Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. 2026/09/09 01:21:57 parsed 1 programs 2026/09/09 01:21:57 serving rpc on tcp://42587 [ 81.743991][ T4203] cgroup: Unknown subsys name 'net' [ 81.874045][ T4203] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.425882][ T4203] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.132383][ T4220] chnl_net:caif_netlink_parms(): no params data found [ 85.185739][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.194155][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.202478][ T4220] device bridge_slave_0 entered promiscuous mode [ 85.214052][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.221306][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.229713][ T4220] device bridge_slave_1 entered promiscuous mode [ 85.253597][ T4220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.264748][ T4220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.287369][ T4220] team0: Port device team_slave_0 added [ 85.295497][ T4220] team0: Port device team_slave_1 added [ 85.315693][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.322878][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.348827][ T4220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.361663][ T4220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.368721][ T4220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.394990][ T4220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.429341][ T4220] device hsr_slave_0 entered promiscuous mode [ 85.436152][ T4220] device hsr_slave_1 entered promiscuous mode [ 85.542955][ T4220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.554002][ T4220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.566183][ T4220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.576425][ T4220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.604522][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.611761][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.619818][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.626979][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.678694][ T4220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.696287][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.709852][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.719922][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.735138][ T4220] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.748952][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.758506][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.765605][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.788105][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.799023][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.806132][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.832148][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.842389][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.851513][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.862084][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.878645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.891099][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.025540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.034159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.049587][ T4220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.073298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.084061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.105953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.115767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.128003][ T4220] device veth0_vlan entered promiscuous mode [ 86.139029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.147647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.158966][ T4220] device veth1_vlan entered promiscuous mode [ 86.195890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.205497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.214290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.224990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.236371][ T4220] device veth0_macvtap entered promiscuous mode [ 86.249729][ T4220] device veth1_macvtap entered promiscuous mode [ 86.273166][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.281128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.290437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.299698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.309125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.323258][ T4220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.331751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.341414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.356432][ T4220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.365961][ T4220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.377725][ T4220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.386511][ T4220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.507339][ T4220] syz-executor (4220) used greatest stack depth: 21136 bytes left [ 86.620408][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.636867][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.648513][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.673710][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.681798][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.690384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.741365][ T1108] cfg80211: failed to load regulatory.db [ 87.668132][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.413553][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.375247][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.444605][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.932752][ T144] device hsr_slave_0 left promiscuous mode [ 92.949895][ T144] device hsr_slave_1 left promiscuous mode [ 92.969999][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.986855][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.009140][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.016595][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.037515][ T144] device bridge_slave_1 left promiscuous mode [ 93.044965][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.063233][ T144] device bridge_slave_0 left promiscuous mode [ 93.072378][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.098511][ T144] device veth1_macvtap left promiscuous mode [ 93.104952][ T144] device veth0_macvtap left promiscuous mode [ 93.111664][ T144] device veth1_vlan left promiscuous mode [ 93.119002][ T144] device veth0_vlan left promiscuous mode [ 93.285530][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.300152][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.313146][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.332463][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.392094][ T144] bond0 (unregistering): Released all slaves 2026/09/09 01:22:12 executed programs: 0 [ 94.693057][ T4356] chnl_net:caif_netlink_parms(): no params data found [ 94.798164][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.805381][ T4356] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.815718][ T4356] device bridge_slave_0 entered promiscuous mode [ 94.824652][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.833314][ T4356] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.841920][ T4356] device bridge_slave_1 entered promiscuous mode [ 94.870318][ T4356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.883523][ T4356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.914152][ T4356] team0: Port device team_slave_0 added [ 94.923085][ T4356] team0: Port device team_slave_1 added [ 94.946026][ T4356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.953135][ T4356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.980268][ T4356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.993348][ T4356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.000816][ T4356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.027122][ T4356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.080744][ T4356] device hsr_slave_0 entered promiscuous mode [ 95.093797][ T4356] device hsr_slave_1 entered promiscuous mode [ 95.702610][ T4356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.720567][ T4356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.732131][ T4356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.745461][ T4356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.056088][ T4356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.097387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.105777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.125313][ T4356] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.148197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.168783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.188706][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.195834][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.238126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.246256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.258445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.267249][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.274352][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.284289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.294123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.303444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.313427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.333931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.342344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.353561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.363222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.372862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.386692][ T4356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.398940][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.409831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.419566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.549257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.558023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.567833][ T4228] Bluetooth: hci0: command 0x0409 tx timeout [ 96.575590][ T4356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.600292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.609516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.662860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.673617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.684554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.694975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.707780][ T4356] device veth0_vlan entered promiscuous mode [ 96.761988][ T4356] device veth1_vlan entered promiscuous mode [ 96.788854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.802180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.819011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.829616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.843174][ T4356] device veth0_macvtap entered promiscuous mode [ 96.885922][ T4356] device veth1_macvtap entered promiscuous mode [ 96.907405][ T4356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.915107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.925629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.934667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.945564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.991559][ T4356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.000318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.010019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.022085][ T4356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.031968][ T4356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.042597][ T4356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058219][ T4356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.159319][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.169821][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.214194][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.242640][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.253003][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.305288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.397210][ T4458] loop0: detected capacity change from 0 to 128 [ 97.428281][ T4458] ======================================================= [ 97.428281][ T4458] WARNING: The mand mount option has been deprecated and [ 97.428281][ T4458] and is ignored by this kernel. Remove the mand [ 97.428281][ T4458] option from the mount to silence this warning. [ 97.428281][ T4458] ======================================================= [ 97.485334][ T4458] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.497983][ T4458] hpfs: filesystem error: improperly stopped [ 97.504024][ T4458] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 97.515229][ T4458] hpfs: You really don't want any checks? You are crazy... [ 97.525562][ T4458] hpfs: hpfs_map_sector(): read error [ 97.531474][ T4458] hpfs: code page support is disabled [ 97.555928][ T4458] ================================================================== [ 97.564260][ T4458] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 97.570654][ T4458] Read of size 1 at addr ffff88805e4e98a6 by task syz.0.17/4458 [ 97.578319][ T4458] [ 97.580697][ T4458] CPU: 1 PID: 4458 Comm: syz.0.17 Not tainted syzkaller #0 [ 97.587934][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.598047][ T4458] Call Trace: [ 97.601362][ T4458] [ 97.604352][ T4458] dump_stack_lvl+0x188/0x250 [ 97.609074][ T4458] ? show_regs_print_info+0x20/0x20 [ 97.614315][ T4458] ? _printk+0xda/0x130 [ 97.618524][ T4458] ? strcmp+0x67/0xb0 [ 97.622550][ T4458] ? load_image+0x410/0x410 [ 97.627096][ T4458] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 97.632600][ T4458] print_address_description+0x60/0x2d0 [ 97.638186][ T4458] ? strcmp+0x67/0xb0 [ 97.642204][ T4458] kasan_report+0xdf/0x130 [ 97.646660][ T4458] ? strcmp+0x67/0xb0 [ 97.650721][ T4458] strcmp+0x67/0xb0 [ 97.654569][ T4458] hpfs_get_ea+0x134/0xda0 [ 97.659176][ T4458] ? hpfs_read_ea+0xc20/0xc20 [ 97.664029][ T4458] ? __getblk_gfp+0x51/0xb20 [ 97.668663][ T4458] ? __might_sleep+0xf0/0xf0 [ 97.673310][ T4458] ? __bread_gfp+0x132/0x380 [ 97.677947][ T4458] ? hpfs_map_sector+0x146/0x2e0 [ 97.682948][ T4458] hpfs_read_inode+0x1a6/0x1050 [ 97.687844][ T4458] ? __lock_acquire+0x7b50/0x7b50 [ 97.692911][ T4458] ? hpfs_init_inode+0x2c0/0x2c0 [ 97.697894][ T4458] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 97.703748][ T4458] ? do_raw_spin_unlock+0x11d/0x230 [ 97.708994][ T4458] ? hpfs_init_inode+0x1cc/0x2c0 [ 97.713978][ T4458] hpfs_fill_super+0x12ee/0x1f30 [ 97.718979][ T4458] ? hpfs_mount+0x40/0x40 [ 97.723347][ T4458] ? snprintf+0xe5/0x140 [ 97.727660][ T4458] ? set_blocksize+0x1f1/0x360 [ 97.732478][ T4458] ? sb_set_blocksize+0xa5/0xe0 [ 97.737381][ T4458] mount_bdev+0x28a/0x3c0 [ 97.741752][ T4458] ? hpfs_mount+0x40/0x40 [ 97.746135][ T4458] legacy_get_tree+0xe6/0x180 [ 97.750857][ T4458] ? hpfs_ioctl+0x260/0x260 [ 97.755407][ T4458] vfs_get_tree+0x88/0x270 [ 97.759960][ T4458] do_new_mount+0x247/0xa40 [ 97.764514][ T4458] __se_sys_mount+0x2e3/0x3d0 [ 97.769248][ T4458] ? __x64_sys_mount+0xc0/0xc0 [ 97.774072][ T4458] ? lockdep_hardirqs_on+0x94/0x140 [ 97.779308][ T4458] ? __x64_sys_mount+0x1c/0xc0 [ 97.784116][ T4458] do_syscall_64+0x4c/0xa0 [ 97.788570][ T4458] ? clear_bhb_loop+0x30/0x80 [ 97.793285][ T4458] ? clear_bhb_loop+0x30/0x80 [ 97.798047][ T4458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.803991][ T4458] RIP: 0033:0x7f0cfcd463ca [ 97.808447][ T4458] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.828092][ T4458] RSP: 002b:00007fff6b363238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.836566][ T4458] RAX: ffffffffffffffda RBX: 00007fff6b3632c0 RCX: 00007f0cfcd463ca [ 97.844582][ T4458] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fff6b363280 [ 97.852636][ T4458] RBP: 000020000000a000 R08: 00007fff6b3632c0 R09: 0000000003200041 [ 97.860675][ T4458] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 97.868682][ T4458] R13: 00007fff6b363280 R14: 0000000000009e15 R15: 0000200000000040 [ 97.876711][ T4458] [ 97.879767][ T4458] [ 97.882147][ T4458] The buggy address belongs to the page: [ 97.887814][ T4458] page:ffffea0001793a40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5e4e9 [ 97.898001][ T4458] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.905159][ T4458] raw: 00fff00000080014 ffffea0001794308 ffffea0001795488 ffff888073eb2661 [ 97.913787][ T4458] raw: 0000000000000005 0000000000000000 0000000100000000 ffff88814076c000 [ 97.922397][ T4458] page dumped because: kasan: bad access detected [ 97.928855][ T4458] page_owner tracks the page as allocated [ 97.934606][ T4458] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4467, ts 97901220249, free_ts 97777367584 [ 97.949227][ T4458] get_page_from_freelist+0x24f6/0x2670 [ 97.954825][ T4458] __alloc_pages+0x1ee/0x480 [ 97.959458][ T4458] alloc_pages_vma+0x2bc/0x790 [ 97.964274][ T4458] handle_mm_fault+0x1c94/0x4440 [ 97.969252][ T4458] do_user_addr_fault+0x494/0xc90 [ 97.974310][ T4458] exc_page_fault+0x60/0x100 [ 97.978942][ T4458] asm_exc_page_fault+0x22/0x30 [ 97.983836][ T4458] page last free stack trace: [ 97.988535][ T4458] free_unref_page_prepare+0x637/0x6c0 [ 97.994026][ T4458] free_unref_page_list+0x119/0x830 [ 97.999267][ T4458] release_pages+0x185f/0x1bd0 [ 98.004074][ T4458] tlb_finish_mmu+0x1b4/0x370 [ 98.008799][ T4458] exit_mmap+0x3d0/0x640 [ 98.013092][ T4458] __mmput+0x115/0x390 [ 98.017198][ T4458] exit_mm+0x632/0x7b0 [ 98.021299][ T4458] do_exit+0x5b8/0x2110 [ 98.025496][ T4458] do_group_exit+0x12c/0x2f0 [ 98.030117][ T4458] __x64_sys_exit_group+0x3b/0x40 [ 98.035181][ T4458] do_syscall_64+0x4c/0xa0 [ 98.039643][ T4458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.045575][ T4458] [ 98.047929][ T4458] Memory state around the buggy address: [ 98.053583][ T4458] ffff88805e4e9780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.061686][ T4458] ffff88805e4e9800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.069785][ T4458] >ffff88805e4e9880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.077878][ T4458] ^ [ 98.083016][ T4458] ffff88805e4e9900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.091112][ T4458] ffff88805e4e9980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 98.099205][ T4458] ================================================================== [ 98.107290][ T4458] Disabling lock debugging due to kernel taint [ 98.132767][ T4458] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.140024][ T4458] CPU: 1 PID: 4458 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 98.148646][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.158740][ T4458] Call Trace: [ 98.162058][ T4458] [ 98.165017][ T4458] dump_stack_lvl+0x188/0x250 [ 98.169738][ T4458] ? show_regs_print_info+0x20/0x20 [ 98.174985][ T4458] ? load_image+0x410/0x410 [ 98.179536][ T4458] panic+0x2f8/0x850 [ 98.183471][ T4458] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.189660][ T4458] ? bpf_jit_dump+0xd0/0xd0 [ 98.194218][ T4458] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 98.200241][ T4458] ? _raw_spin_unlock+0x40/0x40 [ 98.205126][ T4458] ? strcmp+0x67/0xb0 [ 98.209146][ T4458] check_panic_on_warn+0x80/0xa0 [ 98.214126][ T4458] ? strcmp+0x67/0xb0 [ 98.218141][ T4458] end_report+0x6d/0xf0 [ 98.222343][ T4458] kasan_report+0x102/0x130 [ 98.226882][ T4458] ? strcmp+0x67/0xb0 [ 98.230901][ T4458] strcmp+0x67/0xb0 [ 98.234760][ T4458] hpfs_get_ea+0x134/0xda0 [ 98.239222][ T4458] ? hpfs_read_ea+0xc20/0xc20 [ 98.243937][ T4458] ? __getblk_gfp+0x51/0xb20 [ 98.248565][ T4458] ? __might_sleep+0xf0/0xf0 [ 98.253191][ T4458] ? __bread_gfp+0x132/0x380 [ 98.257815][ T4458] ? hpfs_map_sector+0x146/0x2e0 [ 98.262800][ T4458] hpfs_read_inode+0x1a6/0x1050 [ 98.267695][ T4458] ? __lock_acquire+0x7b50/0x7b50 [ 98.272763][ T4458] ? hpfs_init_inode+0x2c0/0x2c0 [ 98.277737][ T4458] ? bpf_lsm_inode_alloc_security+0x5/0x10 [ 98.283585][ T4458] ? do_raw_spin_unlock+0x11d/0x230 [ 98.288827][ T4458] ? hpfs_init_inode+0x1cc/0x2c0 [ 98.293809][ T4458] hpfs_fill_super+0x12ee/0x1f30 [ 98.298791][ T4458] ? hpfs_mount+0x40/0x40 [ 98.303153][ T4458] ? snprintf+0xe5/0x140 [ 98.307614][ T4458] ? set_blocksize+0x1f1/0x360 [ 98.312416][ T4458] ? sb_set_blocksize+0xa5/0xe0 [ 98.317311][ T4458] mount_bdev+0x28a/0x3c0 [ 98.321682][ T4458] ? hpfs_mount+0x40/0x40 [ 98.326049][ T4458] legacy_get_tree+0xe6/0x180 [ 98.330758][ T4458] ? hpfs_ioctl+0x260/0x260 [ 98.335295][ T4458] vfs_get_tree+0x88/0x270 [ 98.339758][ T4458] do_new_mount+0x247/0xa40 [ 98.344307][ T4458] __se_sys_mount+0x2e3/0x3d0 [ 98.349061][ T4458] ? __x64_sys_mount+0xc0/0xc0 [ 98.353869][ T4458] ? lockdep_hardirqs_on+0x94/0x140 [ 98.359106][ T4458] ? __x64_sys_mount+0x1c/0xc0 [ 98.364055][ T4458] do_syscall_64+0x4c/0xa0 [ 98.368519][ T4458] ? clear_bhb_loop+0x30/0x80 [ 98.373236][ T4458] ? clear_bhb_loop+0x30/0x80 [ 98.377964][ T4458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.383905][ T4458] RIP: 0033:0x7f0cfcd463ca [ 98.388354][ T4458] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.407987][ T4458] RSP: 002b:00007fff6b363238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.416448][ T4458] RAX: ffffffffffffffda RBX: 00007fff6b3632c0 RCX: 00007f0cfcd463ca [ 98.424456][ T4458] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fff6b363280 [ 98.432461][ T4458] RBP: 000020000000a000 R08: 00007fff6b3632c0 R09: 0000000003200041 [ 98.440472][ T4458] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 98.448482][ T4458] R13: 00007fff6b363280 R14: 0000000000009e15 R15: 0000200000000040 [ 98.456502][ T4458] [ 98.459665][ T4458] Kernel Offset: disabled [ 98.464024][ T4458] Rebooting in 86400 seconds..