Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 86.560793][ T1108] cfg80211: failed to load regulatory.db 2026/09/09 01:35:27 parsed 1 programs 2026/09/09 01:35:27 serving rpc on tcp://44547 [ 90.171700][ T4202] cgroup: Unknown subsys name 'net' [ 90.324253][ T4202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.854245][ T4202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 95.011564][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.024891][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.035559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.058807][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.066731][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.074512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.105583][ T743] ODEBUG: Out of memory. ODEBUG disabled [ 95.602531][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 95.643699][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.651464][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.659432][ T4289] device bridge_slave_0 entered promiscuous mode [ 95.667898][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.675082][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.683090][ T4289] device bridge_slave_1 entered promiscuous mode [ 95.702720][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.713803][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.734589][ T4289] team0: Port device team_slave_0 added [ 95.741669][ T4289] team0: Port device team_slave_1 added [ 95.774105][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.781376][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.807752][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.820301][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.827263][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.853316][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.899082][ T4289] device hsr_slave_0 entered promiscuous mode [ 95.906081][ T4289] device hsr_slave_1 entered promiscuous mode [ 96.028391][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.039808][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.049256][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.058407][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.136817][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.149160][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.157634][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.188886][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.198219][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.207570][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.217979][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.225241][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.233524][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.245511][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.254560][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.262986][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.270067][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.290472][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.299193][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.307783][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.317501][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.326423][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.335163][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.343604][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.352480][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.360816][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.372007][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.380445][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.403564][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.491426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.499620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.529734][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.545581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.554344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.575537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.583866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.592894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.600939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.612344][ T4289] device veth0_vlan entered promiscuous mode [ 96.623920][ T4289] device veth1_vlan entered promiscuous mode [ 96.647881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.657766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.666611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.676660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.686013][ T4289] device veth0_macvtap entered promiscuous mode [ 96.696284][ T4289] device veth1_macvtap entered promiscuous mode [ 96.712110][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.721676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.730068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.737987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.747316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.759164][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.770213][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.780121][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.789946][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799074][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.813766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.823677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.948714][ T4289] syz-executor (4289) used greatest stack depth: 20464 bytes left 2026/09/09 01:35:37 executed programs: 0 [ 97.605485][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 97.665983][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.673263][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.691096][ T4305] device bridge_slave_0 entered promiscuous mode [ 97.704199][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.711506][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.722026][ T4305] device bridge_slave_1 entered promiscuous mode [ 97.745717][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.760019][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.792400][ T4305] team0: Port device team_slave_0 added [ 97.800303][ T4305] team0: Port device team_slave_1 added [ 97.821497][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.829325][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.855727][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.868343][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.875625][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.902880][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.946080][ T4305] device hsr_slave_0 entered promiscuous mode [ 97.953875][ T4305] device hsr_slave_1 entered promiscuous mode [ 97.961365][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.971966][ T4305] Cannot create hsr debugfs directory [ 98.051403][ T4305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.529638][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 100.844074][ T4305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.599056][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 101.914929][ T4305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.024663][ T4305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.153499][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.173536][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.182565][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.192805][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.264424][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.276545][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.284840][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.305086][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.314682][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.323677][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.332254][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.339342][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.347223][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.366736][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.375351][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.384959][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.392074][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.402741][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.429948][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.441820][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.450574][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.460662][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.471101][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.479712][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.498235][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.506923][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.518320][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.531612][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.547097][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.556562][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.590462][ T743] device hsr_slave_0 left promiscuous mode [ 102.596968][ T743] device hsr_slave_1 left promiscuous mode [ 102.606998][ T743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.615831][ T743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.626833][ T743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.634575][ T743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.645501][ T743] device bridge_slave_1 left promiscuous mode [ 102.652414][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.664198][ T743] device bridge_slave_0 left promiscuous mode [ 102.672946][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.690640][ T743] device veth1_macvtap left promiscuous mode [ 102.696790][ T743] device veth0_macvtap left promiscuous mode [ 102.702971][ T743] device veth1_vlan left promiscuous mode [ 102.709021][ T743] device veth0_vlan left promiscuous mode [ 102.842878][ T743] team0 (unregistering): Port device team_slave_1 removed [ 102.855710][ T743] team0 (unregistering): Port device team_slave_0 removed [ 102.867660][ T743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.881830][ T743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.932979][ T743] bond0 (unregistering): Released all slaves [ 103.012527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.020226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.033053][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.053046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.063048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.080941][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.089484][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.098182][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.106938][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.116610][ T4305] device veth0_vlan entered promiscuous mode [ 103.127764][ T4305] device veth1_vlan entered promiscuous mode [ 103.151260][ T4305] device veth0_macvtap entered promiscuous mode [ 103.158428][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.166602][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.174819][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.183594][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.193013][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.203123][ T4305] device veth1_macvtap entered promiscuous mode [ 103.217165][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.224632][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.235567][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.244409][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.256854][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.265839][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.274806][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.287786][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.296869][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306208][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.315144][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.361816][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.370957][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.382818][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.401919][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.409945][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.417639][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.475042][ T4318] loop0: detected capacity change from 0 to 128 [ 103.519983][ T4318] ======================================================= [ 103.519983][ T4318] WARNING: The mand mount option has been deprecated and [ 103.519983][ T4318] and is ignored by this kernel. Remove the mand [ 103.519983][ T4318] option from the mount to silence this warning. [ 103.519983][ T4318] ======================================================= [ 103.575219][ T4318] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.593715][ T4318] hpfs: filesystem error: improperly stopped [ 103.615658][ T4318] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 103.624614][ T4318] hpfs: You really don't want any checks? You are crazy... [ 103.632368][ T4318] hpfs: hpfs_map_sector(): read error [ 103.637752][ T4318] hpfs: code page support is disabled [ 103.645712][ T4318] ================================================================== [ 103.653939][ T4318] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 103.660306][ T4318] Read of size 1 at addr ffff88805baeb8a6 by task syz.0.17/4318 [ 103.667966][ T4318] [ 103.670302][ T4318] CPU: 1 PID: 4318 Comm: syz.0.17 Not tainted syzkaller #0 [ 103.677517][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.687598][ T4318] Call Trace: [ 103.690888][ T4318] [ 103.693831][ T4318] dump_stack_lvl+0x188/0x250 [ 103.698545][ T4318] ? show_regs_print_info+0x20/0x20 [ 103.703776][ T4318] ? _printk+0xda/0x130 [ 103.707968][ T4318] ? strcmp+0x67/0xb0 [ 103.711992][ T4318] ? load_image+0x410/0x410 [ 103.716531][ T4318] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 103.722029][ T4318] print_address_description+0x60/0x2d0 [ 103.727603][ T4318] ? strcmp+0x67/0xb0 [ 103.731616][ T4318] kasan_report+0xdf/0x130 [ 103.736064][ T4318] ? strcmp+0x67/0xb0 [ 103.740062][ T4318] strcmp+0x67/0xb0 [ 103.743894][ T4318] hpfs_get_ea+0x134/0xda0 [ 103.748348][ T4318] ? hpfs_read_ea+0xc20/0xc20 [ 103.753057][ T4318] ? __getblk_gfp+0x51/0xb20 [ 103.757672][ T4318] ? __might_sleep+0xf0/0xf0 [ 103.762323][ T4318] ? __bread_gfp+0x132/0x380 [ 103.766942][ T4318] ? hpfs_map_sector+0x146/0x2e0 [ 103.771916][ T4318] hpfs_read_inode+0x1a6/0x1050 [ 103.776804][ T4318] ? __lock_acquire+0x7b50/0x7b50 [ 103.781859][ T4318] ? hpfs_init_inode+0x2c0/0x2c0 [ 103.786834][ T4318] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 103.792684][ T4318] ? do_raw_spin_unlock+0x11d/0x230 [ 103.797998][ T4318] ? hpfs_init_inode+0x1cc/0x2c0 [ 103.802981][ T4318] hpfs_fill_super+0x12ee/0x1f30 [ 103.807971][ T4318] ? hpfs_mount+0x40/0x40 [ 103.812446][ T4318] ? snprintf+0xe5/0x140 [ 103.816731][ T4318] ? set_blocksize+0x1f1/0x360 [ 103.821522][ T4318] ? sb_set_blocksize+0xa5/0xe0 [ 103.826454][ T4318] mount_bdev+0x28a/0x3c0 [ 103.830796][ T4318] ? hpfs_mount+0x40/0x40 [ 103.835144][ T4318] legacy_get_tree+0xe6/0x180 [ 103.839856][ T4318] ? hpfs_ioctl+0x260/0x260 [ 103.844373][ T4318] vfs_get_tree+0x88/0x270 [ 103.848804][ T4318] do_new_mount+0x247/0xa40 [ 103.853340][ T4318] __se_sys_mount+0x2e3/0x3d0 [ 103.858038][ T4318] ? __x64_sys_mount+0xc0/0xc0 [ 103.862822][ T4318] ? lockdep_hardirqs_on+0x94/0x140 [ 103.868054][ T4318] ? __x64_sys_mount+0x1c/0xc0 [ 103.872849][ T4318] do_syscall_64+0x4c/0xa0 [ 103.877289][ T4318] ? clear_bhb_loop+0x30/0x80 [ 103.881992][ T4318] ? clear_bhb_loop+0x30/0x80 [ 103.886704][ T4318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.892657][ T4318] RIP: 0033:0x7f2f7b8333ca [ 103.897199][ T4318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.916839][ T4318] RSP: 002b:00007fffb5ee24a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.925268][ T4318] RAX: ffffffffffffffda RBX: 00007fffb5ee2530 RCX: 00007f2f7b8333ca [ 103.933268][ T4318] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fffb5ee24f0 [ 103.941263][ T4318] RBP: 000020000000a000 R08: 00007fffb5ee2530 R09: 0000000003200041 [ 103.949264][ T4318] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 103.957264][ T4318] R13: 00007fffb5ee24f0 R14: 0000000000009e15 R15: 0000200000000040 [ 103.965308][ T4318] [ 103.968335][ T4318] [ 103.970670][ T4318] The buggy address belongs to the page: [ 103.976318][ T4318] page:ffffea00016ebac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5baeb [ 103.986589][ T4318] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.993719][ T4318] raw: 00fff00000000000 ffffea00016e2448 ffffea00016e2888 0000000000000000 [ 104.002326][ T4318] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 104.010921][ T4318] page dumped because: kasan: bad access detected [ 104.017366][ T4318] page_owner tracks the page as freed [ 104.022750][ T4318] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4207, ts 103607954985, free_ts 103612024089 [ 104.038486][ T4318] get_page_from_freelist+0x24f6/0x2670 [ 104.044054][ T4318] __alloc_pages+0x1ee/0x480 [ 104.048651][ T4318] alloc_pages_vma+0x2bc/0x790 [ 104.053433][ T4318] handle_mm_fault+0x23be/0x4440 [ 104.058415][ T4318] do_user_addr_fault+0x494/0xc90 [ 104.063464][ T4318] exc_page_fault+0x60/0x100 [ 104.068072][ T4318] asm_exc_page_fault+0x22/0x30 [ 104.072937][ T4318] copy_user_enhanced_fast_string+0xe/0x40 [ 104.078759][ T4318] copy_page_to_iter+0x4c9/0x930 [ 104.083706][ T4318] filemap_read+0x1e0a/0x2560 [ 104.088388][ T4318] blkdev_read_iter+0x11d/0x150 [ 104.093260][ T4318] vfs_read+0x75e/0xd50 [ 104.097438][ T4318] ksys_read+0x153/0x260 [ 104.101793][ T4318] do_syscall_64+0x4c/0xa0 [ 104.106235][ T4318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.112236][ T4318] page last free stack trace: [ 104.116928][ T4318] free_unref_page_prepare+0x637/0x6c0 [ 104.122410][ T4318] free_unref_page_list+0x119/0x830 [ 104.127650][ T4318] release_pages+0x185f/0x1bd0 [ 104.132429][ T4318] tlb_finish_mmu+0x1b4/0x370 [ 104.137216][ T4318] unmap_region+0x344/0x3b0 [ 104.141737][ T4318] __do_munmap+0xa29/0xe10 [ 104.146173][ T4318] __vm_munmap+0x13f/0x240 [ 104.150621][ T4318] __x64_sys_munmap+0x67/0x70 [ 104.155318][ T4318] do_syscall_64+0x4c/0xa0 [ 104.159748][ T4318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.165659][ T4318] [ 104.167988][ T4318] Memory state around the buggy address: [ 104.173626][ T4318] ffff88805baeb780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.181697][ T4318] ffff88805baeb800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.189771][ T4318] >ffff88805baeb880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.197837][ T4318] ^ [ 104.202961][ T4318] ffff88805baeb900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.211046][ T4318] ffff88805baeb980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.219117][ T4318] ================================================================== [ 104.227194][ T4318] Disabling lock debugging due to kernel taint [ 104.235295][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 104.238929][ T4318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.248525][ T4318] CPU: 0 PID: 4318 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 104.257123][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.267225][ T4318] Call Trace: [ 104.270529][ T4318] [ 104.273480][ T4318] dump_stack_lvl+0x188/0x250 [ 104.278233][ T4318] ? show_regs_print_info+0x20/0x20 [ 104.283455][ T4318] ? load_image+0x410/0x410 [ 104.287984][ T4318] panic+0x2f8/0x850 [ 104.291925][ T4318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 104.298102][ T4318] ? bpf_jit_dump+0xd0/0xd0 [ 104.302624][ T4318] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 104.308642][ T4318] ? _raw_spin_unlock+0x40/0x40 [ 104.313517][ T4318] ? strcmp+0x67/0xb0 [ 104.317519][ T4318] check_panic_on_warn+0x80/0xa0 [ 104.322482][ T4318] ? strcmp+0x67/0xb0 [ 104.326510][ T4318] end_report+0x6d/0xf0 [ 104.330710][ T4318] kasan_report+0x102/0x130 [ 104.335238][ T4318] ? strcmp+0x67/0xb0 [ 104.339231][ T4318] strcmp+0x67/0xb0 [ 104.343051][ T4318] hpfs_get_ea+0x134/0xda0 [ 104.347634][ T4318] ? hpfs_read_ea+0xc20/0xc20 [ 104.352342][ T4318] ? __getblk_gfp+0x51/0xb20 [ 104.356951][ T4318] ? __might_sleep+0xf0/0xf0 [ 104.361596][ T4318] ? __bread_gfp+0x132/0x380 [ 104.366200][ T4318] ? hpfs_map_sector+0x146/0x2e0 [ 104.371158][ T4318] hpfs_read_inode+0x1a6/0x1050 [ 104.376033][ T4318] ? __lock_acquire+0x7b50/0x7b50 [ 104.381167][ T4318] ? hpfs_init_inode+0x2c0/0x2c0 [ 104.386122][ T4318] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 104.391957][ T4318] ? do_raw_spin_unlock+0x11d/0x230 [ 104.397193][ T4318] ? hpfs_init_inode+0x1cc/0x2c0 [ 104.402150][ T4318] hpfs_fill_super+0x12ee/0x1f30 [ 104.407122][ T4318] ? hpfs_mount+0x40/0x40 [ 104.411478][ T4318] ? snprintf+0xe5/0x140 [ 104.415759][ T4318] ? set_blocksize+0x1f1/0x360 [ 104.420531][ T4318] ? sb_set_blocksize+0xa5/0xe0 [ 104.425396][ T4318] mount_bdev+0x28a/0x3c0 [ 104.429735][ T4318] ? hpfs_mount+0x40/0x40 [ 104.434074][ T4318] legacy_get_tree+0xe6/0x180 [ 104.438759][ T4318] ? hpfs_ioctl+0x260/0x260 [ 104.443269][ T4318] vfs_get_tree+0x88/0x270 [ 104.447695][ T4318] do_new_mount+0x247/0xa40 [ 104.452221][ T4318] __se_sys_mount+0x2e3/0x3d0 [ 104.456926][ T4318] ? __x64_sys_mount+0xc0/0xc0 [ 104.461710][ T4318] ? lockdep_hardirqs_on+0x94/0x140 [ 104.466940][ T4318] ? __x64_sys_mount+0x1c/0xc0 [ 104.471741][ T4318] do_syscall_64+0x4c/0xa0 [ 104.476180][ T4318] ? clear_bhb_loop+0x30/0x80 [ 104.480868][ T4318] ? clear_bhb_loop+0x30/0x80 [ 104.485563][ T4318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.491474][ T4318] RIP: 0033:0x7f2f7b8333ca [ 104.495932][ T4318] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.515726][ T4318] RSP: 002b:00007fffb5ee24a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.524168][ T4318] RAX: ffffffffffffffda RBX: 00007fffb5ee2530 RCX: 00007f2f7b8333ca [ 104.532153][ T4318] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fffb5ee24f0 [ 104.540146][ T4318] RBP: 000020000000a000 R08: 00007fffb5ee2530 R09: 0000000003200041 [ 104.548128][ T4318] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 104.556110][ T4318] R13: 00007fffb5ee24f0 R14: 0000000000009e15 R15: 0000200000000040 [ 104.564189][ T4318] [ 104.567520][ T4318] Kernel Offset: disabled [ 104.571858][ T4318] Rebooting in 86400 seconds..