pfx_kthread+0x10/0x10 [ 142.671414][ T3294] ret_from_fork+0x514/0xb70 [ 142.671439][ T3294] ? __pfx_ret_from_fork+0x10/0x10 [ 142.671463][ T3294] ? __switch_to+0xc79/0x1410 [ 142.671497][ T3294] ? __pfx_kthread+0x10/0x10 [ 142.671527][ T3294] ret_from_fork_asm+0x1a/0x30 [ 142.671563][ T3294] [ 142.671752][ T3294] Kernel Offset: disabled