Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. 2025/12/30 10:05:50 parsed 1 programs [ 79.815705][ T5802] cgroup: Unknown subsys name 'net' [ 80.036928][ T5802] cgroup: Unknown subsys name 'cpuset' [ 80.082662][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.584010][ T10] cfg80211: failed to load regulatory.db [ 81.813533][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.626564][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.984320][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.985731][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.985868][ T5829] bridge_slave_0: entered allmulticast mode [ 85.987591][ T5829] bridge_slave_0: entered promiscuous mode [ 85.991797][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.991905][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.992002][ T5829] bridge_slave_1: entered allmulticast mode [ 86.000535][ T5829] bridge_slave_1: entered promiscuous mode [ 86.246302][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.249269][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.435448][ T5829] team0: Port device team_slave_0 added [ 86.437433][ T5829] team0: Port device team_slave_1 added [ 86.795128][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.795140][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.795154][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.797948][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.797957][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.797970][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.999847][ T5829] hsr_slave_0: entered promiscuous mode [ 87.000715][ T5829] hsr_slave_1: entered promiscuous mode [ 87.300660][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.319449][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.358913][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.396182][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.514966][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.601964][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.611502][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.619468][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.637087][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.637497][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.827095][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.867100][ T5829] veth0_vlan: entered promiscuous mode [ 87.878405][ T5829] veth1_vlan: entered promiscuous mode [ 87.913236][ T5829] veth0_macvtap: entered promiscuous mode [ 87.918345][ T5829] veth1_macvtap: entered promiscuous mode [ 87.944415][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.953665][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.978949][ T986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.980220][ T986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.980260][ T986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.980293][ T986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.746536][ T1455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.957060][ T1455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.194081][ T1455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.468067][ T1455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.460063][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.470743][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.484472][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.485825][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.486569][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.337860][ T1455] bridge_slave_1: left allmulticast mode [ 91.337940][ T1455] bridge_slave_1: left promiscuous mode [ 91.340356][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.454240][ T1455] bridge_slave_0: left allmulticast mode [ 91.454266][ T1455] bridge_slave_0: left promiscuous mode [ 91.454510][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.093986][ T1455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.173255][ T1455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.214270][ T1455] bond0 (unregistering): Released all slaves [ 93.552260][ T1455] hsr_slave_0: left promiscuous mode [ 93.592248][ T1455] hsr_slave_1: left promiscuous mode [ 93.593438][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.593516][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.646083][ T1455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.646109][ T1455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.751141][ T1455] veth1_macvtap: left promiscuous mode [ 93.751289][ T1455] veth0_macvtap: left promiscuous mode [ 93.751444][ T1455] veth1_vlan: left promiscuous mode [ 93.751609][ T1455] veth0_vlan: left promiscuous mode [ 95.622759][ T1455] team0 (unregistering): Port device team_slave_1 removed [ 95.852930][ T1455] team0 (unregistering): Port device team_slave_0 removed [ 98.187930][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.187954][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.263852][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.263884][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/30 10:06:12 executed programs: 0 [ 99.227489][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.229917][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.242383][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.247884][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.248765][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.076552][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 100.424306][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.424516][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.424670][ T5964] bridge_slave_0: entered allmulticast mode [ 100.427082][ T5964] bridge_slave_0: entered promiscuous mode [ 100.431550][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.431695][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.431780][ T5964] bridge_slave_1: entered allmulticast mode [ 100.452823][ T5964] bridge_slave_1: entered promiscuous mode [ 100.610767][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.614455][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.778205][ T5964] team0: Port device team_slave_0 added [ 100.780168][ T5964] team0: Port device team_slave_1 added [ 101.315114][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.315131][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.315156][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.333652][ T5117] Bluetooth: hci0: command tx timeout [ 101.383252][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.383263][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.383277][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.897548][ T5964] hsr_slave_0: entered promiscuous mode [ 101.899074][ T5964] hsr_slave_1: entered promiscuous mode [ 103.414044][ T5117] Bluetooth: hci0: command tx timeout [ 103.987489][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.025440][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.075898][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.108548][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.278268][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.300846][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.309123][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.309325][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.320922][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.321117][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.620935][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.687292][ T5964] veth0_vlan: entered promiscuous mode [ 104.705546][ T5964] veth1_vlan: entered promiscuous mode [ 104.755055][ T5964] veth0_macvtap: entered promiscuous mode [ 104.760009][ T5964] veth1_macvtap: entered promiscuous mode [ 104.797862][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.816928][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.836566][ T1455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.836609][ T1455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.836642][ T1455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.836675][ T1455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.079555][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.079575][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.150573][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.150594][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/30 10:06:18 executed programs: 2 [ 105.297164][ T6061] loop0: detected capacity change from 0 to 128 [ 105.311702][ T6061] ======================================================= [ 105.311702][ T6061] WARNING: The mand mount option has been deprecated and [ 105.311702][ T6061] and is ignored by this kernel. Remove the mand [ 105.311702][ T6061] option from the mount to silence this warning. [ 105.311702][ T6061] ======================================================= [ 105.350613][ T6061] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.350807][ T6061] hpfs: filesystem error: improperly stopped [ 105.350821][ T6061] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 105.350833][ T6061] hpfs: You really don't want any checks? You are crazy... [ 105.351671][ T6061] hpfs: hpfs_map_sector(): read error [ 105.351682][ T6061] hpfs: code page support is disabled [ 105.359889][ T6061] hpfs: hpfs_map_sector(): read error [ 105.359921][ T6061] hpfs: hpfs_map_sector(): read error [ 105.359939][ T6061] hpfs: hpfs_map_sector(): read error [ 105.359963][ T6061] hpfs: hpfs_map_sector(): read error [ 105.359982][ T6061] hpfs: hpfs_map_4sectors(): unaligned read [ 105.360266][ T6061] hpfs: hpfs_map_4sectors(): unaligned read [ 105.360275][ T6061] hpfs: filesystem error: unable to find root dir [ 105.492629][ T5117] Bluetooth: hci0: command tx timeout [ 105.552993][ T6067] loop0: detected capacity change from 0 to 128 [ 105.561782][ T6067] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.561832][ T6067] hpfs: filesystem error: improperly stopped [ 105.561845][ T6067] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 105.561857][ T6067] hpfs: You really don't want any checks? You are crazy... [ 105.568341][ T6067] hpfs: hpfs_map_sector(): read error [ 105.568355][ T6067] hpfs: code page support is disabled [ 105.570043][ T6067] hpfs: hpfs_map_sector(): read error [ 105.570069][ T6067] hpfs: hpfs_map_sector(): read error [ 105.570087][ T6067] hpfs: hpfs_map_sector(): read error [ 105.570104][ T6067] hpfs: hpfs_map_sector(): read error [ 105.570112][ T6067] hpfs: hpfs_map_4sectors(): unaligned read [ 105.570181][ T6067] hpfs: hpfs_map_4sectors(): unaligned read [ 105.570187][ T6067] hpfs: filesystem error: unable to find root dir [ 105.743709][ T6071] loop0: detected capacity change from 0 to 128 [ 105.773899][ T6071] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.776621][ T6071] hpfs: filesystem error: improperly stopped [ 105.776639][ T6071] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 105.776650][ T6071] hpfs: You really don't want any checks? You are crazy... [ 105.777170][ T6071] hpfs: hpfs_map_sector(): read error [ 105.777179][ T6071] hpfs: code page support is disabled [ 105.777369][ T6071] ================================================================== [ 105.777378][ T6071] BUG: KASAN: use-after-free in strcmp+0x6f/0xc0 [ 105.777408][ T6071] Read of size 1 at addr ffff8880565a98a6 by task syz.0.20/6071 [ 105.777423][ T6071] [ 105.777448][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.777474][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.777492][ T6071] Call Trace: [ 105.777502][ T6071] [ 105.777510][ T6071] dump_stack_lvl+0xe8/0x150 [ 105.777535][ T6071] print_report+0xca/0x240 [ 105.777555][ T6071] ? strcmp+0x6f/0xc0 [ 105.777572][ T6071] kasan_report+0x118/0x150 [ 105.777590][ T6071] ? strcmp+0x6f/0xc0 [ 105.777610][ T6071] strcmp+0x6f/0xc0 [ 105.777626][ T6071] hpfs_get_ea+0x114/0xdb0 [ 105.777651][ T6071] ? __pfx_hpfs_get_ea+0x10/0x10 [ 105.777672][ T6071] ? bdev_getblk+0x583/0x6e0 [ 105.777700][ T6071] ? __bread_gfp+0xc3/0x3b0 [ 105.777723][ T6071] ? hpfs_map_sector+0x167/0x3a0 [ 105.777745][ T6071] ? hpfs_map_fnode+0x27e/0x6a0 [ 105.777766][ T6071] ? set_normalized_timespec64+0xf0/0x1a0 [ 105.777793][ T6071] hpfs_read_inode+0x19d/0x1010 [ 105.777817][ T6071] ? __pfx_hpfs_read_inode+0x10/0x10 [ 105.777838][ T6071] ? inode_set_ctime_to_ts+0x116/0x2d0 [ 105.777861][ T6071] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 105.777884][ T6071] ? rt_spin_unlock+0x161/0x200 [ 105.777910][ T6071] ? hpfs_init_inode+0x216/0x350 [ 105.777933][ T6071] hpfs_fill_super+0x129d/0x2040 [ 105.777967][ T6071] ? __pfx_hpfs_fill_super+0x10/0x10 [ 105.777993][ T6071] ? __pfx_snprintf+0x10/0x10 [ 105.778011][ T6071] ? set_blocksize+0x219/0x450 [ 105.778032][ T6071] ? rt_spin_unlock+0x150/0x200 [ 105.778056][ T6071] ? sb_set_blocksize+0x11b/0x210 [ 105.778076][ T6071] ? setup_bdev_super+0x4c1/0x5b0 [ 105.778101][ T6071] get_tree_bdev_flags+0x40e/0x4d0 [ 105.778126][ T6071] ? __pfx_hpfs_fill_super+0x10/0x10 [ 105.778151][ T6071] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 105.778175][ T6071] ? cap_capable+0x123/0x440 [ 105.778197][ T6071] ? safesetid_security_capable+0xa9/0x1a0 [ 105.778224][ T6071] vfs_get_tree+0x92/0x2a0 [ 105.778248][ T6071] do_new_mount+0x302/0xa10 [ 105.778264][ T6071] ? safesetid_security_capable+0xa9/0x1a0 [ 105.778288][ T6071] ? __pfx_do_new_mount+0x10/0x10 [ 105.778304][ T6071] ? ns_capable+0x8a/0xf0 [ 105.778329][ T6071] __se_sys_mount+0x313/0x410 [ 105.778343][ T6071] ? __pfx___se_sys_mount+0x10/0x10 [ 105.778359][ T6071] ? __x64_sys_mount+0x20/0xc0 [ 105.778372][ T6071] do_syscall_64+0xec/0xf80 [ 105.778385][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.778398][ T6071] ? trace_irq_disable+0x37/0x100 [ 105.778412][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 105.778428][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.778442][ T6071] RIP: 0033:0x7f0277e20eea [ 105.778470][ T6071] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.778482][ T6071] RSP: 002b:00007ffd6e149088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.778496][ T6071] RAX: ffffffffffffffda RBX: 00007ffd6e149110 RCX: 00007f0277e20eea [ 105.778506][ T6071] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ffd6e1490d0 [ 105.778516][ T6071] RBP: 000020000000a000 R08: 00007ffd6e149110 R09: 0000000003200041 [ 105.778526][ T6071] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 105.778535][ T6071] R13: 00007ffd6e1490d0 R14: 0000000000009e15 R15: 0000200000000000 [ 105.778552][ T6071] [ 105.778558][ T6071] [ 105.778561][ T6071] The buggy address belongs to the physical page: [ 105.778576][ T6071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x304 pfn:0x565a9 [ 105.778591][ T6071] flags: 0x80000000000000(node=0|zone=1) [ 105.778611][ T6071] raw: 0080000000000000 dead000000000100 dead000000000122 0000000000000000 [ 105.778623][ T6071] raw: 0000000000000304 0000000000000000 00000000ffffffff 0000000000000000 [ 105.778631][ T6071] page dumped because: kasan: bad access detected [ 105.778642][ T6071] page_owner tracks the page as freed [ 105.778650][ T6071] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5943, tgid 5943 (syz-executor), ts 98428630421, free_ts 99177236482 [ 105.778675][ T6071] post_alloc_hook+0x234/0x290 [ 105.778697][ T6071] get_page_from_freelist+0x28c0/0x2960 [ 105.778711][ T6071] __alloc_frozen_pages_noprof+0x181/0x370 [ 105.778723][ T6071] alloc_pages_mpol+0xd1/0x380 [ 105.778735][ T6071] vma_alloc_folio_noprof+0xe4/0x280 [ 105.778748][ T6071] folio_prealloc+0x30/0x180 [ 105.778767][ T6071] do_pte_missing+0x509/0x27a0 [ 105.778778][ T6071] handle_mm_fault+0xcc1/0x1330 [ 105.778794][ T6071] do_user_addr_fault+0xa7c/0x1380 [ 105.778807][ T6071] exc_page_fault+0x71/0xd0 [ 105.778817][ T6071] asm_exc_page_fault+0x26/0x30 [ 105.778829][ T6071] page last free pid 5945 tgid 5945 stack trace: [ 105.778837][ T6071] free_unref_folios+0xc28/0x1810 [ 105.778855][ T6071] folios_put_refs+0x569/0x670 [ 105.778867][ T6071] free_pages_and_swap_cache+0x277/0x520 [ 105.778884][ T6071] tlb_flush_mmu+0x3a0/0x680 [ 105.778895][ T6071] tlb_finish_mmu+0xc3/0x1d0 [ 105.778906][ T6071] exit_mmap+0x439/0xb10 [ 105.778921][ T6071] __mmput+0xcb/0x3d0 [ 105.778934][ T6071] exit_mm+0x169/0x230 [ 105.778952][ T6071] do_exit+0x627/0x22f0 [ 105.778969][ T6071] do_group_exit+0x21c/0x2d0 [ 105.778987][ T6071] get_signal+0x125d/0x1310 [ 105.778999][ T6071] arch_do_signal_or_restart+0x9a/0x7a0 [ 105.779020][ T6071] exit_to_user_mode_loop+0x87/0x4e0 [ 105.779038][ T6071] do_syscall_64+0x2b7/0xf80 [ 105.779051][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.779064][ T6071] [ 105.779068][ T6071] Memory state around the buggy address: [ 105.779077][ T6071] ffff8880565a9780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.779089][ T6071] ffff8880565a9800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.779099][ T6071] >ffff8880565a9880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.779107][ T6071] ^ [ 105.779115][ T6071] ffff8880565a9900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.779124][ T6071] ffff8880565a9980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 105.779131][ T6071] ================================================================== [ 105.779142][ T6071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.779160][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.779176][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.779184][ T6071] Call Trace: [ 105.779189][ T6071] [ 105.779195][ T6071] vpanic+0x1e0/0x670 [ 105.779215][ T6071] panic+0xb9/0xc0 [ 105.779234][ T6071] ? __pfx_panic+0x10/0x10 [ 105.779253][ T6071] ? strcmp+0x6f/0xc0 [ 105.779270][ T6071] ? strcmp+0x6f/0xc0 [ 105.779284][ T6071] check_panic_on_warn+0x89/0xb0 [ 105.779304][ T6071] ? strcmp+0x6f/0xc0 [ 105.779317][ T6071] end_report+0x6f/0x140 [ 105.779328][ T6071] kasan_report+0x129/0x150 [ 105.779341][ T6071] ? strcmp+0x6f/0xc0 [ 105.779357][ T6071] strcmp+0x6f/0xc0 [ 105.779371][ T6071] hpfs_get_ea+0x114/0xdb0 [ 105.779392][ T6071] ? __pfx_hpfs_get_ea+0x10/0x10 [ 105.779409][ T6071] ? bdev_getblk+0x583/0x6e0 [ 105.779431][ T6071] ? __bread_gfp+0xc3/0x3b0 [ 105.779449][ T6071] ? hpfs_map_sector+0x167/0x3a0 [ 105.779475][ T6071] ? hpfs_map_fnode+0x27e/0x6a0 [ 105.779494][ T6071] ? set_normalized_timespec64+0xf0/0x1a0 [ 105.779518][ T6071] hpfs_read_inode+0x19d/0x1010 [ 105.779538][ T6071] ? __pfx_hpfs_read_inode+0x10/0x10 [ 105.779556][ T6071] ? inode_set_ctime_to_ts+0x116/0x2d0 [ 105.779577][ T6071] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 105.779600][ T6071] ? rt_spin_unlock+0x161/0x200 [ 105.779623][ T6071] ? hpfs_init_inode+0x216/0x350 [ 105.779645][ T6071] hpfs_fill_super+0x129d/0x2040 [ 105.779680][ T6071] ? __pfx_hpfs_fill_super+0x10/0x10 [ 105.779706][ T6071] ? __pfx_snprintf+0x10/0x10 [ 105.779725][ T6071] ? set_blocksize+0x219/0x450 [ 105.779745][ T6071] ? rt_spin_unlock+0x150/0x200 [ 105.779768][ T6071] ? sb_set_blocksize+0x11b/0x210 [ 105.779789][ T6071] ? setup_bdev_super+0x4c1/0x5b0 [ 105.779813][ T6071] get_tree_bdev_flags+0x40e/0x4d0 [ 105.779838][ T6071] ? __pfx_hpfs_fill_super+0x10/0x10 [ 105.779863][ T6071] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 105.779887][ T6071] ? cap_capable+0x123/0x440 [ 105.779911][ T6071] ? safesetid_security_capable+0xa9/0x1a0 [ 105.779938][ T6071] vfs_get_tree+0x92/0x2a0 [ 105.779963][ T6071] do_new_mount+0x302/0xa10 [ 105.779980][ T6071] ? safesetid_security_capable+0xa9/0x1a0 [ 105.780004][ T6071] ? __pfx_do_new_mount+0x10/0x10 [ 105.780022][ T6071] ? ns_capable+0x8a/0xf0 [ 105.780048][ T6071] __se_sys_mount+0x313/0x410 [ 105.780069][ T6071] ? __pfx___se_sys_mount+0x10/0x10 [ 105.780091][ T6071] ? __x64_sys_mount+0x20/0xc0 [ 105.780111][ T6071] do_syscall_64+0xec/0xf80 [ 105.780129][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.780146][ T6071] ? trace_irq_disable+0x37/0x100 [ 105.780165][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 105.780184][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.780202][ T6071] RIP: 0033:0x7f0277e20eea [ 105.780217][ T6071] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.780232][ T6071] RSP: 002b:00007ffd6e149088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.780252][ T6071] RAX: ffffffffffffffda RBX: 00007ffd6e149110 RCX: 00007f0277e20eea [ 105.780266][ T6071] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007ffd6e1490d0 [ 105.780280][ T6071] RBP: 000020000000a000 R08: 00007ffd6e149110 R09: 0000000003200041 [ 105.780294][ T6071] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0 [ 105.780307][ T6071] R13: 00007ffd6e1490d0 R14: 0000000000009e15 R15: 0000200000000000 [ 105.780328][ T6071] [ 105.780467][ T6071] Kernel Offset: disabled