Warning: Permanently added '[localhost]:12585' (ED25519) to the list of known hosts.
2026/09/16 10:44:25 parsed 1 programs
2026/09/16 10:44:25 serving rpc on tcp://45777
syzkaller login: [ 89.408430][ T5281] cgroup: Unknown subsys name 'net'
[ 89.460212][ T5281] cgroup: Unknown subsys name 'cpuset'
[ 89.467288][ T5281] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 91.028965][ T5281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.952263][ T1384] cfg80211: failed to load regulatory.db
[ 96.464901][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.464921][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.557707][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.557728][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.729920][ T5299] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 102.892254][ T5358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.899360][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.900252][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.900946][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.901217][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 104.739324][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.739965][ T5369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.740082][ T5369] bridge_slave_0: entered allmulticast mode
[ 104.757845][ T5369] bridge_slave_0: entered promiscuous mode
[ 104.767216][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.767940][ T5369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.768042][ T5369] bridge_slave_1: entered allmulticast mode
[ 104.772499][ T5369] bridge_slave_1: entered promiscuous mode
[ 104.838939][ T5369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.851865][ T5369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.901026][ T5369] team0: Port device team_slave_0 added
[ 104.913350][ T5369] team0: Port device team_slave_1 added
[ 104.955346][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.955363][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.955377][ T5369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.962632][ T5369] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.962645][ T5369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.962660][ T5369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.090879][ T5369] hsr_slave_0: entered promiscuous mode
[ 105.092500][ T5369] hsr_slave_1: entered promiscuous mode
[ 105.310823][ T5369] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.338309][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 105.341282][ T5369] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.373110][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 105.378656][ T5369] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.398239][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 105.398953][ T5369] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.410215][ T5369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 105.444119][ T5369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.444578][ T5369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.445031][ T5369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.445100][ T5369] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.556780][ T5369] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.592944][ T1058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.597574][ T1058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.611830][ T5369] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.621678][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.621722][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.638468][ T188] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.638545][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.068298][ T5369] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.158797][ T5369] veth0_vlan: entered promiscuous mode
[ 106.169152][ T5369] veth1_vlan: entered promiscuous mode
[ 106.205022][ T5369] veth0_macvtap: entered promiscuous mode
[ 106.209538][ T5369] veth1_macvtap: entered promiscuous mode
[ 106.231758][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.247165][ T5369] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.293847][ T188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.293884][ T188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.293904][ T188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.293924][ T188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.548454][ T163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.596454][ T163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/16 10:44:45 executed programs: 0
[ 107.398087][ T4642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 107.399664][ T4642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 107.401141][ T4642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 107.413243][ T4642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 107.414701][ T4642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 107.634624][ T163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.251775][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.251896][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.251986][ T5410] bridge_slave_0: entered allmulticast mode
[ 108.265299][ T5410] bridge_slave_0: entered promiscuous mode
[ 108.271660][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.271786][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.271915][ T5410] bridge_slave_1: entered allmulticast mode
[ 108.282648][ T5410] bridge_slave_1: entered promiscuous mode
[ 108.317279][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 108.329155][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.383687][ T5410] team0: Port device team_slave_0 added
[ 108.386016][ T5410] team0: Port device team_slave_1 added
[ 108.478566][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.478577][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.478587][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.524931][ T163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.530495][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 108.530510][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.530605][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 108.591425][ T5410] hsr_slave_0: entered promiscuous mode
[ 108.592282][ T5410] hsr_slave_1: entered promiscuous mode
[ 108.599090][ T5410] debugfs: 'hsr0' already exists in 'hsr'
[ 108.600149][ T5410] Cannot create hsr debugfs directory
[ 109.126063][ T163] bridge_slave_1: left allmulticast mode
[ 109.126095][ T163] bridge_slave_1: left promiscuous mode
[ 109.126837][ T163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.155298][ T163] bridge_slave_0: left allmulticast mode
[ 109.155321][ T163] bridge_slave_0: left promiscuous mode
[ 109.155472][ T163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.299953][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 109.302467][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 109.311216][ T163] bond0 (unregistering): Released all slaves
[ 109.405589][ T163] hsr_slave_0: left promiscuous mode
[ 109.406083][ T163] hsr_slave_1: left promiscuous mode
[ 109.406609][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 109.406624][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 109.407669][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 109.407681][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 109.433593][ T163] veth1_macvtap: left promiscuous mode
[ 109.433632][ T163] veth0_macvtap: left promiscuous mode
[ 109.433693][ T163] veth1_vlan: left promiscuous mode
[ 109.434165][ T163] veth0_vlan: left promiscuous mode
[ 109.454450][ T4642] Bluetooth: hci0: command tx timeout
[ 109.676563][ T163] team0 (unregistering): Port device team_slave_1 removed
[ 109.699863][ T163] team0 (unregistering): Port device team_slave_0 removed
[ 110.415138][ T5410] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.422409][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 110.430161][ T5410] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.441749][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 110.447226][ T5410] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.462518][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 110.467610][ T5410] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.471622][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 110.611941][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.650221][ T5410] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.666637][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.666706][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.690499][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.690542][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.175874][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 111.229122][ T5410] veth0_vlan: entered promiscuous mode
[ 111.238895][ T5410] veth1_vlan: entered promiscuous mode
[ 111.267942][ T5410] veth0_macvtap: entered promiscuous mode
[ 111.271386][ T5410] veth1_macvtap: entered promiscuous mode
[ 111.291388][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.307816][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.335829][ T1058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.335864][ T1058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.335884][ T1058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.335904][ T1058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.427279][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.427291][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.474025][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.474046][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.533099][ T4642] Bluetooth: hci0: command tx timeout
[ 111.568811][ T5456] loop0: detected capacity change from 0 to 128
[ 111.578340][ T5456] =======================================================
[ 111.578340][ T5456] WARNING: The mand mount option has been deprecated and
[ 111.578340][ T5456] and is ignored by this kernel. Remove the mand
[ 111.578340][ T5456] option from the mount to silence this warning.
[ 111.578340][ T5456] =======================================================
[ 111.640054][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.640069][ T5456] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only
[ 111.641064][ T5456] hpfs: filesystem error: improperly stopped
[ 111.641073][ T5456] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 111.641078][ T5456] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[ 111.641082][ T5456] hpfs: You really don't want any checks? You are crazy...
[ 111.641092][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.641095][ T5456] hpfs: code page support is disabled
[ 111.642439][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.642455][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.642465][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.642475][ T5456] hpfs: hpfs_map_sector(): read error
[ 111.642481][ T5456] hpfs: hpfs_map_4sectors(): unaligned read
[ 111.642648][ T5456] hpfs: hpfs_map_4sectors(): unaligned read
[ 111.642655][ T5456] hpfs: filesystem error: unable to find root dir
[ 111.771042][ T5457] loop0: detected capacity change from 0 to 128
[ 111.790703][ T5457] hpfs: hpfs_map_sector(): read error
[ 111.790719][ T5457] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only
[ 111.790744][ T5457] hpfs: filesystem error: improperly stopped
[ 111.790752][ T5457] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 111.790760][ T5457] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[ 111.790764][ T5457] hpfs: You really don't want any checks? You are crazy...
[ 111.790775][ T5457] hpfs: hpfs_map_sector(): read error
[ 111.790779][ T5457] hpfs: code page support is disabled
[ 111.792047][ T5457] ==================================================================
[ 111.792069][ T5457] BUG: KASAN: use-after-free in strcmp+0x6b/0xc0
[ 111.792205][ T5457] Read of size 1 at addr ffff888012b3f8a6 by task syz.0.18/5457
[ 111.792216][ T5457]
[ 111.792224][ T5457] CPU: 0 UID: 0 PID: 5457 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 111.792264][ T5457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 111.792269][ T5457] Call Trace:
[ 111.792273][ T5457]
[ 111.792277][ T5457] dump_stack_lvl+0xe8/0x150
[ 111.792323][ T5457] print_address_description+0x55/0x1e0
[ 111.792337][ T5457] ? strcmp+0x6b/0xc0
[ 111.792347][ T5457] print_report+0x58/0x70
[ 111.792359][ T5457] kasan_report+0x117/0x150
[ 111.792380][ T5457] ? schedule+0x90/0x2b0
[ 111.792396][ T5457] ? strcmp+0x6b/0xc0
[ 111.792409][ T5457] strcmp+0x6b/0xc0
[ 111.792421][ T5457] hpfs_get_ea+0x137/0xeb0
[ 111.792478][ T5457] ? __wait_on_bit+0xef/0x300
[ 111.792490][ T5457] ? out_of_line_wait_on_bit+0x13b/0x190
[ 111.792501][ T5457] ? __pfx_hpfs_get_ea+0x10/0x10
[ 111.792510][ T5457] ? __pfx_bit_wait_io+0x10/0x10
[ 111.792521][ T5457] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 111.792532][ T5457] ? __pfx_wake_bit_function+0x10/0x10
[ 111.792558][ T5457] ? __bread_gfp+0x233/0x380
[ 111.792570][ T5457] ? __bread_gfp+0x2d2/0x380
[ 111.792581][ T5457] ? hpfs_map_sector+0x149/0x370
[ 111.792622][ T5457] ? trace_kmem_cache_alloc+0x29/0xe0
[ 111.792639][ T5457] hpfs_read_inode+0x1a9/0x1060
[ 111.792652][ T5457] ? __pfx_hpfs_read_inode+0x10/0x10
[ 111.792662][ T5457] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 111.792679][ T5457] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 111.792693][ T5457] ? do_raw_spin_unlock+0x4d/0x200
[ 111.792708][ T5457] ? hpfs_init_inode+0x1c9/0x380
[ 111.792718][ T5457] hpfs_fill_super+0x1275/0x1fa0
[ 111.792734][ T5457] ? __pfx_hpfs_fill_super+0x10/0x10
[ 111.792748][ T5457] ? __pfx_snprintf+0x10/0x10
[ 111.792762][ T5457] ? set_blocksize+0x1c9/0x440
[ 111.792789][ T5457] ? sb_set_blocksize+0x155/0x240
[ 111.792804][ T5457] ? setup_bdev_super+0x586/0x680
[ 111.792819][ T5457] get_tree_bdev_flags+0x430/0x4f0
[ 111.792832][ T5457] ? __pfx_hpfs_fill_super+0x10/0x10
[ 111.792845][ T5457] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 111.792862][ T5457] vfs_get_tree+0x92/0x2a0
[ 111.792876][ T5457] do_new_mount+0x319/0xdc0
[ 111.792889][ T5457] ? __pfx_do_new_mount+0x10/0x10
[ 111.792900][ T5457] ? ns_capable+0x89/0xe0
[ 111.792915][ T5457] ? path_mount+0x647/0x1050
[ 111.792926][ T5457] ? user_path_at+0xd4/0x160
[ 111.792941][ T5457] __se_sys_mount+0x31d/0x420
[ 111.792955][ T5457] ? __pfx___se_sys_mount+0x10/0x10
[ 111.792969][ T5457] ? __x64_sys_mount+0x20/0xc0
[ 111.792981][ T5457] do_syscall_64+0x166/0x520
[ 111.792992][ T5457] ? trace_irq_disable+0x3b/0x140
[ 111.793002][ T5457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.793012][ T5457] ? clear_bhb_loop+0x70/0xc0
[ 111.793023][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.793033][ T5457] RIP: 0033:0x7fcc2d19f3ca
[ 111.793045][ T5457] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 111.793055][ T5457] RSP: 002b:00007fff35ac6bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 111.793069][ T5457] RAX: ffffffffffffffda RBX: 00007fff35ac6c40 RCX: 00007fcc2d19f3ca
[ 111.793077][ T5457] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fff35ac6c00
[ 111.793085][ T5457] RBP: 000020000000a000 R08: 00007fff35ac6c40 R09: 0000000003200041
[ 111.793092][ T5457] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000
[ 111.793097][ T5457] R13: 00007fff35ac6c00 R14: 0000000000009e15 R15: 0000200000000040
[ 111.793105][ T5457]
[ 111.793113][ T5457]
[ 111.793115][ T5457] The buggy address belongs to the physical page:
[ 111.793119][ T5457] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f8f091d pfn:0x12b3f
[ 111.793127][ T5457] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 111.793141][ T5457] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 111.793150][ T5457] raw: 000000007f8f091d 0000000000000000 00000000ffffffff 0000000000000000
[ 111.793154][ T5457] page dumped because: kasan: bad access detected
[ 111.793160][ T5457] page_owner tracks the page as freed
[ 111.793164][ T5457] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5277, tgid 5277 (syz-execprog), ts 86465552078
[ 111.793180][ T5457] post_alloc_hook+0x1f9/0x250
[ 111.793194][ T5457] get_page_from_freelist+0x2209/0x2280
[ 111.793209][ T5457] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 111.793223][ T5457] alloc_pages_mpol+0x21e/0x390
[ 111.793234][ T5457] folio_alloc_mpol_noprof+0x39/0x160
[ 111.793241][ T5457] vma_alloc_folio_noprof+0xe1/0x1e0
[ 111.793248][ T5457] do_pte_missing+0x173a/0x34b0
[ 111.793257][ T5457] handle_mm_fault+0x1a53/0x3750
[ 111.793264][ T5457] do_user_addr_fault+0xa4f/0x1340
[ 111.793270][ T5457] exc_page_fault+0x6a/0xc0
[ 111.793276][ T5457] asm_exc_page_fault+0x26/0x30
[ 111.793282][ T5457] page last free pid 78 tgid 78 ts 105073713032 stack trace:
[ 111.793287][ T5457] free_unref_folios+0xdc2/0x14e0
[ 111.793295][ T5457] shrink_folio_list+0x2be2/0x5250
[ 111.793306][ T5457] evict_folios+0x3055/0x3fb0
[ 111.793314][ T5457] try_to_shrink_lruvec+0xe3b/0x1340
[ 111.793322][ T5457] shrink_one+0x233/0x730
[ 111.793329][ T5457] shrink_node+0x35d0/0x3e30
[ 111.793337][ T5457] kswapd+0x185e/0x32c0
[ 111.793344][ T5457] kthread+0x38b/0x480
[ 111.793353][ T5457] ret_from_fork+0x514/0xb70
[ 111.793361][ T5457] ret_from_fork_asm+0x1a/0x30
[ 111.793376][ T5457] page has been migrated, last migrate reason: numa_misplaced
[ 111.793381][ T5457]
[ 111.793383][ T5457] Memory state around the buggy address:
[ 111.793390][ T5457] ffff888012b3f780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 111.793397][ T5457] ffff888012b3f800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 111.793404][ T5457] >ffff888012b3f880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 111.793409][ T5457] ^
[ 111.793415][ T5457] ffff888012b3f900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 111.793421][ T5457] ffff888012b3f980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 111.793426][ T5457] ==================================================================
[ 111.907349][ T5457] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 112.097878][ T5457] CPU: 0 UID: 0 PID: 5457 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 112.101823][ T5457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 112.106279][ T5457] Call Trace:
[ 112.107689][ T5457]
[ 112.108974][ T5457] vpanic+0x56d/0xa60
[ 112.110695][ T5457] ? __pfx_vpanic+0x10/0x10
[ 112.112571][ T5457] ? __pfx___schedule+0x10/0x10
[ 112.114671][ T5457] panic+0xc5/0xd0
[ 112.116267][ T5457] ? __pfx_panic+0x10/0x10
[ 112.118203][ T5457] ? preempt_schedule_thunk+0x16/0x40
[ 112.120550][ T5457] ? strcmp+0x6b/0xc0
[ 112.122356][ T5457] check_panic_on_warn+0x89/0xb0
[ 112.124539][ T5457] ? strcmp+0x6b/0xc0
[ 112.126352][ T5457] end_report+0x73/0x170
[ 112.128193][ T5457] ? strcmp+0x6b/0xc0
[ 112.129914][ T5457] kasan_report+0x128/0x150
[ 112.131916][ T5457] ? schedule+0x90/0x2b0
[ 112.133795][ T5457] ? strcmp+0x6b/0xc0
[ 112.135495][ T5457] strcmp+0x6b/0xc0
[ 112.137146][ T5457] hpfs_get_ea+0x137/0xeb0
[ 112.139035][ T5457] ? __wait_on_bit+0xef/0x300
[ 112.141071][ T5457] ? out_of_line_wait_on_bit+0x13b/0x190
[ 112.143487][ T5457] ? __pfx_hpfs_get_ea+0x10/0x10
[ 112.146161][ T5457] ? __pfx_bit_wait_io+0x10/0x10
[ 112.148844][ T5457] ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 112.151546][ T5457] ? __pfx_wake_bit_function+0x10/0x10
[ 112.153978][ T5457] ? __bread_gfp+0x233/0x380
[ 112.155825][ T5457] ? __bread_gfp+0x2d2/0x380
[ 112.157915][ T5457] ? hpfs_map_sector+0x149/0x370
[ 112.160068][ T5457] ? trace_kmem_cache_alloc+0x29/0xe0
[ 112.162441][ T5457] hpfs_read_inode+0x1a9/0x1060
[ 112.164573][ T5457] ? __pfx_hpfs_read_inode+0x10/0x10
[ 112.166827][ T5457] ? inode_set_ctime_to_ts+0x116/0x2e0
[ 112.169047][ T5457] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 112.171484][ T5457] ? do_raw_spin_unlock+0x4d/0x200
[ 112.173632][ T5457] ? hpfs_init_inode+0x1c9/0x380
[ 112.175767][ T5457] hpfs_fill_super+0x1275/0x1fa0
[ 112.177876][ T5457] ? __pfx_hpfs_fill_super+0x10/0x10
[ 112.180131][ T5457] ? __pfx_snprintf+0x10/0x10
[ 112.182142][ T5457] ? set_blocksize+0x1c9/0x440
[ 112.184190][ T5457] ? sb_set_blocksize+0x155/0x240
[ 112.186425][ T5457] ? setup_bdev_super+0x586/0x680
[ 112.188572][ T5457] get_tree_bdev_flags+0x430/0x4f0
[ 112.190877][ T5457] ? __pfx_hpfs_fill_super+0x10/0x10
[ 112.193220][ T5457] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 112.195716][ T5457] vfs_get_tree+0x92/0x2a0
[ 112.197687][ T5457] do_new_mount+0x319/0xdc0
[ 112.199698][ T5457] ? __pfx_do_new_mount+0x10/0x10
[ 112.201859][ T5457] ? ns_capable+0x89/0xe0
[ 112.203775][ T5457] ? path_mount+0x647/0x1050
[ 112.205860][ T5457] ? user_path_at+0xd4/0x160
[ 112.207889][ T5457] __se_sys_mount+0x31d/0x420
[ 112.210001][ T5457] ? __pfx___se_sys_mount+0x10/0x10
[ 112.212249][ T5457] ? __x64_sys_mount+0x20/0xc0
[ 112.214381][ T5457] do_syscall_64+0x166/0x520
[ 112.216409][ T5457] ? trace_irq_disable+0x3b/0x140
[ 112.218606][ T5457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.221175][ T5457] ? clear_bhb_loop+0x70/0xc0
[ 112.223165][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.225687][ T5457] RIP: 0033:0x7fcc2d19f3ca
[ 112.227588][ T5457] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 112.235797][ T5457] RSP: 002b:00007fff35ac6bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 112.239402][ T5457] RAX: ffffffffffffffda RBX: 00007fff35ac6c40 RCX: 00007fcc2d19f3ca
[ 112.242813][ T5457] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fff35ac6c00
[ 112.246230][ T5457] RBP: 000020000000a000 R08: 00007fff35ac6c40 R09: 0000000003200041
[ 112.249856][ T5457] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000
[ 112.253476][ T5457] R13: 00007fff35ac6c00 R14: 0000000000009e15 R15: 0000200000000040
[ 112.257016][ T5457]
[ 112.258596][ T5457] Kernel Offset: disabled
[ 112.260452][ T5457] Rebooting in 86400 seconds..
VM DIAGNOSIS:
10:44:50 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000029f900
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8574a3d0
R12=dffffc0000000000 R13=0000000000000065 R14=ffffffff9ad45500 R15=0000000000000000
RIP=ffffffff8574a44c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808c2c6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc2d24df3c CR3=000000003fa34000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff35ac71d6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff35ac71d6 00007fff35ac71dc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc2d23564e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc2d23568e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc2d2357f2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc2d235680
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 0000000000000001 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000