Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. 2025/11/04 12:48:09 parsed 1 programs [ 53.948019][ T4187] cgroup: Unknown subsys name 'net' [ 54.079805][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.394310][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.602149][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 56.640638][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.648181][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.656280][ T4194] device bridge_slave_0 entered promiscuous mode [ 56.664806][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.671997][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.679758][ T4194] device bridge_slave_1 entered promiscuous mode [ 56.698480][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.709155][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.729558][ T4194] team0: Port device team_slave_0 added [ 56.736795][ T4194] team0: Port device team_slave_1 added [ 56.753560][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.760601][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.786789][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.799087][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.806148][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.832125][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.859924][ T4194] device hsr_slave_0 entered promiscuous mode [ 56.866958][ T4194] device hsr_slave_1 entered promiscuous mode [ 56.942986][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.953238][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.963049][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.973354][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.998167][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.005412][ T4194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.013114][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.020202][ T4194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.057604][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.070004][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.079411][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.088105][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.096000][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.109173][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.120465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.129177][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.136314][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.148655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.157263][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.164306][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.182161][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.191192][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.203667][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.215478][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.227641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.238093][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.306866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.314327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.327061][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.343529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.361952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.373761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.381765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.392708][ T4194] device veth0_vlan entered promiscuous mode [ 57.403837][ T4194] device veth1_vlan entered promiscuous mode [ 57.421603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.429725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.438346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.449085][ T4194] device veth0_macvtap entered promiscuous mode [ 57.458724][ T4194] device veth1_macvtap entered promiscuous mode [ 57.472750][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.481959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.491039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.501772][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.510897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.521621][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.531011][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.540055][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.548980][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.672350][ T4194] syz-executor (4194) used greatest stack depth: 21120 bytes left [ 57.686295][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.340427][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.659232][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.731211][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.121903][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.134338][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.158597][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.169083][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.179660][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.190723][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.457039][ T9] device hsr_slave_0 left promiscuous mode [ 63.463802][ T9] device hsr_slave_1 left promiscuous mode [ 63.470390][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.478206][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.486572][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.493968][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.502240][ T9] device bridge_slave_1 left promiscuous mode [ 63.509276][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.524700][ T9] device bridge_slave_0 left promiscuous mode [ 63.532273][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.554707][ T9] device veth1_macvtap left promiscuous mode [ 63.562396][ T9] device veth0_macvtap left promiscuous mode [ 63.569454][ T9] device veth1_vlan left promiscuous mode [ 63.576787][ T9] device veth0_vlan left promiscuous mode [ 63.718937][ T9] team0 (unregistering): Port device team_slave_1 removed [ 63.731494][ T9] team0 (unregistering): Port device team_slave_0 removed [ 63.742806][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.758743][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.804078][ T9] bond0 (unregistering): Released all slaves 2025/11/04 12:48:21 executed programs: 0 [ 64.744449][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 64.866554][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.873693][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.882945][ T4342] device bridge_slave_0 entered promiscuous mode [ 64.893118][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.901324][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.909885][ T4342] device bridge_slave_1 entered promiscuous mode [ 64.961345][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.973058][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.017133][ T4342] team0: Port device team_slave_0 added [ 65.037270][ T4342] team0: Port device team_slave_1 added [ 65.089428][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.104961][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.159407][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.191080][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.205971][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.233364][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.273862][ T4342] device hsr_slave_0 entered promiscuous mode [ 65.280850][ T4342] device hsr_slave_1 entered promiscuous mode [ 65.828953][ T4342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.850336][ T4342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.882878][ T4342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.101428][ T4342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.288854][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.317034][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.326210][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.336960][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.348023][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.358541][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.367241][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.374307][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.385120][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.400126][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.409453][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.419479][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.426599][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.445751][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.456246][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.465335][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.478182][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.498322][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.507045][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.517333][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.527346][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.537974][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.546963][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.557014][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.568489][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.645662][ T4208] Bluetooth: hci0: command 0x0409 tx timeout [ 66.690624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.699913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.713896][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.733907][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.744401][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.766684][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.778553][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.790509][ T4342] device veth0_vlan entered promiscuous mode [ 66.799510][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.808075][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.822542][ T4342] device veth1_vlan entered promiscuous mode [ 66.845893][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.854459][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.865436][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.874107][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.885942][ T4342] device veth0_macvtap entered promiscuous mode [ 66.937112][ T4342] device veth1_macvtap entered promiscuous mode [ 66.954625][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.962790][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.974307][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.982854][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.991912][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.009116][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.018115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.027412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.041554][ T4342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.050979][ T4342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.061560][ T4342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.070891][ T4342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.216986][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.236275][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.265120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.297543][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.307624][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.318939][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.407306][ T4494] loop0: detected capacity change from 0 to 128 [ 67.431506][ T4494] ======================================================= [ 67.431506][ T4494] WARNING: The mand mount option has been deprecated and [ 67.431506][ T4494] and is ignored by this kernel. Remove the mand [ 67.431506][ T4494] option from the mount to silence this warning. [ 67.431506][ T4494] ======================================================= [ 67.522339][ T4494] hpfs: hpfs_map_sector(): read error [ 67.529224][ T4494] hpfs: filesystem error: can't load hotfix map; going on - but anything won't be destroyed because it's read-only [ 67.543564][ T4494] hpfs: filesystem error: improperly stopped [ 67.552485][ T4494] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 67.560633][ T4494] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 67.572805][ T4494] hpfs: You really don't want any checks? You are crazy... [ 67.580135][ T4494] hpfs: hpfs_map_sector(): read error [ 67.586286][ T4494] hpfs: code page support is disabled [ 67.593592][ T4494] ================================================================== [ 67.602045][ T4494] BUG: KASAN: use-after-free in strcmp+0x6b/0xb0 [ 67.608508][ T4494] Read of size 1 at addr ffff88806b2278a6 by task syz.0.17/4494 [ 67.616235][ T4494] [ 67.618588][ T4494] CPU: 0 PID: 4494 Comm: syz.0.17 Not tainted syzkaller #0 [ 67.625879][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.635953][ T4494] Call Trace: [ 67.639239][ T4494] [ 67.642178][ T4494] dump_stack_lvl+0x168/0x230 [ 67.646882][ T4494] ? show_regs_print_info+0x20/0x20 [ 67.652176][ T4494] ? _printk+0xcc/0x110 [ 67.656342][ T4494] ? strcmp+0x6b/0xb0 [ 67.660432][ T4494] ? load_image+0x3b0/0x3b0 [ 67.664943][ T4494] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 67.670444][ T4494] print_address_description+0x60/0x2d0 [ 67.676003][ T4494] ? strcmp+0x6b/0xb0 [ 67.680083][ T4494] kasan_report+0xdf/0x130 [ 67.684514][ T4494] ? strcmp+0x6b/0xb0 [ 67.688523][ T4494] strcmp+0x6b/0xb0 [ 67.692342][ T4494] hpfs_get_ea+0x111/0xc80 [ 67.696773][ T4494] ? bit_wait+0xc0/0xc0 [ 67.700937][ T4494] ? hpfs_read_ea+0xba0/0xba0 [ 67.705707][ T4494] ? submit_bio+0x2be/0x560 [ 67.710224][ T4494] ? bit_waitqueue+0x30/0x30 [ 67.714840][ T4494] ? __bread_gfp+0x332/0x380 [ 67.719525][ T4494] ? hpfs_map_sector+0x14a/0x2e0 [ 67.724564][ T4494] ? hpfs_map_fnode+0x27a/0x690 [ 67.729428][ T4494] hpfs_read_inode+0x19a/0x1000 [ 67.734310][ T4494] ? hpfs_init_inode+0x2c0/0x2c0 [ 67.739261][ T4494] ? preempt_schedule_thunk+0x16/0x18 [ 67.744660][ T4494] ? hpfs_init_inode+0x1cc/0x2c0 [ 67.749625][ T4494] hpfs_fill_super+0x12d1/0x1eb0 [ 67.754609][ T4494] ? hpfs_mount+0x40/0x40 [ 67.758959][ T4494] ? snprintf+0xd7/0x120 [ 67.763228][ T4494] ? set_blocksize+0x1f1/0x370 [ 67.768018][ T4494] ? sb_set_blocksize+0xa5/0xe0 [ 67.772886][ T4494] mount_bdev+0x287/0x3c0 [ 67.777327][ T4494] ? hpfs_mount+0x40/0x40 [ 67.781668][ T4494] legacy_get_tree+0xe6/0x180 [ 67.786355][ T4494] ? hpfs_ioctl+0x240/0x240 [ 67.790875][ T4494] vfs_get_tree+0x88/0x270 [ 67.795395][ T4494] do_new_mount+0x24a/0xa40 [ 67.799912][ T4494] __se_sys_mount+0x2d6/0x3c0 [ 67.804621][ T4494] ? __x64_sys_mount+0xc0/0xc0 [ 67.809401][ T4494] ? lockdep_hardirqs_on+0x94/0x140 [ 67.814612][ T4494] ? __x64_sys_mount+0x1c/0xc0 [ 67.819391][ T4494] do_syscall_64+0x4c/0xa0 [ 67.823819][ T4494] ? clear_bhb_loop+0x30/0x80 [ 67.828506][ T4494] ? clear_bhb_loop+0x30/0x80 [ 67.833195][ T4494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.839078][ T4494] RIP: 0033:0x7fb9ec69de6a [ 67.843481][ T4494] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.863250][ T4494] RSP: 002b:00007ffdeaef1cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.871659][ T4494] RAX: ffffffffffffffda RBX: 00007ffdeaef1d50 RCX: 00007fb9ec69de6a [ 67.879619][ T4494] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffdeaef1d10 [ 67.887658][ T4494] RBP: 000020000000a000 R08: 00007ffdeaef1d50 R09: 0000000003200041 [ 67.895634][ T4494] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 67.903614][ T4494] R13: 00007ffdeaef1d10 R14: 0000000000009e15 R15: 0000200000000040 [ 67.911699][ T4494] [ 67.914702][ T4494] [ 67.917004][ T4494] The buggy address belongs to the page: [ 67.922619][ T4494] page:ffffea0001ac89c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6b227 [ 67.932846][ T4494] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 67.940017][ T4494] raw: 00fff00000000000 ffffea0001ab8608 ffffea0001aaf048 0000000000000000 [ 67.948597][ T4494] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 67.957349][ T4494] page dumped because: kasan: bad access detected [ 67.963756][ T4494] page_owner tracks the page as freed [ 67.969106][ T4494] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4496, ts 67404095264, free_ts 67418010047 [ 67.983774][ T4494] get_page_from_freelist+0x1b77/0x1c60 [ 67.989398][ T4494] __alloc_pages+0x1e1/0x470 [ 67.994056][ T4494] alloc_pages_vma+0x393/0x7c0 [ 67.998801][ T4494] wp_page_copy+0x235/0x1fd0 [ 68.003459][ T4494] handle_mm_fault+0x1ec7/0x43b0 [ 68.008375][ T4494] do_user_addr_fault+0x489/0xc80 [ 68.013405][ T4494] exc_page_fault+0x60/0x100 [ 68.017982][ T4494] asm_exc_page_fault+0x22/0x30 [ 68.022808][ T4494] page last free stack trace: [ 68.027456][ T4494] free_unref_page_prepare+0x637/0x6c0 [ 68.032898][ T4494] free_unref_page_list+0x122/0x7e0 [ 68.038096][ T4494] release_pages+0x184b/0x1bb0 [ 68.042924][ T4494] tlb_finish_mmu+0x164/0x2e0 [ 68.047605][ T4494] exit_mmap+0x3a6/0x5f0 [ 68.051831][ T4494] __mmput+0x115/0x3b0 [ 68.055879][ T4494] exit_mm+0x567/0x6c0 [ 68.059929][ T4494] do_exit+0x5a1/0x20a0 [ 68.064088][ T4494] do_group_exit+0x12e/0x300 [ 68.068742][ T4494] __x64_sys_exit_group+0x3b/0x40 [ 68.073742][ T4494] do_syscall_64+0x4c/0xa0 [ 68.078138][ T4494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.084008][ T4494] [ 68.086398][ T4494] Memory state around the buggy address: [ 68.092001][ T4494] ffff88806b227780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.100050][ T4494] ffff88806b227800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.108115][ T4494] >ffff88806b227880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.116148][ T4494] ^ [ 68.121249][ T4494] ffff88806b227900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.129388][ T4494] ffff88806b227980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.137530][ T4494] ================================================================== [ 68.145596][ T4494] Disabling lock debugging due to kernel taint [ 68.153888][ T4494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.161193][ T4494] CPU: 0 PID: 4494 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 68.169782][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.180028][ T4494] Call Trace: [ 68.183409][ T4494] [ 68.186333][ T4494] dump_stack_lvl+0x168/0x230 [ 68.191009][ T4494] ? show_regs_print_info+0x20/0x20 [ 68.196199][ T4494] ? load_image+0x3b0/0x3b0 [ 68.200692][ T4494] panic+0x2c9/0x7f0 [ 68.204671][ T4494] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.210823][ T4494] ? bpf_jit_dump+0xd0/0xd0 [ 68.215309][ T4494] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 68.221203][ T4494] ? _raw_spin_unlock+0x40/0x40 [ 68.226043][ T4494] ? strcmp+0x6b/0xb0 [ 68.230002][ T4494] check_panic_on_warn+0x80/0xa0 [ 68.234928][ T4494] ? strcmp+0x6b/0xb0 [ 68.238891][ T4494] end_report+0x6d/0xf0 [ 68.243204][ T4494] kasan_report+0x102/0x130 [ 68.247780][ T4494] ? strcmp+0x6b/0xb0 [ 68.251770][ T4494] strcmp+0x6b/0xb0 [ 68.255556][ T4494] hpfs_get_ea+0x111/0xc80 [ 68.259959][ T4494] ? bit_wait+0xc0/0xc0 [ 68.264357][ T4494] ? hpfs_read_ea+0xba0/0xba0 [ 68.269026][ T4494] ? submit_bio+0x2be/0x560 [ 68.273599][ T4494] ? bit_waitqueue+0x30/0x30 [ 68.278175][ T4494] ? __bread_gfp+0x332/0x380 [ 68.283129][ T4494] ? hpfs_map_sector+0x14a/0x2e0 [ 68.288059][ T4494] ? hpfs_map_fnode+0x27a/0x690 [ 68.292897][ T4494] hpfs_read_inode+0x19a/0x1000 [ 68.297817][ T4494] ? hpfs_init_inode+0x2c0/0x2c0 [ 68.302737][ T4494] ? preempt_schedule_thunk+0x16/0x18 [ 68.308148][ T4494] ? hpfs_init_inode+0x1cc/0x2c0 [ 68.313160][ T4494] hpfs_fill_super+0x12d1/0x1eb0 [ 68.318097][ T4494] ? hpfs_mount+0x40/0x40 [ 68.322408][ T4494] ? snprintf+0xd7/0x120 [ 68.326635][ T4494] ? set_blocksize+0x1f1/0x370 [ 68.331470][ T4494] ? sb_set_blocksize+0xa5/0xe0 [ 68.336500][ T4494] mount_bdev+0x287/0x3c0 [ 68.341111][ T4494] ? hpfs_mount+0x40/0x40 [ 68.345447][ T4494] legacy_get_tree+0xe6/0x180 [ 68.350169][ T4494] ? hpfs_ioctl+0x240/0x240 [ 68.354667][ T4494] vfs_get_tree+0x88/0x270 [ 68.359074][ T4494] do_new_mount+0x24a/0xa40 [ 68.363564][ T4494] __se_sys_mount+0x2d6/0x3c0 [ 68.368222][ T4494] ? __x64_sys_mount+0xc0/0xc0 [ 68.372992][ T4494] ? lockdep_hardirqs_on+0x94/0x140 [ 68.378184][ T4494] ? __x64_sys_mount+0x1c/0xc0 [ 68.382942][ T4494] do_syscall_64+0x4c/0xa0 [ 68.387349][ T4494] ? clear_bhb_loop+0x30/0x80 [ 68.392019][ T4494] ? clear_bhb_loop+0x30/0x80 [ 68.396681][ T4494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.402649][ T4494] RIP: 0033:0x7fb9ec69de6a [ 68.407070][ T4494] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.426693][ T4494] RSP: 002b:00007ffdeaef1cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.435090][ T4494] RAX: ffffffffffffffda RBX: 00007ffdeaef1d50 RCX: 00007fb9ec69de6a [ 68.443063][ T4494] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007ffdeaef1d10 [ 68.451562][ T4494] RBP: 000020000000a000 R08: 00007ffdeaef1d50 R09: 0000000003200041 [ 68.459528][ T4494] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 68.467493][ T4494] R13: 00007ffdeaef1d10 R14: 0000000000009e15 R15: 0000200000000040 [ 68.475457][ T4494] [ 68.478856][ T4494] Kernel Offset: disabled [ 68.483178][ T4494] Rebooting in 86400 seconds..