[ 92.054830][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2026/05/26 20:15:19 parsed 1 programs [ 101.599934][ T5613] cgroup: Unknown subsys name 'net' [ 101.862591][ T5613] cgroup: Unknown subsys name 'cpuset' [ 101.914147][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.964497][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.257472][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.257499][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.340144][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.340167][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.052600][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.069138][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.072762][ T4916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.079391][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.083601][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.386922][ T5697] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.388011][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.388135][ T5697] bridge_slave_0: entered allmulticast mode [ 114.390652][ T5697] bridge_slave_0: entered promiscuous mode [ 114.423909][ T5697] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.424110][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.424322][ T5697] bridge_slave_1: entered allmulticast mode [ 114.426698][ T5697] bridge_slave_1: entered promiscuous mode [ 114.502588][ T5697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.514923][ T5697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.559147][ T5697] team0: Port device team_slave_0 added [ 114.561712][ T5697] team0: Port device team_slave_1 added [ 114.602228][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.602241][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.602261][ T5697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.617806][ T5697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.617851][ T5697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.617927][ T5697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.747671][ T5697] hsr_slave_0: entered promiscuous mode [ 114.748710][ T5697] hsr_slave_1: entered promiscuous mode [ 115.465471][ T5697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.519654][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.522794][ T5697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.550453][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.561719][ T5697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.590738][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.591758][ T5697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.639684][ T5697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.815854][ T5697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.872767][ T5697] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.900302][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.900466][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.941415][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.941884][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.726494][ T5697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.814342][ T5697] veth0_vlan: entered promiscuous mode [ 116.823006][ T5697] veth1_vlan: entered promiscuous mode [ 116.891420][ T5697] veth0_macvtap: entered promiscuous mode [ 116.932586][ T5697] veth1_macvtap: entered promiscuous mode [ 116.977528][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.027422][ T5697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.164029][ T1316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.166623][ T1316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.170097][ T1316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.171059][ T1316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.472967][ T1132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/26 20:15:40 executed programs: 0 [ 118.672896][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.703869][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.704844][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.714364][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.715675][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.809217][ T1132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.215915][ T1132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.452232][ T1132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.871595][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.871712][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.871857][ T5741] bridge_slave_0: entered allmulticast mode [ 119.890707][ T5741] bridge_slave_0: entered promiscuous mode [ 119.911418][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.911620][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.911812][ T5741] bridge_slave_1: entered allmulticast mode [ 119.919465][ T5741] bridge_slave_1: entered promiscuous mode [ 120.018252][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.047144][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.333794][ T1132] bridge_slave_1: left allmulticast mode [ 120.333997][ T1132] bridge_slave_1: left promiscuous mode [ 120.338136][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.464949][ T1132] bridge_slave_0: left allmulticast mode [ 120.466164][ T1132] bridge_slave_0: left promiscuous mode [ 120.466363][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.845668][ T59] Bluetooth: hci0: command tx timeout [ 121.374374][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.454442][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.475974][ T1132] bond0 (unregistering): Released all slaves [ 121.594043][ T5741] team0: Port device team_slave_0 added [ 121.613979][ T5741] team0: Port device team_slave_1 added [ 121.675773][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.675790][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.675820][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.678097][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.678113][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.678137][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.869691][ T5741] hsr_slave_0: entered promiscuous mode [ 121.871020][ T5741] hsr_slave_1: entered promiscuous mode [ 121.872107][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 121.872211][ T5741] Cannot create hsr debugfs directory [ 122.044346][ T1132] hsr_slave_0: left promiscuous mode [ 122.083609][ T1132] hsr_slave_1: left promiscuous mode [ 122.084855][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.084951][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.147323][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.147352][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.246722][ T1132] veth1_macvtap: left promiscuous mode [ 122.246912][ T1132] veth0_macvtap: left promiscuous mode [ 122.247101][ T1132] veth1_vlan: left promiscuous mode [ 122.247304][ T1132] veth0_vlan: left promiscuous mode [ 122.923487][ T59] Bluetooth: hci0: command tx timeout [ 123.015252][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 123.075742][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 123.290325][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.094675][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 125.003616][ T59] Bluetooth: hci0: command tx timeout [ 125.223985][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.257126][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.304870][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.347626][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.349046][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.385714][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.387249][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.426785][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.674218][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.700752][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.719456][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.719606][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.750449][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.751109][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.242677][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.301464][ T5741] veth0_vlan: entered promiscuous mode [ 126.332654][ T5741] veth1_vlan: entered promiscuous mode [ 126.377797][ T5741] veth0_macvtap: entered promiscuous mode [ 126.391383][ T5741] veth1_macvtap: entered promiscuous mode [ 126.419117][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.439058][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.453223][ T1296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.453274][ T1296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.453313][ T1296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.488172][ T1296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.836905][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.836929][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.912432][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.912454][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/26 20:15:49 executed programs: 2 [ 127.065027][ T5830] loop0: detected capacity change from 0 to 128 [ 127.068947][ T5830] ======================================================= [ 127.068947][ T5830] WARNING: The mand mount option has been deprecated and [ 127.068947][ T5830] and is ignored by this kernel. Remove the mand [ 127.068947][ T5830] option from the mount to silence this warning. [ 127.068947][ T5830] ======================================================= [ 127.093545][ T59] Bluetooth: hci0: command tx timeout [ 127.190532][ T5830] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 127.191557][ T5830] hpfs: filesystem error: improperly stopped [ 127.191574][ T5830] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 127.191585][ T5830] hpfs: You really don't want any checks? You are crazy... [ 127.192717][ T5830] hpfs: hpfs_map_sector(): read error [ 127.192729][ T5830] hpfs: code page support is disabled [ 127.260210][ T5830] ================================================================== [ 127.260228][ T5830] BUG: KASAN: use-after-free in strcmp+0x6b/0xc0 [ 127.260275][ T5830] Read of size 1 at addr ffff88804aa888a6 by task syz.0.17/5830 [ 127.260299][ T5830] [ 127.260326][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.260347][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.260367][ T5830] Call Trace: [ 127.260375][ T5830] [ 127.260384][ T5830] dump_stack_lvl+0xe8/0x150 [ 127.260411][ T5830] print_address_description+0x55/0x1e0 [ 127.260437][ T5830] ? strcmp+0x6b/0xc0 [ 127.260467][ T5830] print_report+0x58/0x70 [ 127.260488][ T5830] kasan_report+0x117/0x150 [ 127.260515][ T5830] ? strcmp+0x6b/0xc0 [ 127.260546][ T5830] strcmp+0x6b/0xc0 [ 127.260576][ T5830] hpfs_get_ea+0x134/0xee0 [ 127.260602][ T5830] ? __pfx_hpfs_get_ea+0x10/0x10 [ 127.260623][ T5830] ? bdev_getblk+0x582/0x6e0 [ 127.260656][ T5830] ? __bread_gfp+0xc3/0x3b0 [ 127.260684][ T5830] ? hpfs_map_sector+0x167/0x3a0 [ 127.260716][ T5830] ? hpfs_map_fnode+0x27e/0x6a0 [ 127.260738][ T5830] ? set_normalized_timespec64+0xf0/0x1a0 [ 127.260777][ T5830] hpfs_read_inode+0x1a6/0x1050 [ 127.260802][ T5830] ? __pfx_hpfs_read_inode+0x10/0x10 [ 127.260824][ T5830] ? inode_set_ctime_to_ts+0x116/0x2e0 [ 127.260851][ T5830] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 127.260878][ T5830] ? rt_spin_unlock+0x160/0x200 [ 127.260908][ T5830] ? hpfs_init_inode+0x216/0x350 [ 127.260931][ T5830] hpfs_fill_super+0x123d/0x1fa0 [ 127.260969][ T5830] ? __pfx_hpfs_fill_super+0x10/0x10 [ 127.260997][ T5830] ? __pfx_snprintf+0x10/0x10 [ 127.261021][ T5830] ? set_blocksize+0x1c8/0x3d0 [ 127.261051][ T5830] ? rt_spin_unlock+0x14f/0x200 [ 127.261079][ T5830] ? sb_set_blocksize+0x11b/0x210 [ 127.261110][ T5830] ? setup_bdev_super+0x4c1/0x5b0 [ 127.261137][ T5830] get_tree_bdev_flags+0x431/0x4f0 [ 127.261163][ T5830] ? __pfx_hpfs_fill_super+0x10/0x10 [ 127.261197][ T5830] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.261222][ T5830] ? cap_capable+0x123/0x460 [ 127.261251][ T5830] ? safesetid_security_capable+0xa9/0x1a0 [ 127.261291][ T5830] vfs_get_tree+0x92/0x2a0 [ 127.261318][ T5830] do_new_mount+0x341/0xd30 [ 127.261354][ T5830] ? __pfx_do_new_mount+0x10/0x10 [ 127.261394][ T5830] ? user_path_at+0xd4/0x160 [ 127.261412][ T5830] ? user_path_at+0xd4/0x160 [ 127.261428][ T5830] __se_sys_mount+0x31d/0x420 [ 127.261455][ T5830] ? __pfx___se_sys_mount+0x10/0x10 [ 127.261483][ T5830] ? __x64_sys_mount+0x20/0xc0 [ 127.261506][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.261523][ T5830] do_syscall_64+0x15f/0x560 [ 127.261546][ T5830] ? trace_irq_disable+0x3b/0x140 [ 127.261565][ T5830] ? clear_bhb_loop+0x40/0x90 [ 127.261584][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.261599][ T5830] RIP: 0033:0x7fa78e12e0ca [ 127.261620][ T5830] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.261633][ T5830] RSP: 002b:00007ffecc656688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.261650][ T5830] RAX: ffffffffffffffda RBX: 00007ffecc656710 RCX: 00007fa78e12e0ca [ 127.261662][ T5830] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 00007ffecc6566d0 [ 127.261674][ T5830] RBP: 0000200000000100 R08: 00007ffecc656710 R09: 0000000003200041 [ 127.261685][ T5830] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000040 [ 127.261695][ T5830] R13: 00007ffecc6566d0 R14: 0000000000009e2a R15: 00002000000000c0 [ 127.261713][ T5830] [ 127.261719][ T5830] [ 127.261723][ T5830] The buggy address belongs to the physical page: [ 127.261739][ T5830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f436e168 pfn:0x4aa88 [ 127.261754][ T5830] flags: 0x80000000000000(node=0|zone=1) [ 127.261776][ T5830] raw: 0080000000000000 dead000000000100 dead000000000122 0000000000000000 [ 127.261790][ T5830] raw: 00000007f436e168 0000000000000000 00000000ffffffff 0000000000000000 [ 127.261798][ T5830] page dumped because: kasan: bad access detected [ 127.261808][ T5830] page_owner tracks the page as freed [ 127.261813][ T5830] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5613, tgid 5613 (syz-executor), ts 100963542912, free_ts 106948196588 [ 127.261841][ T5830] post_alloc_hook+0x22d/0x280 [ 127.261857][ T5830] get_page_from_freelist+0x28b2/0x2930 [ 127.261876][ T5830] __alloc_frozen_pages_noprof+0x18d/0x380 [ 127.261895][ T5830] alloc_pages_mpol+0xd1/0x380 [ 127.261913][ T5830] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 127.261931][ T5830] vma_alloc_folio_noprof+0xe1/0x1e0 [ 127.261949][ T5830] do_pte_missing+0x822/0x2950 [ 127.261968][ T5830] handle_mm_fault+0xd30/0x1400 [ 127.261984][ T5830] do_user_addr_fault+0xa73/0x1340 [ 127.262000][ T5830] exc_page_fault+0x6a/0xc0 [ 127.262020][ T5830] asm_exc_page_fault+0x26/0x30 [ 127.262035][ T5830] page last free pid 5613 tgid 5613 stack trace: [ 127.262043][ T5830] free_unref_folios+0xd8d/0x1990 [ 127.262059][ T5830] folios_put_refs+0x7cb/0x8d0 [ 127.262077][ T5830] free_pages_and_swap_cache+0x2b9/0x490 [ 127.262100][ T5830] tlb_flush_mmu+0x6d3/0xa30 [ 127.262119][ T5830] tlb_finish_mmu+0xf9/0x230 [ 127.262138][ T5830] unmap_region+0x2a5/0x330 [ 127.262156][ T5830] vms_complete_munmap_vmas+0x493/0xc60 [ 127.262177][ T5830] do_vmi_align_munmap+0x3bd/0x4d0 [ 127.262196][ T5830] do_vmi_munmap+0x252/0x2d0 [ 127.262216][ T5830] __vm_munmap+0x22c/0x3d0 [ 127.262237][ T5830] __x64_sys_munmap+0x60/0x70 [ 127.262252][ T5830] do_syscall_64+0x15f/0x560 [ 127.262273][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.262293][ T5830] [ 127.262296][ T5830] Memory state around the buggy address: [ 127.262304][ T5830] ffff88804aa88780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 127.262315][ T5830] ffff88804aa88800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 127.262325][ T5830] >ffff88804aa88880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 127.262333][ T5830] ^ [ 127.262341][ T5830] ffff88804aa88900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 127.262351][ T5830] ffff88804aa88980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 127.262359][ T5830] ================================================================== [ 127.262709][ T5830] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.262729][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.262754][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.262767][ T5830] Call Trace: [ 127.262775][ T5830] [ 127.262784][ T5830] vpanic+0x56c/0xa60 [ 127.262815][ T5830] ? __pfx_vpanic+0x10/0x10 [ 127.262841][ T5830] ? __pfx___schedule+0x10/0x10 [ 127.262876][ T5830] panic+0xc5/0xd0 [ 127.262901][ T5830] ? __pfx_panic+0x10/0x10 [ 127.262927][ T5830] ? preempt_schedule_thunk+0x16/0x30 [ 127.262965][ T5830] ? strcmp+0x6b/0xc0 [ 127.262997][ T5830] check_panic_on_warn+0x89/0xb0 [ 127.263030][ T5830] ? strcmp+0x6b/0xc0 [ 127.263062][ T5830] end_report+0x73/0x170 [ 127.263088][ T5830] ? strcmp+0x6b/0xc0 [ 127.263118][ T5830] kasan_report+0x128/0x150 [ 127.263145][ T5830] ? strcmp+0x6b/0xc0 [ 127.263181][ T5830] strcmp+0x6b/0xc0 [ 127.263215][ T5830] hpfs_get_ea+0x134/0xee0 [ 127.263242][ T5830] ? __pfx_hpfs_get_ea+0x10/0x10 [ 127.263268][ T5830] ? bdev_getblk+0x582/0x6e0 [ 127.263312][ T5830] ? __bread_gfp+0xc3/0x3b0 [ 127.263340][ T5830] ? hpfs_map_sector+0x167/0x3a0 [ 127.263375][ T5830] ? hpfs_map_fnode+0x27e/0x6a0 [ 127.263398][ T5830] ? set_normalized_timespec64+0xf0/0x1a0 [ 127.263432][ T5830] hpfs_read_inode+0x1a6/0x1050 [ 127.263459][ T5830] ? __pfx_hpfs_read_inode+0x10/0x10 [ 127.263482][ T5830] ? inode_set_ctime_to_ts+0x116/0x2e0 [ 127.263508][ T5830] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 127.263538][ T5830] ? rt_spin_unlock+0x160/0x200 [ 127.263567][ T5830] ? hpfs_init_inode+0x216/0x350 [ 127.263592][ T5830] hpfs_fill_super+0x123d/0x1fa0 [ 127.263632][ T5830] ? __pfx_hpfs_fill_super+0x10/0x10 [ 127.263662][ T5830] ? __pfx_snprintf+0x10/0x10 [ 127.263685][ T5830] ? set_blocksize+0x1c8/0x3d0 [ 127.263716][ T5830] ? rt_spin_unlock+0x14f/0x200 [ 127.263743][ T5830] ? sb_set_blocksize+0x11b/0x210 [ 127.263774][ T5830] ? setup_bdev_super+0x4c1/0x5b0 [ 127.263802][ T5830] get_tree_bdev_flags+0x431/0x4f0 [ 127.263828][ T5830] ? __pfx_hpfs_fill_super+0x10/0x10 [ 127.263855][ T5830] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 127.263883][ T5830] ? cap_capable+0x123/0x460 [ 127.263914][ T5830] ? safesetid_security_capable+0xa9/0x1a0 [ 127.263952][ T5830] vfs_get_tree+0x92/0x2a0 [ 127.263972][ T5830] do_new_mount+0x341/0xd30 [ 127.263998][ T5830] ? __pfx_do_new_mount+0x10/0x10 [ 127.264025][ T5830] ? user_path_at+0xd4/0x160 [ 127.264045][ T5830] ? user_path_at+0xd4/0x160 [ 127.264093][ T5830] __se_sys_mount+0x31d/0x420 [ 127.264136][ T5830] ? __pfx___se_sys_mount+0x10/0x10 [ 127.264164][ T5830] ? __x64_sys_mount+0x20/0xc0 [ 127.264187][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.264204][ T5830] do_syscall_64+0x15f/0x560 [ 127.264227][ T5830] ? trace_irq_disable+0x3b/0x140 [ 127.264246][ T5830] ? clear_bhb_loop+0x40/0x90 [ 127.264265][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.264286][ T5830] RIP: 0033:0x7fa78e12e0ca [ 127.264300][ T5830] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.264313][ T5830] RSP: 002b:00007ffecc656688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.264330][ T5830] RAX: ffffffffffffffda RBX: 00007ffecc656710 RCX: 00007fa78e12e0ca [ 127.264342][ T5830] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 00007ffecc6566d0 [ 127.264353][ T5830] RBP: 0000200000000100 R08: 00007ffecc656710 R09: 0000000003200041 [ 127.264364][ T5830] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000040 [ 127.264375][ T5830] R13: 00007ffecc6566d0 R14: 0000000000009e2a R15: 00002000000000c0 [ 127.264393][ T5830] [ 127.264675][ T5830] Kernel Offset: disabled