Warning: Permanently added '[localhost]:41082' (ED25519) to the list of known hosts.
syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x241000)
[ 91.264328][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 91.264342][ T1029] ata1: failed to read log page 10h (errno=-5)
[ 91.264359][ T1029] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[ 91.264367][ T1029] ata1.00: irq_stat 0x41000000
[ 91.264374][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 91.264379][ T1029] ata1.00: cmd 61/08:70:2e:6f:04/12:00:00:00:00/40 tag 14 ncq dma 2363392 ou
[ 91.264379][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 91.264398][ T1029] ata1.00: status: { DRDY }
[ 91.264404][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED
[ 91.264408][ T1029] ata1.00: cmd 61/00:78:36:81:04/20:00:00:00:00/40 tag 15 ncq dma 4194304 ou
[ 91.264408][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 91.264426][ T1029] ata1.00: status: { DRDY }
[ 91.266267][ T1029] ata1.00: configured for UDMA/100
[ 91.268977][ T1029] ata1: EH complete
2026/11/11 02:32:40 parsed 1 programs
2026/11/11 02:32:40 serving rpc on tcp://44251
[ 92.023175][ T1380] cfg80211: failed to load regulatory.db
[ 94.570293][ T5306] cgroup: Unknown subsys name 'net'
[ 94.614755][ T5306] cgroup: Unknown subsys name 'cpuset'
[ 94.622378][ T5306] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 96.316298][ T5306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 101.753744][ T5323] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 104.077733][ T5341] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.085353][ T5341] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.090807][ T5341] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.313461][ T5341] infiniband rxe0: set active
[ 104.314169][ T1970] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.314544][ T5341] infiniband rxe0: added rxe_eth0
[ 104.348396][ T5341] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 104.348422][ T5341] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 104.348441][ T5341] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 104.418393][ T5341] RDS/IB: rxe0: added
[ 104.420499][ T5341] smc: adding ib device rxe0 with port count 1
[ 104.420607][ T5341] smc: ib device rxe0 port 1 has no pnetid
[ 104.433918][ T1970] rxe_eth0 speed is unknown, defaulting to 1000
[ 104.465816][ T5341] rxe_eth0 speed is unknown, defaulting to 1000
[ 105.150988][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.154584][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.155655][ T5341] bridge_slave_0: entered allmulticast mode
[ 105.157762][ T5341] bridge_slave_0: entered promiscuous mode
[ 105.177038][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.177894][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.177992][ T5341] bridge_slave_1: entered allmulticast mode
[ 105.180777][ T5341] bridge_slave_1: entered promiscuous mode
[ 105.243439][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 105.246029][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.277890][ T5341] team0: Port device team_slave_0 added
[ 105.284269][ T5341] team0: Port device team_slave_1 added
[ 105.308597][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.308610][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.308624][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.310797][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.310808][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.310821][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.424551][ T5341] hsr_slave_0: entered promiscuous mode
[ 105.427422][ T5341] hsr_slave_1: entered promiscuous mode
[ 105.800437][ T5341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.810301][ T5341] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 105.814910][ T5341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.817482][ T5341] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 105.819390][ T5341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.835215][ T5341] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 105.836075][ T5341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.839734][ T5341] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 106.017248][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.069198][ T5341] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.089968][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.090076][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.120775][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.120857][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.938901][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.008254][ T5341] veth0_vlan: entered promiscuous mode
[ 107.019742][ T5341] veth1_vlan: entered promiscuous mode
[ 107.069552][ T5341] veth0_macvtap: entered promiscuous mode
[ 107.077057][ T5341] veth1_macvtap: entered promiscuous mode
[ 107.095279][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.110843][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.162174][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.182916][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.182954][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.182974][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.595702][ T185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.692114][ T185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.710321][ T5384] rxe_eth0 speed is unknown, defaulting to 1000
[ 108.417991][ T185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.428815][ T5391] rxe_eth0 speed is unknown, defaulting to 1000
[ 108.923982][ T5398] rxe_eth0 speed is unknown, defaulting to 1000
[ 109.221819][ T185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.327466][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.327483][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.429836][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.429853][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.737242][ T185] bridge_slave_1: left allmulticast mode
[ 109.737276][ T185] bridge_slave_1: left promiscuous mode
[ 109.737951][ T185] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.759533][ T185] bridge_slave_0: left allmulticast mode
[ 109.759553][ T185] bridge_slave_0: left promiscuous mode
[ 109.759700][ T185] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.315774][ T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 110.328521][ T185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 110.338862][ T185] bond0 (unregistering): Released all slaves
[ 110.510445][ T5405] rxe_eth0 speed is unknown, defaulting to 1000
[ 111.144888][ T185] hsr_slave_0: left promiscuous mode
[ 111.149311][ T185] hsr_slave_1: left promiscuous mode
[ 111.158443][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 111.158486][ T185] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 111.174411][ T185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 111.174427][ T185] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 111.215346][ T185] veth1_macvtap: left promiscuous mode
[ 111.215419][ T185] veth0_macvtap: left promiscuous mode
[ 111.219395][ T185] veth1_vlan: left promiscuous mode
[ 111.219473][ T185] veth0_vlan: left promiscuous mode
[ 111.807568][ T185] team0 (unregistering): Port device team_slave_1 removed
[ 111.826170][ T185] team0 (unregistering): Port device team_slave_0 removed
[ 111.955660][ T5010] 8021q: adding VLAN 0 to HW filter on device eth2
[ 112.930603][ T5010] 8021q: adding VLAN 0 to HW filter on device eth3
[ 113.010475][ T5427] rxe_eth0 speed is unknown, defaulting to 1000
[ 113.647018][ T5010] 8021q: adding VLAN 0 to HW filter on device eth4
[ 114.113472][ T5443] rxe_eth0 speed is unknown, defaulting to 1000
[ 114.450617][ T5010] 8021q: adding VLAN 0 to HW filter on device eth5
[ 115.494834][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 115.496334][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 115.496869][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 115.497520][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 115.497994][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.625336][ T5458] rxe_eth0 speed is unknown, defaulting to 1000
[ 116.607936][ T5469] rxe_eth0 speed is unknown, defaulting to 1000
[ 117.302973][ T5477] rxe_eth0 speed is unknown, defaulting to 1000
[ 117.721121][ T1970] rxe_eth0 speed is unknown, defaulting to 1000
[ 118.409606][ T5490] br_netfilter no longer supported in user namespaces
[ 118.436210][ T5490] rxe_eth0 speed is unknown, defaulting to 1000
[ 119.005631][ T5497] rxe_eth0 speed is unknown, defaulting to 1000
2026/11/11 02:33:08 executed programs: 0
[ 119.836059][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 119.838486][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 119.838968][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 119.839440][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 119.839830][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 120.346112][ T5503] rxe_eth0 speed is unknown, defaulting to 1000
[ 120.656232][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.656348][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.656442][ T5503] bridge_slave_0: entered allmulticast mode
[ 120.657436][ T5503] bridge_slave_0: entered promiscuous mode
[ 120.672526][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.672637][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.672721][ T5503] bridge_slave_1: entered allmulticast mode
[ 120.673949][ T5503] bridge_slave_1: entered promiscuous mode
[ 120.709217][ T5503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.716164][ T5503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.743960][ T5503] team0: Port device team_slave_0 added
[ 120.746050][ T5503] team0: Port device team_slave_1 added
[ 120.769959][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.769973][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.769986][ T5503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.793620][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.793632][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.793645][ T5503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.848261][ T5503] hsr_slave_0: entered promiscuous mode
[ 120.848925][ T5503] hsr_slave_1: entered promiscuous mode
[ 121.412885][ T5503] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 121.425945][ T5503] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 121.427948][ T5503] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 121.440856][ T5503] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 121.449983][ T5503] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 121.463999][ T5503] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 121.464757][ T5503] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 121.478247][ T5503] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 121.525192][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.525285][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.525930][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.526008][ T5503] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.615275][ T23] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.615795][ T23] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.664234][ T5503] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.715424][ T5503] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.730769][ T77] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.730832][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.750998][ T23] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.751073][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.933228][ T49] Bluetooth: hci0: command tx timeout
[ 122.575222][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 122.684910][ T5503] veth0_vlan: entered promiscuous mode
[ 122.700780][ T5503] veth1_vlan: entered promiscuous mode
[ 122.770932][ T5503] veth0_macvtap: entered promiscuous mode
[ 122.786635][ T5503] veth1_macvtap: entered promiscuous mode
[ 122.820074][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 122.836588][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 122.914944][ T23] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.915001][ T23] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.915021][ T23] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.972165][ T185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 123.140764][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.140783][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.229588][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.229605][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.635130][ T5571] loop0: detected capacity change from 0 to 128
[ 123.652758][ T5571] =======================================================
[ 123.652758][ T5571] WARNING: The mand mount option has been deprecated and
[ 123.652758][ T5571] and is ignored by this kernel. Remove the mand
[ 123.652758][ T5571] option from the mount to silence this warning.
[ 123.652758][ T5571] =======================================================
[ 123.707250][ T5571] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 123.707392][ T5571] hpfs: filesystem error: improperly stopped
[ 123.707402][ T5571] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 123.707410][ T5571] hpfs: You really don't want any checks? You are crazy...
[ 123.707777][ T5571] hpfs: hpfs_map_sector(): read error
[ 123.707784][ T5571] hpfs: code page support is disabled
[ 123.733453][ T5571] hpfs: hpfs_map_sector(): read error
[ 123.733481][ T5571] hpfs: hpfs_map_sector(): read error
[ 123.733521][ T5571] hpfs: hpfs_map_sector(): read error
[ 123.733536][ T5571] hpfs: hpfs_map_sector(): read error
[ 123.733542][ T5571] hpfs: hpfs_map_4sectors(): unaligned read
[ 123.733815][ T5571] hpfs: hpfs_map_4sectors(): unaligned read
[ 123.733822][ T5571] hpfs: filesystem error: unable to find root dir
[ 123.886279][ T5573] loop0: detected capacity change from 0 to 128
[ 123.907982][ T5573] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 123.908029][ T5573] hpfs: filesystem error: improperly stopped
[ 123.908038][ T5573] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 123.908046][ T5573] hpfs: You really don't want any checks? You are crazy...
[ 123.909974][ T5573] hpfs: hpfs_map_sector(): read error
[ 123.909985][ T5573] hpfs: code page support is disabled
[ 123.910733][ T5573] hpfs: hpfs_map_sector(): read error
[ 123.910747][ T5573] hpfs: hpfs_map_sector(): read error
[ 123.910757][ T5573] hpfs: hpfs_map_sector(): read error
[ 123.910766][ T5573] hpfs: hpfs_map_sector(): read error
[ 123.910772][ T5573] hpfs: hpfs_map_4sectors(): unaligned read
[ 123.910876][ T5573] hpfs: hpfs_map_4sectors(): unaligned read
[ 123.910881][ T5573] hpfs: filesystem error: unable to find root dir
[ 124.011480][ T49] Bluetooth: hci0: command tx timeout
[ 124.087457][ T5575] loop0: detected capacity change from 0 to 128
[ 124.126675][ T5575] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 124.126732][ T5575] hpfs: filesystem error: improperly stopped
[ 124.126741][ T5575] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 124.126749][ T5575] hpfs: You really don't want any checks? You are crazy...
[ 124.127021][ T5575] hpfs: hpfs_map_sector(): read error
[ 124.127034][ T5575] hpfs: code page support is disabled
[ 124.152188][ T5575] ==================================================================
[ 124.152199][ T5575] BUG: KASAN: use-after-free in strcmp+0x6b/0xc0
[ 124.152354][ T5575] Read of size 1 at addr ffff888013fb88a6 by task syz.0.19/5575
[ 124.152363][ T5575]
[ 124.152390][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 124.152402][ T5575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.152418][ T5575] Call Trace:
[ 124.152433][ T5575]
[ 124.152439][ T5575] dump_stack_lvl+0xe8/0x150
[ 124.152457][ T5575] print_address_description+0x55/0x1e0
[ 124.152473][ T5575] ? strcmp+0x6b/0xc0
[ 124.152483][ T5575] print_report+0x58/0x70
[ 124.152496][ T5575] kasan_report+0x117/0x150
[ 124.152522][ T5575] ? strcmp+0x6b/0xc0
[ 124.152534][ T5575] strcmp+0x6b/0xc0
[ 124.152545][ T5575] hpfs_get_ea+0x137/0xeb0
[ 124.152599][ T5575] ? __wait_on_bit+0xef/0x300
[ 124.152617][ T5575] ? out_of_line_wait_on_bit+0x13b/0x190
[ 124.152631][ T5575] ? __pfx_hpfs_get_ea+0x10/0x10
[ 124.152643][ T5575] ? __pfx_bit_wait_io+0x10/0x10
[ 124.152658][ T5575] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 124.152673][ T5575] ? __pfx_wake_bit_function+0x10/0x10
[ 124.152706][ T5575] ? __bread_gfp+0x224/0x370
[ 124.152729][ T5575] ? __bread_gfp+0x2be/0x370
[ 124.152739][ T5575] ? hpfs_map_sector+0x144/0x370
[ 124.152750][ T5575] ? trace_kmem_cache_alloc+0x29/0xe0
[ 124.152764][ T5575] hpfs_read_inode+0x1a9/0x1060
[ 124.152780][ T5575] ? __pfx_hpfs_read_inode+0x10/0x10
[ 124.152794][ T5575] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 124.152809][ T5575] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 124.152823][ T5575] ? do_raw_spin_unlock+0x4d/0x200
[ 124.152836][ T5575] ? hpfs_init_inode+0x1c9/0x380
[ 124.152849][ T5575] hpfs_fill_super+0x127b/0x1fb0
[ 124.152864][ T5575] ? __pfx_hpfs_fill_super+0x10/0x10
[ 124.152876][ T5575] ? __pfx_snprintf+0x10/0x10
[ 124.152888][ T5575] ? set_blocksize+0x1c9/0x440
[ 124.152912][ T5575] ? sb_set_blocksize+0x155/0x240
[ 124.152924][ T5575] ? setup_bdev_super+0x58b/0x680
[ 124.152934][ T5575] get_tree_bdev_flags+0x436/0x500
[ 124.152943][ T5575] ? __pfx_hpfs_fill_super+0x10/0x10
[ 124.152949][ T5575] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 124.152959][ T5575] vfs_get_tree+0x92/0x2a0
[ 124.152968][ T5575] do_new_mount+0x325/0xb00
[ 124.152977][ T5575] ? __pfx_do_new_mount+0x10/0x10
[ 124.152984][ T5575] ? ns_capable+0x84/0xe0
[ 124.152993][ T5575] ? path_mount+0x647/0x1050
[ 124.153001][ T5575] ? user_path_at+0xd4/0x160
[ 124.153009][ T5575] __se_sys_mount+0x31d/0x420
[ 124.153017][ T5575] ? __pfx___se_sys_mount+0x10/0x10
[ 124.153025][ T5575] ? __x64_sys_mount+0x20/0xc0
[ 124.153032][ T5575] do_syscall_64+0x16a/0x530
[ 124.153043][ T5575] ? trace_irq_disable+0x3b/0x140
[ 124.153054][ T5575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.153064][ T5575] ? clear_bhb_loop+0x70/0xc0
[ 124.153075][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.153085][ T5575] RIP: 0033:0x7f85cb7aa18a
[ 124.153113][ T5575] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 124.153123][ T5575] RSP: 002b:00007ffc6cea43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 124.153143][ T5575] RAX: ffffffffffffffda RBX: 00007ffc6cea4460 RCX: 00007f85cb7aa18a
[ 124.153150][ T5575] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ffc6cea4420
[ 124.153155][ T5575] RBP: 000020000000a000 R08: 00007ffc6cea4460 R09: 0000000003200041
[ 124.153160][ T5575] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 124.153164][ T5575] R13: 00007ffc6cea4420 R14: 0000000000009e15 R15: 0000200000000000
[ 124.153172][ T5575]
[ 124.153175][ T5575]
[ 124.153177][ T5575] The buggy address belongs to the physical page:
[ 124.153180][ T5575] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x56df2f6f pfn:0x13fb8
[ 124.153202][ T5575] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 124.153212][ T5575] page_type: f0(buddy)
[ 124.153221][ T5575] raw: 00fff00000000000 ffffea00004ff408 ffffea00004fde08 0000000000000000
[ 124.153229][ T5575] raw: 0000000056df2f6f 0000000000000003 00000000f0000000 0000000000000000
[ 124.153235][ T5575] page dumped because: kasan: bad access detected
[ 124.153240][ T5575] page_owner tracks the page as freed
[ 124.153254][ T5575] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5303, tgid 5301 (syz-execprog), ts 98179135386
[ 124.153270][ T5575] post_alloc_hook+0x1f9/0x250
[ 124.153281][ T5575] get_page_from_freelist+0x225d/0x22e0
[ 124.153294][ T5575] __alloc_frozen_pages_noprof+0x211/0x450
[ 124.153307][ T5575] alloc_pages_mpol+0x21e/0x390
[ 124.153320][ T5575] folio_alloc_mpol_noprof+0x39/0x160
[ 124.153333][ T5575] vma_alloc_folio_noprof+0xe1/0x1e0
[ 124.153346][ T5575] do_pte_missing+0x16d4/0x3570
[ 124.153357][ T5575] handle_mm_fault+0x1807/0x2f80
[ 124.153370][ T5575] do_user_addr_fault+0xb35/0x1480
[ 124.153382][ T5575] exc_page_fault+0x6a/0xc0
[ 124.153396][ T5575] asm_exc_page_fault+0x26/0x30
[ 124.153405][ T5575] page last free pid 83 tgid 83 ts 104707566023 stack trace:
[ 124.153412][ T5575] free_unref_folios+0xdcc/0x15d0
[ 124.153422][ T5575] shrink_folio_list+0x45d6/0x4d90
[ 124.153431][ T5575] evict_folios+0x3326/0x4390
[ 124.153445][ T5575] try_to_shrink_lruvec+0xf22/0x1630
[ 124.153454][ T5575] shrink_one+0x312/0x10f0
[ 124.153466][ T5575] shrink_node+0x631e/0x6c50
[ 124.153474][ T5575] kswapd+0x1ff4/0x3a20
[ 124.153515][ T5575] kthread+0x38b/0x480
[ 124.153527][ T5575] ret_from_fork+0x514/0xb70
[ 124.153538][ T5575] ret_from_fork_asm+0x1a/0x30
[ 124.153560][ T5575] page has been migrated, last migrate reason: numa_misplaced
[ 124.153565][ T5575]
[ 124.153568][ T5575] Memory state around the buggy address:
[ 124.153573][ T5575] ffff888013fb8780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 124.153580][ T5575] ffff888013fb8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 124.153587][ T5575] >ffff888013fb8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 124.153592][ T5575] ^
[ 124.153597][ T5575] ffff888013fb8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 124.153603][ T5575] ffff888013fb8980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 124.153608][ T5575] ==================================================================
[ 124.158443][ T5575] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 124.425382][ T5575] CPU: 0 UID: 0 PID: 5575 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 124.429757][ T5575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.434158][ T5575] Call Trace:
[ 124.435575][ T5575]
[ 124.436902][ T5575] vpanic+0x26f/0x710
[ 124.438737][ T5575] panic+0xc5/0xd0
[ 124.440412][ T5575] ? __pfx_panic+0x10/0x10
[ 124.442300][ T5575] ? preempt_schedule_thunk+0x16/0x40
[ 124.444610][ T5575] ? strcmp+0x6b/0xc0
[ 124.446414][ T5575] check_panic_on_warn+0x89/0xb0
[ 124.448517][ T5575] ? strcmp+0x6b/0xc0
[ 124.450285][ T5575] end_report+0x73/0x170
[ 124.452272][ T5575] ? strcmp+0x6b/0xc0
[ 124.454076][ T5575] kasan_report+0x128/0x150
[ 124.456025][ T5575] ? strcmp+0x6b/0xc0
[ 124.457888][ T5575] strcmp+0x6b/0xc0
[ 124.459630][ T5575] hpfs_get_ea+0x137/0xeb0
[ 124.461677][ T5575] ? __wait_on_bit+0xef/0x300
[ 124.463690][ T5575] ? out_of_line_wait_on_bit+0x13b/0x190
[ 124.465986][ T5575] ? __pfx_hpfs_get_ea+0x10/0x10
[ 124.468060][ T5575] ? __pfx_bit_wait_io+0x10/0x10
[ 124.470086][ T5575] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 124.472548][ T5575] ? __pfx_wake_bit_function+0x10/0x10
[ 124.474786][ T5575] ? __bread_gfp+0x224/0x370
[ 124.476824][ T5575] ? __bread_gfp+0x2be/0x370
[ 124.478803][ T5575] ? hpfs_map_sector+0x144/0x370
[ 124.480995][ T5575] ? trace_kmem_cache_alloc+0x29/0xe0
[ 124.483418][ T5575] hpfs_read_inode+0x1a9/0x1060
[ 124.485648][ T5575] ? __pfx_hpfs_read_inode+0x10/0x10
[ 124.487994][ T5575] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 124.490367][ T5575] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 124.492865][ T5575] ? do_raw_spin_unlock+0x4d/0x200
[ 124.495157][ T5575] ? hpfs_init_inode+0x1c9/0x380
[ 124.497366][ T5575] hpfs_fill_super+0x127b/0x1fb0
[ 124.499582][ T5575] ? __pfx_hpfs_fill_super+0x10/0x10
[ 124.501804][ T5575] ? __pfx_snprintf+0x10/0x10
[ 124.503889][ T5575] ? set_blocksize+0x1c9/0x440
[ 124.506051][ T5575] ? sb_set_blocksize+0x155/0x240
[ 124.508306][ T5575] ? setup_bdev_super+0x58b/0x680
[ 124.510590][ T5575] get_tree_bdev_flags+0x436/0x500
[ 124.512794][ T5575] ? __pfx_hpfs_fill_super+0x10/0x10
[ 124.515055][ T5575] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 124.517603][ T5575] vfs_get_tree+0x92/0x2a0
[ 124.519615][ T5575] do_new_mount+0x325/0xb00
[ 124.521633][ T5575] ? __pfx_do_new_mount+0x10/0x10
[ 124.523836][ T5575] ? ns_capable+0x84/0xe0
[ 124.525747][ T5575] ? path_mount+0x647/0x1050
[ 124.527908][ T5575] ? user_path_at+0xd4/0x160
[ 124.530016][ T5575] __se_sys_mount+0x31d/0x420
[ 124.532019][ T5575] ? __pfx___se_sys_mount+0x10/0x10
[ 124.534344][ T5575] ? __x64_sys_mount+0x20/0xc0
[ 124.536441][ T5575] do_syscall_64+0x16a/0x530
[ 124.538476][ T5575] ? trace_irq_disable+0x3b/0x140
[ 124.540655][ T5575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.543412][ T5575] ? clear_bhb_loop+0x70/0xc0
[ 124.545521][ T5575] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 124.548151][ T5575] RIP: 0033:0x7f85cb7aa18a
[ 124.550157][ T5575] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 124.558582][ T5575] RSP: 002b:00007ffc6cea43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 124.562281][ T5575] RAX: ffffffffffffffda RBX: 00007ffc6cea4460 RCX: 00007f85cb7aa18a
[ 124.565784][ T5575] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ffc6cea4420
[ 124.569257][ T5575] RBP: 000020000000a000 R08: 00007ffc6cea4460 R09: 0000000003200041
[ 124.572738][ T5575] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 124.576285][ T5575] R13: 00007ffc6cea4420 R14: 0000000000009e15 R15: 0000200000000000
[ 124.579903][ T5575]
[ 124.581753][ T5575] Kernel Offset: disabled
[ 124.583701][ T5575] Rebooting in 86400 seconds..
VM DIAGNOSIS:
02:33:13 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002066c80
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8587a560
R12=dffffc0000000000 R13=0000000000000034 R14=ffffffff9c216740 R15=0000000000000000
RIP=ffffffff8587a5dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558affd500 ffffffff 00c00000
GS =0000 ffff88808a9f9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f85cb792540 CR3=000000003c10e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0c40000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 372f6b636f6c622f 7665642f7379732f
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00303a372f6b636f 6c622f7665642f73
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ee3c5c01e0 000055ee3c5c01e0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6791ff1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6791f52c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000