[ 87.103546][ T201] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts.
executing program
[ 91.502992][ T5594] loop0: detected capacity change from 0 to 32768
executing program
[ 91.958886][ T5595] loop0: detected capacity change from 0 to 32768
executing program
[ 92.325974][ T5596] loop0: detected capacity change from 0 to 32768
executing program
[ 92.716753][ T5597] loop0: detected capacity change from 0 to 32768
executing program
[ 93.119398][ T5598] loop0: detected capacity change from 0 to 32768
executing program
[ 93.479966][ T5599] loop0: detected capacity change from 0 to 32768
executing program
[ 93.852244][ T5601] loop0: detected capacity change from 0 to 32768
executing program
[ 94.202237][ T5602] loop0: detected capacity change from 0 to 32768
executing program
[ 94.574555][ T5603] loop0: detected capacity change from 0 to 32768
executing program
[ 94.944884][ T5604] loop0: detected capacity change from 0 to 32768
executing program
executing program
executing program
executing program
executing program
[ 96.778775][ T5609] set_capacity_and_notify: 4 callbacks suppressed
[ 96.778791][ T5609] loop0: detected capacity change from 0 to 32768
executing program
[ 97.178832][ T5612] loop0: detected capacity change from 0 to 32768
executing program
[ 97.529857][ T5614] loop0: detected capacity change from 0 to 32768
executing program
[ 97.950620][ T5616] loop0: detected capacity change from 0 to 32768
executing program
[ 98.302940][ T5619] loop0: detected capacity change from 0 to 32768
executing program
[ 98.668631][ T5620] loop0: detected capacity change from 0 to 32768
executing program
[ 99.048599][ T5621] loop0: detected capacity change from 0 to 32768
executing program
[ 99.396842][ T5622] loop0: detected capacity change from 0 to 32768
executing program
[ 99.747006][ T5623] loop0: detected capacity change from 0 to 32768
executing program
[ 100.095091][ T5624] loop0: detected capacity change from 0 to 32768
executing program
[ 100.504303][ T3343] =========================================================
** replaying previous printk message **
[ 100.504303][ T3343] ==================================================================
[ 100.504333][ T3343] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 100.504364][ T3343] Read of size 4096 at addr ffff88803a630000 by task kworker/u8:16/3343
[ 100.504382][ T3343]
[ 100.504395][ T3343] CPU: 0 UID: 0 PID: 3343 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 100.504418][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 100.504431][ T3343] Workqueue: loop0 loop_rootcg_workfn
[ 100.504464][ T3343] Call Trace:
[ 100.504472][ T3343]
[ 100.504481][ T3343] dump_stack_lvl+0xe8/0x150
[ 100.504511][ T3343] print_address_description+0x55/0x1e0
[ 100.504540][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 100.504558][ T3343] print_report+0x58/0x70
[ 100.504584][ T3343] kasan_report+0x117/0x150
[ 100.504607][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 100.504632][ T3343] kasan_check_range+0x264/0x2c0
[ 100.504653][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 100.504672][ T3343] __asan_memcpy+0x29/0x70
[ 100.504700][ T3343] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 100.504730][ T3343] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 100.504749][ T3343] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 100.504781][ T3343] ? shmem_write_begin+0x1ce/0x320
[ 100.504810][ T3343] generic_perform_write+0x5a8/0x8b0
[ 100.504841][ T3343] ? __pfx_generic_perform_write+0x10/0x10
[ 100.504866][ T3343] ? generic_write_checks_count+0x426/0x530
[ 100.504888][ T3343] ? file_update_time_flags+0x2db/0x450
[ 100.504917][ T3343] shmem_file_write_iter+0xfb/0x120
[ 100.504939][ T3343] lo_rw_aio+0xc78/0xf30
[ 100.504971][ T3343] ? reacquire_held_locks+0x117/0x1a0
[ 100.505004][ T3343] ? __pfx_lo_rw_aio+0x10/0x10
[ 100.505030][ T3343] ? rt_spin_unlock+0x159/0x200
[ 100.505061][ T3343] ? kthread_associate_blkcg+0x359/0x600
[ 100.505082][ T3343] ? rt_spin_unlock+0x165/0x200
[ 100.505105][ T3343] loop_process_work+0x638/0x11d0
[ 100.505142][ T3343] ? __pfx_loop_process_work+0x10/0x10
[ 100.505169][ T3343] ? look_up_lock_class+0x57/0x110
[ 100.505198][ T3343] ? register_lock_class+0x31/0x2e0
[ 100.505226][ T3343] ? __lock_acquire+0x747/0x2de0
[ 100.505253][ T3343] ? trace_hrtimer_start+0x82/0x200
[ 100.505280][ T3343] ? do_raw_spin_lock+0x12b/0x2f0
[ 100.505306][ T3343] ? lock_acquire+0x115/0x350
[ 100.505335][ T3343] ? rcu_is_watching+0x16/0xb0
[ 100.505354][ T3343] ? process_scheduled_works+0x97a/0x1630
[ 100.505381][ T3343] process_scheduled_works+0xc3d/0x1630
[ 100.505419][ T3343] ? __pfx_process_scheduled_works+0x10/0x10
[ 100.505448][ T3343] ? assign_work+0x3cf/0x5d0
[ 100.505475][ T3343] worker_thread+0xa47/0xfb0
[ 100.505515][ T3343] kthread+0x38b/0x470
[ 100.505541][ T3343] ? __pfx_worker_thread+0x10/0x10
[ 100.505563][ T3343] ? __pfx_kthread+0x10/0x10
[ 100.505583][ T3343] ret_from_fork+0x514/0xb70
[ 100.505603][ T3343] ? __pfx_ret_from_fork+0x10/0x10
[ 100.505619][ T3343] ? __switch_to+0xc89/0x1420
[ 100.505641][ T3343] ? __pfx_kthread+0x10/0x10
[ 100.505656][ T3343] ret_from_fork_asm+0x1a/0x30
[ 100.505676][ T3343]
[ 100.505682][ T3343]
[ 100.505686][ T3343] The buggy address belongs to the physical page:
[ 100.505694][ T3343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x17 pfn:0x3a630
[ 100.505709][ T3343] flags: 0x80000000000000(node=0|zone=1)
[ 100.505727][ T3343] raw: 0080000000000000 ffffea0001062888 ffffea0000e98c48 0000000000000000
[ 100.505740][ T3343] raw: 0000000000000017 0000000000000000 00000000ffffffff 0000000000000000
[ 100.505748][ T3343] page dumped because: kasan: bad access detected
[ 100.505755][ T3343] page_owner tracks the page as freed
[ 100.505761][ T3343] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5625, tgid 5625 (syz-executor137), ts 100446323032
[ 100.505784][ T3343] post_alloc_hook+0x1f9/0x250
[ 100.505804][ T3343] get_page_from_freelist+0x2591/0x2600
[ 100.505818][ T3343] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 100.505831][ T3343] alloc_pages_mpol+0xd4/0x280
[ 100.505848][ T3343] alloc_pages_noprof+0xd2/0x2f0
[ 100.505865][ T3343] lmLogInit+0x357/0x1a20
[ 100.505882][ T3343] lmLogOpen+0x4e3/0xf90
[ 100.505899][ T3343] jfs_mount_rw+0xf3/0x670
[ 100.505915][ T3343] jfs_fill_super+0x769/0xda0
[ 100.505936][ T3343] get_tree_bdev_flags+0x430/0x4f0
[ 100.505959][ T3343] vfs_get_tree+0x92/0x2a0
[ 100.505980][ T3343] do_new_mount+0x325/0xb00
[ 100.505997][ T3343] __se_sys_mount+0x31d/0x420
[ 100.506016][ T3343] do_syscall_64+0x166/0x520
[ 100.506037][ T3343] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.506060][ T3343] page last free pid 5593 tgid 5593 ts 100502824091 stack trace:
[ 100.506071][ T3343] __free_frozen_pages+0xf8e/0x1070
[ 100.506091][ T3343] lmLogShutdown+0x44e/0x850
[ 100.506105][ T3343] lmLogClose+0x28c/0x530
[ 100.506119][ T3343] jfs_umount+0x2da/0x3b0
[ 100.506132][ T3343] jfs_put_super+0x8c/0x190
[ 100.506149][ T3343] generic_shutdown_super+0x13d/0x2d0
[ 100.506176][ T3343] kill_block_super+0x44/0xa0
[ 100.506193][ T3343] deactivate_locked_super+0xbe/0x110
[ 100.506208][ T3343] cleanup_mnt+0x204/0x2a0
[ 100.506226][ T3343] task_work_run+0x1d9/0x270
[ 100.506240][ T3343] exit_to_user_mode_loop+0x204/0x770
[ 100.506259][ T3343] do_syscall_64+0x328/0x520
[ 100.506277][ T3343] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.506298][ T3343]
[ 100.506301][ T3343] Memory state around the buggy address:
[ 100.506310][ T3343] ffff88803a62ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 100.506320][ T3343] ffff88803a62ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 100.506330][ T3343] >ffff88803a630000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.506337][ T3343] ^
[ 100.506345][ T3343] ffff88803a630080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.506354][ T3343] ffff88803a630100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.506361][ T3343] ==================================================================
[ 100.513109][ T3343] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 101.101304][ T3343] CPU: 0 UID: 0 PID: 3343 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 101.111373][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 101.121444][ T3343] Workqueue: loop0 loop_rootcg_workfn
[ 101.126944][ T3343] Call Trace:
[ 101.130248][ T3343]
[ 101.133363][ T3343] vpanic+0x56d/0xa60
[ 101.137445][ T3343] ? __pfx_vpanic+0x10/0x10
[ 101.141962][ T3343] panic+0xc5/0xd0
[ 101.145686][ T3343] ? __pfx_panic+0x10/0x10
[ 101.150103][ T3343] ? preempt_schedule_thunk+0x16/0x40
[ 101.155482][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.161643][ T3343] ? preempt_schedule_thunk+0x16/0x40
[ 101.167111][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.173268][ T3343] check_panic_on_warn+0x89/0xb0
[ 101.178301][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.184749][ T3343] end_report+0x73/0x170
[ 101.189535][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.195815][ T3343] kasan_report+0x128/0x150
[ 101.200369][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.206726][ T3343] kasan_check_range+0x264/0x2c0
[ 101.211934][ T3343] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.218011][ T3343] __asan_memcpy+0x29/0x70
[ 101.222449][ T3343] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 101.228359][ T3343] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 101.234802][ T3343] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 101.240992][ T3343] ? shmem_write_begin+0x1ce/0x320
[ 101.246121][ T3343] generic_perform_write+0x5a8/0x8b0
[ 101.251431][ T3343] ? __pfx_generic_perform_write+0x10/0x10
[ 101.257251][ T3343] ? generic_write_checks_count+0x426/0x530
[ 101.263183][ T3343] ? file_update_time_flags+0x2db/0x450
[ 101.268854][ T3343] shmem_file_write_iter+0xfb/0x120
[ 101.274073][ T3343] lo_rw_aio+0xc78/0xf30
[ 101.278333][ T3343] ? reacquire_held_locks+0x117/0x1a0
[ 101.283807][ T3343] ? __pfx_lo_rw_aio+0x10/0x10
[ 101.288594][ T3343] ? rt_spin_unlock+0x159/0x200
[ 101.293453][ T3343] ? kthread_associate_blkcg+0x359/0x600
[ 101.299093][ T3343] ? rt_spin_unlock+0x165/0x200
[ 101.303958][ T3343] loop_process_work+0x638/0x11d0
[ 101.309180][ T3343] ? __pfx_loop_process_work+0x10/0x10
[ 101.314724][ T3343] ? look_up_lock_class+0x57/0x110
[ 101.319906][ T3343] ? register_lock_class+0x31/0x2e0
[ 101.325400][ T3343] ? __lock_acquire+0x747/0x2de0
[ 101.330375][ T3343] ? trace_hrtimer_start+0x82/0x200
[ 101.335688][ T3343] ? do_raw_spin_lock+0x12b/0x2f0
[ 101.340813][ T3343] ? lock_acquire+0x115/0x350
[ 101.345506][ T3343] ? rcu_is_watching+0x16/0xb0
[ 101.350278][ T3343] ? process_scheduled_works+0x97a/0x1630
[ 101.356010][ T3343] process_scheduled_works+0xc3d/0x1630
[ 101.361665][ T3343] ? __pfx_process_scheduled_works+0x10/0x10
[ 101.368004][ T3343] ? assign_work+0x3cf/0x5d0
[ 101.372608][ T3343] worker_thread+0xa47/0xfb0
[ 101.377229][ T3343] kthread+0x38b/0x470
[ 101.381312][ T3343] ? __pfx_worker_thread+0x10/0x10
[ 101.386472][ T3343] ? __pfx_kthread+0x10/0x10
[ 101.391099][ T3343] ret_from_fork+0x514/0xb70
[ 101.395719][ T3343] ? __pfx_ret_from_fork+0x10/0x10
[ 101.401024][ T3343] ? __switch_to+0xc89/0x1420
[ 101.405740][ T3343] ? __pfx_kthread+0x10/0x10
[ 101.410337][ T3343] ret_from_fork_asm+0x1a/0x30
[ 101.415112][ T3343]
[ 101.418528][ T3343] Kernel Offset: disabled
[ 101.422856][ T3343] Rebooting in 86400 seconds..