hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
hpfs: filesystem error: improperly stopped
hpfs: filesystem error: warning: spare dnodes used, try chkdsk
hpfs: You really don't want any checks? You are crazy...
hpfs: hpfs_map_sector(): read error
hpfs: code page support is disabled
==================================================================
BUG: KASAN: slab-out-of-bounds in strcmp+0x6b/0xc0 lib/string.c:265
Read of size 1 at addr ffff8880275668a6 by task syz.2.75/6228

CPU: 0 UID: 0 PID: 6228 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description+0x55/0x1e0 mm/kasan/report.c:378
 print_report+0x58/0x70 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 strcmp+0x6b/0xc0 lib/string.c:265
 hpfs_get_ea+0x137/0xeb0 fs/hpfs/ea.c:139
 hpfs_read_inode+0x1a9/0x1060 fs/hpfs/inode.c:63
 hpfs_fill_super+0x127b/0x1fb0 fs/hpfs/super.c:652
 get_tree_bdev_flags+0x436/0x500 fs/super.c:1821
 vfs_get_tree+0x92/0x2a0 fs/super.c:1881
 fc_mount fs/namespace.c:1282 [inline]
 do_new_mount_fc fs/namespace.c:3910 [inline]
 do_new_mount+0x325/0xb00 fs/namespace.c:3986
 do_mount fs/namespace.c:4350 [inline]
 __do_sys_mount fs/namespace.c:4563 [inline]
 __se_sys_mount+0x31d/0x420 fs/namespace.c:4540
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x16a/0x530 arch/x86/entry/syscall_64.c:89
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f7e6555a77a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f7e637a5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f7e637a5ee0 RCX: 00007f7e6555a77a
RDX: 0000200000000400 RSI: 0000200000000440 RDI: 00007f7e637a5ea0
RBP: 0000200000000400 R08: 00007f7e637a5ee0 R09: 0000000003200041
R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000440
R13: 00007f7e637a5ea0 R14: 0000000000009e15 R15: 0000200000000480
 </TASK>

Allocated by task 1:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:409 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:426
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5531 [inline]
 __kmalloc_node_track_caller_noprof+0x569/0x7b0 mm/slub.c:5662
 __kmemdup_nul mm/util.c:64 [inline]
 kstrdup+0x42/0x100 mm/util.c:84
 __kernfs_new_node+0xac/0xa70 fs/kernfs/dir.c:663
 kernfs_new_node fs/kernfs/dir.c:759 [inline]
 kernfs_create_dir_ns+0xfe/0x230 fs/kernfs/dir.c:1133
 sysfs_create_dir_ns+0x12f/0x2a0 fs/sysfs/dir.c:59
 create_dir lib/kobject.c:73 [inline]
 kobject_add_internal+0x62c/0xce0 lib/kobject.c:240
 kobject_add_varg lib/kobject.c:374 [inline]
 kobject_add+0x163/0x240 lib/kobject.c:426
 device_add+0x3fa/0xb80 drivers/base/core.c:3701
 tty_register_device_attr+0x428/0x9b0 drivers/tty/tty_io.c:3254
 tty_register_device drivers/tty/tty_io.c:3189 [inline]
 tty_register_driver+0x868/0xe50 drivers/tty/tty_io.c:3469
 legacy_pty_init+0x3b2/0x5d0 drivers/tty/pty.c:576
 pty_init+0x9/0x20 drivers/tty/pty.c:916
 do_one_initcall+0x250/0x870 init/main.c:1419
 do_initcall_level+0x10a/0x1a0 init/main.c:1481
 do_initcalls+0x59/0xa0 init/main.c:1497
 kernel_init_freeable+0x29d/0x3e0 init/main.c:1732
 kernel_init+0x22/0x1d0 init/main.c:1622
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

The buggy address belongs to the object at ffff8880275668a0
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 0 bytes to the right of
 allocated 6-byte region [ffff8880275668a0, ffff8880275668a6)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27566
flags: 0x80000000000000(node=0|zone=1)
page_type: f5(slab)
raw: 0080000000000000 ffff88813ff13500 dead000000000100 dead000000000122
raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12539521448
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0x1f9/0x250 mm/page_alloc.c:1860
 prep_new_page mm/page_alloc.c:1868 [inline]
 get_page_from_freelist+0x25d4/0x2650 mm/page_alloc.c:3950
 __alloc_frozen_pages_noprof+0x230/0x470 mm/page_alloc.c:5492
 alloc_slab_page mm/slub.c:3384 [inline]
 allocate_slab+0x7d/0x5e0 mm/slub.c:3499
 new_slab mm/slub.c:3550 [inline]
 refill_objects+0x2d8/0x350 mm/slub.c:7539
 refill_sheaf mm/slub.c:2917 [inline]
 __pcs_replace_empty_main+0x339/0x690 mm/slub.c:4811
 alloc_from_pcs mm/slub.c:4887 [inline]
 slab_alloc_node mm/slub.c:5021 [inline]
 __do_kmalloc_node mm/slub.c:5530 [inline]
 __kmalloc_node_track_caller_noprof+0x619/0x7b0 mm/slub.c:5662
 __kmemdup_nul mm/util.c:64 [inline]
 kstrdup+0x42/0x100 mm/util.c:84
 __kernfs_new_node+0xac/0xa70 fs/kernfs/dir.c:663
 kernfs_new_node+0xea/0x140 fs/kernfs/dir.c:759
 kernfs_create_link+0xe3/0x240 fs/kernfs/symlink.c:50
 sysfs_do_create_link_sd+0x83/0x110 fs/sysfs/symlink.c:44
 device_create_sys_dev_entry+0x122/0x190 drivers/base/core.c:3589
 device_add+0x71e/0xb80 drivers/base/core.c:3733
 tty_register_device_attr+0x428/0x9b0 drivers/tty/tty_io.c:3254
 tty_register_device drivers/tty/tty_io.c:3189 [inline]
 tty_register_driver+0x868/0xe50 drivers/tty/tty_io.c:3469
page last free pid 160 tgid 160 ts 12538221721 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1402 [inline]
 __free_frozen_pages+0xfb6/0x1090 mm/page_alloc.c:2958
 __kasan_populate_vmalloc_do mm/kasan/shadow.c:393 [inline]
 __kasan_populate_vmalloc+0x1a8/0x1c0 mm/kasan/shadow.c:424
 kasan_populate_vmalloc include/linux/kasan.h:580 [inline]
 alloc_vmap_area+0xd10/0x1410 mm/vmalloc.c:2151
 __get_vm_area_node+0x200/0x2f0 mm/vmalloc.c:3281
 __vmalloc_node_range_noprof+0x36e/0x16f0 mm/vmalloc.c:4112
 __vmalloc_node_noprof+0xc2/0x100 mm/vmalloc.c:4213
 alloc_thread_stack_node kernel/fork.c:359 [inline]
 dup_task_struct+0x2c6/0xa00 kernel/fork.c:931
 copy_process+0x7ea/0x4510 kernel/fork.c:2150
 kernel_clone+0x2d2/0x8d0 kernel/fork.c:2798
 user_mode_thread+0x115/0x180 kernel/fork.c:2875
 call_usermodehelper_exec_work+0x5c/0x230 kernel/umh.c:169
 process_one_work kernel/workqueue.c:3495 [inline]
 process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578
 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659
 kthread+0x38b/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff888027566780: 06 fc fc fc 04 fc fc fc 06 fc fc fc 06 fc fc fc
 ffff888027566800: 06 fc fc fc 06 fc fc fc 04 fc fc fc 06 fc fc fc
>ffff888027566880: 06 fc fc fc 06 fc fc fc 06 fc fc fc 04 fc fc fc
                               ^
 ffff888027566900: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
 ffff888027566980: 04 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
==================================================================