no interfaces have a carrier
[ 65.709271][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 65.733978][ T5259] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 91.988326][ T9] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts.
2026/07/22 03:40:06 parsed 1 programs
2026/07/22 03:40:06 serving rpc on tcp://38433
[ 100.408746][ T5611] cgroup: Unknown subsys name 'net'
[ 100.650040][ T5611] cgroup: Unknown subsys name 'cpuset'
[ 100.723838][ T5611] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.670939][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.802994][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.819770][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.834557][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.837887][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.838735][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.747488][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.747515][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.847563][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.847585][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.978853][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.980148][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.980780][ T5694] bridge_slave_0: entered allmulticast mode
[ 112.997857][ T5694] bridge_slave_0: entered promiscuous mode
[ 113.021600][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.021705][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.021833][ T5694] bridge_slave_1: entered allmulticast mode
[ 113.028109][ T5694] bridge_slave_1: entered promiscuous mode
[ 113.099766][ T5694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.103110][ T5694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.159175][ T5694] team0: Port device team_slave_0 added
[ 113.161778][ T5694] team0: Port device team_slave_1 added
[ 113.429481][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.429499][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.429525][ T5694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.433316][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.433331][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.433351][ T5694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.579093][ T5694] hsr_slave_0: entered promiscuous mode
[ 113.580221][ T5694] hsr_slave_1: entered promiscuous mode
[ 113.881366][ T5694] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.920395][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 114.136415][ T5694] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 114.158026][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 114.159378][ T5694] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.188262][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 114.190277][ T5694] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.219610][ T5694] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 114.446906][ T5694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.506704][ T5694] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.531497][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.531663][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.575167][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.575406][ T1538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.130322][ T5694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.206098][ T5694] veth0_vlan: entered promiscuous mode
[ 115.228020][ T5694] veth1_vlan: entered promiscuous mode
[ 115.297217][ T5694] veth0_macvtap: entered promiscuous mode
[ 115.311357][ T5694] veth1_macvtap: entered promiscuous mode
[ 115.341638][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.359685][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.380576][ T1538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.400617][ T1538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.400666][ T1538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.400704][ T1538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.149220][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.911865][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/22 03:40:27 executed programs: 0
[ 117.064477][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.097062][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.098488][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.099630][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.101306][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.567464][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.963809][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.963957][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.964085][ T5739] bridge_slave_0: entered allmulticast mode
[ 117.966010][ T5739] bridge_slave_0: entered promiscuous mode
[ 117.968599][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.968750][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.971196][ T5739] bridge_slave_1: entered allmulticast mode
[ 117.973034][ T5739] bridge_slave_1: entered promiscuous mode
[ 118.205166][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.266455][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.270720][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.331542][ T5739] team0: Port device team_slave_0 added
[ 118.340872][ T5739] team0: Port device team_slave_1 added
[ 118.380590][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.380603][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.380621][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.402480][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.402532][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.402606][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.519192][ T5739] hsr_slave_0: entered promiscuous mode
[ 118.520213][ T5739] hsr_slave_1: entered promiscuous mode
[ 118.521057][ T5739] debugfs: 'hsr0' already exists in 'hsr'
[ 118.521145][ T5739] Cannot create hsr debugfs directory
[ 118.976209][ T12] bridge_slave_1: left allmulticast mode
[ 118.976336][ T12] bridge_slave_1: left promiscuous mode
[ 118.987456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.185298][ T12] bridge_slave_0: left allmulticast mode
[ 119.185334][ T12] bridge_slave_0: left promiscuous mode
[ 119.185927][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.256103][ T59] Bluetooth: hci0: command tx timeout
[ 119.964016][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.024142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.067211][ T12] bond0 (unregistering): Released all slaves
[ 120.249158][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[ 120.613704][ T12] hsr_slave_0: left promiscuous mode
[ 120.653388][ T12] hsr_slave_1: left promiscuous mode
[ 120.654651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.654753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.702225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.702253][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.799996][ T12] veth1_macvtap: left promiscuous mode
[ 120.800276][ T12] veth0_macvtap: left promiscuous mode
[ 120.800574][ T12] veth1_vlan: left promiscuous mode
[ 120.800908][ T12] veth0_vlan: left promiscuous mode
[ 121.333402][ T59] Bluetooth: hci0: command tx timeout
[ 121.535625][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 121.594053][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 121.900099][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[ 123.125306][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.158168][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 123.160208][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.202066][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 123.212564][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.241383][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 123.242448][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.289351][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 123.413482][ T59] Bluetooth: hci0: command tx timeout
[ 123.603625][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 123.626264][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[ 123.654712][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.654856][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 123.704827][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.704928][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.238713][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 124.316687][ T5739] veth0_vlan: entered promiscuous mode
[ 124.331925][ T5739] veth1_vlan: entered promiscuous mode
[ 124.387845][ T5739] veth0_macvtap: entered promiscuous mode
[ 124.404718][ T5739] veth1_macvtap: entered promiscuous mode
[ 124.460538][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.490522][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 124.547077][ T1524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.547894][ T1524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.548130][ T1524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.548165][ T1524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.928988][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.929011][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 124.990468][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.990490][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/07/22 03:40:35 executed programs: 2
[ 125.400380][ T5828] loop0: detected capacity change from 0 to 32768
[ 125.408857][ T5828] =======================================================
[ 125.408857][ T5828] WARNING: The mand mount option has been deprecated and
[ 125.408857][ T5828] and is ignored by this kernel. Remove the mand
[ 125.408857][ T5828] option from the mount to silence this warning.
[ 125.408857][ T5828] =======================================================
[ 125.493936][ T59] Bluetooth: hci0: command tx timeout
[ 126.209580][ T5829] loop0: detected capacity change from 0 to 32768
[ 126.685511][ T5830] loop0: detected capacity change from 0 to 32768
[ 127.226269][ T5831] loop0: detected capacity change from 0 to 32768
[ 127.690167][ T5832] loop0: detected capacity change from 0 to 32768
[ 128.151042][ T5833] loop0: detected capacity change from 0 to 32768
[ 128.587536][ T5834] loop0: detected capacity change from 0 to 32768
[ 129.115807][ T5835] loop0: detected capacity change from 0 to 32768
[ 129.512673][ T5836] loop0: detected capacity change from 0 to 32768
[ 129.999244][ T5837] loop0: detected capacity change from 0 to 32768
[ 130.439448][ T5839] loop0: detected capacity change from 0 to 32768
2026/07/22 03:40:41 executed programs: 13
[ 130.847070][ T5840] loop0: detected capacity change from 0 to 32768
[ 131.339763][ T5842] loop0: detected capacity change from 0 to 32768
[ 131.776849][ T5845] loop0: detected capacity change from 0 to 32768
[ 132.204141][ T5847] loop0: detected capacity change from 0 to 32768
[ 132.657721][ T5848] loop0: detected capacity change from 0 to 32768
[ 132.945746][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.945867][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.079999][ T5850] loop0: detected capacity change from 0 to 32768
[ 133.541673][ T5851] loop0: detected capacity change from 0 to 32768
[ 133.938361][ T5852] loop0: detected capacity change from 0 to 32768
[ 134.367338][ T5853] loop0: detected capacity change from 0 to 32768
[ 135.607567][ T5856] set_capacity_and_notify: 2 callbacks suppressed
[ 135.607585][ T5856] loop0: detected capacity change from 0 to 32768
2026/07/22 03:40:46 executed programs: 25
[ 136.020394][ T5857] loop0: detected capacity change from 0 to 32768
[ 136.421280][ T5858] loop0: detected capacity change from 0 to 32768
[ 136.807681][ T5859] loop0: detected capacity change from 0 to 32768
[ 137.248991][ T5860] loop0: detected capacity change from 0 to 32768
[ 137.666196][ T5861] loop0: detected capacity change from 0 to 32768
[ 138.102505][ T5862] loop0: detected capacity change from 0 to 32768
[ 138.507858][ T5863] loop0: detected capacity change from 0 to 32768
[ 139.000082][ T5864] loop0: detected capacity change from 0 to 32768
[ 139.436563][ T5865] loop0: detected capacity change from 0 to 32768
[ 140.705625][ T5868] set_capacity_and_notify: 2 callbacks suppressed
[ 140.705640][ T5868] loop0: detected capacity change from 0 to 32768
[ 140.781184][ T1538] ==================================================================
[ 140.781201][ T1538] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.781256][ T1538] Read of size 4096 at addr ffff8880460a6000 by task kworker/u8:14/1538
[ 140.781275][ T1538]
[ 140.781301][ T1538] CPU: 0 UID: 0 PID: 1538 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.781329][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 140.781342][ T1538] Workqueue: loop0 loop_workfn
[ 140.781396][ T1538] Call Trace:
[ 140.781404][ T1538]
[ 140.781413][ T1538] dump_stack_lvl+0xe8/0x150
[ 140.781448][ T1538] print_address_description+0x55/0x1e0
[ 140.781483][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.781504][ T1538] print_report+0x58/0x70
[ 140.781535][ T1538] kasan_report+0x117/0x150
[ 140.781560][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.781586][ T1538] kasan_check_range+0x264/0x2c0
[ 140.781610][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.781632][ T1538] __asan_memcpy+0x29/0x70
[ 140.781664][ T1538] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.781698][ T1538] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 140.781721][ T1538] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 140.781749][ T1538] ? shmem_write_begin+0x1ce/0x320
[ 140.781773][ T1538] generic_perform_write+0x5a8/0x8b0
[ 140.781814][ T1538] ? __pfx_generic_perform_write+0x10/0x10
[ 140.781848][ T1538] ? generic_write_checks_count+0x426/0x530
[ 140.781885][ T1538] ? file_update_time_flags+0x3b9/0x4b0
[ 140.781914][ T1538] shmem_file_write_iter+0xfb/0x120
[ 140.781942][ T1538] lo_rw_aio+0xc78/0xf30
[ 140.781980][ T1538] ? __pfx_lo_rw_aio+0x10/0x10
[ 140.782014][ T1538] ? kthread_associate_blkcg+0x490/0x600
[ 140.782047][ T1538] ? rt_spin_unlock+0x163/0x200
[ 140.782080][ T1538] loop_process_work+0x638/0x11d0
[ 140.782121][ T1538] ? __pfx_loop_process_work+0x10/0x10
[ 140.782153][ T1538] ? look_up_lock_class+0x57/0x110
[ 140.782176][ T1538] ? register_lock_class+0x31/0x2e0
[ 140.782199][ T1538] ? __lock_acquire+0x683/0x2ce0
[ 140.782219][ T1538] ? rcu_is_watching+0x15/0xb0
[ 140.782253][ T1538] ? trace_hrtimer_start+0x82/0x200
[ 140.782289][ T1538] ? do_raw_spin_lock+0x12b/0x2f0
[ 140.782326][ T1538] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 140.782358][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.782384][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.782412][ T1538] ? rcu_is_watching+0x15/0xb0
[ 140.782439][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.782463][ T1538] process_scheduled_works+0xa8e/0x14e0
[ 140.782503][ T1538] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.782532][ T1538] ? assign_work+0x3cf/0x5d0
[ 140.782558][ T1538] worker_thread+0xa47/0xfb0
[ 140.782598][ T1538] kthread+0x388/0x470
[ 140.782629][ T1538] ? __pfx_worker_thread+0x10/0x10
[ 140.782654][ T1538] ? __pfx_kthread+0x10/0x10
[ 140.782685][ T1538] ret_from_fork+0x514/0xb70
[ 140.782719][ T1538] ? __pfx_ret_from_fork+0x10/0x10
[ 140.782751][ T1538] ? __switch_to+0xc89/0x1420
[ 140.782780][ T1538] ? __pfx_kthread+0x10/0x10
[ 140.782817][ T1538] ret_from_fork_asm+0x1a/0x30
[ 140.782845][ T1538]
[ 140.782853][ T1538]
[ 140.782858][ T1538] The buggy address belongs to the physical page:
[ 140.782873][ T1538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x460a6
[ 140.782891][ T1538] flags: 0x80000000000000(node=0|zone=1)
[ 140.782925][ T1538] raw: 0080000000000000 ffffea000105fe88 ffffea0000f96148 0000000000000000
[ 140.782939][ T1538] raw: 000000000000002f 0000000000000000 00000000ffffffff 0000000000000000
[ 140.782948][ T1538] page dumped because: kasan: bad access detected
[ 140.782959][ T1538] page_owner tracks the page as freed
[ 140.782964][ T1538] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5868, tgid 5868 (syz.0.51), ts 140735529276, free_ts 140779371105
[ 140.782987][ T1538] post_alloc_hook+0x1f9/0x250
[ 140.783011][ T1538] get_page_from_freelist+0x262a/0x26a0
[ 140.783027][ T1538] __alloc_frozen_pages_noprof+0x18d/0x380
[ 140.783043][ T1538] alloc_pages_mpol+0xce/0x280
[ 140.783059][ T1538] alloc_pages_noprof+0xd2/0x2f0
[ 140.783074][ T1538] lmLogInit+0x357/0x1a20
[ 140.783095][ T1538] lmLogOpen+0x4e3/0xf90
[ 140.783114][ T1538] jfs_mount_rw+0xf3/0x670
[ 140.783132][ T1538] jfs_fill_super+0x769/0xda0
[ 140.783147][ T1538] get_tree_bdev_flags+0x430/0x4f0
[ 140.783190][ T1538] vfs_get_tree+0x92/0x2a0
[ 140.783211][ T1538] do_new_mount+0x319/0xdc0
[ 140.783241][ T1538] __se_sys_mount+0x31d/0x420
[ 140.783265][ T1538] do_syscall_64+0x174/0x580
[ 140.783284][ T1538] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.783303][ T1538] page last free pid 5739 tgid 5739 stack trace:
[ 140.783315][ T1538] __free_frozen_pages+0x10e7/0x11c0
[ 140.783333][ T1538] lmLogShutdown+0x44e/0x850
[ 140.783362][ T1538] lmLogClose+0x28c/0x530
[ 140.783391][ T1538] jfs_umount+0x2da/0x3b0
[ 140.783416][ T1538] jfs_put_super+0x8c/0x190
[ 140.783435][ T1538] generic_shutdown_super+0x13d/0x2d0
[ 140.783456][ T1538] kill_block_super+0x44/0x90
[ 140.783480][ T1538] deactivate_locked_super+0xbc/0x130
[ 140.783500][ T1538] cleanup_mnt+0x3d3/0x460
[ 140.783522][ T1538] task_work_run+0x1d9/0x270
[ 140.783553][ T1538] exit_to_user_mode_loop+0x1fa/0x730
[ 140.783572][ T1538] do_syscall_64+0x353/0x580
[ 140.783592][ T1538] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.783611][ T1538]
[ 140.783616][ T1538] Memory state around the buggy address:
[ 140.783628][ T1538] ffff8880460a5f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.783642][ T1538] ffff8880460a5f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.783656][ T1538] >ffff8880460a6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.783667][ T1538] ^
[ 140.783677][ T1538] ffff8880460a6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.783690][ T1538] ffff8880460a6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 140.783701][ T1538] ==================================================================
[ 140.797762][ T1538] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 140.797819][ T1538] CPU: 0 UID: 0 PID: 1538 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 140.797893][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 140.797940][ T1538] Workqueue: loop0 loop_workfn
[ 140.798061][ T1538] Call Trace:
[ 140.798081][ T1538]
[ 140.798102][ T1538] vpanic+0x56c/0xa60
[ 140.798166][ T1538] ? __pfx_vpanic+0x10/0x10
[ 140.798231][ T1538] panic+0xc5/0xd0
[ 140.798284][ T1538] ? __pfx_panic+0x10/0x10
[ 140.798340][ T1538] ? preempt_schedule_thunk+0x16/0x40
[ 140.798413][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.798467][ T1538] ? preempt_schedule_thunk+0x16/0x40
[ 140.798540][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.798603][ T1538] check_panic_on_warn+0x89/0xb0
[ 140.798692][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.798751][ T1538] end_report+0x73/0x170
[ 140.798814][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.798866][ T1538] kasan_report+0x128/0x150
[ 140.798928][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.798994][ T1538] kasan_check_range+0x264/0x2c0
[ 140.799058][ T1538] ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.799111][ T1538] __asan_memcpy+0x29/0x70
[ 140.799195][ T1538] copy_folio_from_iter_atomic+0xbbf/0x1a30
[ 140.799295][ T1538] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 140.799371][ T1538] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[ 140.799457][ T1538] ? shmem_write_begin+0x1ce/0x320
[ 140.799512][ T1538] generic_perform_write+0x5a8/0x8b0
[ 140.799616][ T1538] ? __pfx_generic_perform_write+0x10/0x10
[ 140.799695][ T1538] ? generic_write_checks_count+0x426/0x530
[ 140.799791][ T1538] ? file_update_time_flags+0x3b9/0x4b0
[ 140.799867][ T1538] shmem_file_write_iter+0xfb/0x120
[ 140.799931][ T1538] lo_rw_aio+0xc78/0xf30
[ 140.800034][ T1538] ? __pfx_lo_rw_aio+0x10/0x10
[ 140.800119][ T1538] ? kthread_associate_blkcg+0x490/0x600
[ 140.800201][ T1538] ? rt_spin_unlock+0x163/0x200
[ 140.800294][ T1538] loop_process_work+0x638/0x11d0
[ 140.800394][ T1538] ? __pfx_loop_process_work+0x10/0x10
[ 140.800470][ T1538] ? look_up_lock_class+0x57/0x110
[ 140.800532][ T1538] ? register_lock_class+0x31/0x2e0
[ 140.800582][ T1538] ? __lock_acquire+0x683/0x2ce0
[ 140.800633][ T1538] ? rcu_is_watching+0x15/0xb0
[ 140.800695][ T1538] ? trace_hrtimer_start+0x82/0x200
[ 140.800729][ T1538] ? do_raw_spin_lock+0x12b/0x2f0
[ 140.800760][ T1538] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 140.800789][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.800814][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.800840][ T1538] ? rcu_is_watching+0x15/0xb0
[ 140.800870][ T1538] ? process_scheduled_works+0xa20/0x14e0
[ 140.800887][ T1538] process_scheduled_works+0xa8e/0x14e0
[ 140.800915][ T1538] ? __pfx_process_scheduled_works+0x10/0x10
[ 140.800935][ T1538] ? assign_work+0x3cf/0x5d0
[ 140.800953][ T1538] worker_thread+0xa47/0xfb0
[ 140.800982][ T1538] kthread+0x388/0x470
[ 140.801003][ T1538] ? __pfx_worker_thread+0x10/0x10
[ 140.801023][ T1538] ? __pfx_kthread+0x10/0x10
[ 140.801045][ T1538] ret_from_fork+0x514/0xb70
[ 140.801069][ T1538] ? __pfx_ret_from_fork+0x10/0x10
[ 140.801092][ T1538] ? __switch_to+0xc89/0x1420
[ 140.801112][ T1538] ? __pfx_kthread+0x10/0x10
[ 140.801134][ T1538] ret_from_fork_asm+0x1a/0x30
[ 140.801155][ T1538]
[ 140.801350][ T1538] Kernel Offset: disabled