Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts.
2026/01/24 21:20:24 parsed 1 programs
[ 116.124553][ T6156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 118.765366][ T6169] chnl_net:caif_netlink_parms(): no params data found
[ 118.833037][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.840401][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.848149][ T6169] bridge_slave_0: entered allmulticast mode
[ 118.855579][ T6169] bridge_slave_0: entered promiscuous mode
[ 118.864120][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.871472][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.878966][ T6169] bridge_slave_1: entered allmulticast mode
[ 118.886183][ T6169] bridge_slave_1: entered promiscuous mode
[ 118.915709][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.927575][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.957975][ T6169] team0: Port device team_slave_0 added
[ 118.966436][ T6169] team0: Port device team_slave_1 added
[ 118.991564][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.999650][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.026515][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.039323][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.047490][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.074146][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.115052][ T6169] hsr_slave_0: entered promiscuous mode
[ 119.121340][ T6169] hsr_slave_1: entered promiscuous mode
[ 119.629308][ T6169] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.642047][ T6169] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.653776][ T6169] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.665934][ T6169] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.722306][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.729621][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.737241][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.744707][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.770255][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.786453][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.858038][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.884607][ T6169] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.899386][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.906808][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.924369][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.931761][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.176527][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.239956][ T6169] veth0_vlan: entered promiscuous mode
[ 120.261008][ T6169] veth1_vlan: entered promiscuous mode
[ 120.310222][ T6169] veth0_macvtap: entered promiscuous mode
[ 120.323815][ T6169] veth1_macvtap: entered promiscuous mode
[ 120.350294][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 120.371034][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 120.393617][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.403289][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.415225][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.432499][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.665022][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.766006][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.850666][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.967179][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.676432][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.694330][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.727012][ T4196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.736308][ T4196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.161792][ T1141] bridge_slave_1: left allmulticast mode
[ 123.167833][ T1141] bridge_slave_1: left promiscuous mode
[ 123.202073][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.221553][ T1141] bridge_slave_0: left allmulticast mode
[ 123.237584][ T1141] bridge_slave_0: left promiscuous mode
[ 123.256649][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.785029][ T1141] ***** Releasing 0 refcount on 0000000000000000
[ 123.794719][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 123.807337][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 123.818274][ T1141] bond0 (unregistering): Released all slaves
[ 123.933519][ T1141] hsr_slave_0: left promiscuous mode
[ 123.939746][ T1141] hsr_slave_1: left promiscuous mode
[ 123.946465][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 123.954548][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 123.963445][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 123.970937][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 123.998809][ T1141] veth1_macvtap: left promiscuous mode
[ 124.004725][ T1141] veth0_macvtap: left promiscuous mode
[ 124.010516][ T1141] veth1_vlan: left promiscuous mode
[ 124.016146][ T1141] veth0_vlan: left promiscuous mode
[ 124.507006][ T1141] team0 (unregistering): Port device team_slave_1 removed
[ 124.548455][ T1141] team0 (unregistering): Port device team_slave_0 removed
[ 126.488528][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 126.516705][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 126.525052][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 126.538943][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 126.560329][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/01/24 21:20:40 executed programs: 0
[ 127.899029][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 127.907621][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 127.922690][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 127.934033][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 127.945186][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 128.167522][ T6457] chnl_net:caif_netlink_parms(): no params data found
[ 128.316945][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.324420][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.333149][ T6457] bridge_slave_0: entered allmulticast mode
[ 128.341598][ T6457] bridge_slave_0: entered promiscuous mode
[ 128.351424][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.359143][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.366759][ T6457] bridge_slave_1: entered allmulticast mode
[ 128.375323][ T6457] bridge_slave_1: entered promiscuous mode
[ 128.417283][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 128.430658][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 128.478551][ T6457] team0: Port device team_slave_0 added
[ 128.488285][ T6457] team0: Port device team_slave_1 added
[ 128.530027][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 128.537228][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 128.564076][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 128.578509][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 128.585684][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 128.613006][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 128.670587][ T6457] hsr_slave_0: entered promiscuous mode
[ 128.677060][ T6457] hsr_slave_1: entered promiscuous mode
[ 129.205126][ T6457] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 129.217497][ T6457] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 129.232621][ T6457] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 129.247619][ T6457] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 129.358594][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0
[ 129.390050][ T6457] 8021q: adding VLAN 0 to HW filter on device team0
[ 129.409711][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 129.416953][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 129.437367][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 129.444692][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 129.697503][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 129.756754][ T6457] veth0_vlan: entered promiscuous mode
[ 129.771435][ T6457] veth1_vlan: entered promiscuous mode
[ 129.810978][ T6457] veth0_macvtap: entered promiscuous mode
[ 129.823991][ T6457] veth1_macvtap: entered promiscuous mode
[ 129.852495][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.869093][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 129.890009][ T2990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.910491][ T2990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.938883][ T2990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.949780][ T2990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.992740][ T51] Bluetooth: hci0: command tx timeout
[ 130.049693][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.066049][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.112300][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.121190][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.226013][ T6537] loop0: detected capacity change from 0 to 128
[ 130.236923][ T6537] =======================================================
[ 130.236923][ T6537] WARNING: The mand mount option has been deprecated and
[ 130.236923][ T6537] and is ignored by this kernel. Remove the mand
[ 130.236923][ T6537] option from the mount to silence this warning.
[ 130.236923][ T6537] =======================================================
[ 130.284883][ T6537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 130.297736][ T6537] hpfs: filesystem error: improperly stopped
[ 130.306293][ T6537] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 130.314556][ T6537] hpfs: You really don't want any checks? You are crazy...
[ 130.322908][ T6537] hpfs: hpfs_map_sector(): read error
[ 130.328322][ T6537] hpfs: code page support is disabled
[ 130.339743][ T6537] HPFS: de_next_de: de->length = 84ba
[ 130.346094][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.353945][ T6537] HPFS: de_next_de: de->length = 0
[ 130.359264][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.366229][ T6537] HPFS: de_next_de: de->length = 0
[ 130.374353][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.381275][ T6537] HPFS: de_next_de: de->length = 0
[ 130.389301][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.396799][ T6537] HPFS: de_next_de: de->length = 0
[ 130.402211][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.408775][ T6537] HPFS: de_next_de: de->length = 0
[ 130.414522][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.421128][ T6537] HPFS: de_next_de: de->length = 0
[ 130.427241][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.434634][ T6537] HPFS: de_next_de: de->length = 0
[ 130.440195][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.447678][ T6537] HPFS: de_next_de: de->length = 0
[ 130.453318][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.460184][ T6537] HPFS: de_next_de: de->length = 0
[ 130.467112][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.474788][ T6537] HPFS: de_next_de: de->length = 0
[ 130.480167][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.487854][ T6537] HPFS: de_next_de: de->length = 0
[ 130.493663][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.500583][ T6537] HPFS: de_next_de: de->length = 0
[ 130.507136][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.514727][ T6537] HPFS: de_next_de: de->length = 0
[ 130.520120][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.527326][ T6537] HPFS: de_next_de: de->length = 0
[ 130.533156][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.539933][ T6537] HPFS: de_next_de: de->length = 0
[ 130.552362][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.559582][ T6537] HPFS: de_next_de: de->length = 0
[ 130.565941][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.573873][ T6537] HPFS: de_next_de: de->length = 0
[ 130.579256][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.586781][ T6537] HPFS: de_next_de: de->length = 0
[ 130.592439][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.598969][ T6537] HPFS: de_next_de: de->length = 0
[ 130.605155][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.612667][ T6537] HPFS: de_next_de: de->length = 0
[ 130.617895][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.629810][ T6537] HPFS: de_next_de: de->length = 0
[ 130.635756][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.642792][ T6537] HPFS: de_next_de: de->length = 0
[ 130.648321][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.657257][ T6537] HPFS: de_next_de: de->length = 0
[ 130.663321][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.670382][ T6537] HPFS: de_next_de: de->length = 0
[ 130.677335][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.684197][ T6537] HPFS: de_next_de: de->length = 0
[ 130.689316][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.696437][ T6537] HPFS: de_next_de: de->length = 0
[ 130.706022][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.713421][ T6537] HPFS: de_next_de: de->length = 0
[ 130.718634][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.725551][ T6537] HPFS: de_next_de: de->length = 0
[ 130.730832][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.738547][ T6537] HPFS: de_next_de: de->length = 0
[ 130.743950][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.751074][ T6537] HPFS: de_next_de: de->length = 0
[ 130.756732][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.765642][ T6537] HPFS: de_next_de: de->length = 0
[ 130.771400][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.779250][ T6537] HPFS: de_next_de: de->length = 0
[ 130.790153][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.797023][ T6537] HPFS: de_next_de: de->length = 0
[ 130.802404][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.809624][ T6537] HPFS: de_next_de: de->length = 0
[ 130.816050][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.823660][ T6537] HPFS: de_next_de: de->length = 0
[ 130.829657][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.836765][ T6537] HPFS: de_next_de: de->length = 0
[ 130.842382][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.848907][ T6537] HPFS: de_next_de: de->length = 0
[ 130.854706][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.861314][ T6537] HPFS: de_next_de: de->length = 0
[ 130.871981][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.878610][ T6537] HPFS: de_next_de: de->length = 0
[ 130.884061][ T6537] HPFS: dnode_end_de: dnode->first_free = 7b3184b6
[ 130.890674][ T6537] HPFS: de_next_de: de->length = 0
[ 130.897944][ T6537] ==================================================================
[ 130.906113][ T6537] BUG: KASAN: use-after-free in hpfs_count_dnodes+0x8e6/0xb70
[ 130.913839][ T6537] Read of size 2 at addr ffff88806e6ac4ce by task syz.0.17/6537
[ 130.921555][ T6537]
[ 130.923913][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 130.923927][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 130.923941][ T6537] Call Trace:
[ 130.923950][ T6537]
[ 130.923955][ T6537] dump_stack_lvl+0xe8/0x150
[ 130.923973][ T6537] print_report+0xba/0x230
[ 130.923987][ T6537] ? hpfs_count_dnodes+0x8e6/0xb70
[ 130.923997][ T6537] kasan_report+0x117/0x150
[ 130.924010][ T6537] ? hpfs_count_dnodes+0x8e6/0xb70
[ 130.924023][ T6537] hpfs_count_dnodes+0x8e6/0xb70
[ 130.924036][ T6537] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 130.924048][ T6537] ? hpfs_map_sector+0x14f/0x380
[ 130.924066][ T6537] ? hpfs_map_fnode+0x27e/0x6a0
[ 130.924077][ T6537] ? set_normalized_timespec64+0xf0/0x1a0
[ 130.924095][ T6537] hpfs_read_inode+0xc79/0x1050
[ 130.924109][ T6537] ? __pfx_hpfs_read_inode+0x10/0x10
[ 130.924120][ T6537] ? inode_set_ctime_to_ts+0x116/0x2d0
[ 130.924132][ T6537] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 130.924144][ T6537] ? do_raw_spin_unlock+0xf5/0x210
[ 130.924159][ T6537] ? hpfs_init_inode+0x216/0x350
[ 130.924171][ T6537] hpfs_fill_super+0x123d/0x1fa0
[ 130.924191][ T6537] ? __pfx_hpfs_fill_super+0x10/0x10
[ 130.924206][ T6537] ? __pfx_snprintf+0x10/0x10
[ 130.924217][ T6537] ? set_blocksize+0x1c9/0x490
[ 130.924235][ T6537] ? sb_set_blocksize+0x155/0x240
[ 130.924250][ T6537] ? setup_bdev_super+0x4c1/0x5b0
[ 130.924261][ T6537] get_tree_bdev_flags+0x431/0x4f0
[ 130.924272][ T6537] ? __pfx_hpfs_fill_super+0x10/0x10
[ 130.924286][ T6537] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 130.924299][ T6537] vfs_get_tree+0x92/0x2a0
[ 130.924310][ T6537] do_new_mount+0x341/0xd30
[ 130.924327][ T6537] ? __pfx_do_new_mount+0x10/0x10
[ 130.924344][ T6537] ? user_path_at+0xd4/0x160
[ 130.924360][ T6537] __se_sys_mount+0x31d/0x420
[ 130.924376][ T6537] ? __pfx___se_sys_mount+0x10/0x10
[ 130.924391][ T6537] ? __x64_sys_mount+0x20/0xc0
[ 130.924406][ T6537] do_syscall_64+0xe2/0xf80
[ 130.924422][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.924433][ T6537] ? trace_irq_disable+0x37/0x100
[ 130.924445][ T6537] ? clear_bhb_loop+0x40/0x90
[ 130.924459][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.924470][ T6537] RIP: 0033:0x7f0eed59b90a
[ 130.924489][ T6537] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 130.924499][ T6537] RSP: 002b:00007f0eee3d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 130.924512][ T6537] RAX: ffffffffffffffda RBX: 00007f0eee3d4ee0 RCX: 00007f0eed59b90a
[ 130.924521][ T6537] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f0eee3d4ea0
[ 130.924529][ T6537] RBP: 000020000000a000 R08: 00007f0eee3d4ee0 R09: 0000000003200041
[ 130.924537][ T6537] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 130.924545][ T6537] R13: 00007f0eee3d4ea0 R14: 0000000000009e21 R15: 0000200000000000
[ 130.924558][ T6537]
[ 130.924562][ T6537]
[ 131.225036][ T6537] The buggy address belongs to the physical page:
[ 131.231638][ T6537] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55d242687 pfn:0x6e6ac
[ 131.241363][ T6537] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 131.248548][ T6537] raw: 00fff00000000000 ffffea0001b67e08 ffffea0001b60988 0000000000000000
[ 131.257241][ T6537] raw: 000000055d242687 0000000000000000 00000000ffffffff 0000000000000000
[ 131.266067][ T6537] page dumped because: kasan: bad access detected
[ 131.272922][ T6537] page_owner tracks the page as freed
[ 131.278895][ T6537] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6540, tgid 6540 (dhcpcd-run-hook), ts 130335733042, free_ts 130896938040
[ 131.297648][ T6537] post_alloc_hook+0x231/0x280
[ 131.302410][ T6537] get_page_from_freelist+0x24dc/0x2580
[ 131.308020][ T6537] __alloc_frozen_pages_noprof+0x18d/0x380
[ 131.313805][ T6537] alloc_pages_mpol+0x232/0x4a0
[ 131.318817][ T6537] vma_alloc_folio_noprof+0xea/0x210
[ 131.324179][ T6537] folio_prealloc+0x30/0x170
[ 131.328931][ T6537] do_wp_page+0x11f3/0x58c0
[ 131.333763][ T6537] handle_mm_fault+0x1520/0x32b0
[ 131.338773][ T6537] do_user_addr_fault+0xa73/0x1360
[ 131.343974][ T6537] exc_page_fault+0x6a/0xc0
[ 131.348555][ T6537] asm_exc_page_fault+0x26/0x30
[ 131.353405][ T6537] page last free pid 6557 tgid 6557 stack trace:
[ 131.359924][ T6537] free_unref_folios+0xda7/0x14d0
[ 131.364978][ T6537] folios_put_refs+0x58a/0x680
[ 131.369996][ T6537] folio_batch_move_lru+0x39d/0x430
[ 131.375189][ T6537] __folio_batch_add_and_move+0x510/0xc50
[ 131.381160][ T6537] do_wp_page+0x1bb9/0x58c0
[ 131.386001][ T6537] handle_mm_fault+0x1520/0x32b0
[ 131.391012][ T6537] do_user_addr_fault+0xa73/0x1360
[ 131.396301][ T6537] exc_page_fault+0x6a/0xc0
[ 131.401026][ T6537] asm_exc_page_fault+0x26/0x30
[ 131.406123][ T6537]
[ 131.408573][ T6537] Memory state around the buggy address:
[ 131.414595][ T6537] ffff88806e6ac380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.423104][ T6537] ffff88806e6ac400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.431842][ T6537] >ffff88806e6ac480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.440258][ T6537] ^
[ 131.446755][ T6537] ffff88806e6ac500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.455082][ T6537] ffff88806e6ac580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.463215][ T6537] ==================================================================
[ 131.513133][ T6537] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 131.521161][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 131.530636][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 131.540880][ T6537] Call Trace:
[ 131.544538][ T6537]
[ 131.547480][ T6537] vpanic+0x1e0/0x670
[ 131.551566][ T6537] panic+0xc5/0xd0
[ 131.555659][ T6537] ? __pfx_panic+0x10/0x10
[ 131.560191][ T6537] ? preempt_schedule_thunk+0x16/0x30
[ 131.565673][ T6537] ? hpfs_count_dnodes+0x8e6/0xb70
[ 131.571061][ T6537] check_panic_on_warn+0x89/0xb0
[ 131.576236][ T6537] ? hpfs_count_dnodes+0x8e6/0xb70
[ 131.581404][ T6537] end_report+0x6f/0x140
[ 131.585662][ T6537] kasan_report+0x128/0x150
[ 131.590200][ T6537] ? hpfs_count_dnodes+0x8e6/0xb70
[ 131.595436][ T6537] hpfs_count_dnodes+0x8e6/0xb70
[ 131.600571][ T6537] ? __pfx_hpfs_count_dnodes+0x10/0x10
[ 131.606067][ T6537] ? hpfs_map_sector+0x14f/0x380
[ 131.611390][ T6537] ? hpfs_map_fnode+0x27e/0x6a0
[ 131.616253][ T6537] ? set_normalized_timespec64+0xf0/0x1a0
[ 131.622087][ T6537] hpfs_read_inode+0xc79/0x1050
[ 131.627302][ T6537] ? __pfx_hpfs_read_inode+0x10/0x10
[ 131.632934][ T6537] ? inode_set_ctime_to_ts+0x116/0x2d0
[ 131.638835][ T6537] ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[ 131.644640][ T6537] ? do_raw_spin_unlock+0xf5/0x210
[ 131.649795][ T6537] ? hpfs_init_inode+0x216/0x350
[ 131.655168][ T6537] hpfs_fill_super+0x123d/0x1fa0
[ 131.660364][ T6537] ? __pfx_hpfs_fill_super+0x10/0x10
[ 131.665637][ T6537] ? __pfx_snprintf+0x10/0x10
[ 131.670413][ T6537] ? set_blocksize+0x1c9/0x490
[ 131.675270][ T6537] ? sb_set_blocksize+0x155/0x240
[ 131.681036][ T6537] ? setup_bdev_super+0x4c1/0x5b0
[ 131.686396][ T6537] get_tree_bdev_flags+0x431/0x4f0
[ 131.691581][ T6537] ? __pfx_hpfs_fill_super+0x10/0x10
[ 131.696864][ T6537] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 131.702666][ T6537] vfs_get_tree+0x92/0x2a0
[ 131.707250][ T6537] do_new_mount+0x341/0xd30
[ 131.711857][ T6537] ? __pfx_do_new_mount+0x10/0x10
[ 131.717063][ T6537] ? user_path_at+0xd4/0x160
[ 131.721856][ T6537] __se_sys_mount+0x31d/0x420
[ 131.726715][ T6537] ? __pfx___se_sys_mount+0x10/0x10
[ 131.732086][ T6537] ? __x64_sys_mount+0x20/0xc0
[ 131.737014][ T6537] do_syscall_64+0xe2/0xf80
[ 131.741600][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.747745][ T6537] ? trace_irq_disable+0x37/0x100
[ 131.752945][ T6537] ? clear_bhb_loop+0x40/0x90
[ 131.757611][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.763534][ T6537] RIP: 0033:0x7f0eed59b90a
[ 131.768143][ T6537] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 131.788023][ T6537] RSP: 002b:00007f0eee3d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 131.796518][ T6537] RAX: ffffffffffffffda RBX: 00007f0eee3d4ee0 RCX: 00007f0eed59b90a
[ 131.804562][ T6537] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007f0eee3d4ea0
[ 131.812700][ T6537] RBP: 000020000000a000 R08: 00007f0eee3d4ee0 R09: 0000000003200041
[ 131.820670][ T6537] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[ 131.828898][ T6537] R13: 00007f0eee3d4ea0 R14: 0000000000009e21 R15: 0000200000000000
[ 131.837307][ T6537]
[ 131.840460][ T6537] Kernel Offset: disabled
[ 131.844912][ T6537] Rebooting in 86400 seconds..